These data protection conditions describe how we process your personal data and for what purposes. This notice also explains your rights in relation to the processing of your personal data.

The controller of the personal data is Karlev OÜ (registration code:10009189) with its registered office at Elektroni 2, Tallinn 13415, Tallinn, Estonia.

Karlev OÜ is the controller of personal data and forwards the personal data necessary for the execution of payments to the processor Maksekeskus AS.

1. What personal data we process

Basic data of the data subject, such as the name and surname, address, country of residence, language of use.
Contact details of the data subject, such as phone, email.

2. What are the legal bases and purposes of the processing of personal data?

The processing of personal data is based on the performance of a contract.

3. Where we get personal data from

We obtain personal data relating to a data subject mainly from the data subject.

4. To whom we disclose personal data and whether we transfer personal data outside the EU or to. EEA

We process information ourselves and use processors to process personal data on our behalf and for us, for example, to provide our website maintenance and customer support, cloud computing maintenance and hosting services and IT environment. In order to protect your personal data, we have entered into personal data processing agreements with each of the aforementioned processors who process your personal data on our behalf and for us.

We may disclose data to public authorities where required to do so by law.

We do not transfer or disclose personal data relating to customers outside the EU/EEA.

5. How we protect personal data and how long we keep it for

Personal data is stored on servers located in the territory of a Member State of the European Union or in the territory of countries that have acceded to the European Economic Area.

Access to systems containing personal data is only permitted to those of our employees who are required to process the data subjects’ data as part of their duties. Data is collected in databases protected by firewalls, passwords and other technical measures.

We will keep personal data for as long as necessary, taking into account the purposes for which the personal data are processed.

We regularly review the need to retain data, taking into account applicable law. In addition, we will take all reasonable steps to ensure that no personal data that is incompatible with the purposes for which it is processed, or that is outdated or inaccurate, is kept in the register. We will correct or delete such data without delay.

6. What rights do you have as a data subject?

As a data subject, you have the right to request access to the personal data collected about you in the register and you have the right to request the correction or deletion of personal data.

You also have the right to withdraw or modify your consent to the processing of your personal data in situations where the processing is based on your consent. As a data subject, you have the right, in accordance with the EU General Data Protection Regulation (EU 2016/679), to object to or restrict the processing of personal data.

You also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.

As a data subject, you have the right to object at any time to direct marketing, including profiling for direct marketing purposes.

7. How and for what purposes we use cookies

We use cookies on our website to make our service more user-friendly and to provide you with enhanced and customised features when visiting our website and products.

Many web browsers give you the option to avoid cookies offered by third parties. If enabled in the settings, the web browser will only allow cookies from the web service you are currently visiting to be stored via the website. You can do this through your web browser settings (this option will exclude all
third party cookies).

You can clear your web browser cookie cache through your web browser settings. Deleting a cookie deletes the unique identifier stored in the browser cache, along with the online profile attached to it. Deleting the cookie cache
does not prevent new cookies from being stored in the future.

8. What type of cookies do we use?

We use analytics cookies that allow us to recognise website visitors, count and track website traffic. This is what we do to make our website work better.