Data Protection Policy

Interreg Estonia-Latvia is committed to the protection of personal data. We do our best to process your personal data in conformity with the General Data Protection Regulation. This data protection policy explains how we use the personal data we collect from you when you engage with our programme, for example by using our website, joining our events or implementing the projects approved by the programme.

The privacy policy has been compiled in accordance with Article 12 of the EU General Data Protection Regulation 2016/679 to fulfill the requirements of the controller and to inform data subjects about the principles and rights of processing personal data.
  1. Personal data and processing

1.1. Personal data is considered to be any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.2. Special categories of personal data are personal data that includes racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data used to uniquely identify natural persons, health data or data on sexual and sexual orientation of a natural person.

1.3. We process your personal information if:

  • you visit our web site;
  • you participate in our organized events;
  • joint electronic monitoring system (JEMS) contains your personal data (first name, last name, username, password, email, title, etc.);
  • you participate in surveys, studies;
  • you are applying for grants.

1.4. Source of the personal data: data subject.

1.5. Purposes of processing: contact information, JEMS user profile, management, reporting.

1.6. Legal basis for processing: legitimate interest on data controller.

1.7. Period of processing: 4 years and 6 months after the end date of the project. For the projects with state aid – until 31.12.2030.

  1. Principles for the processing of personal data

2.1. The processing of personal data is legal, just and transparent. Personal data are collected and processed in a targeted and minimal way. Personal data is correct and it is guaranteed to be corrected.

2.2. Personal data is only stored for a specified period and then deleted.

2.3. The processing of personal data involves the use of security measures to protect against unauthorized access and accidental loss.

2.4. Under no circumstances are the collected data sold or passed on to third parties for other reasons.

  1. Rights of a natural person

3.1. Information about personal data

3.1.1. A natural person has the right to know whether or not personal data relating to him/her are processed. In order to get acquainted, we advise you to submit an application to which we will respond within a maximum of 1 month. If it is not possible to submit data within 1 month, we will inform you and extend the deadline for replying.

3.1.2. In the case of requests for information concerning unreasonable or excessive natural persons, we have the right to demand a reasonable fee or refusal to issue the data.

3.1.3. We refuse to comply, if its execution could harm the rights or freedoms of another person.

3.2. Rectification of personal data

A natural person has the right to request the correction and updating of data if they are faulty or incomplete.

3.3. Notification of correction, deletion or limitation of personal data processing of personal data

We will provide information on the restriction of the rectification, erasure or processing of personal data to anyone to whom personal data has been disclosed, unless it proves impossible or requires disproportionate effort.

3.4. Statement of objection

A natural person has the right to object at any time to the processing of personal data for the performance of a task in the public interest or for the controller to exercise public power or to exercise a legitimate interest.

3.5. Restricting the processing of personal data

A natural person has the right to request the restriction of the processing of personal data, for example, when we evaluate the application of the requirement to delete personal data.

3.6. Withdrawal of consent

A natural person has the right to withdraw at any time the consent for the processing of personal data.

3.7. Erasure of personal data

3.7.1. A natural person has the right to demand the deletion of his or her personal data.

3.7.2. We will erase your personal information if:

  1. the natural person withdraws the consent given for the processing of the data;
  2. personal data is no longer needed for this purpose;
  3. there is no legal basis for data processing;
  4. personal data has been processed illegally;
  5. there is a need to fulfill a legal obligation.
  6. If personal data is processed on a legal basis that does not allow data to be erased, data will not be deleted.

  1. Information

We do not disclose personal data in JEMS and other data carriers

  1. Violations of the processing of personal data

5.1. We will record any personal data breach, including the circumstances of the violation, the impact and the measures taken.

5.2. We notify the Data Protection Authority without undue delay and, if possible within 72 hours after it becomes known, except when the violation does not represent danger to the rights and freedoms of natural persons.

5.3. In the event of a high risk, the data subject is informed of the rights and freedoms of the data subject.

5.4. The Data Protection Authority may assess the need for notifying data subjects.

  1. Contact information

For further information on the processing of personal data, please contact Data Protection Officer: [email protected].

  1. Filing a complaint

7.1. If you are not satisfied with the information provided by the Data Protection Officer, please contact:

State Shared Service Centre Lõkke 4 10122 TALLINN

Phone: 663 8200

E-mail: [email protected]

WWW: https://www.rtk.ee

7.2. A natural person has the right to contact the Data Protection Authority, if he/she considers that the processing of personal data violates his/her rights:

Estonian Data Protection Inspectorate 39 Tatari St., 10134 Tallinn

Phone: +372 627 4135

E-mail: [email protected] WWW: www.aki.ee/en

  1. Publication, updating and modification

Privacy policy is published, updates and changes are announced on the website https://www.estlat.eu.

Last updated: 01.11.2022

open graph imagesearch block image