Our privacy policy

Estonian Association of Parents of Children with Cancer has undertaken to protect the privacy of donors and users. Based on this, we have prepared these privacy policy principles, which deal with  collection, use, publication, transmission and storage of personal data. Our activities are in accordance with all relevant legislation of the European Union and the laws of the Republic of Estonia.

Responsible processor The responsible processor of the personal data mentioned in the Privacy Notice is the Estonian Association of Parents of Children with Cancer, MTU (registration code 80096899, address Enelase tn 24, Soinaste küla, Kambja parish, Tartumaa, 61709, Republic of Estonia. Website www.vahilapsed.ee).

Basics

Estonian Association of Parents of Children with Cancer is based on the following principles when processing personal data:

  • principle of legality, fairness and transparency – the processing is legal, fair and transparent to the data subject;
  • principle of goal limitation – personal data are collected precisely and clearly for specified and legitimate purposes and are not subsequently processed in a way that is inconsistent with these purposes;
  • the principle of collecting as little data as possible – personal data are relevant, important and limited to what is necessary for the purpose of their processing;
  • principle of justice – personal data are correct and, if necessary, updated, and that all reasonable measures are taken to delete or correct personal data that are incorrect from the point of view of the purpose of the processing without delay;
  • Principle of conservation limitation – personal data is stored in a form that allows data subjects to be identified only as long as it is necessary to fulfill the purpose for which personal data is processed;
  • principle of reliability and confidentiality – personal data is processed in a way that ensures appropriate security of personal data, including protection against unauthorized or illegal processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Collection and use of personal data 

Personal data is data collected through donations. Personal data is processed to fulfill the contract and ensure fulfillment. Personal data can be collected in the following ways:

When making a donation, storing data about a person's contact details in our donation environment. Required personal data may include name, e-mail address and personal identification number.

The purposes of personal data processing are:

Using the collected personal data, we can manage and enable donations.

The personal identification number is used to return the income tax to the donor.

Protection of personal data

Estonian Association of Parents of Children with Cancer implements all precautions (including administrative, technical and physical measures) to protect the client's personal data. Only authorized persons have access to change and process data.

Security

All personal data of the customer that becomes known during the donation environment is treated as confidential information. Encrypted data communication channel with banks ensures the security of the purchaser's personal data and bank details.

Third parties and authorized processors

As the administrator of the donation environment, the Estonian Association of Parents of Children with Cancer has access to all user data, but only uses them to compile overview statistics (e.g. tracking the volume of donations by month and year) and not for the analysis of individual donations and donors. User data is protected by security and confidentiality rules and is not disclosed to third parties.

Preservation of personal data

Estonian Association of Parents of Children with Cancer stores personal data in a form that allows data subjects to be identified only as long as it is necessary to fulfill the purpose for which personal data is processed, unless there is a requirement from the law that stipulates different personal data storage terms.

Rights of the data subject
All  donors and users (data subjects) have the following rights:

  • The data subject has the right to delete personal data.
  • The data subject has the right to make inquiries about the personal data concerning him/her.
  • The data subject has the right to restrict the processing of personal data.
  • The data subject has the right to submit a complaint about the processing of personal data to the Data Protection Inspectorate.

Privacy Policy Terms and Changes 

By using our website, you have read and accepted these principles and conditions. We reserve the right to change the general conditions of the privacy policy if necessary, informing all donors / users.

Anything related to the privacy policy or data processing questions or concerns, please contact us at: info@vahilapsed.ee