Data Protection Conditions

Invaru OÜ values ​​its customers' right to privacy and data protection. The purpose of this privacy statement is to provide an overview of how we collect and use customers 'personal information and what we do to ensure that customers' personal information is protected.

This privacy notice applies to the customer of Invaru OÜ, the user of the services, the visitor of our website www.invaru.ee or if the customer submits an inquiry to us by e-mail or the web.

1. Definitions

"Personal data" means any information relating to an identified or identifiable natural person. An identifiable natural person is a person who can be identified, directly or indirectly, by means of an identifier such as name, personal identification number, location information, network identifier; on the basis of one or more physical, physiological, genetic, mental, economic, cultural or social characteristics of a natural person.

"Processing of personal data" means an automated or non-automated act or set of acts performed on personal data or sets thereof, such as collecting, documenting, organizing, structuring, storing, adapting and modifying, querying, reading, using, transmitting, disseminating or otherwise making available, aggregating or merging, restricting, deleting or destroying.

"Controller" means a natural or legal person, public or local authority which decides on the purposes and means of the processing of personal data.

Authorized processor - a natural or legal person, public sector or local government agency that processes personal data on behalf of the controller and on the basis of a written agreement.

"Personal data breach" means a breach of the requirements which results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Customer - a natural person who buys or rents a product or service from an Invaru OÜ store or e-store, who buys or rents aids both at full price and on preferential terms from the state if the person is entitled to receive the discount.

2. The controller of personal data

Invaru OÜ is the responsible or authorized processor of personal data in various personal data processing processes. Invaru OÜ, as the chief processor of personal data, processes:

data of customers who buy or have bought products or services from the Invaru OÜ store or e-store;

data of customers who rent or have rented aids from Invaru OÜ;

details of the customers to whom the device maintenance service or transport service is or has been provided;

website visitor data.

Invaru OÜ uses authorized processors who process personal data only on the basis of an agreement entered into with Invaru OÜ and written instructions:

IT maintenance and development service provider;

A company dealing with clients indebted to Invaru OÜ;

Invaru OÜ security service provider for object protection;

Executor of the e-store payment transaction;

courier and delivery companies.

Invaru OÜ is an authorized processor and the Social Insurance Board is the chief processor if the customer wishes to buy or rent the aid with a state discount.

3. Personal data to be processed

Personal data - first and last name, personal identification code.

Contact details - address, telephone number, e-mail address.

Copy of a document - a copy of an identity document as an aid intended to be rented by a citizen of another country.

Bank account number - if necessary, if Invaru OÜ returns the overpaid amount to the customer.

E-shop details - first and last name, e-mail address, telephone number, postal address for sending the goods.

Logistics data - first and last name, address of the location of the aid, e-mail address and telephone number for the provision of the maintenance or transport service of the aid.

Preferential transaction data - Invaru OÜ collects data on behalf of the chief processor on behalf of the Social Insurance Board in accordance with the co-operation agreement with the Social Insurance Board, the Social Welfare Act and Regulation No. 74 of the Minister of Social Affairs of 21 December 2015 “List of Aids the conditions and procedure for granting exemptions and the details of the aid card '.

When completing the transaction, the customer's first and last name, personal identification code, address, telephone number, e-mail address are collected.

The client's data on disability and / or partial or absent work capacity, assistive device certificate and school certificate are requested by Invaru OÜ from the social security information system SKAIS2 and stored in digital form.

If necessary, the following data is collected from the customer for digital storage:

aid certificate or rehabilitation plan;

18-26. school-age learners;

Special decision issued by the Social Insurance Board;

other documents prescribed by law, power of attorney;

collection of employment information for persons aged 16 to retirement age with their oral consent (data on employment status, participation in a course or training, local government, contact details).

Data on a preferential transaction through a representative - if the state's preferential rental transaction has to be executed by the customer's representative, then in addition to the customer's data, the representative's data is also collected: first and last name, personal identification code, telephone number and / or e-mail address, address information. In the case of a sales transaction with preferential conditions by the state, the first and last name and personal identification code of the customer's representative are collected.

The processing of personal data collected about the client's representative arises from the cooperation agreement concluded with the Social Insurance Board, on the basis of which Invaru OÜ has the obligation to identify the entitled person's representative on the basis of an identity document, register the representative and, if necessary, make sure

4. Purpose and legal basis of the processing of personal data

The goal of Invaru OÜ is to engage in day-to-day business activities in the field of assistive devices by offering its customers the opportunity to purchase or rent assistive devices both in full and on preferential terms by the state if the latter is a person entitled to receive the discount.

Invaru OÜ processes the customer's personal data in order to perform and ensure the performance of the contract, to fulfill the obligation arising from law, on the basis of the legitimate interest of Invaru OÜ or on the basis of the customer's consent.

4.1. Processing of personal data for the purpose of fulfilling a contractual obligation

Personal data shall be processed for the purpose of performing and ensuring the performance of the contract, if this cannot be achieved by avoiding the processing of personal data.

4.2. Processing of personal data in order to fulfill an obligation arising from law

In order to fulfill the obligations arising from the law, the processing of personal data takes place when it is required of the company by the applicable law.