This Privacy Policy describes the processing of personal data by HK Unicorn Squad MTÜ (registry code: 80554391; address: Harjumaa, Viimsi, Miiduranna, Kristjani tee 4, 74015; hereinafter also referred to as “MTÜ” or “we”). MTÜ stands for “mittetulundusühing”, which means “non-profit organisation” in English.
MTÜ processes personal data by the Regulation (EU) 2016/679 of the European Parliament and the Council, the Personal Data Protection Act, and other applicable data protection legislation.
Before accessing our website and using the website or any of our services, please read this Privacy Policy carefully. If you do not agree to these terms, please immediately stop using the website and other services.
MTÜ reserves the right to make unilateral changes to this Privacy Policy from time to time. We make every effort to keep the Privacy Policy current and available on the website www.unicornsquad.ee. To stay informed about the latest version of the Privacy Policy, we recommend visiting our website periodically. We may also notify you of changes to the Privacy Policy via email or other contact details we have.
Definitions
MTÜ or “we” (registry code: 80554391, address: Harju County, Viimsi Parish, Miiduranna village, Kristjani tee 4, 74015) is the data controller, i.e., the entity that determines the purposes and means of processing personal data.
The data subject or “you” is an identifiable or identified natural person whose personal data is processed, regardless of whether a contract exists between us.
Personal data is any information about an identifiable or identified natural person (data subject).
Processing of personal data is any operation performed on personal data (e.g., collection, storage, alteration, transmission, deletion, organization).
Website refers to the homepage managed by MTÜ: www.unicornsquad.ee.
Composition of Personal Data
To achieve the purposes set out in the conditions of personal data processing, we process any data about an identified or identifiable natural person, regardless of the form or format of such data. The exact composition of personal data processed varies in each case, and we always adhere to the principle of processing as little personal data as possible, i.e., we process only personal data that is relevant and necessary to achieve the purposes of personal data processing. Among other things, we process the following personal data:
- Identification and contact data: first and last name, personal identification code, contact details (email address, phone number);
- Location data: in which school, hobby centre, or elsewhere our service is offered;
- Other data: the composition and period of the ordered services, inquiries made on the website or via email, information related to client communication, including potential clients, volunteers, and donors; other personal data disclosed during the use of our website or the fulfilment of our services.
The above personal data is collected during the use of MTÜ services, donations, responses to surveys/research, during communication, or in other ways, including at the initiative of the data subject. HK Unicorn Squad MTÜ is the data controller of personal data.
We also collect anonymized information, including log files about your web browser and IP address. We use this information to analyze trends, administer the website, monitor visitors’ activities, and collect demographic information. The obtained information is not intended for and does not enable the identification of individuals.
In addition to the aforementioned, we have the right to collect data available in public registers.
Legal Basis and Purpose of Personal Data Processing
We process personal data based on a legal basis and as long as necessary to fulfil the purposes set out in this Privacy Policy. These personal data processing conditions describe how we collect and process personal data when we act as data controllers. When we act as a data processor, we act by the data processing agreements concluded between us and the data controllers, as well as the applicable legislation. We keep all other data disclosed to us in the course of using the services confidential and secure.
We process identification data for the provision or use of HK Unicorn Squad MTÜ services. Additionally, we process data to improve the service’s quality and send you important notices regarding the service.
We process personal data based on the consent of the data subject, where information about the purposes of such personal data processing is provided before giving consent. It is also possible for users to voluntarily (i.e., with consent) participate in various surveys and studies. If you send us emails, you also consent to the processing of your data (including storing the content of emails and inquiries) so that we can respond to your emails and questions.
You have the right to withdraw your consent to such personal data processing at any time by notifying us at the contact details provided in the Privacy Policy or using other available technical solutions. Withdrawal of consent does not affect the legality of processing carried out before the withdrawal.
We may process your data to fulfil obligations stipulated in legislation, such as ensuring the protection of personal data (including responding to data subject requests and competent state authority inquiries), retaining personal data for any period necessary to fulfil obligations arising from the law (e.g., for accounting purposes), and fulfilling other obligations arising from applicable legislation.
Security Measures
We process personal data only when there is a legal basis and for legitimate purposes. To ensure the security of personal data, we use measures and retain personal data in a manner that ensures the security and confidentiality of personal data. Only persons who need access to personal data in connection with their job duties, for the provision of the service, or to whom the disclosure of personal data is by the conditions of personal data processing or legislation, have access to personal data. We implement necessary organizational, physical, and information technology security measures to ensure the security of personal data.
In the event of a personal data breach that poses a likely risk to the rights and freedoms of the data subject, we will notify the Data Protection Inspectorate of such a breach. Additionally, we will take measures to terminate the breach at the earliest opportunity.
We are not responsible for the misuse of your data caused by malware on your computer or other devices.
We have the right to disclose and transmit personal data without your prior consent to fulfil obligations arising from legislation. To protect our rights, we have the right to disclose personal data to third parties.
Deletion and Retention
We retain personal data only as long as necessary to achieve the purposes described in this Privacy Policy, protect our rights, or fulfil obligations arising from legislation. After the above period, we retain your data with your consent until you withdraw your consent by requesting the deletion of your data. If there has been email correspondence or other communication between us, personal data contained in such correspondence or other communication will be retained until you withdraw your consent by requesting the deletion of such personal data.
Your Rights and Obligations
You may request information about the processing of your data from us at any time. By applicable legislation, you may have the right to:
- request the deletion of your data;
- request the correction of your inaccurate personal data if it has changed or is otherwise incorrect, incomplete, or erroneous;
- request the restriction of the processing of your data;
- object to the use of your data;
- receive your data in a structured, commonly used, and machine-readable format and transmit it to another data controller.
If we process personal data based on consent, you may withdraw your consent at any time. This does not affect the legality of personal data processing carried out before the withdrawal.
The data subject is responsible for ensuring that the data provided by them is accurate, correct, and complete. Knowingly providing false information is considered a violation of the Privacy Policy. The data subject is obliged to notify the data controller immediately of any changes to the data provided.
Cookies
We use cookies on our website. Cookies are small text files that are stored on your computer to remember you and your preferences so that we can provide you with relevant information, and recommendations, and improve your user experience. We only use cookies necessary for the functioning of the website.
Inquiries and Complaints
For inquiries, questions, and complaints related to the processing of personal data, the data subject has the right to contact MTÜ as the data controller at the following contacts:
MTÜ HK Unicorn Squad
Kristjani tee 4, Viimsi, 74015
Email: info@unicornsquad.ee
Phone number: +372 501 8919
We will respond to the data subject’s request within 30 days and inform the user whether and what measures have been taken to resolve the request. If the request is complex or extensive, the response time may be extended by 60 days.
The data subject has the right to file a complaint with the national data protection supervisory authority if they believe that the processing of personal data related to them does not comply with legislation.