Valid from 01.06.2018
1. Who we are? What do we do?
We are Skillex. We have developed an internet-based learning platform with a community feature (“Platform”). Our services (“Services”) are available on the Platform.
Our details are: Skillex OÜ, registry code 14459110, Kentmanni 6-73, Tallinn, 10116, e-mail: firstname.lastname@example.org.
2. Whose personal data we process?
3. What personal data we process?
We may collect and process, among other, the following personal data:
(1) personal information, such as name, sex, date of birth, nationality, citizenship, city of living, email;
(2) personal information of the representatives of our partners, such as name, job title, position, email, nationality, membership package type, user ID;
(3) document details, such as the name on the document, issuing country, number, expiry date;
(4) photos and videos, that you have uploaded to the Platform;
(5) contact details, such as address, e-mail address, telephone numbers, IP address;
(6) information regarding the use of our Services, participation and activity on the Platform and in the Skillex community.
Please note that we do not accept members who wish to remain anonymous. Therefore, the use of our Service is subject to the disclosure of personal data to us.
4. From where do we collect the personal data?
We obtain the personal data directly from you when you visit our website, fill in the sign-up form on our website and contact us (via e-mail or other communication channels).
We obtain personal data of the representatives of our partners from our partners.
In addition, we may collect your personal data on our own initiative from social media and the internet.
5. What are the privacy principles we follow?
We respect your right to the protection of your personal data.
We protect your personal data by using reasonable measures.
We analyze the risks associated with the processing of personal data. We act in order to mitigate the risks.
We comply with privacy laws.
We process your personal data lawfully. At all times.
We collect only the personal data we need.
We may transfer your personal data to our partners. We impose clear rules to our partners.
We store your personal data as long as it is needed for the purposes we collected it.
We have internal rules for the processing of personal data. We introduce the rules to our employees and make sure that they understand and comply with the rules.
6. For what purpose do we process your personal data?
We process your personal data for the following purposes:
(1) for the preparation and conclusion of your membership agreement, for the performance of the agreement (including the provision of the Service), for the realization of rights arising from the agreement and for the performance of the obligations arising from the agreement;
(2) for the purpose of realization of rights and fulfillment of obligations deriving from legal acts;
(3) for processing your inquiries and requests;
(4) for analyzing the use of our Service, and using research and analysis results, among other, for developing our Services further in order to better correspond to the need of our members;
(5) for the transmission of information about our Service.
(6) for sending our newsletters, for marketing and developing and promoting our products and Services.
7. What is the basis of processing your personal data?
We process your personal data in accordance with the requirements of the legislation in force in Estonia, i.e. the GDPR.
We may process your personal data as a controller (i.e. data of our members) and as a processor (i.e. data of the representatives of our partners).
We mainly process your personal data in order to fulfil the membership agreement concluded with you (clause 6 (1)), we also process your personal data if processing is necessary for the compliance with our legal obligation (clause 6 (2) and (3)) and if processing is necessary for the purposes of our legitimate interests (clause 6 (4), (5) and (6)), and on the basis of your consent (clause 6 (6)). 
8. What are your rights in relation to your personal data?
You have the following rights:
(1) Right of access to personal data – you have the right to know which of your personal data we store and how we process it, including the right to know the purpose of the processing, the persons to whom we disclose your personal data, information about automated decision-making and the right to receive copies of personal data.
(2) Right to the rectification of personal data – you have the right to request the rectification of inadequate, incomplete and misleading personal data.
(3) Right to withdraw the consent given for the processing of personal data – you have the rightto withdraw the consent given to us for the processing of personal data at any time.
(4) Right to the erasure of personal data („right to be forgotten“) – you have the right to request that we erase your personal data (for example, if you take back the consent for the processing of personal data, or if personal data is no longer needed for the purpose for which it was collected). We have the right to refuse the erasure of personal data if the processing of personal data is necessary for the fulfillment of our legal obligation, to exercise the right to freedom of expression and information, for the preparation, presentation and protection of legal claims, or in the public interest.
(5) Right to the restriction of processing – In certain cases, you have the right to prohibit or restrict theprocessing of your personal data for a certain period of time (e.g., if you have filed an objection to personal data processing).
(6) Right to object – you have the right to file an objection to the processing of your personal data if the processing your personal data takes place on the basis of our legitimate interest or public interest.
(7) Right to data portability – In case your personal data processing is based on your consent and personal data is processed automatically, you shall be entitled to receive personal data about you that you submitted to us as the controller, in a structured, commonly used and machine-readable format, and you shall have the right to transmit this personal data to another controller. You also have the right to request that we transfer personal data directly to another controller, where technically feasible.
(8) Automated decision-making (including profiling) – provided that we have informed You that we perform automated decision-making (including profiling) that will bring about legal consequences for you or have a significant effect on you, then you may require that an automated decision cannot be made only on the basis of automated processing.
(9) Submission of complaint. You shall have the right to file a complaint against us regarding the processing of personal data to the Data Protection Inspectorate (www.aki.ee)
Please read more about your rights from chapter 3 of the GDPR.
9. What security measures do we apply for the protection of your personal data?
We apply various measures (physical, technical, organizational) to protect your personal data from unauthorized or arbitrary rectification, disclosure, acquisition, destruction, loss or unauthorized access to them.
If you have any information about an actual or suspected breach, please inform us about it immediately at email@example.com. We will take necessary action.
10. Do we disclose your personal data to third persons?
We disclose your personal data to our authorized processors, as well as to persons who are legally entitled to receive your personal data.
When we conclude an agreement with a processor for the processing of your personal data, we shall ensure the existence of appropriate contractual safeguards to protect your personal data.
11. Geographical area of the processing
We process your personal data within the EEA.
In the event that we need to transmit your personal data outside the EEA, the transmission shall be in accordance with the requirements of the GDPR.
We use ”cookies” on our website. “Cookies” help us improve our Services and use our services in a more convenient manner, market our Services.
We collect data on how users interact with our website and / or application. In addition, we collect information from your computer or device, such as the IP address, browser you are using, and language settings. We also collect information about how the user uses our web pages and applications for statistical purposes to improve our web pages and applications, and to display custom content for the customer.
If you prefer that your personal data will not be processed on our website, you can activate the private browsing feature of Your web browser. This is your choice.