DATA PROTECTION POLICY

Energiapartner OÜ (registry code 11511956, address Lelle tn 24, Tallinn 11318) is the data controller.

This data protection policy describes how Energiapartner OÜ and Storagepartner OÜ and Energiapartner SIA (hereinafter Energiapartner), established as its subsidiaries, process personal data in the course of providing their goods and services.

While processing personal data, Energiapartner complies with the General Data Protection Regulation (EU 2016/679), the Electronic Communications Act and other applicable legislation.

Energiapartner only processes personal data if there is a legal basis for doing so and only for as long as it is necessary to fulfil the purpose of the processing or the requirements arising from legislation.

The data protection policy does not address how Energiapartner processes the data of legal persons, nor how other persons process personal data. The policy does also not cover the processing of personal data on other websites, which are referred to by external links on the website of Energiapartner.

When providing services or offering goods to or entering into a contract with a customer, the data protection policy is referred to and the customers are allowed to familiarise themselves with it.

Personal data is data that can be associated, directly or indirectly, with a natural person.

Legal basis and purpose for the processing of personal data

Energiapartner collects personal data for specified and legitimate purposes that are necessary for the provision of the service, and processes personal data either for the performance of a contract or for the performance of activities prior to entering into a contract, on the basis of the consent of the data subject, on the basis of a legitimate interest, or for the performance of a legal obligation.

Personal data of customers and cooperation partners

Energiapartner processes the personal data of its (private) customers and cooperation partners (cooperation partners who are natural persons or employees of cooperation partners who are legal persons) for the purpose of providing the service agreed upon in communication between the parties. Personal data is obtained from the customer and the cooperation partner themselves when they address or turn to Energiapartner.

List of personal data:

1. the private customer’s first and last name, personal phone number, personal email address, home address, personal identification code, bank account number of a contractual customer, information related to the provision of products and services (eg correspondence, reclamations);
2. first and last name, personal identification code, named email address of the representative of a customer who is a legal person;
3. first and last name, personal identification code, and named email address of the representative of the cooperation partner.

Photos taken at events organised for cooperation partners and customers are published on social media by notifying the participants in advance and with the consent of the person. Photos taken at public events are used on social media without asking for the person’s consent.

Personal data of employees

Energiapartner processes personal data as a controller on the basis of an employment contract and for the performance of obligations arising from legislation (for example, tax laws, laws concerning employment, Accounting Act).

List of personal data:

1. data necessary for identifying a person: first and last name, personal identification code and citizenship;
2. contact details necessary for the conclusion and performance of the employment contract: email address, telephone number and postal address;
3. family and social data;
4. data regarding qualifications and self-improvement;
5. financial data, such as bank account number, application for considering the income tax-free minimum and pension information;
6. data regarding the employment relationship, such as performance interviews and attestation documents;
7. data regarding the employee’s state of health, such as medical certificates, medical examination decisions,
8. email addresses and phone numbers created for employees for work-related communication are disclosed on the website https://energiapartner.ee/ on the basis of legitimate interest in order for customers to contact employees.

Photos of employees are published on Energiapartner’s website under the employee’s consent.

Storage of personal data

Energiapartner will store your personal data for the time necessary to achieve the purposes specified in the data protection policy or for as long as is prescribed under the obligation imposed by law. Energiapartner deletes or anonymises the personal data (in which case it is no longer personal data) if it is no longer necessary for the purpose for which it was collected. For more detailed information regarding storage times, please contact us.

Access to personal data and confidentiality

Energiapartner processes the personal data at its disposal against unauthorised and non-purposive use, disclosure or destruction by implementing all relevant organisational, physical and technical security measures. Energiapartner ensures the responsible processing of personal data based on the interests, rights and freedoms of the data subject.

The employees of Energiapartner will have access to your data only if it is necessary to provide services to you and perform the tasks arising from the job description. Employees are subject to data confidentiality requirements and are responsible for fulfilling these obligations.

Energiapartner will not transfer your personal data to third parties, except for the fulfilment of legal obligations.

A person’s rights to their data

Right to access your personal data – the right to receive information about the processing of your data and to request a copy of your personal data.

Right to rectification – the right to request that the personal data of the person concerned be rectified or, if necessary, updated.

Right to data portability – the right to receive personal data concerning you that you have shared and re-use such data.

Right to erasure – data is erased at the request of the person when the data is no longer required by law.

Right to withdraw consent – if data processing is based on consent, the person always has the right to withdraw their consent by sending a digitally signed application to the email address info@energiapartner.ee

Right to object to processing – the right to object to the processing of your personal data.

Right to restrict the processing of personal data – in certain cases, a person has the right to request restriction of processing.

Breach related to the processing of personal data

If a breach related to the processing of personal data occurs in Energiapartner and is a potential threat to the rights and freedoms of individuals, the required documents will be prepared and measures will be taken to immediately eliminate the breach.

Cookies

Energipartner uses the following types of cookies on its websites (www.energiapartner.ee) and its subpages:

• essential cookies, which are temporary and are deleted immediately after closing the web browser. We use essential cookies to ensure the correct functioning and more convenient use of the website;
• functional cookies that are stored on the visitor’s device after closing the web browser. For example, we use functional cookies to identify visitors who have previously visited the same website and to remember the choices they have made (for example, language selection). We also use functional cookies to analyse the usability of the website and to determine the average duration of the visit in order to assess and improve the functioning and convenience of use of the website;
• we primarily use marketing cookies for displaying advertisements, marketing and compiling statistics on website traffic.

Energiapartner OÜ uses the services of FB Pixel, Google Ads Conversion and Tracking Google Analytics 4.

Amendments to the data protection policy

Energy Partner reserves the right to amend this data protection policy. Possible amendments to the data protection policy will be announced on the website.

If you want to learn more about the use of your personal data, please write to the email address info@energiapartner.ee.

A person always has the right to contact the Estonian Data Protection Inspectorate (email info@aki.ee, phone 627 4135) or another institution, in particular the competent supervisory authority of the person’s place of residence or place of work.