Rela Estonia Privacy Policy - 1.6.2021

INTRODUCTION

This privacy policy pertains to the processing of private customers' personal data. This privacy policy provides information to both data subjects and the supervisory authority in accordance with data protection legislation (records of processing activities).

CONTROLLER

Rela Estonia OÜ (marketing name Rela Massaaž, hereinafter “Rela” or “we”)

Business ID 16119097,

A.H. Tammsaare tee 47, 11316 Tallinna

PURPOSES OF AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We process personal data for the following purposes:

the provision of services, mainly massage, naprapathy, and osteopathy services, and documenting provision of such services and treatments

collection of reporting and other similar information as required by law

marketing purposes and informative purposes (such as reminders relating to services)

invoicing and debt collection

handling feedback, formal inquiries and incidents

development, analyzation and compilation of statistics in relation to our services and operations

Basis for processing:

Personal data is processed based on a service agreement between you and Rela. In addition, our processing of personal data is based on a legitimate interest, statutory task or the consent of the data subject in certain situations.

THE CATEGORIES OF PERSONAL DATA PROCESSED

We process the following personal data:

Basic information

Health information

Appointment information

Invoicing information

Information on feedback, clarification requests from the authorities, and incidents

Information on consents and/or restrictions

Information on use of our website and services

Information in relation to identification and authentication

Information on net user behavior and web analytics

STORAGE PERIODS OF PERSONAL DATA

Rela shall not store personal data longer than it is necessary for the purposes of processing personal data or pursuant to applicable law.

PROCESSING AND DISCLOSURE OF PERSONAL DATA

Personal data is processed by Rela’s employees and massage therapists.

The processing of personal data may be outsourced to companies belonging to the same group as Rela and/or external service providers who process the personal data on behalf of Rela.

Personal data may be disclosed to third parties based on law or with the consent of the data subject. Personal data is not transferred outside the EU or the EEA.

DATA SOURCES

Personal data is primarily collected from the customer. If the customer is a minor, personal data may be collected from the customer’s guardian.

DATA SUBJECTS’ RIGHTS

Data subjects have the right to obtain information on the processing of personal data and access data concerning themselves. Data subjects have the right to request the rectification of erroneous or incomplete data. Data subjects have the right to request the erasure of their personal data.

Data subject has the right to request the restriction of the processing of their personal data if the data subject contests the accuracy of their personal data.

Data subject has the right to request that their data be transmitted from one system to another if the data has been provided by the data subject themselves and if the processing of the personal data is based on consent or an agreement.

Data subject has the right to lodge a complaint with the supervisory authority if the data subject is of the opinion that the processing of personal data has infringed data protection legislation.

PROTECTION OF PERSONAL DATA

Rela applies the appropriate physical, technical, and administrative protection measures to protect data from misuse. These measures include, among others, control and filtering of network traffic, use of encryption techniques and safe data centers, appropriate access control, controlled granting of access rights and supervision of their use, giving instructions to staff participating in personal data processing, and risk management related to the planning, implementation, and maintenance of our services. Rela chooses its subcontractors carefully and uses agreements and other arrangements to ensure that they also process data in compliance with the law and good privacy practices.

CONTACT

For questions or requests related to the processing of personal data, please contact us.

Rela contact person for matters relating to processing of personal data: