This privacy policy (the “Policy”) explains how the Bauwise OÜ (contact information below) (“Bauwise”, “we” or “us”) collects and uses information when you use any of the services located on our website at www.ibiot.io (the “Website”) or if you use any other services (the “Services”) that we provide to you.

By using or interacting with the Website or our Services, you, as a user of our website or as our client, (“User”, “Client”, “Member” or “you”) agree to the provisions of this Policy and confirm that you have read and understood all of the provisions stated in the Policy.

We process Personal Data under this Privacy Policy and in accordance with applicable legislation, including the General Data Protection Regulation (2016/679) (the “GDPR”) and the applicable national data protection laws in Estonia.

We are committed to ensuring the privacy and confidentiality of the information pertaining to our members, clients, their affiliates and affiliated individuals, and to adhering to the policy set out below in congruence with our professional responsibilities and the applicable Data Protection Laws. Reference in this policy to “your Personal Data” means any information that identifies, or could reasonably be used to identify, you as one of the aforementioned persons (“Personal Data”).

We are the controller of the Personal Data that falls under the scope of this Policy.

1. The scope of the Policy
This Policy describes how we process Personal Data in connection with:

all matters related to our clients, members and potential clients;
newsletters and marketing information;
the cookies that are used on our Website;
all of our statutory obligations with respect to the GDPR, any relevant Data Protection Law, and any other laws and regulations that may be applicable.
​
2. Purposes, means and retention terms of data processing
News, publications and events: We will the use the information that you have provided to send you news about the latest developments at the Ibiot, the scope of services than we can provide to you, as well as information about any upcoming events that may be of interest to you, including educational seminars. We will use your Personal Data for this purpose until you inform us that you no longer wish to receive such information from us. We may use your name, title, position, your e-mail address, any provided phone numbers, your address and other information that can be used to contact you for the sake of providing you with this information.

Cookies: We use cookies to obtain information about your use of our Website. Cookies allow us to provide you with a more streamlined and accessible experience when using the Website. The information generally does not comprise any data that would allow us to individually identify you as a natural person. We will process your data using cookies for the duration of the period in which you have granted us consent.

Services: We collect information that has been provided by our members, clients or on behalf of our members, or information that we acquire independently within the scope of providing professional services. This collection of Personal Data is necessary to fulfil the obligations that we have towards our clients, and in our legitimate interest as a chamber of commerce to offer services and/or advice to our clients and potential clients. As per our professional responsibilities, we will take the utmost care to ensure the confidentiality and integrity of the Personal Data of our clients, potential clients and former clients.

When providing services, we may supplement the Personal Data that you have provided to us directly with personal data that has been obtained from other sources.

When you conduct a transaction (register to events) on our website, as part of the process, we collect personal information you give us such as your name, company and email address. Your personal information will be used for the specific reasons stated above only.

​
3. The legal basis for processing your Personal Data
We process your Personal Data on the basis of:

your consent;
legal agreement between us that establishes a basis for data processing;
legal obligations to which we are subject; and / or
our legitimate interest to ensure the quality of our legal services.
We limit the processing of your Personal Data to the scope of purpose for which the data was collected. Access to your Personal Data will be restricted to personnel who are required to process the Personal Data to fulfil their professional responsibilities and their duties to you as the Client. Your Personal Data is not stored or processed longer than is necessary with respect to the data processing purposes that we have listed above.

4. The transfer of your Personal Data to third parties
Outside of the provision of services, we do use the services of certain third parties to ensure the functionality of our services and the Website. We are required to transfer your Personal Data to these third-party service providers, so that these third parties would be able to provide us with their services. These third-party services providers are to be considered data processors. The Personal Data that will be transferred to these third-service providers will be limited to the minimum that is required to ensure the provision of third-party services.

We have ensured that all third-party service providers to whom we transfer your Personal Data will follow our instructions with respect to how they process your Personal Data. The transfer of your Personal Data is regulated by the data processing agreements or data processing terms that exist between us and third-party service providers. Any third-party service providers – as the data processors, must ensure that they process your Personal Data with the same level of care and diligence as we do and are legally liable to you and to us if the data processors act contrary to those warranties. Furthermore, these third-party service providers are required to implement technical and organizational measures to ensure an equal level of data protection to the one that we bring to our data processing efforts.

5. Your rights as a data subject
We have a legal obligation to ensure that your Personal Data is kept accurate and up to date. We kindly ask you to assist us to comply with this obligation by ensuring that you inform us of any changes that have to be made to any of your Personal Data that we are processing.

You may, at any time, exercise the following rights with respect to our processing of your Personal Data:

Right to access: You have the right to request access to any data that can be considered your Personal Data. This includes e.g. the right to be informed on whether we process your Personal data, what Personal Data categories are being processed by us, and the purpose of our data processing.
Right to rectification: You have the right to request that we correct any of your Personal Data if you believe that it is inaccurate or incomplete.
Right to object: You are entitled to object to certain processing of Personal Data, including for example, the processing of your Personal Data for marketing purposes or when we otherwise base our processing of you on a legitimate interest.
Right to erasure: You may also request that your Personal Data be erased if the Personal Data is no longer necessary for the purposes for which it was collected, or if you consider that the processing is unlawful, or if you consider that the Personal Data has to be erased to enable us to comply with a legal requirement.
Right to data portability: If your Personal Data we have is being automatically processed with your consent or on the basis of a mutual contractual relationship, you may request that we provide you that Personal Data in a structured, commonly used and machine-readable format. Moreover, you may also request that the Personal Data is transmitted to another controller. Bear in mind that the latter can only be done if that is technically feasible.
Right to withdraw your consent: In cases where the processing is based on your consent, you have the right to withdraw your consent to such processing at any time.
Opt-out from marketing: We will also give you the opportunity to opt out of our communication with you whenever we send you information about the Bauwise OÜ, the events that we organize or any other information that we believe may be of interest to you. Additionally, you can also opt out at any time by contacting us.
If you have complaints on how we process your Personal Data, or you would simply like to know more about our data processing activities, feel free to contact us at any time by using the information noted in the last section of this Policy.

You do have the right to lodge a complaint with a Data Protection Authority (“DPA”) if you think that your Personal Data is being processed incorrectly or your data subject rights have been violated by us. You can lodge a complaint by contacting the DPA that is local to your jurisdiction i.e. the location of the alleged violation of your data subject rights or the inappropriate processing or your data, or the place you live and work.

6. The location of the processing of your data
We primarily store and process Personal Data within the European Union. Nevertheless, it may at times be necessary that your Personal Data is transferred to and stored at a destination outside the European Union. It may also be processed by data processors operating outside the EU.

By submitting your Personal Data to us or by consenting to the processing of your Personal Data you agree to the processing of your data, including both data storage and data transfer, outside the EU for the purposes set out in this Policy. We will take all reasonably necessary precautions to ensure that your data is treated securely and in accordance with the applicable Data Protection Laws. We will not store any of your Personal Data longer than necessary to fulfil the purposes set out in this Policy. For example, we may transfer your Personal Data based on:

an adequacy decision by the European Commission;
standard data protection clauses elaborated by the European Commission;
standard data protection clauses elaborated by a DPA;
using other possible safeguards and derogations where it is allowed by the applicable laws.
As with all of your Personal Data, you may request that we inform you on the details of the processing of your Personal Data on the basis of Article 15 of the GDPR. You may, as with the exercise of any your rights as a data subject, do so by contacting us via the information that has been provided at the end of this Policy.

7. The cookies used to process your Personal Data
A cookie is a small file of letters and numbers (less than 1 kB) that our website asks your browser (for example, Internet Explorer, Chrome, Firefox, Safari or Opera) to store on your computer or mobile device. The cookie remembers your actions and preferences and enables us to provide you with the best possible experience while browsing our website. Without cookies, the full functionality of our website would be unavailable.

The cookies will be used to recognize you as having previously visited, to help collect statistics on website traffic, and to improve the navigation experience for the user. Unless you have set your browser to decline all or certain types of cookies, our cookies will be issued to you as soon as you visit our website.

Most browsers allow you to control cookies through their settings preferences. If you prefer not to receive cookies, you may set your browser to refuse all cookies or send an alert when a cookie is issued.

8. Contacts
Feel free to contact us with regards to any questions, inquiries, requests or complaints with respect to the processing of your Personal Data at: ihello@ibiot.io

9. Changes to the Policy
We may make any changes to this Policy as we see fit. If the Policy has been changed in any way, then the newest edition of this Policy will be published on our website. We encourage you to check whether any changes have been made to the Policy from time to time.

10. Our entity information
Bauwise OÜ
Tornimäe tn 5-2. korrus, Tallinn, 10145
+ 372 608 1140
Info@bauwise.com