Your data. Our responsibility.
Privacy and personal data
SuusaAkadeemia values the privacy of its customers, parents, partners and website visitors. We use personal data for specified purposes, to the extent necessary and in line with applicable data protection requirements.
Who is responsible for processing data?
The controller of personal data collected through enquiries, registrations and web forms submitted via the SuusaAkadeemia website is OÜ Suusakool, registry code 12557133. Contact for data protection questions and requests concerning personal data: info@suusaakadeemia.ee.
Contact for data protection questions and requests concerning personal data: info@suusaakadeemia.ee.
What data do we collect?
Depending on the service, we process the contact person's name, e-mail address and phone number; the name of the organisation or club; the type, name and number of children of the ski or cycling school group; and preferences for the place, period and time of participation.
When services and goods are ordered, we may process products, quantities, prices, delivery and billing details, payment status and necessary correspondence. Technical log data, including IP addresses, may be generated to keep the website running reliably.
Please avoid entering health data or other sensitive information in the free-text fields of enquiry forms unless there is a specific, justified need.
Why and on what basis do we use data?
We use registration data to receive enquiries, find suitable ski and cycling school times, organise participation and communicate with the contact person. We use order data to fulfil sales of goods, rentals, servicing and other ordered services.
We use billing data to prepare invoices, keep track of payments and meet legal obligations. We may process the website's technical data for security, troubleshooting and preventing misuse.
Depending on the activity, the legal basis may be the performance of a contract or pre-contractual steps, a legal obligation, a legitimate interest or consent where required. Submitting an enquiry does not automatically mean consent to receive marketing e-mails.
Protecting children's data
When registering groups for Limpa Ski School and Cycling School, we generally communicate with a parent, teacher or authorised contact person of the institution, and collect only the data needed to organise participation.
Children's health data, photos or other sensitive information are not published for marketing purposes without an appropriate legal basis.
Where is data processed?
Enquiries and registration data may be processed in the website's WordPress system and in the Google Workspace tools we use, including Google Sheets and e-mail.
Access to the data needed to provide a service is given only to people who need it for their work and to relevant service providers. We apply access restrictions and other appropriate security measures.
How long do we keep data?
We keep enquiry and registration data only as long as needed to organise the service, for justified follow-up and to handle possible claims. The exact period depends on the type of data and the purpose.
We generally keep accounting source documents for seven years from the end of the financial year concerned. We process consent-based marketing information until consent is withdrawn or any other applicable retention need ends.
When data is no longer needed and there is no legal obligation to keep it, it is deleted or anonymised.
Who may we share data with?
Where necessary, we use providers of web hosting, Google Workspace, order and point-of-sale accounting, bookkeeping and e-mail or newsletter services, solely to provide the relevant service.
Personal data is not sold to third parties. If data is transferred outside the European Economic Area, appropriate data protection safeguards must be in place.
Customer communication and newsletters
We use service-related notifications to handle a specific enquiry or order. We send marketing e-mails only with appropriate consent or another valid legal basis. You can unsubscribe from the newsletter at any time. Sending a registration form is not automatically consent to marketing.
Cookies and technical data
WordPress and website plugins may use cookies and server logs needed for the website to work. If analytics or marketing cookies are used, we provide information about them and ask for the required consent before using them.
You can also partly control cookies in your browser settings. Blocking necessary technical cookies may affect how the website works.
What are your rights?
Under the applicable conditions, you have the right to access your data, request its correction or deletion, request restriction of processing, object to processing and exercise the right to data portability.
If processing is based on consent, you can withdraw your consent. To exercise your rights, write to info@suusaakadeemia.ee. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate: www.aki.ee.
Updates to this privacy information
We may update this information if our services, the systems we use or legal requirements change. The current version is published on the website together with the date of the latest update.