The controller of customer data is OÜ Capfield, registry code 14042628, Ahtri 9, 10151 Tallinn, phone 615 4170, e-mail firstname.lastname@example.org, which owns the Lasnamäe Prisma shopping centre.
Protection and Security of Personal Data
OÜ Capfield undertakes to protect the personal data of customers and users and their privacy. Our activities are in accordance with all relevant activities and the relevant legislation of the European Union and the laws of the Republic of Estonia, including the Regulation (EU) 2016/679 of the European Parliament and of the Council.
OÜ Capfield implements all precautionary measures (incl. administrative, technical and physical measures) to protect the collected personal data. Only authorised persons have access to change and process the data. Personal data is stored on servers located in the territory of a Member State of the European Union or in countries that have joined the European Economic Area.
Types of Personal Data and Purposes of Processing
We collect and process:
Personal data directly or indirectly related to a natural person, which may be a given name and surname, personal identification code, address, phone number, postal code, e-mail address. We collect and process personal data to fulfil agreements related to the person, contact them, send information related to marketing activities, or fulfil obligations arising from laws.
Non-personal data that cannot be linked to a specific person. Such data may include data on actions or activity on websites related to the Capfield (using cookies). It is collected for web statistics and provides better customer service.
Third Parties and Authorised Persons
We do not transfer, sell or disclose your data to third parties without your prior consent, except in cases provided by laws and regulations.
OÜ Capfield has the right to transfer personal data to companies belonging to the same group as OÜ Capfield.
Due to the obligation set out in the Accounting Act to have proof of transactions, personalised personal data is stored for up to 7 years after the last interaction with us. Interactions include responding to direct marketing through viewing or through clicking on a link.
Non-personalised technical data collected by websites and service environments will be stored indefinitely.
Reviewing Data, Correcting It and Termination of Processing It
You have the right to withdraw your consent at any time in accordance with the conditions set out in the Personal Data Protection Act. Under the conditions prescribed by the law, you have the right to receive information about your personal data and its processing, to request the correction of incorrect personal data, and, if processing of personal data is not permitted by law, to demand the termination of processing it, closure and deletion of your personal data.