Data Protection Policy of ASA Quality Services OÜ and ASA Quality Academy OÜ
ASA Quality Services OÜ and ASA Quality Academy OÜ (hereinafter together ASA) value your privacy and consider it important to protect it. Therefore, ASA treats your personal data, which has become known to ASA, to the best of its responsibilities and your rights.
ASA hereby discloses the personal data ASA processes, for what purpose, and what your rights are with respect to your personal data.
Where does ASA get your personal data?
ASA may obtain your personal data in several legal ways: from you personally, if you disclose it to ASA for using ASA’s services or in any other communication with ASA, from your employer or cooperation partner, but also from public sources such as the business register.
What kind of personal data does ASA process?
Personal data is any information about a natural person. The following are examples of the personal data ASA processes. Such as, but not limited to: name; personal identification code; e-mail address; contact address; bank account; information on payment methods; professional and employment data, education and language skills; special types of personal data, which ASA does not collect for an intended purpose, but that become known to ASA in the course of a client or cooperation relationship; other personal data, which ASA does not collect for an intended purpose, but which may become known to ASA through various means of communication and cooperation.
For what purpose does ASA process personal data?
ASA processes your personal data for specified and legitimate purposes. The purposes of the processing of your personal data by ASA are: to provide services to you or your employer or cooperation partner or your service provider; to arrange training; to maintain and develop client and cooperation relationships; the settlement of claims; marketing activities, including the transmission of advertising and offers; fulfillment of legal obligations.
On what legal ground does ASA process personal data?
ASA processes your personal data if there is a legal ground for processing. Such legal ground may be one or more of the following occasions: pre-contractual negotiations; performing of contracts; ASA’s legitimate interests, including business development, protection of property and individuals; fulfillment of a legal obligation or your consent.
During the pre-contract negotiations and performance of the contract, ASA needs to process your personal data. Pre-contractual negotiations, concluding, and performance of contracts cannot be carried out without the processing of personal data. ASA only processes personal data that is necessary for the conclusion and performance of a particular contract.
ASA may also process your personal data on the basis of ASA’s legitimate interest. Such legitimate interests include, among other things, the improvement and development of ASA’s services, their selection and provision, as well as client and cooperation relationships – in short, business development. ASA also has a legitimate interest in protecting ASA’s assets and individuals, including you, ASA employees, clients, and partners. Sometimes there may also rise a need to resolve disputes and claims related to the provision of the service. When processing personal data on the ground of legitimate interest, ASA only processes the relevant personal data.
Sometimes ASA will also have to process your personal data to fulfill its legal obligations. In such a case, the processing of your personal data is not a wish of ASA, but an obligation arising directly from legislation.
In individual cases, ASA will also process your personal data with your consent. For example, if you have expressed a wish to receive ASA newsletters and offers of ASA services, or have given your consent to an unspecified occasion that may occur in your relationship with ASA. ASA explains that giving such consent is always your free choice and you may withdraw it at any time, in which case ASA will not continue to process your personal data. However, the withdrawal of your consent does not affect the lawfulness of ASA’s processing of your personal data during the period of validity of the consent.
To whom does ASA transfer personal data?
In the course of providing services and cooperation ASA may transfer your personal data to ASA’s authorized processors. ASA’s authorized processors are mainly service providers supporting ASA’s business activities. Such services include: e-mail, website and server administration, customer management and sales software, IT support, accounting services and other miscellaneous administrative services, legal advisory services; banking and telecom services.
In some cases, ASA is also required to transfer your personal data to state registers and databases, as well as to local government and state agencies.
How long does ASA store personal data?
ASA will only store your personal data for as long as necessary. Taking into account the obligations arising from different forms of relationship as well as legal requirements for the storage of personal data, it is not possible to list the terms of personal data storage exhaustively. For example, the personal data contained in the basic accounting document is stored by ASA for seven (7) years, and the term for storing personal data may also result from an agreement with ASA.
What are your rights?
In order to ensure the transparency and lawfulness of the processing of your personal data, ASA provides an overview of your rights regarding the processing of personal data by ASA.
You have the right to access your personal data held by ASA. To do so, you first have the right to receive confirmation from ASA that ASA is processing your personal data and then you can access your personal data.
You also have the right to request ASA to correct your personal data, if it is incorrect or incomplete.
You can also request the deletion of your personal data if at least one of the conditions for such a request set out in the relevant regulation is met. The right to delete personal data is not unlimited.
In certain cases (for example, you have challenged the accuracy of your personal data; the processing is illegal; ASA no longer needs your personal data), you have the right to request a restriction of the processing of your personal data.
In addition, you have the right to object to the processing of your personal data by ASA.
You can also apply to the Data Protection Inspectorate or a court to protect your rights.
ASA hopes that the above will provide answers to your questions related to the processing of personal data. However, if you have any further questions, please contact ASA at letter@asaquality.ee.