The purpose of this privacy notice is to clarify the types of personal data collected from you, the purposes for which we process them, and the rules governing their processing, as well as to outline your rights. The data controller for your personal information is AAA Creative OÜ (Registration: 16086251), located in Harju County, Tallinn, Kristiine District, Koskla Street 10, 10615, with the email address firstname.lastname@example.org.
1. When you visit the website https://www.aaatv.ee/, your personal data is also processed by our partner and website host, Zone Media OÜ. You can find their privacy notice here: https://www.zone.ee/en/agreements/data-protection-gdpr/. Zone Media OÜ also hosts the email account email@example.com.
2. Email addresses with the domain aaacreative.ee are hosted by our partner Elkdata OÜ, and their privacy notice is available here: https://www.veebimajutus.ee/agreements-terms/.
3. If you wish to purchase fan products through our website and click on the products, you will be redirected to the websites of independent data controllers responsible for those stores. They process the data of individuals visiting their sites.
5. If you become our customer, we process your data minimally for the purpose of entering into and fulfilling the contract as follows:
5.1 We request your email address to send you a link to watch the film. In our administration environment, we see your IP address, the email address you provided, payment status, and viewing history.
5.2 For payment, you will be directed to the payment solution provider Montonio Finance UAB, whose privacy notice can be found here: https://montonio.com/en/legal-information/privacy-policy/. Your data is also processed by the responsible data controller of your bank when making the payment, and you can familiarize yourself with their privacy conditions on their website.
5.3 We see data related to your payment, such as the payer's name, amount, transaction time, IBAN number, etc.
5.4 If you contact us via email for any reason, we process all the information you provide, including your name, contact time, reason, etc.
5.5 When watching the film, Vimeo processes your personal data, and their privacy notice is available here: https://vimeo.com/privacy. Vimeo's server accumulates anonymized data for us, including how many times the film has been viewed, whether it was watched to the end, and in which country it was viewed.
5.6 We retain your data based on legitimate interest for up to 2 years to respond to potential legal claims.
6. The law grants you several rights related to personal data, and to exercise them, we ask you to verify your identity.
6.1 Right to access your data – You have the right to ask what data we have collected about you and how we handle it. Please send your questions to firstname.lastname@example.org.
6.2 Right to rectification – You have the right to request correction or clarification of incorrect or incomplete personal data.
6.3 Right to erasure (“right to be forgotten”) – You have the right to request the deletion of your personal data. However, we may not be able to fulfill the contract in such cases, as certain data is necessary for contract performance. We also have legal obligations, such as the obligation to retain accounting documents.
6.4 Right to object – You have the right to object to the processing of your personal data, especially in the case of direct marketing. We do not use automated data processing or make decisions based on it.
6.5 Right to restriction of processing – You have the right to request the restriction of the processing of your personal data (for example, when we verify the accuracy of your personal data or handle your objections).
6.6 Right to data portability – You have the right to receive your relevant personal data in a structured, commonly used, and machine-readable format.
6.7 Right to lodge a complaint – If you have questions regarding personal data, you can always contact us at email@example.com. If you believe that we are violating your rights related to the processing of personal data, you have the right to contact the Data Protection Inspectorate or the court.
8. We do not transfer your personal data outside the European Union.
9. We only disclose your personal data to third parties, including authorities, when they have a legal right to receive them.
10. We use appropriate technical and organizational measures to ensure the security of your personal data and protect the data.