Privacy Policy

1. General Provisions

1.1.

This Privacy Policy describes how Pärnu City Orchestra (hereinafter referred to as the “Data Controller”) collects, uses, stores, and protects the personal data of natural persons.

1.2.

This Privacy Policy applies to all persons who use the Data Controller’s website, fill in forms on the website, subscribe to newsletters, or otherwise communicate with the Data Controller.

1.3.

The Data Controller processes personal data in accordance with the European Union General Data Protection Regulation (GDPR), the Personal Data Protection Act of the Republic of Estonia, and other applicable legislation.

2. Collection of Personal Data

2.1.

The Data Controller may collect the following personal data:

  • first and last name
  • email address
  • phone number
  • data submitted through registration forms
  • data submitted through contact forms
  • data submitted when subscribing to newsletters
  • accounting and payment-related data (where necessary for fulfilling accounting obligations)
  • technical data related to website usage

2.2.

Personal data is collected only to the extent necessary for fulfilling the purposes described in this Privacy Policy.

3. Purposes and Legal Bases for Processing Personal Data

3.1.

The Data Controller processes personal data for the following purposes:

3.1.1. Responding to Inquiries

To respond to inquiries submitted through contact forms or email.

Legal basis: legitimate interest or the data subject’s request.

3.1.2. Managing Registrations

To organize and manage registrations for concerts, educational programs, competitions, events, or other activities.

Legal basis: performance of a contract or the data subject’s request.

3.1.3. Sending Newsletters

To send newsletters, event notifications, and other information.

Legal basis: consent of the data subject.

The data subject has the right to withdraw consent at any time.

3.1.4. Accounting and Legal Obligations

To comply with accounting requirements and obligations arising from legislation.

Legal basis: compliance with a legal obligation.

3.1.5. Website Operation and Development

To collect website usage statistics and improve user experience.

Legal basis: legitimate interest or, where required, user consent.

4. Cookies and Web Analytics

4.1.

The website uses cookies to ensure proper website functionality, improve user experience, and collect anonymous statistics.

4.2.

Cookies may collect the following data:

  • IP address
  • device type
  • browser type
  • time of visit
  • visited pages
  • other technical usage data

4.3.

Users may restrict or disable cookies in their browser settings. Disabling cookies may affect website functionality.

5. Transfer of Personal Data and Third Parties

5.1.

The Data Controller may transfer personal data only to the extent necessary for providing services or fulfilling legal obligations.

5.2.

Data may be transferred to the following service providers:

  • website technical maintenance service providers
  • web analytics service providers
  • newsletter service providers
  • accounting service providers
  • public authorities where required by law

5.3.

All authorized processors process personal data in accordance with applicable data protection requirements.

5.4. Third-Party Services and Links

The website may contain links and redirects to third-party services, including the ticket sales platform Piletikeskus (Sviby AS). Ticket purchases are processed within the Piletikeskus environment, and all personal data processing related to ticket sales is carried out under the responsibility of Piletikeskus as an independent data controller and in accordance with their privacy policy.

The Data Controller does not process or assume responsibility for the data processing practices of third-party websites. We recommend reviewing the privacy policies of the relevant service providers before submitting personal data.

6. Retention of Personal Data

6.1.

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations.

6.2.

Retention periods:

  • contact form data: up to 3 years
  • registration form data: up to 3 years
  • newsletter subscription data: until consent is withdrawn
  • accounting documents: in accordance with legal requirements
  • web analytics data: according to service settings

7. Rights of the Data Subject

The individual has the right to:

  • receive information about the processing of their data
  • access their personal data
  • request correction of data
  • request deletion of data in cases provided by law
  • restrict processing
  • object to processing
  • withdraw consent
  • receive data in a machine-readable format (where applicable)
  • file a complaint with the Estonian Data Protection Inspectorate

8. Contact Information

For matters related to personal data processing:

Pärnu City Orchestra
Email: info@parnuorkester.ee
Website: www.parnuorkester.ee

9. Amendments to the Privacy Policy

9.1.

The Data Controller has the right to amend this Privacy Policy where necessary to ensure compliance with legislation or changes in operations.

9.2.

The current version is always available on the website www.parnuorkester.ee.