Privacy policy – newsletter

Introduction

This privacy policy provides an overview of how your personal data is processed when you subscribe to Clevon’s newsletter. “Personal data” means the information specified in Article 4 (1) of the General Data Protection Regulation (“GDPR”).

1. Who is the data controller?

The data controller is Clevon AS, registry code 16472103, address Reinu tee 48, 71020 Viljandi, Estonia, e-mail legal@clevon.com (“Clevon”, “we”, “us”, "our").

2. What personal data do we collect and process?

In order to be able to deliver you newsletters, Clevon collects your e-mail address.

3. What is the legal basis for processing data?

We process your personal data to provide you with information on Clevon’s activities and to let you know about any upcoming events via e-mails. The lawful basis we rely on for the processing is your consent, according to GDPR Art. 6(1)(a), which you have given upon subscribing to our newsletter.

4. With whom may we share your data?

We always treat data with care and confidentiality. Transfers of data may take place only to the extent described herein and to designated recipients.

We use service providers to process personal data on our behalf, such as for sending newsletters or for analysis and advertising. Such service providers act on our behalf as data processors (GDPR Art. 28). As a general rule, we use the services of Smaily (Sendsmaily OÜ) to send our newsletters, whose privacy policy you can read here: https://smaily.com/privacy-policy/

Additionally, we may transmit personal data to third parties if this is required by law or in the interest of defending or filing legal claims, or in case if third parties provide certain services for us (e.g., providers of legal advice, consultants).

5. How long do we store the data?

We keep your data for the purpose of sending you our newsletter for as long as you have not withdrawn your consent to such data processing. You can withdraw your consent at any time by using the link included at the bottom of each newsletter we send you.

6. Your rights as a data subject

In accordance with the GDPR, you, as a data subject, have the following rights:

The right to withdraw your consent at any time (Art. 7(3) GDPR). The withdrawal of consent does not affect the lawfulness of processing based on consent before you withdrew it;
The right to information about the processing of personal data and the right to access personal data (Art. 15 GDPR);
The right to request rectification of inaccurate personal data (Art. 16 GDPR);
The right to request the erasure of data under the conditions set out in Article 17 GDPR;
The right to request restriction of processing of personal data (Art. 18 GDPR);
The right to data portability (Art. 20 GDPR);
The right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The right to withdraw your consent at any time (Art. 7(3) GDPR). The withdrawal of consent does not affect the lawfulness of processing based on consent before you withdrew it;
The right to information about the processing of personal data and the right to access personal data (Art. 15 GDPR);
The right to request rectification of inaccurate personal data (Art. 16 GDPR);
The right to request the erasure of data under the conditions set out in Article 17 GDPR;
The right to request restriction of processing of personal data (Art. 18 GDPR);
The right to data portability (Art. 20 GDPR);
The right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Exercise of rights and contact

Please contact Clevon at legal@clevon.com to obtain more information about data processing, to exercise your rights or to file a complaint.