1. General
This privacy policy explains how Eesti Taaskasutusorganisatsioon MTÜ (hereinafter “ETO” or “we”) collects, uses and protects personal data processed when visiting and using the website www.eto.ee.
The controller of personal data is:
Eesti Taaskasutusorganisatsioon MTÜ (Estonian Recovery Organisation) Registry code: 80208542 Address: Mustamäe tee 24, 10621 Tallinn, Estonia Phone: +372 640 3240 E-mail: eto@eto.ee
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
2. What personal data we collect
Data submitted via the contact form. When you contact us through the website’s contact form, we collect your name, e-mail address, subject and the content of your message. You provide this data to us voluntarily.
Automatically collected data. When you visit the website, we collect technical data through web analytics, such as your device and browser type, approximate location (at country/city level), pages visited, time spent on the site and the referring source. This data is collected via cookies and only with your consent.
We do not collect special categories of personal data (such as health data) through the website, nor do we use your data for automated decision-making or profiling.
3. Purpose and legal basis of processing
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | Responding to your enquiry and communicating with you | Legitimate interest (GDPR Art. 6(1)(f)) – responding to enquiries |
| Web analytics data | Website usage statistics and improving the site | Your consent (GDPR Art. 6(1)(a)) |
You may withdraw consent-based processing (analytics cookies) at any time, without affecting the lawfulness of processing carried out before withdrawal.
4. Cookies
The website uses cookies – small text files stored on your device.
- Necessary cookies ensure the basic functions of the website (e.g. language selection, security). They are always active and do not require consent.
- Analytics cookies (Google Analytics) help us understand how visitors use the website. They are used only with your prior consent.
You can manage your cookie preferences via the cookie consent banner shown on the website and in your browser settings. Most browsers allow you to block or delete cookies.
5. Sharing of personal data and processors
We do not sell or share your personal data with third parties for marketing purposes. Personal data may be processed on our behalf by trusted service providers (processors):
- Web hosting: Zone Media OÜ (Zone.ee) – hosting of the website and server;
- Web analytics: Google Ireland Limited / Google LLC (Google Analytics) – visitor statistics.
Processors handle the data solely on our instructions and in accordance with applicable data protection requirements. Personal data may also be disclosed to competent authorities where required by law.
6. Transfer of data outside the European Union
When using the web analytics service, data may be transferred outside the European Union / European Economic Area (e.g. to the United States). In such cases, data protection is ensured through appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.
7. Retention periods
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:
- Contact form data is retained for the time required to handle your enquiry and thereafter for up to 12 months, after which it is deleted, unless retention is necessary for the establishment, exercise or defence of legal claims.
- Web analytics data is retained for the period set in the analytics service configuration (generally up to 14 months), after which it is anonymised or deleted.
8. Your rights
As a data subject, you have the right to:
- be informed about and access the personal data we process about you;
- request rectification of inaccurate data;
- request erasure of data (“right to be forgotten”);
- request restriction of processing;
- object to the processing of your data;
- request data portability;
- withdraw your consent at any time.
To exercise your rights, please contact us at eto@eto.ee.
If you believe that the processing of your personal data infringes your rights, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn; e-mail info@aki.ee; web www.aki.ee).
9. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. The website uses a secure encrypted connection (SSL/HTTPS).
10. Changes to the privacy policy
We reserve the right to update this privacy policy from time to time. The current version is always available on the website www.eto.ee. We will notify you of significant changes on the website.
11. Contact
For any questions regarding the processing of personal data, please contact us: Eesti Taaskasutusorganisatsioon MTÜ – e-mail: eto@eto.ee – phone: +372 640 3240