1

PROCESSING OF PERSONAL DATA

1

PROCESSING OF PERSONAL DATA

1

PROCESSING OF PERSONAL DATA

PROCESSING OF PERSONAL DATA

GENERAL PRINCIPLES OF PROCESSING PERSONAL DATA AT OÜ TARTU VEEKESKUS

The general principles concern the collection, processing, and use of the personal data of customers by OÜ Tartu Veekeskus (hereinafter ‘Veekeskus’) in the provision of services to customers.

Collection and processing of personal data

The controller of the personal data is OÜ Tartu Veekeskus, registry code 10738741, address Turu 10, Tartu, City of Tartu, 51014.

 

Personal data in the provisions of services: 

– Data (first name and surname, email address, payment details) received from the holders of the monthly and 10-time cards, loyalty programme members, the holders of magnetic cards for legal persons, gold and silver cards, and athletes’ monthly cards (based on ID cards).

– When registering for Sauna Yoga, children’s and adult’s swimming lessons (the given name and surname, telephone number, email address of the adult/child, payment data).

– For birthdays, groups, and other bookings (given name and surname, name and age of the child, phone number, email address of the parent, payment details).

We receive this personal data directly from the customer when they make a booking or submit a request via our website, by telephone, or by email, or when they purchase services directly from us when they visit us.

We also receive customer data from contractual partners/businesses.

The purposes of the collection of personal data are, together or separately, mainly to provide the desired service to the customer, to give a discount, to identify the person, to transmit important information about the service, to carry out marketing activities (e.g. making personalised offers based on their consent, offering additional services) as well as to fulfil the obligations imposed on us by the laws regulating our activities.

The scope of personal data collected depends on the specific service. More detailed information about the collected personal data can be found on the website of Veekeskus in the descriptions of the corresponding services or in the signed contracts (when providing services to legal persons).

We collect payment data for customers who pay for services by bank transfer to fulfil accounting obligations when processing payments for participation in trainings. We retain payment data for seven years in accordance with the Accounting Act.

The personal data collected will be used for marketing purposes with the consent of the customer.

 

 

Rights of the customer

The customer has the right to receive information about what personal data Veekeskus has collected about them and how it has been processed. The customer can request to change (rectify, supplement), erase, and restrict the processing of their data and/or the data of their child/ward.

The customer can withdraw their consent to the processing of personal data.

A customer receiving the newsletter who no longer wants to receive it can unsubscribe at any time by writing to the email address info@aurakeskus.ee or by clicking on the unsubscription link at the end of the newsletter.

If the customer finds that the processing of their personal data by Veekeskus is not in accordance with the current legislation, the customer has the right to file a complaint with the Data Protection Inspectorate or go to court.

Protection and retention of personal data

In addition to Veekeskus, authorised parties providing services to Veekeskus (e.g. software development and maintenance service providers, server and website service providers, provider of the drowning detection system management service) may have access to customer data. In such cases, the authorised persons are bound by contracts and must keep the personal data disclosed to them confidential.

If necessary, law and order enforcement organisations (e.g. the Police and Border Guard Board) also have access to the data of the customers on the basis of legislation.

Veekeskus retains data for as long as it is necessary to provide the service, to protect its rights, and as long as it is required by legislation.

Use of surveillance equipment

Veekeskus uses video surveillance as a security measure for the prevention of threats to the safety of persons, to ensure security, to respond to emergencies, and to protect property. Veekeskus uses standard cameras to monitor the yard, entrance areas, corridors, pool areas, and the general area of the saunas (including the outdoor terrace).

A drowning detection system is used in the sports pool of Veekeskus as a preventive safety measure to identify life-threatening situations and to respond to emergency situations. The underwater cameras of the drowning detection system that are located in the sports pool are used to prevent preventing life-threatening situations, such as drowning.

There is no real-time 24/7 manned monitoring of data subjects. The sound-free camera image of public areas is recorded and stored for 30 calendar days. The sound-free camera image captured by the drowning detection system is recorded and stored for 72 hours. If an emergency is detected by the system, the specific emergency recordings are kept for 30 days. The purpose of keeping the recordings is to identify the individuals involved in the accidents or the perpetrators of offences and to establish the circumstances of the incident.

Veekeskus processes the materials of the video surveillance systems on the basis of legitimate interest.

When processing data obtained with the help of cameras, Veekeskus uses security measures that protect the collected data from unintentional or unauthorised monitoring, copying, modification, transfer, and deletion. Persons designated by the manager of Veekeskus have access to the recordings of the cameras on the basis of their position. Existing recordings may only be transmitted or accessed outside Veekeskus if there is a legal basis (e.g. to the police).

Veekeskus uses the service of the authorised processor AngelEye srl (https://www.angeleye.tech/en/) as the management service provider of the drowning detection system.

If you have any questions related to the cameras, call +372 7 300 280 or send an email to info@aurakeskus.ee.

Changing the general principles of processing personal data

Veekeskus reserves the right to amend these general principles and the relevant information will be posted on the website of Veekeskus. The general principles in force can always be found on the website of Veekeskus.