The purpose of this Privacy Notice is to inform you of the types of personal data Elering AS (hereinafter ‘Elering’) collects, uses, stores or transfers (i.e. processes) for organising the RSC Conference 2020 (hereinafter‘Conference’). The protection of personal data is essential for Elering and we want you to be aware of what kind of data we collect about you, what kind of purposes we use it for and what your rights are. We have included the respective information in this privacy notice (hereinafter ‘the Privacy Notice’).
Data Controller: Elering AS, on behalf of the Baltic RSC https://www.baltic-rsc.eu/;
Data Processor: Avetar OÜ (responsible for Conference management).
Personal data is any information that can be used to identify you. Elering collects and processes the following personal data in relation to the Conference: attendee’s first and last names, valid email address, organisation, position, preferences about session topic(s) and whether you are participating on-site or virtually. As for the Conference speakers, Elering collects the phone number, biography and picture. Elering shall also record videos and/or take pictures at the Conference.
By agreeing to this Privacy Notice, you are consenting to Elering processing your personal data given in the registration form for the purposes undermentioned. You can withdraw consent at any time by selecting “unsubscribe” to any emails that you receive from us, or by emailing firstname.lastname@example.org. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
We may photograph or film some of the Conference, which may feature shots of Conference attendees. The legal basis relied on by us for processing your personal data in relation to taking photographs and recording videos of the Conference is in legitimate interests. The legitimate interests are in having a record of the Conference and the means to promote the Conference, including in future years.
Personal data collected shall be processed by Elering and in compliance with the General Data Protection Regulation (GDPR) and any applicable implementation rules on the protection of privacy in relation to the processing of personal data, for the following purposes:
i. Organisational information to attendees regarding the Conference, including practical information, slides and related documentation and follow-up information.
ii. Creation of a database with attendees’ data given in registration forms, access to which is limited to Elering and Avetar OÜ and used only for the purpose of carrying out the Conference.
iii. Publication of the Conference speakers’ profiles on the website of the Conference.
iii. Publication of photos and videos recorded during the Conference on the RSC Conference 2020 website, Baltic RSC website, Elering website, in Elering social media and other communication channels, ENTSO-E website, on the ENTSO-E YouTube account, on social media profiles of ENTSO-E, within ENTSO-E newsletters or in other ENTSO-E communication material on promotional purposes.
v. Publication of the Conference speakers’ presentations on the Elering website, ENTSO-E website, RSC Conference website, within Elering and ENTSO-E newsletters or in other communication channels.
Your data shall be processed and retained only for the purposes of the Conference and, when these purposes are fulfilled, will be deleted. However, for purpose (iv), your data (photos and videos) may remain accessible on the Elering and ENTSO-E web site or database, on the Elering and ENTSO-E YouTube accounts, on social media or in other Elering and ENTSO-E publications for a longer period.
Your personal data shall not be transmitted to any third party, except;
- Elering service providers in charge of the hosting and/or maintenance of the web site and/or database
- For photos and videos ENTSO-E, Baltic RSC (used channels Google and YouTube)
The right to access data:
You will always be able to examine your personal data that has been collected and is being used, as well as its sources and objectives for the use thereof. You are also able to receive information as to how long Elering stores the data and to whom and to what extent the data is disclosed. The right to access your personal data may be limited by legislation, the rights of other persons for ensuring their privacy or other justified needs, e.g. the know-how, business secrets, internal evaluations and other materials of Elering.
The right to rectify personal data:
If your data is incorrect, incomplete or irrelevant, you are able to request that your data be rectified or deleted, taking into consideration the limitations arising from applicable legislation and the rights related to the processing of data.
The right to object:
You have the right to object to the processing of your personal data, including in cases in which Elering refers to its legitimate interests when processing data.
The right to limit data processing relating to you:
You have the right to limit the processing of your personal data on the basis of applicable legislation, for example when Elering assesses whether a person has the right to the deletion of their data, unless the data must be processed for the performance of a legal obligation for the performance of a task in the public interest.
The right to be forgotten:
If personal data is processed on the basis of your consent and you have withdrawn your consent, you have the right to apply for the deletion of your personal data. This right does not apply if the personal data that you request to be deleted is also processed on the grounds of another legal basis, e.g. on the basis of a contract, for the performance of a legal obligation for the performance of a task in the public interest.
Right to data portability:
If Elering uses data on the basis of your consent, or on the basis of an agreement and the data processing is automated, you have the right to receive a copy of the submitted data in an electronic machine-readable format.
Upon request dated and signed sent by email to Elering, and the proof of your identity, you may obtain, free of charge if it is a reasonable volume, the written communication of the data and the portability of the data, as well as, where appropriate, rectification, restriction of processing, deletion of those which are inaccurate, incomplete or irrelevant.
If you have any questions concerning your rights in relation to the processing of your personal data, or if you have any questions about how we collect and use your personal data, please contact the Data Protection Officer of Elering:
tel. +372 715 2271,
Kadaka tee 42, 12915, Tallinn.
If you are not satisfied with how we process your personal data, and your inquiry to our Data Protection Officer did not result in a satisfactory outcome, you are able to file an electronic complaint at email@example.com or via post to Kadaka tee 42, 12915 Tallinn.
You are also able to file a complaint with the supervisory body. The Estonian supervisory body is the Data Protection Inspectorate; email: firstname.lastname@example.org; postal address: Väike-Ameerika 19, 10129 Tallinn; telephone +372 6 274 135; website: www.aki.ee. The Data Protection Inspectorate is a state authority that can be addressed for consultation or assistance on topics relating to the protection of personal data.