Data Protection Terms or Privacy Policy
“The Lääne-Viru Association of Municipalities (hereinafter VIROL) processes personal data in accordance with the General Data Protection Regulation (GDPR) of the European Union, the EU Directive on the security of information systems (NIS), the Personal Data Protection Act (IKS), the Cybersecurity Act (KüTS), and other applicable legal acts concerning the processing of personal data.
We always follow the principle of data minimization, collecting and processing as little personal data as possible. Any personal data we no longer need will be deleted immediately.
We carefully apply information security measures to ensure your data is protected.”
Purpose and Legal Basis for Processing Personal Data
– To fulfill employment contracts and agreements, we process personal data of contracting parties (GDPR Article 6(1)(b)). This data is collected directly from the contracting parties. The personal data used to conclude employment contracts is regulated by the Employment Contracts Act.
– To comply with our legal obligations, we may use personal data (GDPR Article 6(1)(c)).
– Personal data may be processed on the basis of legitimate interest (GDPR Article 6(1)(f)) in connection with events, surveys, competitions, etc. In each case, we inform individuals about the data collected from them and provide the name of the responsible data processor.
– Occasionally, the association may be given obligations by the state. In such cases, we process personal data to fulfill a task carried out in the public interest (GDPR Article 6(1)(e)). Information about the current situation can be requested from our data protection officer at andmekaitseametnik@virol.ee.
– Processing personal data based on consent (GDPR Article 6(1)(a)).
Sometimes we must request consent to process personal data (e.g., publishing photos from appreciation events, etc.). In such cases, we will clearly state the purpose for using the personal data and do so independently of other factors. Based on your consent, we will only use the requested personal data for the stated purpose. Giving consent for personal data processing is always voluntary, and you are under no obligation or pressure to provide it.
Note! You have the right to withdraw your consent for personal data processing at any time. To do so, please contact the person who requested your consent or write to the data protection officer at andmekaitseametnik@virol.ee.