Privacy Policy

Protection of personal data is very important to us, and we take it very seriously. This Privacy Policy, the principles of which are followed by SA Tallinna Lauluväljak, provides detailed information about what personal data SA Tallinna Lauluväljak collects about you, how we use it, and who has access to it. Please take the time to read this Privacy Policy and contact SA Tallinna Lauluväljak if you have any questions or suggestions regarding it.

Like most other organisations, SA Tallinna Lauluväljak collects information when you visit our website www.lauluvaljak.ee. You can visit our website without providing us with identifiable personal data. However, please be aware that we use cookies on our website, which provide us with statistical information. This helps us analyse the behaviour patterns of visitors to www.lauluvaljak.ee and improve the user experience. If you wish to purchase our services through our website or obtain more information about them, sharing personal data with us is necessary.

When processing personal data, we comply with applicable legislation concerning the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the “GDPR”) and the Estonian Personal Data Protection Act.

SA Tallinna Lauluväljak respects your rights regarding control over your privacy. It is important to us that you are able to exercise your rights. Below you will find details on how to do so.

Terminology and Definitions

The Privacy Policy of SA Tallinna Lauluväljak is based on the GDPR. The Privacy Policy applied by us must be clear and understandable both to visitors to our website and to our contractual clients and cooperation partners. To ensure that all parties have a clear understanding of their rights, we explain the most important terms below.

A data subject is an identified or identifiable natural person whose data are processed;

Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, personal identification code, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Processing of personal data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person. In particular, to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

A controller means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

A processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

A filing system means any structured set of personal data which is accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis;

A recipient means a natural or legal person, public authority, agency or another body to which personal data are disclosed, whether or not it is a third party. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; such public authorities shall process those data in compliance with the applicable data protection rules according to the purposes of the processing;

A third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
 

Data Controller

What Personal Data Does SA Tallinna Lauluväljak Collect and How Is It Used?

Website Browsing Statistics

SA Tallinna Lauluväljak aims to make its website as easy to use as possible. In order to improve the user experience, the following information, among other data, is recorded when you visit the SA Tallinna Lauluväljak website: browser type and version, device type and operating system, IP address, the duration and time of the website visit session, pages visited, and demographic information such as language preference and location. Data collected for website browsing statistics are used in anonymised form, and we do not associate them with any specific natural person.

To collect and analyse the above-mentioned data, SA Tallinna Lauluväljak uses the automated tool Google Analytics. You may disable the collection of your data by Google Analytics at any time, as described here.

Logs

The server hosting the SA Tallinna Lauluväljak website may also record requests that you make to the server (the web address you access, the browser and device you use, IP address, and access time). These data are used solely for technical purposes – to ensure the proper functioning and security of the website and to investigate possible security incidents.

Cookies

What Are Cookies?

A cookie is a small text file that a website stores on your computer or mobile device when you visit the website. It enables the website to remember your actions and preferences over a period of time so that you do not have to enter them again when you return to the website or move from one page to another.

How Does SA Tallinna Lauluväljak Use Cookies?

The SA Tallinna Lauluväljak website uses cookies that make it possible to record and remember various activities, actions and preferences related to you or your behaviour on our website. In particular, cookies are used to collect statistical data by tracking your preferences when visiting web pages.

Please also be aware that the website uses persistent cookies, which remain stored on your computer after you close your browser. Persistent cookies may remain on a user’s computer for days, months or even years. Such cookies help us to target advertising to you, particularly advertising that you see on Facebook and/or Google, as well as on Instagram and/or YouTube.

Disabling and Deleting Cookies

As an internet user, you can disable or restrict the storage of cookies on your computer. You can also delete all cookies that have already been stored on your computer. To do so, you need to change the privacy settings of your browser. Please note that if you choose to do this, you may need to manually adjust certain preferences each time you visit the website, and certain services and functionalities may not work.

Profiling

SA Tallinna Lauluväljak may use statistical data concerning website visitors to analyse trends and demographics among visitors to the SA Tallinna Lauluväljak website, but no individual profiles of visitors are created.

Enquiries

If you wish to purchase a service from SA Tallinna Lauluväljak through the SA Tallinna Lauluväljak website or obtain more information about it, sharing personal data with us is necessary. Enquiries can be submitted by completing the relevant contact form or by sending an email to info@lauluvaljak.ee

In order to respond to your enquiry, we collect the following personal data: your name, contact details (email address, telephone number) and company name. When you complete the contact form, all information previously stored about you through cookies is also associated with the personal data submitted through the contact form. In other words, a contact history is created. When preparing an offer, we also use data obtained from a credit information enquiry concerning the company and its representatives.

The legal basis for such processing of personal data is the processing of personal data necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Art 6(1)(b)). The above-mentioned personal data can be accessed by employees of SA Tallinna Lauluväljak. If you submit an enquiry through the contact form, the personal data may also be accessed by a cooperation partner providing us with IT services. We implement appropriate technical and organisational measures to ensure the security of personal data.

Personal data collected from enquiries are retained for as long as the signed client agreement remains valid. If no client agreement is signed, personal data are retained solely for statistical purposes (sales statistics) for 5 years from the date the enquiry was submitted. SA Tallinna Lauluväljak has a legitimate interest (GDPR Art 6(1)(f)) in compiling sales statistics in order to better plan its business activities.

Provision of Services to Clients

If SA Tallinna Lauluväljak provides a service to you or your company, personal data are also processed and therefore sharing personal data with us is necessary.

We process our clients’ personal data primarily for the preparation, conclusion and performance of client agreements and offers. For this purpose, we process the following personal data: names, contact details and job positions of company representatives, as well as information about the company and its representatives obtained from a credit information enquiry. We process the listed personal data for as long as the agreement remains valid, and these data can be accessed by employees of SA Tallinna Lauluväljak. The legal basis for such processing of personal data is the processing of personal data necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Art 6(1)(b)).

During the client relationship and for 10 years after its termination, we process our clients’ personal data for statistical purposes (sales statistics) and for archiving client agreements. SA Tallinna Lauluväljak has a legitimate interest (GDPR Art 6(1)(f)) in compiling sales statistics in order to better plan its business activities and to retain documents relating to its clients.

If your company has outstanding debts, please be aware that we process your personal data for the purpose of debt management until the debt has been paid. If an invoice becomes more than two months overdue, we may disclose the debt through public channels, including the creditinfo.ee portal. If an invoice becomes more than three months overdue, we may take the debt claim to court. SA Tallinna Lauluväljak has a legitimate interest (GDPR Art 6(1)(f)) in collecting debts from its clients if debts arise in connection with services provided to clients.

We process the personal data of our current clients during the client relationship and the personal data of former clients for 3 years after the end of the client relationship also for potential upselling, i.e. for preparing direct marketing of similar services. SA Tallinna Lauluväljak has a legitimate interest (GDPR Art 6(1)(f)) in maintaining business relationships with its current and former clients.

Marketing

SA Tallinna Lauluväljak wishes to provide its clients and other persons interested in receiving direct marketing communications with relevant news about SA Tallinna Lauluväljak and its services, as well as other information relating to the business sector of SA Tallinna Lauluväljak.

By subscribing to our newsletter on www.lauluvaljak.ee, we will subsequently send you news by email about the company’s activities, events taking place at the Song Festival Grounds, and our venue and equipment rental services. For the purpose of sending marketing communications by email, we process your name and email address. When you complete the contact form, all information previously stored about you through cookies is also associated with the personal data submitted through the contact form. In other words, a contact history is created.

In certain cases involving natural persons, we must obtain the data subject’s consent in order to send marketing communications by email. If you have not given consent to such processing of personal data, we will not process your personal data for this purpose. Consent does not expire, but if you no longer wish to receive marketing communications, you can easily unsubscribe using the link (“remove from list” or “unsubscribe”) at the end of the email. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

When SA Tallinna Lauluväljak sends you an email, SA Tallinna Lauluväljak may collect statistical data about your interaction with that communication, such as whether you opened the email, which links you clicked, which devices you used for this purpose and their technical characteristics. Such information is stored in the contact history.

Sometimes, before sending a newsletter, we evaluate the behaviour of our contacts using data obtained from the contact history. This is necessary so that we can send you more personalised communications by email. SA Tallinna Lauluväljak has a legitimate interest (GDPR Art 6(1)(f)) in understanding the needs and preferences of its contacts in order to provide them with more relevant information.

Please note that if you are included in our contact database, we may process your name and email address or mobile telephone number for the purpose of showing advertisements to you or to people similar to you (a so-called lookalike audience) on Facebook, Google, LinkedIn and/or Instagram. For these purposes, we process your personal data for 5 years from the date your contact details are added to the contact database. SA Tallinna Lauluväljak has a legitimate interest (GDPR Art 6(1)(f)) in sending marketing communications to its contacts in order to maintain business relationships with them.

For the purposes of processing personal data listed in this subsection, the data can be accessed by employees of SA Tallinna Lauluväljak. Personal data may also be accessed by a cooperation partner providing us with IT services. We implement appropriate technical and organisational measures to ensure the security of personal data.

Your Rights and How You Can Exercise Them

By contacting SA Tallinna Lauluväljak by email at info@lauluvaljak.ee, you may exercise the following rights:

In certain cases, you have the right to request restriction of the processing of personal data concerning you and the right to object to the processing of personal data concerning you.

You may exercise your rights in accordance with the conditions arising from the GDPR and other applicable local legislation.

If you believe that your privacy has been violated, please contact us at the email address indicated below. You also have the right to lodge a complaint with the data protection supervisory authority of the country in which your permanent residence is located. In Estonia, this authority is the Estonian Data Protection Inspectorate.

If you have any questions, please feel free to contact our Data Protection Officer by writing to info@lauluvaljak.ee.