Privacy Policy

Any information about an identified or identifiable natural person is considered as personal data. This document describes how and why Soldera collects and uses personal data and provides information about the rights of data subjects. Soldera may use the personal data provided to it for the purposes described herein or for the purposes disclosed to the Member at the time the personal data was collected.

Soldera has the right to unilaterally amend this Privacy Policy if changes in Soldera’s personal data processing practices, data protection legislation, supervisory authorities’ instructions, judicial or supervisory authorities’ practices or other reasonable circumstances require such amendment. If these amendments have a material effect on the Member, we will notify the Member by e-mail within a reasonable time before the amendments take effect.

1. WHAT PERSONAL DATA ARE PROCESSED?

1.1. To provide the Services to the Member, Soldera may process the Member’s personal data based on Article 6(1)(b) or (c) of the General Data Protection Regulation (GDPR), depending on whether the Member is a data subject. Soldera collects the following personal data from the Member:

• Name and personal identification code of the Member’s representative;
• Contact information such as Member's email address and phone number.

2. FOR WHAT PURPOSE IS PERSONAL DATA PROCESSED?

2.1 In the absence of personal data, it is not possible to provide the Services to the Member. Soldera uses the Member’s personal data to:

• Perform its obligations arising from the Agreement entered into with the Member;
• Comply with applicable legal requirements;
• Inform the Member of changes to the Services;
• Ensure the security of the provision of the Services;
• Manage the Services and their internal procedures;
• Improve the Services;
• Measure or understand the effectiveness of marketing and to organise appropriate marketing campaigns;
• Combine information that Soldera receives from other sources with information provided by the Member. Soldera may use combined information to achieve the above purposes.

3. ON WHAT LEGAL BASIS IS PERSONAL DATA PROCESSED?

3.1. To use the data described in Chapter 1, Soldera relies on the following legal bases:

• Legitimate interest (Article 6(1)(f) of the GDPR). Soldera may process the Member’s data if Soldera has legitimate interest to do so.
• Performance of the Agreement (Article 6(1)(b) of the GDPR). Soldera may process the Member’s data to provide Services to the Member. 
• Performance of a legal obligation (Article 6(1)(c) of the GDPR). Soldera may process the Member’s data if Soldera is obligated to do so by law or the Agreement.

4. TO WHOM MAY PERSONAL DATA BE TRANSFERRED?

4.1. Service providers. For Soldera to be able to provide the Services in the best possible way, Soldera cooperates with various service providers (including parties related to Soldera). Soldera undertakes to share the Member’s personal data with such parties based on the purpose of sharing as little of the Member’s personal data as possible with service providers.

4.2. Legal obligations. Soldera may share the Member’s personal data if Soldera is legally obligated to do so.

4.3. Soldera’s advisers (e.g., attorneys, auditors, accountants). Soldera has the right to share the Member’s personal data with Soldera’s professional advisers for the purpose of providing services to Soldera, including representing Soldera in court actions, providing legal advice, auditing services. The legal basis for the transfer of data is the legitimate interest of Soldera. In a situation where the Member has breached the Agreement or otherwise violated the rights of Soldera, the interests and rights of the Member do not outweigh the legitimate interest of Soldera.

5. HOW AND FOR HOW LONG WILL PERSONAL DATA BE STORED?

5.1. Location. To ensure the protection of the Member’s data, personal data is stored in databases or databases of service providers physically located in the European Economic Area. 

5.2. Duration of storage. Soldera does not process the Member’s personal data for longer than is necessary for the purposes for which such data are processed, including the fulfilment of the data storage obligations laid down by legal acts and for the protection of its rights to resolve a dispute arising from the Agreement or to resolve a potential dispute. As a general rule, Soldera retains the Member’s personal data until the expiry of the limitation period for any potential claims arising from the Agreement (i.e. 10 years from the expiry of the Agreement), unless there is an express legal obligation provided for in legal acts to retain such personal data during a different term. 

6. WHAT ARE THE MEMBER'S RIGHTS TO PERSONAL DATA?

6.1 Right of access to data. The Member has the right to request access to the Member's personal data held by Soldera as the controller.

6.2 Right to rectification of data. The Member has the right to request Soldera to correct the Member's personal data if it is inaccurate or incomplete.

6.3 Right to receive data. The Member has the right to receive his/her personal data submitted to Soldera by the Member in a structured, publicly available format and machine-readable format. The Member has the right to demand that this data be transmitted to another data processor if the data has been collected with the consent of the Member, in accordance with the Agreement or automatically.

6.4 The right to withdraw your consent. The Member's consent is voluntary and the Member has the right to withdraw his or her consent at any time. In this case, Soldera may not be able to continue providing the Services and may result in a breach of the Member Agreement. As a general rule, Soldera does not process personal data on the basis of consent (as Soldera usually relies on another legal basis).

7. COMPLAINTS

7.1. If the Member has concerns about the use of personal data, enquiries or complaints may be addressed to Soldera by e-mail at support@soldera.org.

7.2. If the Member feels that Soldera has not adequately addressed questions or concerns or feels that the Member’s data protection rights have been violated, the Member may file a complaint with the Estonian Data Protection Inspectorate (www.aki.ee). Soldera asks to be contacted to find an appropriate solution to the problem before making a formal complaint.

8. APPLICABLE LAW

8.1. This Privacy Policy is governed by the laws of the Republic of Estonia.