The SOS Children's Village Estonian Society acts on the following principles when processing personal data:
• lawfulness, justice and transparency – data processing is legal, rightful and transparent to the data subject;
• limitation of purpose – personal data shall be collected for clearly and precisely defined and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
• data minimisation – personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
• accuracy – personal data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are deleted or corrected without delay;
• limitation of storage – personal data shall be kept in a form that permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
• reliability and confidentiality – personal data shall be processed in a manner that ensures the appropriate security of the data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Collection and use of personal data
Personal data are data which are collected through donations. The processing of personal data is carried for the performance of the contract and securing its performance, as well as on the basis of consent. Personal data can be collected in the following ways:
• When making a donation on our donation platform, personal data are stored. Required personal information may include name, e-mail address and personal identification code.
• When entering into a permanent donation contract and providing personal information that includes name, e-mail address and personal identification code.
Purposes of processing personal data:
• With the help of the collected personal data, we can inform you about SOS Children's Village Estonian Society news, reports and future campaigns. A donator who does not wish to be on our newsletter list or receive notifications about news that may be of interest to them can remove themselves from the target audience at any time.
• With collected personal information, we can manage and enable donations.
• The personal identification code is used to return the income tax to the donator.
Personal data protection
The SOS Children's Village Estonian Society platform takes all precautions (including administrative, technical and physical measures) to protect the personal data of clients. Only authorised persons have access to amend and process data.
All personal data learned in the course of visiting the donation platform and making purchases are considered confidential information. The use of an encrypted bank data link shall guarantee the safety of the personal data and bank details of the person making a purchase.
Third parties and authorised processors
The SOS Children's Village Estonian Society may share personal data, strictly limited to an as-needed basis, with third parties and authorised processors for the following purposes:
• to promote international intra-group collaboration (SOS group-wide collaboration);
• with our website hosting provider to improve the user experience;
• to send out newsletters.
The SOS Children's Village Estonian Society confirms that it only shares personal data with third parties and processors who apply adequate security measures to ensure the security of the protection of the data. Within the group, conditions for the processing of personal data have been adopted (a clearly regulated relationship between the controller and processor).
Retention of personal data
The SOS Children's Village Estonian Society keeps personal data in a form that permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed, unless there is a requirement in law concerning different terms of storing personal data.
Rights of data subject
All clients, donators and users (data subjects) have the following rights:
• Data subjects have the right to have their personal data deleted.
• Data subjects have the right to make inquiries concerning their personal data.
• Data subjects have the right to restrict the processing of their personal data.
• Data subjects have the right to lodge a complaint about the processing of personal data with the Data Protection Inspectorate.
By refusing cookies, the user can block them from being saved on their device. To do so, the respective settings of the web browser must be amended. Web pages may not work properly and some services may be unavailable if cookies are not allowed.