- 1. Privacy Protection Principle
- 2. Purpose, Scope, and Legal Basis of Personal Data Processing
- 3. Data Recipients
- 4. Retention Period
- 5.Control of Personal Data Processing
- 6. Principles of Transferring Your Personal Data Outside the EEA
- 7. Automated Decision Making, Including Profiling
- LEGAL INFORMATION
1. Privacy Protection Principle
We have designated a Data Protection Officer who can be contacted at [email protected].
The Administrator carefully selects and applies appropriate technical and organizational measures to ensure the protection of the processed personal data. Personal data related to Users and other persons whose data has been reported by the User are protected by the Administrator against their disclosure to unauthorized persons and other cases of disclosure or loss or unauthorized modification of the indicated data and information.
2. Purpose, Scope, and Legal Basis of Personal Data Processing
Personal data is processed by the Administrator in accordance with the law and exclusively for purposes related to its activities, including:
|Purpose and Legal basis of Personal Data Processing
|Activities aimed at concluding and implementing the contract and conducting business:
Providing data is a requirement for registration (setting up a User Account) is voluntary but necessary to provide electronic services within the transactional platform available at the caret.pro domain. Some processing activities within the provision of services are legally regulated, their provision is necessary to provide services and fulfill legal obligations by the Administrator.
|Other Processing Based on Consent
|For purposes each time specified in the content of the consent (Article 6(1)(a) or Article 9(2)(a) of the GDPR). Providing data is voluntary but necessary to achieve the objectives specified in the content of the consent. Consent can be withdrawn at any time in the manner specified by the Administrator when obtaining the consent. The withdrawal of consent does not affect the legality of the processing carried out before its withdrawal.
|Delivering the Website
Providing data is voluntary, but necessary to achieve the above-mentioned purposes.
Providing data is voluntary, but to the extent specified by the regulations, necessary to participate in recruitments.
|Other Processing Based on Legally Justified Interests of the Administrator
|Your personal data may also be processed based on Article 6(1)(f) of the GDPR if processing is necessary for the following purposes arising from the legally justified interests pursued by the Administrator:
3. Data Recipients
The recipients of personal data processed by the Administrator may be:
- Entities acting on behalf of the Administrator, responsible for the service of the internet platform caret.pro, and entities providing services in this regard for the Administrator (e.g., companies providing Internet delivery services, entities providing server space), providers of plugins and cookies for the website (such as DoubleClick, Criteo, RTB House, Index Exchange, OpenX);
- companies providing software, in particular: accounting, office (including Microsoft), sales and marketing;
- companies providing maintenance or ITSM services;
- courier and/or postal companies;
- companies providing services in the field of HR and payroll and accounting;
- banks and insurance companies;
- companies providing marketing services;
- companies providing support in employee recruitment;
- in case of giving appropriate consent, these will also include: LinkedIn Ireland Unlimited Company, Meta Platforms Ireland Limited, Google Ireland Ltd., TikTok Technology Limited, and TikTok Ireland
4. Retention Period
Personal data is stored for the period of holding your User Account on the caret.pro platform. After this period, the data may be processed based on the legal obligations of the administrator (e.g., regarding the storage of accounting documents), or a legally justified interest (defense against claims that may be made against the administrator). In the case of processing to respond to a query – for 1 year after the end of correspondence.
5.Control of Personal Data Processing
The Administrator ensures the realization of rights for individuals whose personal data are processed, according to legal provisions, including: the right to access the content of their personal data and receive a copy of them, their rectification, amendment, deletion in situations where processing does not occur to fulfill an obligation arising from the law, data portability, and the right to request a restriction of personal data processing.
You also have the right to object at any time to the processing of personal data based on Article 6(1)(f) of the GDPR. If you object to the processing of personal data for purposes arising from legally justified interests pursued by the Administrator, your personal data will not be processed by us for this purpose. The reason for this objection must be your particular situation, hence when submitting the application, please indicate this particular situation. Upon receiving the objection, we will stop processing your data for the purpose or purposes to which you have objected unless we demonstrate the existence of valid legally justified reasons for processing, overriding your interests, rights, and freedoms, or if we demonstrate grounds for establishing, pursuing, or defending against claims.
In the case of voluntarily giving consent to data processing, each person whose data is processed has the right to withdraw consent to data processing. Withdrawal of consent does not affect the processing which the Administrator performed before its withdrawal.
In all matters regarding personal data processing, you can contact us at: [email protected]. Everyone whose data is processed has the right to lodge a complaint with the Estonian Data Protection Authority (Estonian Data Protection Inspectorate, 39 Tatari St., 10134 Tallinn).”
6. Principles of Transferring Your Personal Data Outside the EEA
Except in cases of explicit consent, your personal data are not transferred to recipients in third countries, i.e., outside the European Economic Area (EEA), or to international organizations.
If appropriate consent is given, personal data may be or will be made available to LinkedIn Ireland Unlimited Company, Meta Platforms Ireland Limited, Google Ireland Limited, TikTok Technology Limited, and TikTok Ireland (Services). Due to the transnational nature of data flow within these Services, there is a transfer of your data outside the EEA, including to countries for which the European Commission has not determined an adequate level of protection.
Data protection in the case of Meta Platforms Ireland Limited and Google Ireland Limited is ensured by an appropriate certificate, on the basis of which the European Commission, in accordance with Article 45 of the GDPR, has determined that they provide an adequate level of protection. In other cases, protection mainly consists of the application of Standard Contractual Clauses along with appropriate safeguards (including data encryption). More information on data processing in these Services can be found in the privacy policies of the Services.
YouTube Privacy and Terms
Your personal data is processed in this way for marketing purposes (we use marketing tools, social media platforms, and cookies and social plugins on our website) and for maintaining communication with the customer (social media – Facebook, LinkedIn). Data is transferred solely based on your explicit consent.
7. Automated Decision Making, Including Profiling
Based on your personal data, we may perform profiling and make automated decisions (about displaying advertisements) as referred to in Articles 22(1) and 4 of the GDPR. This can take place on the caret.pro website. Profiling is performed for the marketing of our own services.
Trademarks and logos presented on the caret.pro website are protected by law and international agreements, and their use without appropriate consent is prohibited.
All works (in particular: photos, texts, catalogs, graphics) presented on the caret.pro website are legally protected, and their use without the prior written consent of CARET EUROPE OÜ is strictly prohibited.
This information does not violate the absolutely binding legal provisions, in particular regarding competition protection. In case of contradiction between the provisions of this information and absolutely binding legal provisions, those provisions shall apply, and the rest of the information remains valid.
Contents provided by CARET EUROPE OÜ do not constitute an offer in the sense of the Civil Code, but only an invitation to negotiations.