1. General Provisions

1.1. This Privacy Agreement (hereinafter referred to as the “Agreement”) defines the procedures for processing, storing, and protecting the personal data provided by the users of the “Info Express” website (hereinafter referred to as the “Site”).

1.2. The processing of personal data is carried out by OÜ Revelan (hereinafter “the Operator”), acting in accordance with the legislation of the Republic of Estonia and the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

1.3. This Agreement is an integral part of the Site’s User Agreement.

2. Personal Data Collected

2.1. The Operator may collect the following categories of personal data:

Surname, first name;

Personal code;

Login;

Contact details (email address, phone number);

IP address and browser information;

Other data provided during registration, newsletter subscription, or while leaving comments on the Site.

2.2. Additionally, data may be collected by means of cookies and other similar technologies (see Section 6).

3. Purposes and Legal Grounds for the Processing of Personal Data

3.1. The personal data is processed for the purpose of:

Ensuring the proper functioning of the Site and providing the requested services;

Informing users about news, updates, and special offers;

Conducting statistical and analytical analysis.

3.2. The processing of personal data is carried out on the following legal grounds:

The consent of the data subject, expressed at the time the information is provided;

The necessity to execute a contract or to take measures based thereon;

The legitimate interests of the Operator, provided that they do not infringe upon the rights and freedoms of the data subject.

4. Methods of Data Collection and Processing

4.1. Personal data is collected by:

Manual input by users via forms on the Site;

Automatic collection through cookies and similar tools.

4.2. Data processing is performed using automated systems as well as manually by the Operator’s authorized employees.

5. Rights of the Data Subjects

5.1. The user has the right to:

Request access to their personal data;

Demand the correction, deletion, or restriction of processing of their data;

Object to the processing of their data;

Receive information about the recipients of the data and the sources from which it was obtained;

Exercise the right to data portability.

5.2. Requests and inquiries concerning their personal data may be directed to the following contact details:
 email – info@express.ee or via the feedback form.

6. Use of Cookies and Other Technologies

6.1. The Site uses cookies and similar technologies to ensure proper functioning, to analyze statistics, and to personalize content.

6.2. Users can manage cookie settings through their browser configurations. Disabling cookies may affect the proper functioning of the Site.

7. Transfer of Personal Data to Third Parties

7.1. The Operator transfers personal data to third parties (for example, payment systems, partners, analytics services) solely based on:  - The user’s consent, unless otherwise provided by law;  - Legal requirements, including in the context of executing a contract.

7.2. The transmitted data is shared in compliance with the mandatory security measures provided by the GDPR and other applicable legislation.

8. Retention Periods for Personal Data

8.1. Personal data is stored for the period necessary to achieve the purposes of its processing or until the data subject withdraws their consent.

8.2. After the expiration of this period, the data will be anonymized or deleted in accordance with the procedures established by the Operator’s internal regulations.

9. Measures for the Protection of Personal Information

9.1. The Operator takes technical and organizational measures to protect personal data from unauthorized access, alteration, loss, or disclosure.

9.2. Regular audits and updates of the security measures are carried out in order to comply with current legislative requirements.

10. Amendments to the Agreement

10.1. The Operator reserves the right to amend this Agreement. Any changes will be published as an updated version of the Agreement on the Site.

10.2. Users will be informed of any changes by the publication of the updated version of the Agreement on the Site.

11. Contact Information and Procedures for Interaction

11.1. For issues related to the processing of personal data, as well as to exercise the rights of the data subjects, please contact the following details:
 email – info@express.ee or via the feedback form.

11.2. Any questions, claims, or suggestions regarding the processing of personal data will be addressed in accordance with the internal procedures of the Operator.