Our website address is https://www.citysecurity.ee/
Data Controller
Company name: CitySecurity OÜ (brand name CITYSECURITY)
Address: Mustamäe tee 6b, 10621, Tallinn
Phone: +372 610 1000
Email: info@citysecurity.ee
Website: www.citysecurity.ee
These privacy terms are effective from 01.08.2021.
For CitySecurity OÜ (hereinafter CITYSECURITY), the protection of personal data is important, and we treat the data of our clients and partners with full seriousness. This privacy policy describes which personal data CITYSECURITY collects about you, for what purpose it is used, and who has access to it. Please read CITYSECURITY’s privacy policy in advance.
CITYSECURITY collects data about visits to the website www.citysecurity.ee and when any actions are carried out there.
It is possible to visit CITYSECURITY’s website without leaving identifiable personal data. CITYSECURITY collects the following personal data from users via the website in the following ways:
- User email address – when subscribing to the newsletter or via a landing page;
- User name and email address – when you have sent a message to CITYSECURITY;
- Website traffic statistics – through the use of Google Analytics and Facebook Pixel.
In processing personal data, CITYSECURITY follows applicable data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council (the GDPR) and the Estonian Personal Data Protection Act.
CITYSECURITY respects your rights to control your privacy.
Terminology and Definitions
CITYSECURITY (legal name CitySecurity OÜ) bases its privacy policy on the GDPR. The privacy policy applied by CITYSECURITY must be clear and understandable both to website visitors and to our contractual clients and partners. To ensure all parties understand their rights, we have explained the most important terms.
- Data subject: an identified or identifiable natural person whose data are processed.
- Personal data: any information relating to an identified or identifiable natural person (“data subject”).
- Identifiable natural person: a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, personal identification code, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- Processing of personal data: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
- Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
- Controller: a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
- Processor: a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
- Data set: any structured set of personal data from which data can be retrieved according to specific criteria, regardless of whether the set is centralized, decentralized, or dispersed on a functional or geographical basis.
- Recipient: a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with applicable data protection rules according to the purposes of the processing.
- Third party: a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
- “Consent” of the data subject: any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
What Personal Data Does CITYSECURITY Collect and How Is It Used?
Website Statistics
CITYSECURITY aims to make its website as easy to use as possible. To improve the user experience, the following information is stored when you visit CITYSECURITY’s website: browser type and version, device type and operating system, IP address, length and time of the website session, pages visited, and demographic information (preferred language, location). Data collected for website browsing statistics are used in anonymized form, and we do not associate them with any specific individual.
To collect and analyze the above data, CITYSECURITY uses automated tools such as Google Analytics and Facebook Pixel. More detailed information about the terms is described there.
Logs
The server hosting CITYSECURITY’s website may also store the requests you make to the server (the opened web address, the browser and device you use, IP address, access time). These data are used only for technical purposes to ensure the proper functioning and security of the website and to investigate possible security incidents.
What Are Cookies?
A cookie is a small text file that a website saves on your computer or mobile device when you visit websites.
How Does CITYSECURITY Use Cookies?
CITYSECURITY’s website uses cookies that make it possible to map and remember various activities, actions, and preferences related to you or your behavior on CITYSECURITY’s website. Cookies are primarily used to collect statistical data by tracking your preferences when visiting web pages. CITYSECURITY’s website also uses persistent cookies that are stored on your computer after closing the browser. Persistent cookies may remain on the computer for days, months, or years. Such cookies also help to target internet advertising to you.
Disabling and Deleting Cookies
As an internet user, you can disable or limit the storage of cookies on your computer yourself. You can also delete all cookies that have been stored on your computer so far. To do this, you need to change your personal browser privacy settings. Please note that if you do so, you may have to manually adjust certain preferences each time you visit the website, and some services and functionalities may not work.
Profiling
CITYSECURITY may use statistical data about website visitors to analyze trends and demographics of visitors to CITYSECURITY’s website, but individual profiles about visitors are not created.
Inquiries
If you wish to purchase a service from CITYSECURITY through the website or obtain more information about it, sharing personal data is necessary. Inquiries can be submitted by completing the relevant contact form or another inquiry form, or by sending an email to info@citysecurity.ee.
To respond to your inquiry, we collect the following personal data: your name, contact details (email, phone number), company name, and contact details. For the preparation of an offer, we use publicly available data in Estonia about legal entities and their representatives. CITYSECURITY employees have access to the aforementioned personal data. When submitting an inquiry via the contact form, the hosting partner providing CITYSECURITY’s website hosting services may also have access to the personal data. The website hosting provider is Zone Media OÜ (www.zone.ee) and the administrator is Suundup OÜ (www.koduleht.net).
Personal data collected from inquiries are retained as long as a signed client agreement is valid. If a client agreement is not signed, the personal data are retained only for statistical purposes (sales statistics) for 5 years from the submission of the inquiry. CITYSECURITY has a legitimate interest in compiling sales statistics for better planning of its business activities.
Providing Services to Clients
When CITYSECURITY provides a service to you or your company, personal data are also processed, and therefore sharing personal data with us is necessary.
We process the personal data of CITYSECURITY clients primarily for the preparation, conclusion, and performance of client agreements and offers. For this purpose, we process the following personal data: names of company representatives, contact details, positions, and data obtained from other inquiries about the company and its representatives, including payment capacity. We process the listed personal data for as long as the agreement is valid, and in addition to CITYSECURITY employees, our contracted accountant has access to them.
The legal basis for such processing of personal data is the processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. During the client relationship and for 7 years after its end, we process our clients’ personal data for statistical purposes (sales statistics) and for archiving client agreements. CITYSECURITY has a legitimate interest in compiling sales statistics to better plan its business activities and to retain documents related to its clients.
In the event of arrears, CITYSECURITY processes personal data until the debt is paid. If an invoice exceeds the payment term by more than 1 month, we publish the debt in public channels; if it exceeds 2 months, we forward the debt to court. CITYSECURITY has a legitimate interest in collecting debts from clients if debts arise for services provided.
We process clients’ personal data during the client relationship and process former clients’ personal data for 7 years after the end of the client relationship also for preparing direct marketing of services. CITYSECURITY has a legitimate interest in maintaining business relationships with its current and former clients.
Marketing
CITYSECURITY wishes to bring relevant news about CITYSECURITY products/services to clients who are interested in receiving direct marketing communications—for example, CITYSECURITY campaigns and offers and other information related to CITYSECURITY’s business sector.
By subscribing to CITYSECURITY’s newsletter on www.citysecurity.ee, we may send you in the future news by email about company activities, campaigns, changes in legal norms and standards in the sector, and upcoming events. To send marketing communications by email, we process your name and email address.
In certain cases, where the recipients are natural persons, we must obtain the data subject’s consent to send marketing communications by email. Consent does not expire. If you no longer wish to receive marketing messages, you can unsubscribe using the link at the end of the email (“remove from list” or “unsubscribe”).
CITYSECURITY may collect statistical data about your interaction with such communications when CITYSECURITY sends you an email—for example, whether you open the email, which links you click, which devices you use for this and their technical characteristics. Such information is saved in the contact history. Before sending a newsletter, we may assess our contacts’ behavior from data obtained from the contact history. This is necessary so we can send you more personalized messages by email. CITYSECURITY has a legitimate interest in understanding the needs and preferences of its contacts in order to provide them with more relevant information.
If you are in our contact database, we may process your name and email address or mobile phone number for the purpose of showing advertisements to you or to people similar to you (a “lookalike audience”) on Facebook, Google, LinkedIn, Instagram. We process your personal data for these purposes for a maximum of 5 years from the date your contact was added to the database.
CITYSECURITY has a legitimate interest in sending marketing communications to its contacts in order to maintain business relationships.
For the purposes of processing personal data listed in this section, CITYSECURITY employees or contractual partners have access to the data. Our partners providing IT services and accounting services may also have access to personal data. We apply appropriate measures to ensure the security of personal data.
Your Rights and How to Exercise Them
By contacting CITYSECURITY via email at info@citysecurity.ee, you can exercise the following rights:
- the right to access personal data concerning you;
- the right to rectification of personal data;
- the right to erasure of personal data;
- the right not to be subject to a decision based solely on automated processing;
- the right to withdraw consent.
You may exercise your rights in accordance with the conditions arising from the GDPR and other local legislation. If you believe your privacy has been violated, please contact us first by writing to info@citysecurity.ee. If no agreement is reached, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate.
Privacy Policy Terms and Changes
By using CITYSECURITY’s website, you confirm you have read and agree to these principles and terms. We reserve the right to change the general terms of the privacy policy if necessary, notifying all related persons by email or phone.
If you have questions regarding data processing, please contact us by sending an inquiry to info@citysecurity.ee.