Privacy Policy
Ring Digital OÜ (“we”, “our”, “us”) is committed to protecting the privacy of our clients, employees, partners and website visitors. Protecting your personal information is a core priority, as we understand the significance of privacy in today’s digital landscape. This privacy policy has been designed to provide a transparent view of our practices and policies surrounding data protection and privacy rights.
Our privacy policy outlines how we collect, use, store and protect your personal data when you interact with us , including when you access our website, use our services, contact us or apply for a job through our recruitment page. This includes any personal data collected when you visit our website, inquire about or engage with our services, communicate with us, or apply for a position through our recruitment page.
We adhere to high standards of data privacy in compliance with relevant laws and regulations, including the General Data Protection Regulation (GDPR) and other applicable data protection laws, to ensure your information is handled safely and responsibly. In addition to complying with the General Data Protection Regulation (GDPR), we also adhere to the Estonian Personal Data Protection Act (PDPA) to ensure that your personal data is handled in accordance with both EU and Estonian data protection laws.
Scope
This privacy policy governs all interactions between you and us, whether through our website or other forms of communication. It covers the personal data we collect in connection with the range of services we provide and functionalities on our website.
Our offerings include strategic marketing consulting to help businesses connect effectively with their target audiences, Social Media Management (SMM) services to enhance our clients' online presence across various platforms, branding services to assist clients in developing a unique identity within their industry, traffic management and Google Ads services, as well as event management services.
It’s important to note that this privacy policy applies exclusively to our services and website. We do not control third-party services, even if linked from our site. We encourage you to review the privacy policies of any third-party platforms or services you interact with, including our social media channels, to understand their data practices.
Information we collect
Throughout our interactions with clients, potential and current employees, website visitors, and others, we gather various types of information to provide and improve our services, facilitate effective communication, and meet our legal obligations. This section outlines the types of information we collect, including what you provide directly, data collected automatically, and information obtained through third-party services.
Information provided by you
When you engage with us through our website or other direct communication channels, you may provide certain personal information voluntarily. This includes contact information like your name, company, email, phone number, and mailing address, which we use to respond to your inquiries and communicate effectively.
If you apply for a job, we collect recruitment-specific data, such as your resume, educational background, work history, portfolio, skills, qualifications, and any additional details you may provide in cover letters or references.
For service-related requests, we may ask for information specific to your business goals, branding preferences, or marketing needs to customize our offerings, whether in Marketing Strategy, Social Media Management, Branding, Traffic Management, Google Ads, or event staffing for expos.
Automatically collected information
In addition to the information you provide, we collect data automatically when you visit our website. Using cookies and similar tracking technologies, we gather technical details, such as your IP address, browser type, device model, operating system, and language preferences. This data enables us to optimize our website’s compatibility and deliver seamless user experience.
We also monitor website activity, including pages viewed, links clicked, time spent on each page, and navigation patterns, which helps us enhance content relevance, improve site navigation, and analyze user engagement.
Information collected from third parties
We sometimes collect information indirectly through trusted third-party sources to better understand user needs and enhance our services. Social media platforms provide us with aggregated insights on user engagement, demographics, and interests, helping us assess how users interact with our content.
In digital marketing, we work with analytics providers, such as Google Analytics, to gain insights into website usage patterns and audience demographics, which allows us to refine our marketing strategies.
For event staffing, we may receive relevant information from third-party organizers or partners to streamline coordination and meet client requirements.
Sensitive information
While we do not typically require sensitive information, such as details about race, ethnicity, religious beliefs, health, or financial status, we may occasionally collect it if legally required, such as during recruitment processes to ensure equal employment opportunities. When such data is necessary, we will obtain your explicit consent as required by GDPR, Article 9(2)(a).
Aggregated and anonymized data
We may create aggregated and anonymized data from the information we collect, generating statistical insights that do not identify individuals. This anonymized data helps us evaluate usage trends, assess the performance of our services, and make informed improvements, without compromising your personal data or privacy.
How we use your information
We use the personal data we collect for a variety of purposes related to our services, business operations, recruitment efforts, and communications. The following describes in detail how and why we use your information to ensure transparency and alignment with your expectations.
To provide and personalize our services
To provide and personalize our services, we use your information to deliver, improve, and customize the solutions we offer. For instance, when assisting with Marketing Strategy and consultation, we analyze the data you provide to design tailored strategies that align with your business goals. This approach enables us to create effective campaigns that enhance your brand’s visibility and audience engagement.
To communicate with you
Effective communication with you is a key part of our service, and your contact information enables us to stay connected. We use your data to respond to inquiries, provide support, and send essential updates, such as changes to this privacy policy, terms of service, or any other service-related notifications.
Additionally, with your consent, we may send you newsletters and marketing updates about new services, promotions, and events relevant to your interests. Social media engagement also benefits from this data, allowing us to acknowledge comments, answer questions, and enhance interactions on social media platforms.
To process job applications
For job applicants, we use personal information to facilitate the recruitment process, from evaluating qualifications to conducting interviews. Information provided in your resume, skills, portfolio, and other application materials allows us to assess your suitability for available roles.
With your consent, we may retain your information in our talent pool for future openings that match your profile. We also keep applicants informed throughout the process, sending updates on the progress and status of their applications.
To improve our website
Our website data helps us continually enhance user experience and optimize performance. By analyzing usage patterns, we gain insights into popular sections and user preferences, enabling us to improve content relevance and make our website easier to navigate.
Technical data, such as browser and device information, allows us to ensure compatibility across devices, while testing and analytics support ongoing optimization of website functionality.
To support legal requirements
In certain cases, we may use your information to fulfill legal requirements. This includes responding to lawful requests from government authorities, ensuring compliance with industry standards and regulations, and conducting audits or investigations as necessary to protect against fraud, security threats, or misuse of our services.
To protect our business
In order to protect our business, we use data to maintain security and ensure compliance. Technical and administrative measures help us prevent unauthorized access and identify any potential fraudulent activity. By analyzing patterns and enforcing policies, we uphold our terms of service and safeguard the integrity of our business.
Legal basis
We are committed to handling your personal information lawfully and transparently. Our processing of your personal data is based on specific legal grounds as required by the GDPR and other applicable data protection laws. This section details the legal bases under which we collect, use, and store your information. The specific legal bases depend on the nature of the interaction and purpose of the processing, as outlined below.
Performance of a contract
When it comes to fulfilling contractual obligations, under GDPR Article 6(1)(b), we process your data to provide and deliver our services as agreed upon. This includes using client data to fulfill contract terms, manage job applications by evaluating qualifications and conducting interviews, and meeting specific service requests to ensure we uphold our contractual commitments.
Legitimate interests
For purposes where processing aligns with our legitimate business interests, we rely on GDPR Article 6(1)(f). These interests cover a range of activities aimed at improving our services and maintaining communication with you. For example, we analyze website usage, client feedback, and performance metrics to enhance our services.
Furthermore, we use data to maintain security and prevent fraud, protecting our clients and business, and conduct analytics to inform business development.
Consent
In situations where neither contractual necessity nor legitimate interests apply, we seek your explicit consent as our legal basis for processing, as required by GDPR Article 6(1)(a). With your consent, we may send promotional communications or newsletters, use cookies for website tracking, or keep your application in our talent pool for future job openings.
Additionally, if we need to handle sensitive data, such as health information during certain recruitment processes, we will request your explicit consent, as specified in GDPR Article 9(2)(a).
Compliance
For processing related to legal compliance, under GDPR Article 6(1)(c), we use data to fulfill our regulatory obligations, whether for responding to lawful requests from authorities, meeting financial and tax obligations, or conducting audits to ensure accountability. This processing is essential for compliance with laws that apply to our operations.
Vital interests
In rare instances, we may process personal data based on the vital interests of an individual, as permitted under GDPR Article 6(1)(d). This applies in emergency situations where data processing is necessary to prevent harm. For example, during events we manage, personal data may be processed to address urgent health or safety concerns, or to respond effectively to security threats if they arise.
Sharing your information
We are committed to maintaining the confidentiality and security of your personal data. However, in order to provide our services effectively and as part of our regular business operations, we may share your personal information with trusted third parties under specific circumstances. Below are the key situations in which we may share your information, as well as the categories of recipients involved.
Service providers
To support our services and operations, we may share information with trusted service providers who work on our behalf. These third parties are carefully selected and legally obligated to use your data solely to provide specific services as agreed. These providers follow strict confidentiality agreements and are not permitted to use your data for any other purpose.
Business partners
We may also share information with business partners or affiliates to deliver services collaboratively. For example, during large-scale marketing campaigns or events, we may work with co-hosts or partners to coordinate activities and ensure smooth service delivery.
Authorities
In compliance with legal obligations, we may disclose personal information to authorities if required by law or necessary to protect our rights and prevent fraudulent or illegal activities. This includes cases where we must respond to subpoenas, court orders, or government requests.
Merger, acquisition or sale of assets
In the event that our company undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. In such cases, we will ensure that the acquiring company agrees to honor the terms of this privacy policy and continues to protect your data. You will be notified of any such changes to ownership or control of your personal data if required by law.
International transfers of data
Some of the third parties we share your data with may be located outside the European Economic Area (EEA) or your country of residence. If we transfer your personal information internationally, we will take the necessary steps to ensure that such transfers comply with applicable data protection laws, such as using the European Commission-approved Standard Contractual Clauses (SCCs) or relying on other legal mechanisms for international data transfers.
Data retention
We are committed to ensuring that your personal data is only kept for as long as necessary to fulfill the purposes for which it was collected and in accordance with our legal obligations. Our data retention practices are designed to ensure that we hold your information for no longer than is necessary and that it is securely deleted or anonymized when it is no longer required.
Retention
We retain personal data related to our clients, including contact information, marketing preferences, and contractual records, for as long as we have an ongoing business relationship, unless otherwise required for legal or regulatory purposes. After the business relationship ends, we may retain certain data for a period of up to 5 years to comply with legal obligations (such as tax or financial record retention requirements) and to protect against any potential claims.
If you have applied for a job with us, we will keep your personal information for as long as needed to process your application. If you are not selected, we may retain your details for up to 12 months in case a suitable position becomes available in the future. If you are hired, we will retain your personal data for the duration of your employment and beyond, as required by labor laws and for the administration of benefits.
Where you have consented to receiving marketing communications, we will retain your personal data until you opt out or unsubscribe. You may withdraw your consent to marketing communications at any time, and we will stop sending them once your request is processed.
We retain information gathered from website analytics and cookies for as long as necessary to analyze website traffic and improve user experience. Data obtained via cookies may be retained for a period specified in our Cookie Policy, after which it is either anonymized or deleted.
Deletion
When your personal data is no longer necessary for the purposes outlined above, we take appropriate measures to securely delete or anonymize your data. We ensure that any data stored in physical or digital form is disposed of safely and in accordance with data protection best practices to prevent unauthorized access or use.
Security of your information
We are deeply committed to protecting your personal data and have established comprehensive security measures to ensure its safety. One of the primary ways we secure your information is through encryption. By encrypting sensitive data during both transmission and storage, we help prevent unauthorized access. For example, when you submit personal information through our website’s contact forms or make payments, secure encryption protocols such as SSL/TLS are used to safeguard your data at each stage.
Access to personal data within our organization is restricted to authorized personnel only. Employees, contractors, and service providers who need to handle your information as part of their job responsibilities are granted access, but only after undergoing training on best practices of data protection. Additionally, they are bound by confidentiality agreements to ensure the secure handling of your data.
To further protect our systems, we use firewalls and anti-malware tools that shield our networks from unauthorized access and potential cyberattacks. Regular security updates keep our defenses up to date against known vulnerabilities, reinforcing the reliability of these measures.
Additionally, we practice data minimization, which means that we collect only the amount of personal information necessary for specific purposes. By limiting the data we store, we reduce unnecessary exposure and associated risks.
Our commitment to security also includes regular audits and ongoing monitoring. These practices allow us to assess the strength of our security measures, identify potential vulnerabilities, and address any gaps swiftly. We review our security protocols frequently to ensure they continue to provide effective protection for your data.
In the unlikely event of a data breach, we have a breach response plan in place. This plan enables us to quickly identify, contain, and mitigate the breach’s impact. If a breach poses a risk to your rights and freedoms, we will inform you promptly, as required by data protection laws, and may also notify relevant regulatory authorities to maintain transparency and accountability.
Your rights
As a data subject under the GDPR, you have a range of rights regarding the personal data we hold about you. These rights enable you to access, correct, or delete your personal data and ensure that your data is processed fairly and transparently. In accordance with the GDPR, you, as a Data Subject, have the following rights:
- Right to access (GDPR, Article 15): you have the right to request access to the personal data we hold about you. This means you can request a copy of your data, as well as information about how and why we are processing.
- Right to rectification (GDPR, Article 16): if you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
- Right to erasure (GDPR, Article 17): in certain circumstances, you have the right to request the deletion of your personal data. This is commonly known as the "right to be forgotten".
- Right to restriction of processing (GDPR, Article 18): you have the right to request that we restrict the processing of your personal data under certain conditions. When processing is restricted, we can store your data, but we will not process it further.
- Right to data portability (GDPR, Article 20): you have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format. You can also request that we transmit your data to another data controller, where technically feasible.
- Right to object (GDPR, Article 21): you have the right to object to the processing of your personal data in certain situations. Specifically, you can object to the processing of your data when we process it for legitimate interests, direct marketing purposes or scientific, historical, or statistical purposes.
- Right to withdraw consent (GDPR, Article 7(3)): if we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of processing that was based on consent before its withdrawal.
- Right to lodge a complaint with a supervisory authority (GDPR, Article 77): if you believe that we are processing your personal data in violation of your rights, you have the right to lodge a complaint with the relevant supervisory authority. In the European Union, this would typically be the data protection authority of your country of residence or place of work.
To exercise any of the rights listed above, please contact us at info@ringdigital.ee. We will respond to your request within the timeframes set out in the GDPR, typically within one month. In certain cases, this period may be extended if your request is complex or if we are handling a large number of requests.
Please note that we may require verification of your identity to ensure that we are providing your data to the correct person. If we are unable to comply with your request, we will explain the reasons for our decision and inform you of your right to lodge a complaint with supervisory authority.
Children’s privacy
Our services are not intended for individuals under the age of 18, and we do not knowingly collect or process personal data from children. If you believe that we have inadvertently collected personal data from a child under the age of majority, please contact us immediately so that we can take steps to delete the data and prevent further processing.
If we learn that we have collected personal data of a child without verification of parental consent, we will take immediate action to remove such data from our systems and discontinue its processing.
We encourage parents and guardians to monitor their children's online activities and to ensure that their personal information is not shared without proper consent.
Data controller
As the data controller of your personal data, we determine the purposes for which and the manner in which your personal data is processed. This means that we are responsible for ensuring that your personal data is processed in compliance with applicable data protection laws, including the GDPR.
If you have any questions or concerns regarding the way your personal data is handled or if you wish to exercise your rights as outlined in this Privacy Policy, you can contact us directly. Our contact details are provided below.
Ring Digital OÜ is the entity responsible for the collection and processing of your personal data. If you would like to contact us regarding your personal data or privacy concerns, please use the following details:
- Company name: Ring Digital OÜ
- Email: info@ringdigital.ee
We take our responsibilities as a data controller seriously and are committed to safeguarding your privacy and ensuring that your personal data is treated with the highest level of security and respect.
Changes to this Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. If we make any significant changes to this policy, we will notify you through a prominent notice on our website or by other appropriate means.
Any changes to this Privacy Policy will be effective as of the "Last Updated" date. By continuing to use our services or interact with us after these changes are posted, you acknowledge and agree to the updated Privacy Policy.