Privacy Policy

1. In the Privacy Policy we describe the personal data we process and for what purposes. The controller of your personal data is Law Office Tetris, Pille 9/1-17, Tallinn. E-mail info@tetrisab.ee tel. 747 33 77
   
2. Personal data is any information about an identified or identifiable natural person.
   
3. We confirm that we process personal data responsibly and comply with the applicable legal framework, in particular the EU General Data Protection Regulation and the Personal Data Protection Act. We process personal data in accordance with the following principles: lawfulness, fairness, transparency, purposefulness, minimisation, accuracy, limitation of retention, reliability, confidentiality and data protection by default and by design. In particular, we process personal data in accordance with the provisions of § 41 of the Bar Association Act, which states that a lawyer is entitled to process the personal data of persons other than the client, including sensitive personal data, obtained under the contract or by law, without the consent of those persons, if this is necessary for the provision of legal services.
   
4. Processing of personal data is necessary:
   for the conclusion and performance of the contract;
   to avoid conflicts of interest;
   to comply with anti-money laundering requirements;
   to reply to requests sent to your e-mail address;
   manage your social media network:
   for the website to work;
   for the performance of the law firm’s own rights and obligations.
   
   For the purpose of concluding and performing the contract, we process
   the person’s given name, surname, personal identification number or date of birth, residential address, e-mail address, telephone number, bank account number, main activity, copy of identity document, photograph, nationality and country of residence, and payment details. We will keep personal data for a period of up to 5 years from the last communication, unless otherwise prescribed by law.
   
   To comply with anti-money laundering requirements, we process
   the person’s given name, surname, main activity, job title or role, work address, e-mail address, telephone number, copy of identity document, date of birth, personal identification number, photograph, nationality and country of residence, payment details, countries with which the person has a significant connection in the context of direct or anti-money laundering requirements, existence of a national background, source of income, shareholdings in companies, and links to the beneficiaries of companies. We will keep personal data for a period of up to 5 years from the last communication, unless otherwise prescribed by law.
   
   In order to respond to enquiries sent to our email address, we process
   the information you provide us: given name, surname (or username), email address, other contact information you provide (e.g. phone number, email address, etc.) and the message of the enquiry. We will retain personal data for up to two (2) years from the last communication, unless otherwise required by law.
   
   To manage our social media network, we process
   In order to administer our social network (Facebook account), we process your social network profile name, profile picture, comments written on your profile account and the text of any requests for information, and the data you provide therein. Such personal data will be retained by the social network until we delete our account, or you delete your account or request that we delete your data.
   
   To make the website work, we process
   To ensure the functioning of our website and for statistical data, we collect statistical/analytical cookies. These are files that collect information about how data subjects use the website, such as which webpages are most frequently visited and which error messages are encountered.
   
   These cookies do not generally collect information that identifies an individual. They are used to improve the functioning of the website and the provision of the service. Such information will be deleted (automatically overwritten) after 13 months, at the latest.
   
   For the law firm to exercise its own rights and obligations
   In order to comply with our own legal obligations (tax and accounting claims, Bar Association claims, etc.), we process invoices, related correspondence, and other information that may be necessary to defend our rights (for example, to present and substantiate our own claims). We will keep personal data for up to seven (7) years from the last communication, unless otherwise prescribed by law.
   
   You have the following rights regarding personal data:
   – The right to information and access to data, including a copy of your personal data;
   – The right to obtain confirmation as to whether your personal data is being processed and, if so, the right to request a copy;
   – The right to know what data we have collected, the purpose of the collection, whether and to whom the data will be disclosed and for how long the data will be kept. In this document we have provided this information;
   – The right to rectify inaccurate personal data. If your personal data is incorrect, you can request that it be corrected;
   – Right to erasure and/or restriction of processing. In certain cases, you have the right to request that personal data be erased, for example, if the processing is based solely on consent and you withdraw your consent.
   – The right to request the restriction of the processing of personal data arises, for example, if the processing of personal data is not permitted by law;
   – The right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and to have it transferred to another controller, unless this is technically impracticable or would adversely affect the rights and freedoms of others;
   – The rights in relation to automated processing and profiling give you the right to object at any time, on the basis of your individual situation, to the processing of personal data concerning you based on automated decisions/profiling and to request human intervention. You can also ask for an explanation of the logic behind the automated decision. We do not use automated processing or profiling that has a significant impact on you or your rights;
   – The right to object to or report a breach to the Data Protection Inspectorate and to obtain the Data Protection Inspectorate’s assessment of the processing. If you believe that we have breached data protection requirements or otherwise infringed upon your personal data when processing your personal data, please notify us immediately by emailing info@tetrisab.ee. You also have the right to submit a complaint/application to the Data Protection Inspectorate by email: info@aki.ee or Tatari 39 Tallinn 10319.

Our services are not directed to children and we do not knowingly (if we knowingly do so, we will follow the instructions of a parent or guardian) collect information about children, i.e. persons under the age of 13. In the event that we become aware that we have nevertheless collected personal data from or about a child, we will endeavour to stop the processing of such personal data.

This version of the Privacy Policy was published on 23 July 2021.