Approved: 21.02.2025
IT and Business Analysis Club (hereinafter ITBAC) processes personal data in accordance with the principles and methods outlined in this privacy policy.
In accordance with applicable law and best practices, personal data refers to any information related to an identified or identifiable natural person. The processing of personal data includes any operation performed on personal data. This encompasses the collection of data in various forms, storage, use, organization, retention, modification, disclosure or making it publicly available, querying personal data, extracting information, cross-usage, deletion, destruction, or a combination of these actions. The processing of personal data may occur in different ways and through various means.
Liriel OÜ (Harju County, Raasiku Parish, Peningi Village, Pargi tn 1-2, 75211, +372 5030586, info@itbac.eu) is the responsible administrator of the website www.itbac.eu and the data controller for personal data collected during the browsing of the website and the provision of services and products.
By subscribing to the newsletter, registering for a training, or making a purchase in the online store on the website, you confirm that you have read and agree to these privacy terms.
Principles of Personal Data Processing
ITBAC processes personal data based on the following principles:
- Legality in the collection and storage of personal data.
- Minimization in the collection and processing of data.
- Transparency towards clients regarding the purposes and methods of data usage.
- Purposefulness in the use of personal data.
- Responsibility in the secure processing of personal data.
- Accuracy and reliability in maintaining the integrity of personal data.
- Storage limitations in retaining collected personal data.
ITBAC operates in the fields of IT and business analysis, as well as IT architecture. As a result, ITBAC possesses the best expertise for integrating built-in and default data protection into its systems, ensuring the optimal implementation of all personal data processing principles.
ITBAC securely stores all collected personal data. In the case of personalized training and consultations, ITBAC ensures the confidentiality of personal data and business secrets obtained from the client, except in cases where both parties have agreed to specific exceptions.
Legal Bases for Personal Data Processing
ITBAC collects personal data through its website or in connection with services and products referenced on the website.
- to offer its products and services
- to offer third-party services and products
- to fulfill contracts entered into with clients
- for collecting technical information on website visitors’ behavior.
Composition, Processing, and Retention of Personal Data
When providing or offering services and products, the legal basis for processing personal data is the contract established between us. When a client purchases a product or service, we collect the following personal data:
- First and last name
- Business name (if applicable)
- Email address
- Phone number
- For paid services, payment information and billing details are also collected if they differ from the purchaser’s information.
- For products delivered to a parcel locker, the parcel locker location is also collected.
In addition to the aforementioned data, we may collect personal data through interactions with the client (e.g., email correspondence, meetings, materials, etc.).
By providing personal data, the client confirms that the information submitted is accurate and up to date. We use this data to confirm purchase orders, respond to inquiries for offers, or process training registrations. We process personal data to fulfill contractual obligations, comply with legal requirements (such as accounting records), and protect our economic interests (retaining contract-related information until the expiration of potential claims).
After the transaction is completed, we securely retain transaction-related personal data for up to 3 years, unless a longer retention period is required by law.
To provide the ITBAC newsletter service, we collect an email address. The legal basis for processing personal data in this case is the client’s consent. By entering their email, the client confirms that the provided information is accurate, up to date, and belongs to them (i.e., subscribing to the newsletter on behalf of another person is not allowed).
Clients can unsubscribe from the newsletter at any time. Upon unsubscribing, all personal data related to the newsletter subscription will be deleted within 24 hours of the request.
The newsletter management system used is Klaviyo, and its terms can be found at the bottom of the https://www.klaviyo.com/ website.
The ITBAC newsletter may include marketing content as well as both public and targeted offers. Receiving marketing messages and offers is based solely on the client’s consent. The client can opt out of receiving marketing messages and offers at any time. In such cases, all personal data related to marketing communications will be deleted within 24 hours of the opt-out request.
Transmission of Personal Data to Third Parties
ITBAC stores personal data on servers located within the European Union. Access to personal data is restricted to employees who need it to resolve technical or customer support issues related to the use of the service.
ITBAC does not transfer collected personal data outside the EU.
ITBAC may share information and content with partners, resellers, and service providers who support ITBAC’s operations, such as accounting services, training organization and marketing services, data analysis solutions, etc. ITBAC only shares data to the extent necessary and requires recipients to keep personal data secure, ensuring confidentiality and processing in accordance with this privacy policy.
Cookies
ITBAC uses cookies on its website. These are small text files that a visitor’s device stores on its hard drive. ITBAC utilizes both session and persistent cookies. Additionally, during website browsing, your IP address, device information, and location data are recorded.
ITBAC processes this data to evaluate its products and services and to enhance the user experience for website visitors.
ITBAC may share certain information and content with partners, resellers, and service providers who support ITBAC’s operations, such as accounting services, training organization, and marketing services, including targeted advertising and data analysis solutions (e.g., Google Analytics, Google Ads). This data processing may involve the anonymized handling of client contact information (e.g., email addresses) to deliver targeted ads and identify similar audiences.
ITBAC only shares data to the extent necessary and ensures that all data recipients are required to keep personal data secure, adhere to confidentiality requirements, and process data in compliance with applicable privacy policies and data protection laws.
Clients have the right to opt out of the use of their data for targeted advertising by submitting a request to info@itbac.eu. You can manage cookie permissions and restrictions through your web browser settings.
User Rights and Complaints
Be aware that, regarding your personal data, you have the following rights at all times, which we fully respect:
- The right to request access to your personal data that we hold.
- The right to request the correction of your data (e.g., if your contact information has changed).
- The right to request the deletion of your data, except where we have a legal basis to retain it.
- The right to restrict the processing of your personal data (e.g., opting out of receiving marketing messages).
- The right to object to the processing of your personal data if you believe we are using it in violation of the law or this privacy policy.
- The right to request the transfer of your personal data.
- The right to request that no decisions concerning you are made solely based on automated processing.
- The right to withdraw previously given consent for the processing of your personal data for a specific purpose or in a specific manner.
Our clients, as data subjects, have the right to contact ITBAC, the Data Protection Inspectorate, or the court if they believe their rights have been violated during the processing of personal data.