Privacy Terms

The responsible data processor of the personal data of the website https://wanderlust.ee/ is Wanderlust Matkad OÜ (registration code 14818951), with legal address Harju maakond, Kuusalu vald, Kuusalu alevik, Keskväljak 12, 74601, which collects personal data and determines the purposes and methods of their processing.

Phone +372 5904 7065 and e-mail [email protected]

What personal data do we collect? What is the purpose and legal basis of data processing?

Personal and contact data

First and last name, telephone, e-mail address.
Purpose: fulfillment of the contract. In addition, we may collect data for the purpose of making offers during pre-contractual negotiations.
Legal basis: contract, in its absence, consent.

Transaction data

Tehingu aeg, ostetud teenus ja hind, makseandmed.
Purpose: fulfillment of accounting and tax requirements arising from the law, fulfillment of the contract.
Legal basis: contract, law, legitimate interests of us and third parties to manage payments and debts in a timely manner.

Marketing data

First and last name, telephone, e-mail address.
Purpose: for marketing purposes, we may process your personal and contact data in order to deliver personalized offers of interest to you.
Legal basis: for existing customers, the legal basis is a legitimate interest in conducting direct marketing, maintaining and improving customer relationships. With potential customers and other persons, the legal basis is consent.

Customer preferences and satisfaction data and other communication data

Service usage activity, feedback, customer inquiries and complaints (customer support data).
Purpose: to maintain, improve and perfect customer relations and solve problems, evaluate and improve the quality of service provision and customer service.
Legal basis: contract, legitimate interest in maintaining and improving customer relations.

Website usage data

Device type, device identifier, IP address, location, web browser, language settings, other data collected through cookies when using the website.
Purpose: ensuring the relevance and functioning of the content of the website. More detailed information can be found in the cookie policy.
Legal basis: consent.

Data of cooperation partners

Contact data of natural or legal persons (including name).
Purpose: conducting pre-contractual negotiations, contract execution.
Legal basis: contract, in its absence, consent.

Data of job applicants and employees, data of internship applicants and interns

Occupation, workplace or internship, field of activity, education, level of education, previous work experience, CV and other information published during the application process.
Purpose: concluding an employment contract or internship contract with a suitable candidate.
Legal basis: contract for employee and intern, consent for other persons.

How long do we keep personal data?

  • We store the data collected during the execution of the contract for up to 3 years after the contract ends.
  • In case of disputes arising from the contract, we will retain personal data until the dispute is resolved.
  • We store data collected during pre-contractual negotiations for up to 12 months.
  • We store the data of persons who applied for work and internships, but were not selected, for up to 12 months.
  • We store marketing data for up to 10 years.
  • We store the data collected on the basis of consent until the consent is withdrawn.
  • We keep the original accounting documents for at least 7 years, unless the law provides for a longer period.
  • We store the data collected during the use of the website for the time specified in the cookie policy, or indefinitely if the data is not personalized.

Who do we share personal data with?

  • Internally, we only share personal data with employees who need it for their work.
  • We may use external service providers who act as authorized processors and to whom the data transmitted is minimal, which is necessary to ensure the provision of third-party services. For example, website service or accommodation providers, marketing service providers, accounting service providers, payment service providers and IT support service providers. When providing such services, external service providers may have access to and process your personal data.
  • If you have given your explicit consent to the transfer of personal data to a specific recipient.
  • Without the person’s consent, personal data may be transferred to an institution or a person who has a direct legal right to the data.

How do we protect personal data?

  • We treat all personal data as confidential.
  • As a general rule, personal data is not transferred outside the European Economic Area.
  • All payment transactions are encrypted.
  • We store personal data primarily in digital form. Employees who use personal data to perform work duties are trained to handle data securely.
  • Our IT systems are configured by default to store and process data safely and securely.
  • Personal data will not be processed longer than it is necessary.
  • If we use other external service providers, we require them to implement and apply security measures to ensure the security of personal information.

What are your rights regarding the processing of personal data?

  • You have the right to access the personal data we hold about you. In order to release the data, we must make sure that we are releasing the data to the authorized person. Therefore, it is necessary to identify your identity before issuing data.
  • You have the right to request the termination of the processing of your personal data and the deletion of the data or the correction of personal data, to withdraw your consent to the processing of personal data, to object to the processing of personal data, to request the restriction or transfer of data processing. You also have the right to object to automated decision-making (including profiling). In the event that you wish to stop processing personal data and delete data, we cannot provide you with various services, including personal discounts.
  • If we have received a request from you regarding your personal data, we will respond as soon as possible, but no later than within 30 days.
  • If you want your personal data not to be processed through the use of cookies during your visit to our website, we recommend that you turn on private browsing.
  • You have the right to file a complaint with the Data Protection Inspectorate if you suspect misuse of your personal data: phone: +372 627 4135, e-mail: [email protected], postal address: Väike-Ameerika 19, Tallinn 10129.