What are personal data and processing of personal data?
Everything related to individuals and their lives which enables their identification can be described as data. A person's personal data is all data that enables the identification of a person, such as their name, address, contact information, as well as information about their financial situation, etc.

Personal data also includes various sensitive data (formerly "sensitive personal data"), such as personal medical data. Thus, personal data are all data which can be used to identify a person, regardless of their form.

Processing of personal data means any operation involving personal data. The collection and processing of personal data may take place if there is a legal basis for it.

The processing of special categories of personal data is only allowed in certain cases. The processing of personal data must be based on established processing principles and requirements.

What purposes do we process personal data for and who do we transfer them to?
The Estonian Chamber of Disabled People shall do everything in its power to protect your personal data and comply with data protection and privacy laws.

We process your personal data, if:

• You attend our work ability assessment and disability determination counseling service or legal counseling service. We ask for your written consent to process your personal data.
• You send us a request for explanation, a memorandum, a request for information or a complaint. In this case, we will use your personal data to clarify the circumstances of the complaint and to reply to the letter.
• You send us an e-mail. In this case, we use your personal information to reply to the letter.

Correspondence with private persons has a general access restriction, as the letters contain personal data. This means that if someone wants to examine a private person’s correspondence or a document, they have to submit a request for information. Upon receipt of a request for information, we review whether the requested documents may be issued or they may be issued in part. In the event of a partial issue, we will redact your personal data, which the applicant is not entitled to process, in order to prevent issuing excessive data.

Possible grounds for access restrictions are set out in § 35 of the Public Information Act.

Despite the restriction on access, we issue documents related to you to institutions or persons who have the legal right to request these documents (e.g. the police, health insurance fund, Health Board, Social Insurance Board, Estonian Unemployment Insurance Fund, etc.).

Documents containing sensitive personal data are delivered to the addressees by registered mail or encrypted e-mail.
We generally retain correspondence with private persons for 5 years, after which the documents are destroyed.

How can you access the data we have collected about you?
The person whose data we process is entitled to receive information about it and to access their personal data. To do this, please submit a manually or digitally signed request to us so that we could verify your identity when issuing personal data.

A person also has the right to request the correction and deletion of their data,the restriction of processing and the transfer of data from one company to another (if we no longer have a contractual or legal basis for the use of your personal data). To do this, please submit a manually or digitally signed request to us.

We will respond to inquiries about the use of personal data as soon as possible and no later than within one month as from receiving the request.

We may restrict these rights and deny your request if it:

• damages the rights and freedoms of other persons;
• hinders the prevention of a criminal offence or apprehension of a criminal offender;
• complicates the ascertainment of the truth in a criminal proceeding;
• endangers the protection of the confidentiality of filiation of a child.

For all questions related to the processing of your personal data, please contact our chief specialist Tauno Asuja at tauno.asuja@epikoda.ee.

If you believe that we have violated your rights during the processing of your personal data, you may submit a complaint to the Estonian Data Protection Inspectorate (Väike-Ameerika 19, Tallinn 10129, e-mail address: info@aki.ee) or an administrative court.

In compiling the data protection terms and conditions of the Estonian Chamber of Disabled People, we have relied on the Data Protection Inspectorate's general guidelines for personal data processors.