Privacy policy

Tartu Vocational College, an education organisation created by the city of Tartu, processes personal data in accordance with the law and the legislation issued on the basis thereof for the performance and execution of the functions assigned to local authorities and their agencies. We process personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the Personal Data Protection Act, other legislation that regulates data protection and the  Guidelines of the Data Protection Inspectorate.

We only process personal data for the performance of our functions and to the extent permitted by law. This privacy policy provides a concise overview of the processing of personal data while using the Volugram application.

1. TERMS AND ABBREVIATIONS

GDPR or General Regulation

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Personal data

Any information relating to an identified or unidentifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of
that natural person.

Valid rights

All legislations in force and applicable in the European Union and in the Republic of Estonia, including, but not limited to the national implementing acts of the GDPR.

Customer or data subject

A natural person who uses, has used, or has expressed a wish to use the Volugram application and whose personal data Tartu VOCO is processing.

Tartu VOCO

Tartu Vocational College (registry code 75024308, address Kopli 1, Tartu, 50115 ESTONIA).

Processing

Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller

Natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of these principles for processing personal data, the controller of personal data is Tartu Town Government.

Web site

The Volugram web site www.volugram.eu and any related subdomains or other web sites applied.

Processor

Natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

2. GENERAL

  1. The principles for processing personal data are applicable to customers who use, have used, or have expressed a wish to use the services of Volugram website. Among other things, the principles for processing personal data are applicable for customers who use the Volugram application app.volugram.eu
  2. Tartu VOCO guarantees that the processing of personal data complies with applicable law. The main legislation that Piletilevi follows with regard to processing personal data of customers is the GDPR. 
  3. If you have any questions about the processing of your personal data, please contact us using the contact information submitted in the section ‘Contact information and questions’.

3. LEGAL BASIS FOR PROCESSING PERSONAL DATA

  1. Tartu VOCO processes the personal data of customers only if it has legal basis for the processing in accordance with applicable law.
  2. Tartu VOCO might process the personal data of customers, for example, in the following cases:
      1. to conclude a contract, perform a contract, guarantee the performance of a contract or provide services to customers – for example, for registering as a user or using Volugram application app.volugram.eu (legal basis: Article 6, Paragraph 1, Clause b) of the GDPR);
      2. to perform legal obligations, for example, with regard to performing Tartu
        VOCO accounting obligations (legal basis: Article 6, Paragraph 1, Clause c) of the GDPR);
      3. in the case of legitimate interests of Tartu VOCO or a third person, except for when such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (legal basis: Article 6, Paragraph 1, Clause f) of the GDPR).

4. COMPOSITION OF THE PROCESSED PERSONAL DATA

  1. In general, Tartu VOCO only process such personal data that are voluntarily submitted by the customer. Tartu VOCO does not collect information on customers from third parties.
  2. The precise composition of personal data which is collected and processed by Tartu VOCO depends on the specific services provided by Volugram application to a user under applicable circumstances.
  3. If a customer registers as a user at the Volugram application, then Tartu VOCO will collect the following data on the customer, necessary to set up an account pursuant to the terms of service:
      1. first and last name;
      2. e-mail address;
  4. If a transaction is made (volunteer has submitted the form) through the Volugram application, Tartu VOCO will collect the following data on the customer
      1. First and last name
      2. Date of birth
      3. E-mail address

5. RIGHTS OF CUSTOMERS

  1. Customers have all the legal rights arising from the applicable law regarding the processing of their personal data, in particular the following rights:

      1. right of access: the customer has the right to ask, at any time, whether Tartu
        VOCO has any of their personal data, and to acquire information about which
        data is processed by Tartu VOCO;

      2. right to rectification: the customer has the right to request specification or
        rectification of personal data by Tartu VOCO if the data is insufficient,
        incomplete, or incorrect;

      3. right to object: the customer has the right to object the procession of their
        personal data, for example, when the use of personal data is based on the
        legitimate interests of Tartu VOCO.

      4. right to erasure: the customer has the right to request erasure of their
        personal data if the processing is based on consent and the customer
        withdraws their consent for the processing of personal data;

      5. right to restriction of processing: the customer has the right to request that
        Tartu VOCO restrict the processing of their personal data in accordance with
        applicable law, for example, if Tartu VOCO no longer needs the personal data
        of the customer for processing purposes or if the customer has objected the
        processing of their personal data;

      6. right to withdraw the consent for processing personal data: if the personal
        data of the customer are processed based on consent, the customer has the
        right to withdraw this consent at any time;

      7. right of portability: the customer has the right to acquire previously submitted
        personal data from Tartu VOCO that are processed based on a previously
        given consent or for the purposes of performing the contract concluded with
        the customer, in a written or publicly used electronic format.

      8. right to file a complaint: if the customer believes that their rights have been
        violated with the processing of personal data, they can file a complaint with
        the Data protection Inspectorate or a court.

  2. The rights of customers listed in this Section regarding the processing of their
    personal data are not an absolute right. In certain cases, the rights of other data
    subjects or legal rights of Tartu VOCO may restrict the rights of the customer.

  3. In order to exercise these rights or submit any applications or requests regarding
    personal data processing, please contact us using the contact information submitted
    in the section named ‘Contact information and questions’.

6. DISCLOSURE OF PERSONAL DATA

  1. Tartu VOCO will not disclose the personal data of customers to third parties without applicable legal basis.
  2. In certain cases, Tartu VOCO might disclose the personal data of customers to entitled persons (for example, an organiser of the event for which a volunteer volunteered) if it is necessary for providing important organisational information or for any other important reason.
  3. Tartu VOCO has the right to use authorised processors for processing personal data. In certain cases, Tartu VOCO has authorised certain persons to process the personal data of our customers, for example, our IT service providers (server service providers, IT software developers).

7. SAFETY OF PERSONAL DATA

  1. Tartu VOCO is obligated to guarantee the safety of personal data processing to protect personal data from unintentional or unauthorised processing, disclosure, or destruction.
  2. Considering the latest developments in research and technology, the costs of their application, and the nature, scope, context, and purposes of processing personal data, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, Tartu VOCO implements appropriate technical and organisational measures when processing personal data to ensure their safety.

8. CONTACT INFORMATION AND QUESTIONS

If you have any questions about the processing of personal data or wish to submit any
applications or requests regarding the processing of any personal data, please contact Tartu VOCO or the data protection specialist: andmekaitse@tartu.ee

Scroll to Top