Privacy policy

Provan OÜ

The controller of the Provan.ee website is:

ProVan OÜ
Reg. code: 14182766
VAT number: EE101938961
Address: Välja st 3, Soinaste, Kambja, Tartu county, 61709, Estonia

Website: https://provan.ee/

Protection of Personal Data

Personal data refers to information collected by ProVan OÜ (hereinafter Provan) for the purpose of providing services, identifying individuals, contacting individuals to deliver services, resolving inquiries, or sending promotional content.

Provan does not process special categories of personal data (sensitive personal data) as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR).

Provan is committed to protecting the personal data and privacy of its clients and users. Provan’s online activities comply with all relevant operations, applicable European Union legislation, and the laws of the Republic of Estonia, including Regulation (EU) 2016/679 of the European Parliament and of the Council. Provan implements all necessary precautions (including administrative, technical, and physical measures) to protect the collected personal data. Access to modify and process the data is restricted solely to authorized persons.

Safety

All personal data disclosed during a visit to the Provan website shall be treated as confidential information.

The following outlines the principles of Provan’s Privacy Policy regarding the collection, processing, use, disclosure, transfer, modification, retention, and deletion of personal data.

These principles do not apply to the processing of data relating to legal entities or other companies/institutions, nor do they cover the processing of personal data on websites or service platforms referenced through our websites or service environments (external links).

A person acting on behalf of a company (as the service subscriber) is not considered a natural person but rather an authorised representative of a legal entity, and the processing of such person’s data is not governed by Regulation (EU) 2016/679 of the European Parliament and of the Council.

1. What data is collected?

When visiting our websites, non-identifiable technical data about the visitor is collected.
Technical data is limited to the Internet Protocol (IP) address of the computer or network being used, the version of the web browser and operating system software, as well as the time (hour, date, year) and location of the visit. IP addresses are not linked to personally identifiable information.
Data is collected regarding visits to and use of the websites in order to improve the websites and service environments and to make them more convenient and user-friendly for visitors.
We use the automated tool Google Analytics to collect the data described above. If you do not wish such data about you to be collected and transmitted, you may disable Google Analytics data collection at any time, as described here.
For natural persons, the data collected may include, where necessary for unique identification, a personal identification code; and for communication purposes, the individual’s name, email address, mobile phone number, city, and country of residence.
For the processing of legal entity data, we collect the company registration number, VAT number, company name, country, address, email addresses for communication and invoicing purposes, as well as the names, email addresses, and telephone numbers of the company’s authorised contact persons.
For marketing messages sent via email, we may collect information about your interaction with such messages, including whether you opened the email, which links you clicked, the devices you used to access the email, and the technical characteristics of those devices. This information is recorded and stored in the history of each contact.
If you are included in Provan OÜ’s contact database, we may process your name and email address or mobile phone number for marketing purposes in social media and online advertising platforms (including Facebook, Instagram, and Google). For these purposes, we retain and process your personal data for five (5) years from the date your contact details are added to our contact database. Provan OÜ has a legitimate interest (Article 6(1)(f) GDPR) in sending marketing communications to its contacts in order to maintain a business relationship with them.

Personal data uploaded to the Provan platform by Provan’s clients in the course of using the Service is protected by confidentiality obligations that take effect upon the client’s execution of the Service Agreement. Provan services may only be used after acceptance of the Service Agreement. Acceptance of the Agreement is verified automatically by the software; if no acceptance is recorded, the user will be prompted to accept the Agreement before using the services.

For the personal data processing purposes listed in this section, access to the data is granted only to employees of Provan OÜ who are required to process such data in the course of their duties and who apply all applicable security measures when handling your personal data.

Consent to the collection of personal data related to and necessary for the provision of the Service is given by the individual placing the order at the time the Service is ordered. By placing an order for the Service, such consent is deemed to have been granted and is recorded with the corresponding timestamp.

2. How long is the collected data retained?

Non-identifiable technical data collected through the websites and service environments is retained indefinitely.

Personal data related to identified enquiries and/or transactions is retained for up to seven (7) years from the last interaction with the service provider, in accordance with the obligation under applicable accounting legislation to retain records evidencing transactions. For the purposes of this provision, an interaction includes, among other things, engagement with direct marketing communications, such as viewing a message or clicking on a link.

3. To whom may the collected data be disclosed?

Personal data processed by Provan may be disclosed without the data subject’s consent only to an authority or person who has a direct legal right to receive such data (for example, a court or a pre-trial investigative authority) and a justified need for access to the information.

Personal data processed by clients within the scope of the Provan service is treated as confidential. The right to process, disclose, or transfer such data rests solely with the data owner (the client), who bears full responsibility for such activities.

At the client’s request, Provan may provide technical assistance in the processing of data; however, such assistance does not alter the ownership of the data or the allocation of responsibility for it.

4. What rights does an individual have regarding the collected data?

Õigus oma andmetega tutvuda, parandada, lõpetada töötlemine.

Personal data is not disclosed by default, except where the individual has provided explicit consent for such disclosure (for example, in connection with participation in training sessions, seminars, or conferences).

If personal data cannot be modified, accessed, or disclosed through the website or service environment, the individual should submit a request in a manner that enables identification of the requester in order to obtain or correct the data. Where possible, the requested data will be provided or corrected within seven (7) business days.

If you wish to opt out of direct marketing communications, either entirely or for specific topics, you may do so at any time by using the unsubscribe link included in the footer of each marketing email. The change takes effect immediately.

Where there is no longer a legal basis for the processing, disclosure, or provision of access to personal data, the individual may request that the use of such data be discontinued or that the data be deleted, and that any disclosure of or access to the data cease. To exercise these rights, the individual should submit a request in a manner that enables identification of the requester.

A request will not be granted if:

the request may adversely affect the rights and freedoms of another person;
the request may hinder the provision of the Service or result in the Service no longer being able to be provided;
the request may impede the work of law enforcement or other competent authorities;
the request is not technically necessary and/or cannot be fulfilled due to technical limitations.
the applicant is not legally entitled to the data or is otherwise not legally connected to the data in question.
the identity of the applicant cannot be verified.

For example:

– An email address cannot be deleted where the individual has opted out of receiving direct marketing communications. In order to comply with such a request, the email address must be retained on a suppression list so that it can be checked against future distributions and marketing emails are not sent to that address.

– It is not possible to delete all data from the CRM solely because an individual no longer wishes to be contacted. In order to comply with such a request, sufficient information must be retained to identify the individual and ensure that no further contact is made.

5. How do we use cookies and for what purposes?

We use cookies on our website to make our services more user-friendly and to provide enhanced and customised functionality when visiting our website and using our products.

Many web browsers offer the option to block cookies provided by third parties. When this setting is enabled, the browser will allow only those cookies to be stored that originate from the website or service you are currently visiting. This option can be configured through your browser settings and, when enabled, will prevent all third-party cookies from functioning.

You can delete your browser’s cookie cache through your web browser settings. Deleting a cookie removes the unique identifier stored in the browser cache, together with any associated web-based profile linked to that identifier. However, deleting the cookie cache does not prevent new cookies from being stored in the future.

Each web browser is different. If you are unsure how to change your cookie settings, please refer to the cookie management and user guide linked below. Your device’s operating system may also provide additional controls for managing cookies. If you do not wish cookies to collect information, you may disable or reject cookies through your web browser settings. For more information on managing cookies, please visit www.allaboutcookies.org/manage-cookies

6. What types of cookies do we use?

We use session cookies, persistent cookies, and third-party cookies (including Google Analytics and Facebook cookies). These analytics cookies enable us to recognise and count visitors to our website and to analyse how visitors navigate and use the website. We use this information to improve the performance and functionality of our website.

7. Marketing

Provan aims to provide relevant updates and information about its services to those clients who have expressed an interest in receiving direct marketing communications.

By subscribing to our newsletter at www.provan.ee, you agree to receive emails containing company news, new blog posts, and information about upcoming events (such as training sessions organised by us, as well as special offers from our partners available to newsletter subscribers), up to a maximum of three (3) times per month. For the purpose of sending these marketing communications by email, we process your name and email address.

When Provan sends you an email, we may collect statistical information regarding your interaction with that communication, such as whether you opened the email, which links you clicked, the devices you used to access it, and the technical characteristics of those devices. Such information is recorded in the contact’s history. Prior to sending newsletters, we may assess the behaviour and engagement of our contacts based on information contained in their contact history, participation in events organised by us, and similar activities. This enables us to provide more personalised email communications. Provan has a legitimate interest in understanding the needs and preferences of its contacts in order to provide them with more relevant information.

Please note that if you are included in our contact database, we may process your name and email address or mobile phone number for the purpose of displaying advertisements to you, or to individuals with similar characteristics (so-called “Lookalike Audiences”), on platforms such as Facebook, Google, YouTube, LinkedIn, and/or Instagram.

Privacy Policy Terms and Amendments

By using Provan’s websites, you acknowledge that you have read and accepted these principles and terms. We reserve the right to amend the general terms of this Privacy Policy when necessary and will notify all affected parties of any such changes.