Register and Privacy Policy in accordance with the EU General Data Protection Regulation (GDPR).
Purpose of personal data processing and the legal basis for the processing
The purpose of processing personal data is to manage and maintain customer relationships and, for example, to conduct various surveys. Personal data is used for the company’s communication, marketing, and sales.
The legal basis for the processing of personal data is the management and maintenance of customer relationships, the legitimate interest of the data controller to process the data, and to communicate with the stakeholders’ contact persons regarding matters related to their areas of responsibility.
Personal data is collected from the data subjects themselves and from public sources, such as the internet, public websites of companies, online social services, or other similar registers in accordance with data protection legislation.
Data content of the register
• Contact details, such as name, email address, and phone number
• Job-related information, such as job title and area of responsibility
• Information regarding the company
• Information about interactions and potential surveys
Recipients or categories of recipients of personal data
Personal data may be disclosed to authorities within the limits permitted and required by applicable legislation.
Suvitrade may use third-party services in the processing of data, for example, in the case of IT services, in which case Suvitrade ensures the lawful processing of data through contractual arrangements and by instructing third parties on data processing. These third parties may vary. These third parties process the data solely on behalf of and under the instructions of Suvitrade.
Transfer of personal data to third countries
Some of the services used by the data controller for processing personal data may operate outside the territory of the European Union member states or the European Economic Area. In such cases, data transfers comply with data protection legislation requirements and may involve the use of, for example, standard contractual clauses issued by the European Commission when agreeing on data transfers with the personal data processor.
Retention period of personal data
Personal data is stored for as long as necessary to fulfill the purpose for which it was collected in accordance with this privacy notice. In the retention of personal data, attention is given to inactive personal data, which is regularly deleted.
Data subjects’ rights in personal data processing
Right to access the data
The data subject has the right to check what information concerning them has been stored in the personal data register and to receive a copy of the data. The data subject must send the access request to info@suviderm.com. The data subject must provide the necessary information for locating the data in the access request. If necessary, the data controller will ask for additional information to verify the identity of the data subject.
The response to the access request will be sent to the email address of the requester, unless the data subject requests that the information be provided in another way.
The right to correct information
Suvitrade takes care, to the best of its ability, of the quality of personal data it processes. Suvitrade will correct, delete, or complete incorrect or unnecessary personal data either proactively or upon the request of the data subject.
The right to request the deletion of data or to object to the processing of data
The data subject has the right to request the deletion of their personal data or to object to its processing when it is based on legitimate interest. The data subject always has the right to object to direct marketing by sending an email to the address: info@suviderm.com
The right to lodge a complaint with a supervisory authority
Changes to the privacy policy
Suvitrade may make changes to this privacy notice and related information. Suvitrade recommends that data subjects regularly review this privacy policy to stay informed of any changes that may have been made to it.
Data controller
Entity: Suviderm / Suvitrade OÜ, generally Suvitrade
Address: Kuusalu vald, Pudisoo küla, Männimäe/1, 74626, Viro
Email: info@suviderm.com
This privacy notice describes the data protection practices currently followed by Suvitrade
Name of the register
The personal data register concerning Suvitrade’s processing of personal data in marketing, customer, and stakeholder relations.