Annex

Sviato Academy Discounts and Bonuses

Sviato Academy Marketing Materials

Conditions for receiving profile pictures

Sviato Academy quality standards

Sviato Academy Privacy Statement

Sviato Academy Privacy Statement

This privacy statement contains information about the collection, processing and retention of personal data conducted by OSPMU OÜ (abbreviated: OSPMU). OSPMU follows regulations concerning the protection of personal data when processing personal data.

The category of personal data and the purpose of processing

      i.        The necessary information for signing and fulfilling the Agreement: data of the physical (first name, last name) or legal person (including data about the right of representation), other identifiable data, contact details. The data is needed for preparing and fulfilling the contract with the Contracting Party.

    ii.        The necessary information in order to provide offers of similar products and/or services: personal data, contact details, the fact of beign customer and all the data related to it. The data is needed for preparing and sending by email OSPMU marketing offers.

Legal basis

OSPMU collects, processes and retains the data in accordance with Point B of Section 1 of Article 6 of the General Data Protection Regulation (EU) 2016/679 (abbreviated: GDPR) (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps requested by the data subject prior to entering into a contract).

OSPMU collects, processes and retains the data in accordance with Point F of Section 1 of GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Third parties

OSPMU has the right to forward the personal data to its cooperating partners in accordance with the requirements of GDPR (including to other countries outside the EU Economic Area) who are involved in fulfilling the aims of this Agreement.

Retention of data

OSPMU uses and retains personal data for as long as is necessary or permitted for the purposes for which the data was obtained or as long as is compliant with legal requirements, but no longer than five years after signing the agreement between the Parties.

The rights of the data subject

The data subject has the right (to the extent that the exercise of such rights is not restricted under the GDPR) to:

  i.        get information and access the data;

 ii.        request the correction or deletion of the data;

iii.        request the restriction of processing;

iv.        request the transfer of data;

 v.        withdraw their consent (if the processing is based on consent) and

vi.        present objections.

The right of appeal

All requests related to the Sviato Academy data protection should be send to the following email address: legal@sviato.academy.

The Contracting Party has the right to appeal for the protection of their

privacy to the EU Supervisory Authority of their permanent place of residence.