Privaatsuspoliitika

Privacy policy

Last updated 3 November 2022

Processing of personal data and procedure for the use of cookies.

1. Personal data controller

Joint controllers of personal data for the ARKAADER.ee portal are:

Rahvusarhiiv, Nooruse 3, Tartu 50411, Registrikood 70001946; ja

Sihtasutus Eesti Filmi Instituut, Uus 3, Tallinn 10111, Registrikood 90000357.

2. General terms and conditions of service

When an account is created on the ARKAADER.ee portal:

  • Name
  • Email address
  • Password chosen by you
  • If you are using your Google or Facebook account to register your account, the identifiers for these services, respectively
  • Date of birth (optional)
  • Status of consent to marketing offers by the ARKAADER.ee portal
Data related to the use of the ARKAADER.ee portal:
  • Works (films) viewed/purchased
  • Data collected by means of cookies during the use of the portal (either for the functioning of the portal’s functionalities or for the ascertainment of use preferences, respectively)
  • Data related to payments (the payment service is a separate service for which data processing is governed by law and the related data are processed by the payment service provider)
  • Data generated when the user contacts the portal (letters sent to customer support and a telephone number in the event of a telephone call)

3. For what purpose are personal data processed?

Personal data related to the account are processed for the purpose of administering the account.

Personal data, such as email, telephone number, customer’s name, are processed in order to handle any matters related to the provision of services (customer support).

Statistics about works (films) viewed/purchased are processed for the purposes of general statistics about the use of works about the logged-in user and additionally also for the ascertainment of the user preferences and the creation of recommendations and categories by the portal.

The IP-address or other online identifiers of the portal user are processed for the compilation of portal use statistics.

4. Legal basis

The National Archives of Estonia performs functions assigned to it under the Archives Act and other applicable legislation, which include, among other things, making archived works available. The processing of personal data needed for the achievement of these objectives is based on the requirements set down in the legislation.

The Estonian Film Institute Foundation processes personal data based on the terms of conditions of use accepted by the user when creating an account and/or using the ARKAADER.ee portal (contractual basis) and additionally a legitimate interest in collecting portal statistics. Communications transmitted and cookies used for marketing purposes are based on the user’s prior consent.

Data processing needed for accounting, the settlement of consumer disputes and effecting payments is done based on statutory obligations.

5. Recipients to whom personal data are transmitted

Personal data are maintained on servers located within the territory of a member state of the European Union or European Economic Area. Data may be transmitted to states whose data protection level has been assessed by the European Commission to be sufficient and to US companies that have ensured sufficient personal data protection measures contractually (standard contractual clauses on data protection).

Access to personal data is available for employees involved in administering the portal, who are able to review personal data in order to resolve technical issues related to use and to provide a customer support service.

Personal data may be transmitted to information technology service providers if this is necessary in order to provide the functionality of the portal or data hosting.

6. Security and access to data

The portal implements appropriate physical, organisational and information technology security measures in order to protect personal data from accidental or unlawful destruction, loss, modification or unauthorised access and disclosure.

7. Rights related to personal data

Rights related to personal data may be exercised via customer support (tugi@arkaader.ee).

Rights related to personal data may be used only if the identity of the person has been established by us. If the portal is being used such that the identity of the user as a particular natural person is not established (is not identified) by us, the rights connected to the identified person cannot be used.

Right of access to data. The person has the right to know who is processing what kind of personal data and how and to receive a copy of their data.

Transfer of data. The person has the right to request personal data of a certain type collected about them in a machine-readable form for transmission to another service provider.

Deletion of data / right to be forgotten. The person has the right to ask for their personal data to be deleted if they no longer wish for them to be processed and if the data controller has no legitimate reason for using them.

Restriction of data processing / submission of an objection. Under certain circumstances, the person has the right to restrict or forbid the processing of personal data. Also, if there a compelling reason, there is an entitlement to present objections to the processing of one’s data in the event of their being processed on the basis of a legitimate interest.

Correction of data. The person has the right to correct or supplement their personal data if they are inaccurate.

Right to withdraw consent. If the person has provided their consents for the processing of their personal data, they always have the right to withdraw them.

Queries in relation to personal data are answered by us within 30 days.

8. Settlement of disputes

In relation to the processing of personal data, any disputes are settled and questions are answered via customer support (tugi@arkaader.ee).

The supervisory authority is the Estonian Data Protection Inspectorate. The person always has the right to contact or file a complaint with the Estonian Data Protection Inspectorate (info@aki.ee).

9. Storage of personal data

Personal data processed for the performance of statutory functions are stored according to the terms stipulated in the specific piece of legislation.

Additionally, personal data are stored in accordance with the statutory requirements (for example, data needed for accounting, 7 years + current financial year).

History of queries sent via the contact form is stored for three years.

Data related to the user account are stored for three years after the deletion of the account.

Data processed for the purpose of portal statistics are stored as personalised until the deletion of the account.

Personal data processed on the basis of a consent are stored until the withdrawal of the consent.

10. Cookies

We use cookies on our portal. Cookies are small files uploaded to the user’s device when the portal is visited. The purpose for the use of cookies is to enable the functionalities of the portal, increase the convenience of the use of the portal and enable statistics about the use and users of the portal.

The user may set their preferences regarding the use of cookies in the cookie window of ARKAADER.ee.

The user of the portal also has the option of setting its web browser to notify about, reject or delete cookies.

11. Changes

The published privacy policy is amended in accordance with the amendments and updates implemented on the ARKAADER.ee portal. Always the current version is published, and the user is advised to review it periodically. The user is notified by us about any significant amendments also via email.

Last updated 3 November 2022