ELIISi privaatsuspoliitika

Isikuandmete töötlemine

  • Eliis Tarkvara OÜ (edaspidi „Eliis“) töötleb isiku tuvastamise ja suhtluse eesmärgil järgmisi isikuandmeid:

    • ELIISi kasutaja ees- ja perekonnanimi;

    • ELIISi kasutaja identifitseerimiskood;

    • ELIISi kasutaja kontaktandmed – telefoninumber, kodune aadress, e-posti aadress.

  • Isikuandmeid töödeldakse vastavalt vajadusele ELIIS-teenuse osutamiseks. Andmete kasutamise kohta leiate lisateavet allpool olevatest vastavatest jaotistest.

  • Kui kasutajal ei ole ühtegi rolli (omavalitsuse ametnik, lapsevanem, lasteaia direktor, õpetaja, toitlustaja jne) ja tal ei ole pooleliolevaid rollipõhiste õiguste taotlusi, kustutatakse kasutaja konto ELIIS-ist automaatselt pärast 12-kuulist mitteaktiivsust.

  • ELIIS-i kasutajate andmeid säilitatakse kuni 7 (seitse) aastat.

  • Eliis ei vastuta ELIIS-i kasutaja sisestatud teabe täpsuse, täielikkuse ja asjakohasuse eest.

  • Lasteaed, kes on ELIIS-i andmed sisestanud, on sisestatud andmete vastutav töötleja. Eliis on andmetöötleja.

  • Oma põhifunktsioonide osana salvestab ja töötleb ELIIS laste kohta käivaid andmeid, sealhulgas kohalkäimise arvestust, päevikukirjeid, söögiinfot, arenguvaatlusi ja sellega seotud haldusandmeid. Lasteaed on kõigi tema hoole all olevate laste kohta sisestatud andmete vastutav töötleja. Lapsevanemad ja eestkostjad võivad oma lapse konkreetsete andmete kohta küsimuste korral lasteaiaga otse ühendust võtta. Eliis ei kasuta laste andmeid muul eesmärgil kui ELIIS-teenuse osutamiseks lasteaiale.

  • Eliis ei jaga ega edasta isikuandmeid kolmandatele isikutele, välja arvatud juhul, kui:

    • selline kohustus on seadusega ette nähtud;

    • see on vajalik taotluse lahendamiseks;

    • isik on andnud oma nõusoleku.

  • Kasutajal on õigus nõusolek igal ajal tagasi võtta, esitades allkirjastatud taotluse aadressile info@eliis.eu.

  • Nõusoleku tagasivõtmine ei mõjuta enne tagasivõtmist toimunud töötlemise seaduslikkust.

  • Vaatamata nõusoleku tagasivõtmisele võib Eliis jätkata isikuandmete töötlemist, kui selleks on muu õiguslik alus.

Legal basis for processing

  • Eliis processes personal data on the following legal bases under Article 6 of the General Data Protection Regulation (GDPR):

    • Performance of a contract (Art. 6(1)(b)) — processing of account data (name, identification code, contact information) necessary to provide access to the ELIIS service;

    • Legal obligation (Art. 6(1)(c)) — processing required by applicable law, including retention of data for accounting and record-keeping purposes;

    • Legitimate interests (Art. 6(1)(f)) — processing for security, fraud prevention, system integrity, and activity logging, where these interests are not overridden by the user's rights;

    • Consent (Art. 6(1)(a)) — processing for optional communications such as service-related email notifications. Consent may be withdrawn at any time in "My Settings" in ELIIS.

  • Data entered by kindergartens about children and staff is processed by Eliis as a data processor on behalf of the kindergarten (data controller), who is responsible for ensuring an appropriate legal basis exists for that processing.

User's data protection rights

  • ELIIS user has the following rights regarding the processing of personal data:

    • the right to request access to personal data concerning himself/herself;

    • the right to request rectification of data;

    • the right to request the deletion of data;

    • the right to restrict the processing of personal data;

    • the right to object to the processing of personal data;

    • the right to file a complaint to the Data Protection Inspectorate;

    • the right to receive personal data in a portable format and transfer it to another controller;

    • the right not to be subject to a decision based solely on automated processing — Eliis does not use automated decision-making or profiling that produces legal or similarly significant effects on users;

  • The use of the above rights is subject to the conditions and limitations arising from the General Data Protection Regulation of the European Union.

  • To exercise a right, the user must submit a written or electronic request to info@eliis.eu specifying which right is being invoked. If necessary, Eliis will ask the user for additional information to fulfil the request.

  • If the preconditions for the use of the right are met, Eliis shall fulfil the request within 1 (one) month of receipt. If necessary, Eliis may extend this deadline by 2 (two) months by notifying the user.

  • If Eliis has grounds to refuse the request, Eliis will send a reasoned refusal decision within 1 (one) month.

  • Regarding your child's data: As a parent or guardian, you may exercise data subject rights on behalf of your child. Since the kindergarten is the data controller for data entered about your child in ELIIS, requests relating to your child's data should be directed to the kindergarten. Eliis can assist where the data is processed directly by Eliis.

Security

  • Eliis takes your privacy and personal data protection very seriously. We keep our employees and people responsible for administering ELIIS up to date with our privacy principles.

  • ELIIS is hosted on Amazon Web Services (AWS) infrastructure located in the European Union. AWS acts as a subprocessor and processes data solely to provide hosting services. Data stored in ELIIS does not leave the EU as part of core hosting operations.

  • To protect ELIIS from unauthorized access, modification, breach, or disclosure, we use SSL to encrypt all data in transit. This ensures that all data between the user's computer or mobile device and ELIIS servers is securely encrypted.

  • By entering someone else's e-mail address in your profile, you could make your account and personal information visible to that person. We recommend carefully checking the accuracy of your personal information.

Cookies

  • ELIIS uses text files called cookies to enhance user-friendliness, assist with navigation, keep track of session data, and help Eliis with service planning.

  • A cookie is a small text file that the ELIIS web server sends to the user's web browser and is stored on the user's computer or smart device. Cookies allow the user's preferences (for example, language selection) to be remembered.

  • ELIIS uses the following cookies:

    • Functionality and Performance Cookies - These cookies support the functioning and functionality of the ELIIS website. Using these cookies, the website identifies the user and, if you wish, remembers the customer login information.

    • Analytical Cookies - Google Analytics is used to collect user statistics. Google Analytics is operated by Google LLC, based in the United States. Data collected via analytical cookies may be transferred to and processed in the United States. This transfer is governed by Google's Data Processing Terms and Standard Contractual Clauses approved by the European Commission. For more information, see Google's Privacy Policy.

    • Cookies used for Multimedia presentations, that record the technical information needed to play video or audio, such as image quality, network connection speed, and buffering parameters.

  • Users have the right to refuse cookies. If desired, the user must modify the settings of his/her web browser.

  • When blocking cookies, the user must take into account that some ELIIS features may no longer be available.

Changes to this policy

  • This Privacy Policy is updated from time to time as the service and applicable law evolve. The latest version is always available on this site. Users will be notified of material changes by email or via a notice in ELIIS.

Küsimused

  • Kui teil on küsimusi või muresid oma privaatsuse, käesoleva privaatsuspoliitika või ELIISis kasutatavate küpsiste kohta, võite meiega ühendust võtta e-posti teel info@eliis.eu.