The controller of personal data collected through the ProTrackEst website and e-shop is FIATINVEST OÜ. Our contact details are given at the end of this policy.
This privacy policy explains how we process personal data when you use the website, make purchases and service orders, and communicate with customer support. We collect only the data needed for the purposes described.
The processing of location and trip data generated during GPS tracking is covered by separate GPS service data protection information, which is provided to the customer before they start using the GPS service. This policy does not describe all data processing by WhatsGPS or JusTrack.
Orders and provision of the service. We process the customer's name, e-mail address, phone number, delivery and billing details, order contents, payment status and correspondence related to the service. When ordering on behalf of a company, we also process the company's details and the contact person's details. We use the data to fulfil the order, deliver the goods, inform the customer and manage the service and billing. For a customer who is a natural person, the legal basis is the conclusion and performance of the contract. For a company's contact person, the basis is our legitimate interest in performing the contract concluded with the company.
Device and customer account management. Where necessary, we process the device model, IMEI number or other device identifier and the data needed to identify the customer account. We use these to manage the ordered device and service and to resolve technical problems. For a customer who is a natural person, the basis is performance of the contract; for a company's contact person, a legitimate interest in managing the service. The data transferred to the GPS platform when creating an account and linking a device is described in the separate GPS service data protection information.
Accounting. We retain invoices, payment data and other source accounting documents to fulfil our statutory obligations. The legal basis for processing is a legal obligation.
Enquiries and customer support. When you contact us, we process your contact details, the content of your message and the information needed to resolve the issue. For questions related to an order, the basis is performance of the contract. For other enquiries, the basis is our legitimate interest in responding to enquiries and providing customer support.
Security and defence of claims. To ensure the security of the website, the IP address, request time and technical log data may be processed. Where necessary, we also retain information to establish or defend legal claims. The basis is our legitimate interest in preventing abuse, protecting the service and resolving disputes.
Marketing. If we send consent-based newsletters or offers, we use your e-mail address and consent data for this. You can withdraw your consent at any time via the unsubscribe link in the e-mail or by writing to info@protrackest.ee. Order confirmations, invoices and notices necessary for the operation of the service are not marketing e-mails.
We share data only to the extent necessary with service providers who help us fulfil orders and run our business. These may include the payment service provider LHV, delivery partners, web hosting and IT service providers, the accounting service provider and the accounting software Merit Aktiva.
When making a payment you may be redirected to the payment service provider's environment. It processes payment data in accordance with its own service and data protection terms. We receive the information needed to identify the order and the payment status.
A service provider's data protection role depends on its tasks. A partner processing data on our behalf may use the data only to perform the agreed tasks. A separate controller complies with its own statutory obligations and data protection terms.
Where legally required, we may disclose data to a competent authority. To resolve a dispute, we may pass the necessary information to a legal adviser or a court. We do not sell customers' personal data.
We retain source accounting documents for seven years from the end of the financial year in which the document was recorded in the accounts.
Order and customer communication data that does not have to be retained as an accounting document is kept for the duration of the contract and for up to three years after the contract ends. Data from a one-off enquiry not related to a contract is kept for up to three years after the enquiry is resolved.
If specific data must be retained to resolve a pending dispute or to fulfil a legal obligation, we keep it until that need ends. This exception does not mean that all customer data is kept indefinitely.
Contact details used for consent-based marketing are used until consent is withdrawn. We keep proof of consent and its withdrawal for up to three years after withdrawal, so that we can demonstrate the lawfulness of the processing if necessary.
The retention and deletion terms for location and trip data on the GPS platform are set out in the separate GPS service data protection information. The seven-year accounting retention period does not automatically extend to GPS data.
The website may use cookies that are necessary, for example, for the shopping cart, login or user-selected settings to work. The use of cookies strictly necessary for the operation of the service does not require separate consent.
If we use optional analytics or marketing cookies, we ask for consent before placing them. Declining them does not prevent you from using the main functions of the e-shop. The purposes, providers and lifetimes of the cookies used are presented in the cookie information or the consent options.
To withdraw consent, you can contact us at info@protrackest.ee. You can also delete cookies already stored in your browser settings. Withdrawing consent does not make earlier processing unlawful.
We apply technical and organisational measures appropriate to the risks of the processing to protect personal data. Access to data must be limited to people who need it to perform their duties.
Please do not send your regular account password to customer support. If technical assistance requires access to your account, we will agree on a suitable method of access.
You have the right to receive information about the processing of your data and to request access to your data and a copy of it. You can also request the correction of inaccurate data and, in the cases provided by law, the erasure of data, restriction of processing or data portability.
You can object to processing based on legitimate interest. You can always object to the use of direct marketing. Where processing is based on consent, you can withdraw your consent at any time.
Not all rights apply in every situation. For example, documents that we are legally required to retain cannot be erased. If a restriction applies, we will explain the reason.
To exercise your rights, write to info@protrackest.ee. If necessary, we will ask for additional information to verify your identity. We generally respond within one month of receiving the request. For a complex or extensive request, the law may allow the deadline to be extended; we will inform you of this and the reason within the first month.
If you believe your personal data has been processed unlawfully, you can lodge a complaint with the Estonian Data Protection Inspectorate: www.aki.ee. You also have the right to go to court.
Buying a GPS device or ordering the service does not automatically give the right to track other people. If you use the device to track the movements of an employee, driver or another person, you must ensure an appropriate legal basis for this and inform the person of the purpose and extent of the tracking and of their rights.
For a GPS solution used by a company, the company is responsible for the lawfulness of the tracking purposes it defines and of user access. The precise roles of ProTrackEst and the platform provider in processing location data are described in the GPS service data protection information and, where necessary, in a data processing agreement.
We may update this policy when our services, data processing or legislation change. We publish the current version on the website. In the event of a material change, we will inform affected customers in an appropriate way. Publishing a new policy does not replace consent where the new processing requires consent.
FIATINVEST OÜ / ProTrackEst
Registry code: 16307628
E-mail: info@protrackest.ee
Customer support: tugi@protrackest.ee
Phone: +372 502 0071
Address: Sooviku, Lindi küla, Pärnu linn, Pärnu maakond, 88302, Estonia.