Rela Estonia OÜ (marketing name Rela Massaaž, hereinafter “Rela” or “we”)
Business ID 16119097,
A.H. Tammsaare tee 47, 11316 Tallinna
PURPOSES OF AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process personal data for the following purposes:
the provision of services, mainly massage, naprapathy, and osteopathy services, and documenting provision of such services and treatments
collection of reporting and other similar information as required by law
marketing purposes and informative purposes (such as reminders relating to services)
invoicing and debt collection
handling feedback, formal inquiries and incidents
development, analyzation and compilation of statistics in relation to our services and operations
Basis for processing:
Personal data is processed based on a service agreement between you and Rela. In addition, our processing of personal data is based on a legitimate interest, statutory task or the consent of the data subject in certain situations.
THE CATEGORIES OF PERSONAL DATA PROCESSED
We process the following personal data:
Information on feedback, clarification requests from the authorities, and incidents
Information on consents and/or restrictions
Information on use of our website and services
Information in relation to identification and authentication
Information on net user behavior and web analytics
STORAGE PERIODS OF PERSONAL DATA
Rela shall not store personal data longer than it is necessary for the purposes of processing personal data or pursuant to applicable law.
PROCESSING AND DISCLOSURE OF PERSONAL DATA
Personal data is processed by Rela’s employees and massage therapists.
The processing of personal data may be outsourced to companies belonging to the same group as Rela and/or external service providers who process the personal data on behalf of Rela.
Personal data may be disclosed to third parties based on law or with the consent of the data subject. Personal data is not transferred outside the EU or the EEA.
Personal data is primarily collected from the customer. If the customer is a minor, personal data may be collected from the customer’s guardian.
DATA SUBJECTS’ RIGHTS
Data subjects have the right to obtain information on the processing of personal data and access data concerning themselves. Data subjects have the right to request the rectification of erroneous or incomplete data. Data subjects have the right to request the erasure of their personal data.
Data subject has the right to request the restriction of the processing of their personal data if the data subject contests the accuracy of their personal data.
Data subject has the right to request that their data be transmitted from one system to another if the data has been provided by the data subject themselves and if the processing of the personal data is based on consent or an agreement.
Data subject has the right to lodge a complaint with the supervisory authority if the data subject is of the opinion that the processing of personal data has infringed data protection legislation.
PROTECTION OF PERSONAL DATA
Rela applies the appropriate physical, technical, and administrative protection measures to protect data from misuse. These measures include, among others, control and filtering of network traffic, use of encryption techniques and safe data centers, appropriate access control, controlled granting of access rights and supervision of their use, giving instructions to staff participating in personal data processing, and risk management related to the planning, implementation, and maintenance of our services. Rela chooses its subcontractors carefully and uses agreements and other arrangements to ensure that they also process data in compliance with the law and good privacy practices.
For questions or requests related to the processing of personal data, please contact us.
Rela contact person for matters relating to processing of personal data: