Who we are
The address of FOB Solutions OÜ (registry code 12449455) is Paldiski mnt 29, 10612 (hereinafter “FOB”).
Our website address is: https://www.fob-solutions.com
What personal data we collect and why we collect it
General provisions and contact information
FOB processes personal data in a way that ensures their appropriate security, including protection against unauthorised or unlawful processing, and accidental loss, destruction, or damage, using relevant technical or organisational measures.
FOB uses personal data only for the purposes for which they are collected, and such data will not be later on processed in a way that contradicts those purposes. FOB processes personal data in compliance with the legislation applicable in the Republic of Estonia and European Union.
FOB may use processors for processing personal data. In that occasion, only such processors are used in the case of whom it is ensured that they apply appropriate technical and organisational measures so that the processing of personal data satisfies the requirements established in legislation, while also ensuring the protection of the rights of the data subject.
Personal data to be collected
In relation to the hiring process and entry into the service contracts, FOB collected the following data:
- first name and surname, date of birth and/or personal identification code – data for identifying the person;
- e-mail address, telephone number, address – contact details of the person;
- data relating to the employment of the person: name of the legal person, registry code, postal address, job title;
- data relating to the competence and experience of the person;
- bank details of the person – for payment of remuneration in the case of a service contract.
Personal data mean data that can be used for identifying a person.
The data subject has the right to request that his or her personal data will not be disclosed to any third parties.
Use of data, the purpose of their use, and legal grounds for data processing
FOB processes personal data for the performance of a contract with the data subject, or for the conduct of procedures preceding entry into the contract, for the fulfilment of the obligations of FOB, or for the purposes of the legitimate interests of FOB, as follows:
- to identify the person;
- to make a job offer to the person, and to make decisions relating to the job offer;
- for the performance of a contract with the person.
Profiling is any form of automated processing of personal data, which involves the use of personal data for the evaluation of certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning the relevant natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements. FOB may use profiling for the purpose of staff policy implementation.
Where and for how long personal data are stored
Personal data are stored on the secure servers of FOB. The processing of personal data ends when it is no longer necessary. The data retention period is related to the contract with the data subject, to the legitimate interests of FOB, or to other grounds provided by law.
Transfer of data to other countries
As a rule, data collected will not be transferred to any other countries; however, if a relevant need should arise during data processing, your data will not be transferred outside the European Union and/or the European Economic Area without prior permission.
Disclosure of personal data
In justified cases, FOB may disclose collected personal data to third parties:
- if FOB or a significant share of it is acquired by a third party;
- if FOB is required to disclose or share personal data to perform a lawful obligation, rule, requirement from a public authority, or to investigate potential violations. This includes data exchange with other companies, organisations, and state authorities.
FOB may use third parties for the provision of services (for example, parties who provide support services). Such parties may have access to personal data. FOB will not authorise such parties to use or disclose personal data, except for the provision of services necessary to FOB.
Rights of the data subject
The data subject has the following rights relating to personal data:
- the right to access data concerning him or herself. The data subject has the right to receive information from FOB as to whether or not personal data are processed, and if they are, access the personal data;
- the right to the rectification of the data;
- the right to the erasure of the data, for instance, if the data are no longer needed, of if personal data are processed with the data subject’s consent but the data subject has withdrawn his or her consent, and FOB has no legal grounds for the processing of the personal data;
- the right to receive and request that FOB transfer to the other controllers and/or processors personal data, which the data subject has provided to FOB and which FOB is processing based on consent or a contract, in a structured, commonly used, machine-readable format;
- the right to object to the processing of personal data concerning him or herself;
- the right to withdraw his or her consent at any time without prejudice to the lawfulness of any preceding processing.
The right to file a complaint with the supervisory authority
The data subject has the right to file a complaint with the Data Protection Inspectorate (www.aki.ee) if the data subject finds that the processing of his or her personal data infringes his or her rights, or is unlawful.