Data controller

AS Framm

Definitions

The controller is a natural or legal person, public authority, agency, or other body which determines the purposes and means of the processing of personal data.

A processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;

Personal data is any information about an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, personal identification number, location information, network identifier or one or more physical, physiological, genetic, mental, economic, cultural or social characteristics of that natural person or several natural persons;

Processing of personal data – an automated or non-automated operation or set of operations on personal data or sets of personal data, such as collection, documentation, organization, structuring, preservation, adaptation and modification, making inquiries, reading, use, disclosing by transfer, distribution or otherwise making available, aggregation or combination, restriction, deletion or destruction;

A cookie is a small text file that a website saves on your computer or smart device when you visit our website. This allows you to store information about your preferences so that you don’t have to make selections again when you visit or browse this page again.

What personal data do we collect, and for what purpose?

If you want to receive more information about a service or apply for vacancies through the website, AS Framm collects and processes the following data:

• Name

• E-mail address

• Phone number

• Query text

• Information in the submitted application documents

Inquiries can be submitted by filling in the corresponding contact form or sending an e-mail to framm@framm.ee. To prepare the offer, we also use the information about the company obtained from the Krediidiinfo inquiry.

The legal basis for such processing of personal data is the processing of personal data for the performance of a contract concluded with the participation of the data subject or for taking pre-contractual measures at the request of the data subject (GDPR Art 6 (1) (b)).

Website browsing statistics

When visiting websites, non-personalized technical data about the visitor is collected.

The technical data is limited to the Internet address (IP address) of the computer or computer network used, the software version of the computer’s web browser and operating system, the time (time, date, year), and place of the visit. IP addresses are not associated with personally identifiable information.

We use the automated tool Google Analytics to collect the above data. If you do not wish to provide this information about yourself, you can opt-out of the collection of your data by Google Analytics at any time, as described here.

Cookies

Our websites use cookies to improve the quality of the services we provide. We use session cookies, persistent cookies, and third-party cookies (Google Analytics, Facebook):

To identify new and former customers. For remembering your preferences like language, color contrasts, or font size. To remember whether or not you have accepted our cookies on this page. To gather reliable information about page traffic, which allows us to measure the extent to which the page meets the needs of users and make possible improvements.

Enabling cookies is not absolutely necessary for the basic functions of the website to work, but it provides a better browsing experience. If you wish, you can always delete or block cookies, but by doing so, some functions of the website may not work the way you want.

Note that some cookies come from a third-party service provider who performs some of these tasks on our behalf.

The information related to cookies is not used to identify you and the data collected is under our control. Cookies are not used for any purpose other than those described above.

How long do we retain the data?

Non-personalized technical data collected on the website will be retained indefinitely.

We retain personal and customer data for as long as necessary:

• To deliver services and information

• To communicate in case of submitted requests

• To ensure the exercise of choices and rights

We keep the application data:

• To carry out recruitment activities 

– up to one month after the closing date for applications 

– with the candidate’s agreement, up to 12 months after the submission of the application

Sharing of personal data

We may make your personal, customer, or business information available to companies that provide services that support our business, such as website analysts or customer service providers. These companies are authorized to use personal information, customer data, or business information only to provide services to us. When selecting service providers, we ensure that the service provider is located in the European Economic Area.

We will only share your personal, customer, or business information with third parties as described in this Privacy Notice. We do not sell your personal information to third parties.

Rights

In certain cases, you have the right to request a restriction on the processing of personal data about you and the right to object to the processing of personal data about you.

If you find that your privacy has been abused, please contact the controller. You also have the right to complain to the data protection supervisory authority of the country where you are domiciled.

Withdrawal of consent to the processing of personal data

If you want to be “forgotten,” please let us know by writing to framm@framm.ee. Upon request, we will remove information related to your request(s) from our systems.