Processing of data - GDPR

USE OF PERSONAL DATA
These Privacy Terms (hereinafter the Terms) set out the procedure for processing the personal data of the data subject, including personal data processed by GoAndRun OÜ (hereinafter GoAndRun OÜ), the bases, principles and purposes of personal data processing, GoAndRun OÜ data subject's rights and obligations in processing personal data and security measures.
The chief processor of personal data is GoAndRun OÜ, registry code 14946057, address Laki 16, Tallinn, Harju county, 10621, e-mail: info@goandrun.eu.
The data subject is a natural person, including a natural person's representative of a legal person, whose personal data is processed by GoAndRun OÜ (hereinafter the Data Subject).
GoAndRun OÜ has appointed a contact person responsible for personal data protection issues: Olavi Valner, e-mail: info@goandrun.eu.
GoAndRun OÜ may authorize other persons or institutions (hereinafter Authorized Processor) to process the Data Subject's personal data, provided that GoAndRun OÜ has entered into an agreement with such Authorized Processor, according to which the Authorized Processor is obliged to keep processed personal data confidential and ensure compliance with legal obligations. The names and contact details of the authorized processors shall be made available by GoAndRun OÜ to the Data Subject on the basis of the Data Subject's request.

Purpose and legal basis of the processing of personal data
GoAndRun OÜ processes (including collects, stores and stores) personal data for the following purposes:
1. For the performance of the contract concluded with the data subject;
2. To provide goods and services to the data subject;
3. To compile internal sales statistics of GoAndRun OÜ;
4. to conduct marketing and consumer habits and customer satisfaction surveys;
5. for direct marketing;
6. other actions necessary for the achievement of the objectives of the agreement entered into by GoAndRun OÜ with the Data Subject, including the development and improvement of the quality of the goods and services offered by GoAndRun OÜ.
The bases for the processing of personal data are:
1. Consent of the data subject;
2. laws and other legal acts.
3. GoAndRun OÜ retains the personal data of the Data Subject until the fulfillment of the obligations arising from the agreement between the Data Subject and GoAndRun OÜ or the termination of the contractual relationship or until the termination of the data retention obligation of GoAndRun OÜ arising from law.
Personal data being processed
GoAndRun OÜ processes, among other things, the following personal data of the Data Subject:
1. Data subject's data (name, date of birth);
2. Contact details of the data subject (name, e-mail, telephone number);
3. Gender, nationality of the data subject;
4. Club and entrepreneurial affiliation of the data subject;
5. Data subject's preferences for competitions and distances;
6. other data of the Data Subject obtained in the course of pre-contractual negotiations and / or performance of the concluded agreement between the Data Subject and GoAndRun OÜ.
The Data Subject gives consent both for the processing of the Data Subject's personal data that GoAndRun OÜ has received from the Data Subject itself, as well as for the Data Subject's personal data that GoAndRun OÜ has received from third parties.
The Data Subject is obliged to immediately inform GoAndRun OÜ of any changes in personal data compared to the personal data submitted by the Data Subject in the agreements concluded between the Data Subject and GoAndRun OÜ or in the documents submitted to GoAndRun OÜ.

Storage and retention of personal data
1. GoAndRun OÜ stores and stores all personal data submitted by the Data Subject under conditions that comply with the principles and requirements set out in these Conditions and relevant legislation.
2. GoAndRun OÜ also has the right to record all orders given by means of communication (eg telephone, e-mail), as well as other operations performed by the Data Subject, and if necessary to use these recordings to certify and / or reproduce orders or other operations and other To fulfill the purposes of processing personal data set out in the Terms.
Transfer of data to third parties
GoAndRun OÜ may transfer the personal data of the Data Subject to the following third parties:
1. Cooperation and business partners of GoAndRun OÜ (including the organizer of a specific competition);
2. Lawyers and other advisors related to the activities of GoAndRun OÜ;
3. other persons to whom GoAndRun OÜ may or is obliged to disclose the personal data of the Data Subject to GoAndRun OÜ in order to fulfill the obligations arising from law.
4. GoAndRun OÜ shall not transfer personal data concerning the Data Subject to any third party not specified in the consent, unless such right or obligation arises for GoAndRun OÜ by law.
5. GoAndRun OÜ requires the persons to whom personal data is transferred or disclosed on the basis of the Terms and Conditions to comply with the security and confidentiality rules set by GoAndRun OÜ.

Rights of the data subject
1. The data subject shall have the right at any time to be informed of the personal data being processed and of their use, or to have them changed.
2. At the respective request of the Data Subject, GoAndRun OÜ undertakes to notify the Data Subject of the Data Subject's personal data and information concerning their processing, including the purposes of the processing; the composition and sources of personal data; third parties or categories of third parties to whom the transfer of personal data is authorized; third parties to whom his personal data have been transferred; the name of the processor of personal data or his or her representative and the address and other contact details of the processor of personal data. GoAndRun OÜ undertakes to provide the Data Subject with information and to issue the required personal data or to substantiate the refusal to issue data or to provide information within five (5) working days from the receipt of the relevant application.
3. The data subject shall have the right at any time to request the immediate rectification of inaccurate personal data concerning him or her, including the rectification of incomplete personal data.
4. The data subject has the right to receive personal data concerning him / her that he / she has submitted to GoAndRun OÜ in a structured, publicly available format and in machine-readable form, and the right to transfer this data to another controller without GoAndRun OÜ preventing it.
5. The data subject shall have the right at any time to prohibit the processing of his or her data for the purpose of research into consumer habits or direct sales and the transfer of data to third parties who wish to use them for the purpose of research or consumer sales.
6. The data subject has the right to withdraw his or her consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before withdrawal, nor does withdrawal of consent affect the processing of personal data of the Data Subject in so far as the processing of personal data takes place on the basis of law.
7. The data subject has the right to demand the restriction or termination of the processing of his or her personal data, the termination of the disclosure of or access to personal data or the deletion or closure of collected personal data if the processing of personal data is not permitted by law.

8. The data subject has the right to demand that GoAndRun OÜ restrict the processing of personal data, inter alia, if:
The data subject disputes the accuracy of the personal data, for a period that allows GoAndRun OÜ to verify the accuracy of the personal data;
the processing of personal data is illegal, but the Data Subject does not request the deletion of personal data, but the restriction of its use;
GoAndRun OÜ no longer needs personal data for the purposes of processing, but they are necessary for the Data Subject to prepare, submit or protect legal claims.
9. The data subject has the right to demand that GoAndRun OÜ delete personal data concerning him or her without undue delay and GoAndRun OÜ is obliged to delete personal data without unreasonable delay, inter alia, if:
personal data are no longer needed for the purpose for which they were collected or otherwise processed;
The data subject withdraws the consent given for processing and there is no other legal basis for processing personal data;
personal data have been processed illegally;
personal data must be deleted in order to fulfill a legal obligation under Union or Member State law applicable to GoAndRun OÜ.
10. GoAndRun OÜ undertakes to immediately notify third parties from whom personal data was received or to whom personal data was transferred if it is technically possible and does not entail disproportionately high costs if the Data Subject corrects, deletes or restricts the processing of personal data.
11. The data subject undertakes to submit all requests and claims concerning personal data electronically digitally signed at the e-mail address info@goandrun.eu or handwritten at Laki 16, Tallinn, Harjumaa, 10621.

Obligations of GoAndRun OÜ
1. GoAndRun OÜ is obliged to process personal data, including collecting, transmitting and storing personal data, in accordance with these Terms and Conditions and other rules of GoAndRun OÜ related to personal data processing and the Personal Data Protection Act and Regulation (EU) No 2016/679 of the European Parliament and Council and other relevant legislation. , purposes and conditions.
Personal data protection measures
1. GoAndRun OÜ observes the principles of personal data protection in its activities and makes every effort to ensure that the processing of personal data, including collection, transmission and storage of personal data, takes place in a manner that ensures security and confidentiality of personal data according to the nature of personal data. and organizational measures.
2. In the event of a personal data breach that is likely to pose a serious threat to the Data Subject's rights and freedoms, GoAndRun OÜ undertakes to notify the Data Subject without undue delay of the personal breach, including the nature of the breach, possible consequences and measures taken. as well as inform the Data Subject of the contact details of the person with the relevant information.
Protection of data subjects' rights
If the Data Subject finds that GoAndRun OÜ has violated his or her rights by processing his or her personal data, he or she has the right to apply to GoAndRun OÜ for termination of the violation.
In addition, the data subject has the right to apply to the Data Protection Inspectorate (address: Väike-Ameerika 19, Tallinn 10129, telephone: 627 4135, e-mail: info@aki.ee) or a competent court at any time in case of violation of his or her rights.
The data subject has the right to contact GoAndRun OÜ, registry code 14946057, address Laki 16, Tallinn, Harju county, 10621, e-mail: info@goandrun.eu with questions related to the processing of personal data.
Final provisions
GoAndRun OÜ has the right to unilaterally amend these Terms and Conditions taking into account the requirements arising from the relevant legislation.