A3 Arendus OÜ
registration code 10991428, Rotermanni tn 8, Tallinn 10111, e-mail firstname.lastname@example.org
Terms and conditions of using personal data
Personal data. Personal data processing
Personal data comprises any information that can be linked to an individual, such as name, personal identification number, e-mail address, telephone number and other data.
Processing of personal data means any operation which is performed with personal data, including collection, organisation, storage, modification, reading, use, transfer, combining, deletion.
Purpose and legal basis of processing
A3 Arendus OÜ (hereinafter referred to as A3 Arendus) provides commercial real estate lease services (leases out commercial premises) and related additional services (e.g. services related to leasing). A3 Arendus uses personal data for the provision of the aforementioned service, as well as for market research, direct marketing, service development and quality assurance.
The main personal data used by A3 Arendus are the name, e-mail address and telephone number of the client’s representative, employee, and other assistants.
The primary legal basis for the processing of personal data is the contract between A3 Arendus and the client, as well as the legal basis arising from law and the client’s consent. The use of personal data may also be based on a legitimate interest of A3 Arendus or another person, of which we will inform the client separately.
A3 Arendus does not use personal data to make automated decisions if this would result in a restriction of the client’s rights (e.g. a decision to refuse).
Sources of personal data
A3 Arendus uses personal data for the provision of services under a contract and receives data from its contractual partner (client) for this purpose. If the information necessary for the performance of the contract cannot be obtained from the client, it may adversely affect the quality of the service provided or make the service more costly or otherwise disadvantageous for the client.
In addition to the information provided by the client, A3 Arendus may receive data from other parties. For example, when entering into a real estate lease agreement, we may ask the client’s creditworthiness and payment default data from a relevant service provider to verify the client’s ability to pay. We also receive personal data from public registers.
Disclosure of personal data
A3 Arendus keeps personal data confidential and does not disclose them to anyone as a general rule. Exceptionally, A3 Arendus will provide personal data to a processor if it is necessary for the performance of a contract with the client or the client has consented to it or there exists another legal basis.
A3 Arendus transfers personal data to a processor on the basis of a contract by which the processor undertakes to keep the personal data confidential and may use them only for the purposes specified in the contract. A3 Arendus may use processors in the provision of its services and transfer personal data to them, in particular for:
- the provision of the agreed service (lease of premises);
- the storage of personal data (server service);
- the functioning of ICT services (IT partners);
- advertising and marketing related to services (discounts, offers); and
- the recovery of debts (payment default registers, debt collection agencies).
A3 Arendus does not transfer personal data to third countries outside the European Union and the European Economic Area where there is no adequate level of protection of personal data.
Storage of personal data
A3 Arendus OÜ stores personal data until the purpose for which they are used is fulfilled. If the personal data is no longer necessary for the purposes for which they are used, we will delete the data. If the data relates to a legal relationship arising under a contract or legislation, we may retain the data for as long as it is necessary to prepare, submit or defend a legal claim.
A person (data subject) has the right under the General Data Protection Regulation (EU) 2016/679 to:
- access their data and to request correction of inaccurate data;
- request erasure of personal data or restriction of their use;
- request transfer of personal data;
- object to the use of personal data;
- request that no decision based on automated processing is taken in relation to them;
- withdraw consent to the use of personal data at any time;
- lodge a complaint about the processing of their personal data with a data protection authority and the courts.
If you have any questions about personal data, please send an e-mail to email@example.com.
We will respond to your request regarding personal data if we are the controller of the personal data mentioned in the request. We will respond in accordance with the General Data Protection Regulation and other legislation.
Prepared: February 2023.