Principles of personal data protection

MTÜ Sana Teadliku Johtimise Kool (TJK) training permit No. 2103160 offers training aimed at a wide population and may come into contact with sensitive personal data of participants during the provision of its services, but does not collect or process them.
Personal data is data that TJK collects when fulfilling a contract with an individual or institutions or to contact them.
The responsible processor of personal data is MTÜ Sana.
TJK uses authorized processors in its daily activities. The authorized processors are trainers of MTÜ Sana and other authorized persons to whom MTÜ Sana has given instructions on the basis of the contract to process data on its own behalf.
The training participant has the right to receive information about who processes his personal data and for what purposes, as well as other relevant information in order to ensure fair and transparent processing of personal data. One way to get information is to familiarize yourself with this privacy policy, which describes how and why MTÜ Sana processes the personal data of the participants. In case of additional questions, you can contact the address mtysana@gmail.com

MTÜ Sana collects the following data about participants:

Contact information (name, e-mail address, phone, payer's address), institution and personal identification number. The personal identification number is necessary for obtaining a certificate, certificate or income tax refund. Please fill in the institution if the institution pays for the participant. Personal data is processed on the basis of § 6 of the Personal Data Protection Act.
The above data is collected and used by the NGO Sana in order to fulfill the obligations arising from legislation in general as well as to fulfill the contract concluded between the participant and TJK (for example, to transmit organizational information and training materials related to training, to request confirmation of participation, to send invoices and to make necessary clarifications). .
If necessary, TJK also uses the contact data of the participants for marketing purposes (e.g. for the transmission of advertising letters about subsequent trainings, newsletters, etc.), but only if the participant has given his consent to this on the feedback sheets filled out at the end of the course. The recipient of the newsletter has the opportunity to withdraw his consent at any time by clicking on the link at the end of the newsletter (unsubscribe) or by sending an e-mail to the address kadri@teadlikjuhtimine.ee

Name of the training; paid training fees (TJK uses this data to fulfill the obligation to provide information arising from the Income Tax Act). Attendance and absence data from the training (based on the completion of the curriculum, TJK decides whether the person will be issued a certificate or certificate).
The institution is necessary if the institution pays the training costs of the training participant.
TJK processes customer data in feedback forms. We value the opinion of the participants, and with the help of questionnaires we can improve the quality of our service and better understand the expectations of the participants.

Regarding the training participants, TJK forwards the data provided on the registration form (first and last name, telephone, e-mail address, institution, personal identification number, etc.) to the trainer conducting the training.
When certificates are issued, participants in the same training group can access the certificates of the entire group (they are digitally signed in one container), which means that the participant's first and last name and personal code (this is not considered sensitive personal data in Estonia) are visible to the students in the same group. At the request of the participant, the certificate will be issued in a separate digitally signed container, if the participant informs about it at the latest at the last meeting of the course.
General statistics of training participants are shared with the Ministry of Education and Science (i.e. the total number of training participants, names of institutions and aggregate numbers that do not allow identification of the participants).

When determining the data retention period, we are based on the maximum limitation periods prescribed by law for filing claims, i.e. 10 years from the end of the contractual relationship.

The participant of the training has the right to familiarize himself with the data collected about him by sending an e-mail to the address mtysana@gmail.com