privacy policy Sandler Koolituskeskus MTÜ

  1. General provisions

1.1. This privacy policy describes the principles of collection, processing and storage of personal data. Personal data is collected, processed and stored by Sandler Koolituskeskus MTÜ (hereinafter, data processor).

1.2. The subject within the meaning of this privacy policy is the client or other person whose personal data the data processor processes.

1.3. Client, within the meaning of this data privacy policy, is anyone who purchases services or goods from a data processor.

1.4. The data processor follows the principles of personal data processing set out in legal acts, does the processing of data legally, safely, and fairly. The data processor can confirm that personal data is being processed in accordance with the law.

  1. Collection, processing and storage of personal data

2.1. The personal data that the data processor collects, processes, and stores is collected by mail and homepage, as well as on paper.

2.2. By transferring his personal data, the data subject gives the data processor the right to store, organize, use and manage his personal data, for the purposes specified in the privacy policy, the personal data that the data subject provides via means specified in this privacy policy to the data processor.

2.3. The data subject is responsible for ensuring that the personal data provided to them is accurate, correct and complete. Deliberately giving incorrect data is considered a violation of the privacy policy. The data subject is obliged to notify the data processor immediately of any change in the data provided.

2.4. The data processor is not liable for damage caused by the provision of incorrect data to the data subject or third parties.

  1. Processing of personal data of clients

3.1. The data processor may process the following data of the data subject:

3.1.1. Name and surname, personal code (when issuing a diploma)

3.1.2. Date of Birth;

3.1.3. Phone number;

3.1.4. E-mail address;

3.1.5. Delivery address;

3.1.6. Current account number;

3.1.7. Details of the debit/credit card the payment was made with;

3.2. In addition to the above, the data processor has the right to collect client data available in public registers.

3.3. The legal basis for the processing of personal data is the general regulation of the law on the protection of personal data paragraph 6 page 1, statements a), b), c) ja f):

  1. a) The data subject has consented to the processing of personal data for one or more specific purposes;
  2. b) the processing of data is necessary for the performance of a contract concluded between the data subject and the data processor or for the preliminary steps to enter into a contract according to the request of the data subject;
  3. c) The processing of personal data is necessary to fulfill the legal obligations of the data processor;
  4. f) The processing of personal data is necessary if there is a legitimate interest of the data processor or third parties, unless this interest outweighs the interests or fundamental rights and freedoms in the name of which it is necessary to protect the personal data, especially if the data subject is a child.

3.4. Processing of personal data in accordance with the purposes of processing personal data:

3.4.1. Purpose of processing - protection of interests and security

The maximum period of storage of personal data corresponds to the deadline specified in the law

3.4.2. The purpose of the processing is to process the order.
The maximum storage period for personal data is 7 years.

3.4.3. The purpose of the processing is to ensure the operation of the services.
The maximum storage period for personal data is 7 years.

3.4.4. The purpose of the processing is to keep track of the client.
The maximum storage period for personal data is 7 years.

3.4.5. Purpose of processing - financial activities, accounting
Maximum period of storage of personal data - according to the deadline specified in the law

3.4.6. The purpose of the processing is marketing
The maximum storage period for personal data is 7 years

3.5. The data processor has the right to share personal data with third parties, such as authorized data processors, accountants, transport or courier companies, companies offering forwarding services. The data processor is an authorized person who processes data.

3.6. When processing and storing the personal data of the data subject, the data processor adopts technical and organizational methods that ensure the protection of data from accidental or unlawful deletion, modification, publication, or any other unlawful processing.

3.7. The data processor stores data of data subjects depending on the purposes, but not less than 7 years.

  1. Rights of data subjects

4.1. The data subject has the right to access and familiarize himself with his personal data.

4.2. The data subject has the right to receive information regarding the processing of his personal data.

4.3. The data subject has the right to supplement or correct inaccurate data.

4.4. If the data processor processes the personal data of the data subject on the basis of consent, the data subject has the right to revoke this consent at any time.

4.5. The data subject may, in order to exercise the rights, contact customer support by e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it.

4.6. In order to protect their rights, the data subject has the right to file a complaint with the Data Protection Inspectorate.

  1. End positions

5.1. These data protection terms have been drawn up in accordance with the decision of the European Parliament and of the Council nr 2016/679 on the protection of private data and directive 95/46, GDPR the laws of the Republic of Estonia and legal acts of the European Union.

5.2. The data processor has the right to partially or completely change the terms of data processing by notifying data subjects of the changes on the sandler.ee website