Contact details of the Data Protection Officer
Internal Data Protection Officer of the Controller:
E-mail:
[email protected]
This privacy policy describes the collection, use, disclosure, storage, and protection of your
personal data. It applies to any web page of voodi.ee where this Privacy Policy is referenced in the
footer and to any application, service, or tool where this Privacy Policy is referenced, regardless
of how you access or use the Services, including access via mobile devices.
By using our websites and by accessing our advertising services and our services, you accept this
Privacy Policy and expressly consent to the collection, use, storage, and protection of your
personal data as described herein.
We collect and store personal data only to the extent that this is absolutely necessary. When
collecting, processing, using, and disclosing your personal data, we comply with the European
General Data Protection Regulation (EU-GDPR). Below, you will be informed about what kind of data is
collected and for what purpose it is collected:
Security of your data
Your personal data made available to us is secured by taking all technical and organizational
security measures so that it is inaccessible to unauthorized third parties. When sending very
sensitive data or information, it is recommended to use the postal service, as complete data
security cannot be guaranteed via e-mail.
1 Handling of customer data
Personal data, in particular name, address, phone number, e-mail address, and pictures, are only
collected and processed if you provide this information voluntarily, e.g., in the context of an
inquiry, advertisement, or another commissioning. The data is stored in our customer systems, which
are not accessible to unauthorized third parties. We will only transfer this data insofar as it is
necessary for the fulfillment of our contractually owed services. For any further use of personal
data and the collection of additional information, the consent of the data subject is regularly
required.
Our websites are partially linked to each other so that the advertising publication of your data
made available to us takes place automatically on other websites of voodi.ee or sub-sites.
Legal basis for the processing
All customer data is collected and stored on the basis of your consent within the meaning of Art. 6
para. 1, lit. a) GDPR in conjunction with Art. 9 para. 1 and Art. 9 para. 2 lit. a) GDPR. This data
is also processed in the context of the fulfillment of our contractually owed services within the
meaning of Art. 6 para. 1, lit b) GDPR. An exception applies in those cases in which the processing
of the data is permitted by legal regulations.
Process of consent
The Customer's consent to the processing of data for contractual purposes shall be deemed to have
been given as soon as a check mark is placed in the box of the consent form. Within the scope of
this process, we store, in particular, your master data (name, address, e-mail address, phone
number, pictures) as well as further specified customer data about your person. In addition, we
automatically have access to the following data, which, however, is not stored by us unless we need
it to fulfill our contractually owed service:
• Your browser data (browser type and version)
• MAC Address
• IP Address
• Operating system and device information as well as other derivable user data
According to Art. 6 para. 1, lit a) GDPR, your consent is required to lawfully process personal
data. Unless you give us the required consent based on the process described above, we store your
personal data at least on the basis of Art. 6 para.1 lit b) GDPR to fulfill our contractual
obligations.
Duration of data storage
After the contract has been fully executed, which usually ends after the advertising-related ad
placement, we will remove the data made available to the public from our website. In our customer
system, data is stored only as long as it is required for its contractual purpose. Due to recurring
follow-up orders, the data will be stored in our operational customer system until the time of the
revocation of your consent.
Your data will also be made available on technically linked third-party websites or sub-sites of
voodi.ee until the time of your revocation against publication on these sites.
We cannot guarantee complete data security from the time your data is published. In particular, due
to the numerous calls to our website by third parties, we cannot exclude the possibility that the
information you made available (in particular address, phone number, names, pictures, etc.) may be
copied, reproduced, stored, or transferred.
Objection options
Unless there are necessary reasons in connection with a business transaction, you may at any time
revoke the previously given consent of your personal data storage with immediate effect in writing
(e.g., via e-mail or by fax) (according to Art. 21 GDPR). To ensure data security for our customers,
it is necessary in the event of revocation that the revoking person authenticates himself using
meaningful proof of identification. Your personal data (phone number, e-mail address, place of
residence, pictures, advertisement texts) will then be deleted immediately from our customer system
- with regard to the retention periods under tax and commercial law.
You can also notify us in writing of important changes to your data. In accordance with applicable
law, you can also ask us at any time whether and what personal data we have stored about you. You
will receive a corresponding notification on request.
2 Handling of access data and server log files
Each time you access our website and each time you retrieve the content stored on our website, your
browser transmits data that is automatically recorded by our system.
Legal basis for the processing
The legal basis for the collection and temporary storage of the data and the log files is Art. 6
para. 1 lit. f) GDPR. By visiting and using our website, you consent to the data collection and
temporary storage.
Data transmission and logging
Each time you access/call up our website, the following data is transmitted and automatically
recorded:
• Browser type and version
• Operating system used
• IP address of the requesting computer
• Access date/time
• Amount of data transferred
• Message whether the access/retrieval was successful
The data is stored in the log files of our system. This data is not stored together with other
personal data of the user.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website
to the user's computer. For this purpose, the user's IP address must remain stored for the duration
of the session.
The storage of this data also serves statistical purposes in individual cases. Any other use or
disclosure to third parties, for commercial or non-commercial purposes, will not take place. We
reserve the right to check the listed data subsequently if there is a suspicion of illegal use of
our offer.
The log files are stored to ensure the functionality of the website. In addition, we use the data to
optimize the website and to ensure the security of our information technology systems. These
purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f
GDPR.
Duration of data storage
The access data is deleted as soon as it is no longer required to achieve the purpose for which it
was collected. In the case of the collection of data for the provision of the website, this is the
case when the respective session has ended.
In the case of data storage in log files, this is the case after 90 days at the latest. Storage
beyond this is possible. In this case, the IP addresses of the users are alienated so that an
assignment of the calling client is no longer possible.
Objection and removal options
The collection of data and the storage of data in log files is mandatory for the operation of the
website. Consequently, there is no option for the user to object.
3 Handling of registrations, contact forms, and contributions
If there is a contact form on our website or if you have the option of registering or creating a
user account, the personal data you provide in the entry mask will be transmitted to us and stored
as part of such a process (in addition to the automatically collected technical data). These are
usually
• First and last name (if specified)
• Username
• Pseudonym/Nickname
• Phone number (if provided)
• E-mail address (if provided)
• other personal data that must be provided in the context of applications, log-in areas, order
forms, or registrations
The data will be used exclusively for the processing of the conversation. In principle, the data
will only be stored by voodi.ee and will not be disclosed to third parties. Insofar as it concerns
user inquiries relating to advertisements of an advertiser, the personal data provided within the
framework of the contact form, including the message text, will be forwarded to this advertiser for
the purpose of establishing contact.
We will transfer their data securely to the advertisers and will not share it with any other third
parties without your prior consent. Please also note the respective privacy policies of the
advertisers, as we cannot influence whether and for what purpose your data is stored by third
parties.
Legal basis for the processing
The legal basis for the processing of the data, if the user has given his consent, is Art. 6 para. 1
lit. a) GDPR.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6
para. 1 lit. f) GDPR. If the e-mail contact aims at the conclusion of a contract, the additional
legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.
Purpose of data processing
The processing of personal data from the entry mask serves us solely to process the contact. In the
case of contact via e-mail, this also constitutes the necessary legitimate interest in processing
the data.
The personal data processed in the context of log-ins, registrations, or when using our contact form
during the submission process serve to prevent misuse of the contact form and to ensure the security
of our information technology systems. The storage of the IP address is solely for purposes of legal
requirements for us as the operator of the website. Your IP address must be verifiable for us so
that it can be checked in criminal cases. Furthermore, the collection of this data is necessary so
that we can offer our services at all.
Furthermore, your registration data will only be used for internal company analysis purposes, e.g.,
for statistical evaluation of user behavior. Without your consent, we will, of course, not disclose
this data to third parties unless we are required to do so by law or the disclosure serves to
clarify a legal violation.
Submitted online comments or contributions are published either with the registered clear name
(first and last name) or a pseudonym (nickname) selected by the comment author. Your full name is
therefore only visible to other users if you enter it as a user name during registration. If you do
not wish your real name to be published, it is advisable to choose a pseudonym.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was
collected. This is usually the case for the data collected during the registration process when the
registration on our website is cancelled or modified.
Even after the registration process, there may be a need to store personal data of the contractual
partner to comply with legal obligations.
Objection options
The user is entitled to object to the use of personal data at any time (according to Art. 21 GDPR).
This includes in particular name, e-mail address, and other personal user data. For this purpose, it
is sufficient to send an e-mail to the e-mail address stated in the imprint or to the Data
Protection Officer:
E-Mail:
[email protected]
All personal data stored in the course of contacting us will be deleted in this case. In such a
case, the conversation cannot be continued.
4 Third-party content and services
On this website, you will also receive offers or services from third parties. As soon as you use
these third-party services via our website, your IP address is recorded for technical reasons. The
third party provider is therefore able to store your IP address.
Unfortunately, we have no control over which service provider actually stores your IP address,
whether for statistical or other purposes of which we are unaware. We will endeavor to include only
those providers that do not use IP addresses for any purpose other than delivering the content.
Please also refer to the respective privacy policies of the individual third-party providers and
service providers whose services we use on our website.
The storage of the IP address, at least for a short time, is technically necessary due to the way
the Internet works. However, the IP addresses are abridged by 1 byte before any forwarding to
third-party providers and are only processed anonymously. Unabridged IP addresses are not
transmitted to third-party providers.
reCAPTCHA
We use reCAPTCHA on our website, a service provided by Google LLC, 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA (hereinafter "Google"). The service is a function that allows us to
distinguish whether the input was correctly made by a person or by a computer program with automatic
program sequencing. During the query, your IP address and other data required for this service are
transmitted to Google.
Google will use the information for evaluation purposes. Your IP address, which is transmitted by
your browser as part of the reCAPTCHA service, is not merged with other data from Google.
For the data collection at Google, the deviating data protection regulations of the company apply.
You can find more information about Google's privacy policy here:
https://policies.google.com/privacy?hl=de
Google Web Fonts
We use so-called Google Web Fonts from Google on our website. It is an offering of open source fonts
that can be used free of charge. These Web Fonts are integrated by a server call. These are servers
of Google in the USA. During the process, technical information may be transmitted to Google,
including the IP address of your browser.
Google will use the information for evaluation purposes. Your IP address, which is transmitted by
your browser as part of the Google Web Fonts service, is not merged with other data from Google.
For more information about Google Web Fonts and Google's privacy policy, please see the links below:
https://www.google.com/fonts#AboutPlace:about
https://www.google.com/policies/privacy/
Legal basis for the processing
The purely technical query by means of reCAPTCHA, the use of Google services, as well as the use of
providers such as voodi.ee are done with legitimate interest according to Art. 6 para. 1 lit. f)
GDPR.
Objection options
If you use one of these services and wish to object to the transfer of personal user data to the
third-party providers, you can send us an e-mail to the e-mail address given in the imprint:
E-Mail:
[email protected]
The objection is made on the basis of Art. 21 GDPR. Please note that in this case, you will no
longer be able to use the website services.
The automated transmission of purely technical data, e.g., your IP address, is technical in nature.
However, the IP addresses are abridged by 1 byte before any processing and are only processed
anonymously. There is no right to object to the storage of the IP address, at least for a short
time, as this is technically necessary.
Google Analytics
Our websites use the functions of Google Analytics from Google.
Legal basis for the processing
Website analytics services to improve the efficiency of our website, such as Google Analytics, which
is operated by Google, require the disclosure of personal data about website visitors to the
respective third-party providers.
The measurement using Google Analytics by Google and the use of third-party cookies is done by
consent according to Art. 6 para. 1 lit. a) GDPR.
Use of data and purpose of processing
Google Analytics uses so-called "cookies". Cookies are small text files that are stored on your
computer and enable an analysis of your use of the website. The information generated by the cookie
about your use of our websites, as well as the IP address transmitted by your browser, is
transferred to a Google server in the USA and stored there. Google will use this information for the
purpose of evaluating your use of the website, compiling reports on website activity for website
operators, and providing other services relating to website activity and internet usage.
Pseudonymous usage profiles of the users can thereby be created from the processed data. Google may
also transfer this information to third parties where required to do so by law, or where such third
parties process the information on Google's behalf.
We would like to point out that we only use Google Analytics with the extension "_anonymizeIP()"
(active IP anonymization). This means that the IP address of the user is abridged by Google within
member states of the European Union or in other contracting states of the Agreement on the European
Economic Area. This guarantees the masking of your IP address so that all data is collected
anonymously. Only in exceptional cases, the full IP address is transferred to a Google server in the
USA and abridged there. The IP address transmitted by the user's browser is not merged with other
data from Google. A personal reference is therefore excluded.
By using our websites, you consent to the processing of data about you by Google in the manner and
for the purposes set out above.
For more information about Google's use of data for advertising purposes, setting options, and
objection options, please visit Google's websites at the following links:
https://policies.google.com/technologies/partner-sites?hl=lv ("Data use by Google when using
websites or partner apps"),
https://policies.google.com/technologies/ads ("Data use for advertising purposes").
Objection option
The data collection and storage by Google Analytics can be objected to at any time with effect for
the future (according to Art. 21 GDPR). For this purpose, you have the option to install a browser
plugin issued by Google. This is available for various browser versions and can be downloaded and
installed at https://tools.google.com/dlpage/gaoptout?hl=en . Alternatively, you can prevent the
installation of cookies by selecting the appropriate settings on your browser software.
However, we would like to point out that in these cases, you may not be able to use all functions of
our websites to their full extent.
External payment providers
We offer payment by SMS and payment card. The data you enter in the entry mask will be transmitted
to payment processor.
Legal basis of the processing
All data transmitted to us in the context of payment processing is stored on the basis of your
consent within the meaning of Art. 6 para. 1, lit. a GDPR. This data is also processed in the
context of the fulfillment of our contractually owed services within the meaning of Art. 6 para. 1,
lit. b GDPR.
Since the payment processing also aims at the conclusion of a contract, the additional legal basis
for the processing is Art. 6 para. 1 lit. b GDPR.
Objection option
The data collection and storage can be objected at any time (according to Art. 21 GDPR). However, we
would like to point out that in these cases, you will not be able to use our offered payment
methods. Execution of payments without data collection is not possible.
5 SSL encryption
Our website is encrypted with the so-called SSL procedure (Secure Socket Layer) so that confidential
and personal contents of our users, as well as personal data, are transmitted securely. Data
encrypted via SSL is not readable by third parties. You can recognize SSL encryption by the display
in your browser line "https://".
6 Use of cookies
To make our web pages more effective, safer, and more user-friendly or to make it easier for you to
use our web pages, so-called cookies are used. These are small text files that are stored on the
hard drive of your computer.
When a user accesses a website, a cookie may be stored on the user's operating system. This cookie
contains a characteristic string that allows the browser to be uniquely identified when the website
is accessed again.
Legal basis for the processing
The legal basis for the processing of personal data using cookies for analysis purposes is - based
on the consent given by the user - Art. 6 para.1 lit. a) GDPR. The legal basis for the processing of
personal data using technically necessary cookies is Art. 6 para. 1 lit. f) GDPR.
Use of cookies
We may use cookies to build anonymized profiles. These are then used for target group marketing,
where the delivery of the advertising material is based on the behavior shown (e.g., web pages
visited, the type of posts read, clicks, etc.). All our cookies are completely anonymized and do not
contain any data about you. Cookies are also used to show you content and advertising according to
your interests.
We, therefore, use the data obtained via cookies exclusively to optimize the delivery of
advertising, limit the repetition frequency of advertising, display content and advertising that
matches your interests, form anonymous user groups according to interests, and analyze statistics to
better adapt our offer to the interests of our users.
Essential cookies:
Here, we do not store any personal data of the user.
Publisher: voodi.ee
Name |
Runtime |
Purpose |
welcome |
1,5 years |
This cookie is used to save the cookie management settings that you specify in this
dialog box. Check this cookie if you allow the site to store the cookie settings you
have specified.
|
PHPSESSID |
Until the end of the session |
This cookie stores information about the user's session on the site. The Site does not
have an objective functionality to disable the collection of this cookie data due to the
fact that it is necessary to ensure the operation of the main functionality of the site
and related services.
|
Analysis/Statistics:
Publisher: Google Analytics
Third-party cookies from Google Analytics are used. For more information,
see https://policies.google.com/privacy?hl=en and
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gtagjs_google_analytics_4_-_cookie_usage
What kind of data is collected?
• Origin (country and city)
• Language
• Operating system
• Device (PC, tablet PC, or smartphone)
• Browsers and all add-ons used
• Computer resolution
• Visitor source (Facebook, search engine, or referring website)
• Which files have been downloaded?
• What videos were watched?
• Were advertising banners clicked?
• Where did the visitor go? Did he/she click on other pages of the portal or did he/she leave it
completely?
• How long did the visitor stay?
Name |
Runtime |
Purpose |
_ga |
2 years |
Serves to distinguish users |
_gid |
24 hours |
Serves to distinguish users |
_ga_* |
2 years |
Used to get session status |
_gat_gtag_* |
1 minute |
Serves to reduce the number of data transfers to Google |
Serves to reduce the number of data transfers to Google
Objection option
You can revoke your already given consent to the use of cookies at any time by changing the setting
in the cookie box.
Furthermore, if you do not agree with our use of essential cookies, you can disable the storage and
use of these cookies (according to Art. 21 GDPR). Most browsers are set by default to automatically
accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you
when cookies are sent.
However, we would like to point out that as a result of the above-mentioned setting, you will only
be able to use our website with restrictions.
7. Disclosure of personal data to third parties
Data will be disclosed to third parties exclusively within the scope of the clauses described above
and for the purposes described therein. Any data sent beyond this will not be sent without your
prior, express consent. However, we reserve the right to transfer data to third parties without
consent if this is necessary to prevent threats to public order or for criminal prosecution. Of
course, even in this case, data will only be forwarded on the basis of an existing authorization by
the requesting party. If one of the last-mentioned reasons exists, your personal data will be
forwarded in particular to the responsible law enforcement and supervisory authorities.
Your personal data will not be forwarded to third parties beyond this, in particular not for
advertising purposes. We will therefore not use your deposited data for advertising or marketing
measures and will not sell them to third parties unless you give us your express consent beforehand.
8 Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR and you
have various rights against the Controller (voodi.ee):
Data subjects in the narrower sense are, in particular, users/visitors to our website, registrants,
purchasers, as well as customers or other persons whose personal data we collect, process, and/or
store. The data subject has the following rights:
• Right to information (Art. 15 GDPR)
i.e., you can request confirmation from us at any time as to whether and how personal data relating
to you is being processed by us
• Right of rectification (Art. 16 GDPR)
i.e., you have a right to rectification and/or completion if the personal data processed concerning
you is inaccurate or incomplete. The Controller shall make the rectification without undue delay.
• Right of objection (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the
processing of personal data relating to you which is done on the basis of Art. 6 para. 1 lit. e or f
of the GDPR; this also applies to profiling based on these provisions.
• Right of erasure (Art. 17 GDPR)
You may request the Controller to delete the personal data concerning you without undue delay, and
the Controller is obliged to delete such data without undue delay, unless there are retention
obligations.
• Right to restriction of processing (Art. 18 f. GDPR)
Under certain conditions, you may request the restriction of the processing of personal data
concerning you. A list of these requirements can be found in Art. 18 GDPR.
• Right of data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have made available to us in
a structured, common, and machine-readable format. In addition, you have the right to transfer this
data to another Controller without hindrance from us to whom the personal data has been provided.
You also have the right to revoke your declaration of consent under data protection law at any time.
The revocation of consent does not affect the lawfulness of the processing carried out on the basis
of the consent until the revocation (Art. 7 Par. 3 GDPR).
The data subject also has the right to lodge a complaint with a data protection authority
(supervisory authority) if he or she considers that the processing of personal data concerning him
or her infringes the GDPR (Art. 77 GDPR)
For inquiries of this kind, please contact
[email protected].
Please note that when making such requests, we must ensure that it is indeed the data subject.
9 Validity and timeliness of the privacy policy
By using our website, you consent to the use of data as described above. The Privacy Policy is
currently valid and dated 27.07.2023.
Due to the further development of our website or the implementation of new technologies, it may
become necessary to change this Privacy Policy. voodi.ee reserves the right to change the Privacy
Policy at any time with effect for the future. We recommend that you re-read the current Privacy
Policy from time to time.