Jõulumäe Recreational Sports Centre processes personal data on basis of consent or on basis of the law. According to Personal Data Protection Regulation, the legal basis for processing personal data must be:
– The person himself discloses his data or gives his consent:
- consent is related to a specific purpose
- data collected to one purpose may not be used for a new purpose without a new consent
- the existence of consent must be proven by the user of the personal data
- consent can be withdraw
– Based on the law, without consent:
- either directly written in the law or necessary for the performance of a task arising from the law
- for preparing a contract incl. an employment contract (except for special categories of personal data)
- for journalistic purposes in the public interest, which also applies to blogs and online comments
- for the purpose of academic, artistic and literary self-expression
- recording in a public space
- dept data in the case of legitimate interest
- for protection of life, health, rights and freedoms, including security cameras
- for science, statistic
– When visiting the website, the data collected and stored about the visitor is limited to:
- the internet address (IP address) of the computer or computer network used
- the name and address of the Internet service provider of the computer or computer network used
- the time of the visit (time, date, year
IP addresses are not linked to personally identifiable information. Data is collected about which part of the website is visited and how long people stay there. The collected data is used to generate visitors statistics in order to develop the website and make it more convenient for visitors
– Data collected and stored when using the accommodation service in accordance with §24 of the Tourism Act:
- first and last name of the accommodation service user
- date of birth
- citizenship
- address
- if the accommodation service user is not a citizen of Estonia, another contracting state of the European Economic Area, Switzerland or a foreigner residing in Estonia on the basis of a residence, the following data shall be entered on the visitor card in addition to the above – mentioned data: type of travel document, Document number and country where the document was issued in
Visitor cards are kept for two years from the date they were filled out
– Correspondence and service – related data:
- business and private customer data collected through correspondence (for example name, contact details, booking related questions etc.)
- payment and financial data (for example account number, debit card details, data on the selected payment method and payment behaviour – including payment delays)
- data generated during service (for example name and document number of the sports equipment renter or gym user etc.)
- data related to the organization of events and participation in competitions (participant’s name, gender, age, club membership, etc.), the disclosure of which is notified upon registration.
Jõulumäe discloses the collected data or provides access to authorities or supervisory authorities if there is a corresponding legal obligation to do so. The employees of Jõulumäe Recreational Sports Centre only process the data necessary to perform their job duties.
Documents with restricted access are issued only to those institutions and people who have a direct legal right to receive them (for example pre-trial proceedings or a court). Documents are stored as indicated in the document list. Documents that have exceeded the retention period are distroyed.