Privacy policy

Under applicable data protection laws, we are obligated to inform individuals about their personal data processing and we fulfil this obligation within this Privacy Policy which explains how we collect, use and protect personal data in accordance with the General Data Protection Regulation No. 2016/679 (“GDPR”) and/or other applicable statutory regulations.

This Privacy Policy covers the information VATabout OÜ (“we” or “VATabout”) collect about you when you use visit our website, or otherwise interact with us (for example, by subscribing to our newsletter or by communicating with us), unless a different policy is displayed. 

Definitions

"Personal data" means any information relating to an identified or identifiable natural person. For the avoidance of doubt, it is clarified that, within the context of this Privacy Notice, the term “Personal data” is used synonymously with “PII” (Personal Identifiable Information).

"Data Protection Laws" means all data protection and privacy laws and regulations of the EU, EEA, and their member states, Switzerland and the United Kingdom, applicable to the Processing of Personal Data.

"GDPR" means (a) the Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), and (b) the United Kingdom General Data Protection Regulation.

"Personal Data" means any information relating to an identified or identifiable natural person.

"Processing" means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction. "Process", "Processes" and "Processed" shall be interpreted accordingly.

"Processor" means a natural or legal person, public authority, agency, or any other body which Processes Personal Data on behalf of the Controller.

“Subscriber” means a person who contacts through our Newsletter Services.

“We”, “us”, and “our” refer to the VATabout.

"You," "your," and "yours" refer to the user.

Data Processing

Consent: by accessing our Services, you accept our Privacy Policy, and you consent to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy. Each time you visit our website, and any time you voluntarily provide us with information, you agree that you are consenting to our collection, use, and disclosure of the information that you provide, and you are consenting to receive emails or otherwise be contacted, as described in this Privacy Policy. Whether or not you register or create an account with us, this Privacy Policy applies to all users of the website.

Data Controller

VATabout OÜ  is the Data Controller in respect of personal data described in this Privacy Policy unless specified otherwise. Our contact details:

Company name: VATabout OÜ

Registration code: 16454499

VAT code: EE102471430

Address: Harju maakond, Kesklinna linnaosa, Veskiposti tn 2-1002, 10138, Tallinn, Estonia

Email: hello@vatabout.com

What Personal Data Do We Collect And Why?

1. Purpose
   To improve our website, ensure its performance, increase its security and adapt both its content and form to the needs of our users. VATAbout OÜ acts as a Data Controller.

   Type of Data
   When you visit our website, we collect the following data from you automatically: IP address, operating system, user ID and other information about your activities on our and other websites. We collect and store this information as part of log entries or through the use of cookies. Please refer to our Cookie Policy for more details about cookies.

   Legal Basis
   Personal data collected via cookies is processed on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) whilewe set up cookies on your device only with your consent (Article 6(1)(a) of the GDPR)

   Retention Period
   Please refer to our Cookie Policy for more details about retention periods for cookies.

2. Purpose
   To manage our social media network accounts (Facebook, etc.). VATAbout OÜ acts as a joint Data Controller with the respective social media platform.

   Type of Data
   We collect your name, contact information (if you provide it), comments you leave under our posts, post shares, information about “like” and “follow” clicks on our profile, post reactions (including information about when you started following or liked our social network account), your photo, any feedback you left and your messages to us (including the time they were received / submitted).   Please note! When you communicate with us via social networks, you should inquire about their applicable data protection terms and conditions and read their privacy policy. All personal information you provide to us via social networks is controlled and managed by that particular social network (e.g., Facebook (Meta Platforms Ireland Limited)).

   Legal Basis
   Your consent, which you have given when connecting to a particular social network (Article 6(1)(a) of the GDPR)

   Retention Period
   10 years

3. Purpose
   Direct marketing communication. VATabout OÜ acts as a Data Controller.

   Type of Data
   We collect your email address.

   Legal Basis
   The processing of this data is based on your consent (Article 6(1)(a) of the GDPR)

   Retention Period
   We retain this data for as long as your consent is valid but not longer than for 5 years.

Your Rights

Under the GDPR you have the following rights: 

• Know (be informed) about the processing of your personal data (Articles 12-14 of the GDPR);

• Access your personal data that is being processed (Article 15 of the GDPR);

• Request the correction of inaccurate personal data relating to you (Article 16 of the GDPR);

• Request the deletion of personal data relating to you (“the right to be forgotten”) (Article 17 of the GDPR). Please note! You have the right to be forgotten only if it can be justified by one of the following reasons: (i) personal data is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) you do not consent to the processing under Article 21 (1) of the GDPR and there are no overriding legitimate reasons for processing.

• Restrict data processing (Article 18 of the GDPR). Please note! You have the right to restrict the processing of your data only if: (i) personal data is inaccurate; (ii) the processing of personal data is unlawful, but you do not consent to the erasure of the data; (iii) we no longer need your personal data to fulfil our purpose, but it is necessary for you to assert, enforce or defend legal requirements; (iv) you object to the processing under Article 21 (1) of the GDPR unless the legitimate reasons of VATAbout OÜ override your own.

• Transfer your personal data when the processing is based on consent or contract and the data is processed by automated means (Article 20 of the GDPR);

• Object to the processing of personal data for reasons specific to your case where the processing is in the legitimate interests of VATAbout OÜor of a third party, unless we prove that the processing is for compelling legitimate reasons overriding your interests, rights and freedoms, or for the purpose of asserting, enforcing or defending legal requirements (Article 21 of the GDPR).

If you believe that VATabout OÜ is unlawfully processing your personal data or is not implementing your rights, you have the right to file a complaint with the competent Data Protection Authority or to make a claim against VATabout OÜ with a competent court (either in the country where you live, the country where you work or the country where you deem that data protection law has been infringed).

You can exercise rights over your data by reaching out to: hello@vatabout.com.

Email Communications & Opting Out

From time to time you may receive emails related to your use of VATabout. Based on the Personal Data that you provide us, we may communicate with you in response to your inquiries to provide the Services you request. If we have your consent, we may also use your Personal Data to send you updates and other promotional communications. Every email will contain a link to be able to opt-out of receiving it. 

Links to other websites

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Service. Therefore, this Privacy Policy does not apply to your use of a third-party website accessed by selecting a link via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our website, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or about your personal data processing, please contact us by email: hello@vatabout.com.