Privacy Policy | Deltarite

Introduction

This Privacy Policy describes how deltarite (deltarite Osaühing) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly. This policy applies to our digital illustration tablet course website and services offered to students in Tallinn and beyond.

Who We Are

We operate as the data controller for your personal information. Our role is to manage your data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR). We collect information from course participants, newsletter subscribers, and website visitors to provide educational services and maintain communication about our evening digital drawing and vector illustration courses.

Information We Collect

We collect the following types of information:

Contact Information: Name, email address, phone number, and postal address when you register for courses or contact us
Course Data: Your course enrollment details, progress, assignments, and participation records
Technical Data: IP address, browser type, device information, and pages visited on our website
Cookie Data: Information stored through cookies to enhance your browsing experience
Communication Data: Records of emails, inquiries, and messages you send to us

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: To enroll you in courses and deliver educational services you have requested
Legitimate Interest: To improve our services, analyze course effectiveness, and maintain website security
Consent: For marketing communications and newsletter subscriptions, which you can withdraw at any time
Legal Obligation: To comply with tax requirements and other legal obligations in Estonia

How We Use Your Information

We use your data to deliver and improve our digital illustration and tablet drawing courses. Specifically, we use your information to:

Enroll and manage your course participation
Provide course materials, feedback, and educational support
Send course updates, announcements, and administrative communications
Process payments and handle billing inquiries
Analyze course effectiveness and student outcomes
Enhance website functionality and user experience
Respond to your inquiries and provide customer support
Comply with legal and regulatory requirements

Data Retention

We retain your personal data for the following periods:

Course Registration Data: Retained for 36 months after course completion to maintain enrollment records and facilitate re-enrollment
Contact Form Messages: Retained for 24 months after your last interaction with us
Email Communications: Retained for 24 months from the date of communication
Payment and Billing Records: Retained for 60 months to comply with Estonian tax obligations
Website Analytics Data: Retained for 14 months from collection
Server Logs: Retained for 12 months for security purposes
Newsletter Subscriber Lists: Maintained until you unsubscribe

After these periods expire, we securely delete or anonymize your data. If you request deletion, we will remove your information within 30 days, except where we are legally required to retain it.

Cookies and Tracking Technologies

We use cookies to improve your experience on our website. Cookies are small text files stored on your device that help us recognize you, remember preferences, and analyze how you use our site. We use both essential cookies (required for website functionality) and optional cookies (for analytics and marketing). You can control cookie preferences through your browser settings. Our detailed Cookie Policy provides more information about the types of cookies we use and how to manage them.

Your Rights

Under data protection laws, you have the following rights regarding your personal information:

Right to Access: You can request a copy of the personal data we hold about you
Right to Rectification: You can ask us to correct inaccurate or incomplete information
Right to Erasure: You can request deletion of your data in certain circumstances
Right to Restrict Processing: You can limit how we use your information
Right to Data Portability: You can request your data in a portable format
Right to Object: You can object to certain types of processing, including marketing
Right to Withdraw Consent: You can withdraw consent for marketing communications at any time

To exercise any of these rights, contact us using the details in the Contact Us section below.

Data Security

We implement comprehensive technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. We use encryption, secure servers, and access controls to safeguard your information. Our staff receives training on data protection practices. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security of your data.

Third-Party Sharing

We do not sell or rent your personal information to third parties. We may share your data with:

Service Providers: Hosting providers, payment processors, and email service providers who assist us in delivering services
Legal Authorities: When required by law or to protect our legal rights
Business Partners: Only with your explicit consent and for purposes you have authorized

All third parties are contractually obligated to protect your data and use it only for the specified purposes.

International Data Transfers

Our servers and operations are located in Estonia. Since we operate within the European Union, your data is protected under GDPR standards. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place to protect your information in accordance with data protection laws.

Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) if you believe we have violated your data protection rights. You can contact them through their official website or submit a complaint directly. We encourage you to contact us first so we can address your concerns.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes become effective constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your information.