Skip to main content

Processing ofpersonal data

How Pidula Wakepark collects, uses and keeps your data.

In short

  • We only collect what we need to answer your enquiry and perform the contract
  • Analytics and marketing cookies only with your consent
  • Your data is not sold
  • You can view and correct your data and have it deleted

The summary is here to give you an overview – the full text of the privacy policy is binding.

Pidula Wakepark OÜ
Registry code 14975099
Pidula kalakasvatus, Kallaste village
Saaremaa Parish, 93462 Saare County
E-mail: janet@saarewake.ee
Phone: 50 88 969

Privacy policy

This is a translation. If the English and Estonian texts differ, the Estonian text prevails.

  1. This privacy policy governs the principles of collecting, processing and storing personal data on the website saarewake.ee and when using the services of Pidula Wakepark. Personal data is collected, processed and stored by the controller of personal data, Pidula Wakepark OÜ (registry code: 14975099, hereinafter: the controller).
  2. A data subject within the meaning of this privacy policy is a customer or any other natural person whose personal data the controller processes.
  3. A customer within the meaning of this privacy policy is anyone who sends an enquiry or a message via the website, concludes a contract for the use of the Wakepark or otherwise uses the services of Pidula Wakepark.
  4. The controller follows the data processing principles laid down in legislation; among other things, the controller processes personal data lawfully, fairly and securely. The controller is able to confirm that personal data has been processed in accordance with the provisions of legislation.
  5. The personal data that the controller collects, processes and stores has been collected electronically, mainly through the website's forms, the digitally signed contract and e-mail.
  6. The data subject is responsible for ensuring that the data they submit is accurate, correct and complete. Knowingly submitting false data is considered a breach of this privacy policy. The data subject is obliged to notify the controller immediately of any change in the submitted data. The controller is not liable for any damage caused to the data subject or to third parties by the data subject submitting false data.
  7. The controller may process the following personal data of the data subject:
    – via the contact form: first name and surname, e-mail address, phone number (if provided), subject and content of the message;
    – via the group enquiry: in addition to the above, the name of the company or group, the type of event, the preferred date and the number of people;
    – when concluding a contract for the use of the Wakepark: the signatory's first name and surname, the names and ages of the minors accompanying them, and the signed contract together with the personal identification code contained in the digital signature;
    – when using the website: data collected by means of cookies and similar technologies (for example, device and browser data and the pages visited).
  8. The data of minors is submitted by the adult accompanying them, who confirms that they have the right to submit this data.
  9. The legal basis for the processing of personal data is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation (GDPR):
    a) the data subject has given consent to the processing of their personal data for one or more specific purposes;
    b) the processing of personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
    c) the processing of personal data is necessary for compliance with a legal obligation of the controller;
    f) the processing of personal data is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  10. Personal data is processed for the following purposes:
    – responding to enquiries and messages and making offers;
    – concluding and performing the contract for the use of the Wakepark and ensuring the safety of visitors;
    – fulfilling accounting and other statutory obligations;
    – ensuring the security of the website and preventing spam;
    – analysing the use of the website and marketing – only with the data subject's consent.
  11. The website uses necessary cookies, which remember, for example, the choice made regarding cookies. Analytics cookies (Google Analytics) and marketing cookies (Meta Pixel) are used via Google Tag Manager only if the data subject has given consent for this in the cookie banner. Consent can be changed or withdrawn at any time in the cookie settings or via the cookie icon in the bottom left corner of the page.
  12. To protect the website's forms against spam, the Google reCAPTCHA service is used, which is loaded when a form is submitted and which processes device and browser data.
  13. The controller has the right to share personal data with third parties that are processors: web hosting and e-mail service providers, the accountant, the digital signing service provider eID Easy, Google (Google Tag Manager, Google Analytics, reCAPTCHA) and Meta Platforms (Meta Pixel). The controller remains the controller of the personal data. Personal data is not sold.
  14. Google and Meta may also process personal data outside the European Economic Area (for example, in the United States). In such cases, the data is transferred on the basis of safeguards approved by the European Commission.
  15. Rides and accommodation are booked on a third-party booking platform, where the processing of personal data is governed by the terms of that service.
  16. When processing and storing the data subject's personal data, the controller implements organisational and technical measures that ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.
  17. The controller retains the data of data subjects depending on the purpose of the processing, but for no longer than 7 years: enquiries and messages until their purpose has been fulfilled, and contracts and accounting source documents for the period laid down by law.
  18. The data subject has the right to receive information about the processing of their personal data, to access their personal data and to request its rectification, erasure or restriction of processing, and to object to the processing of personal data in the cases provided by law.
  19. If the controller processes the data subject's personal data on the basis of the data subject's consent, the data subject has the right to withdraw their consent at any time.
  20. For more information and to exercise their rights, the data subject can contact the controller at janet@saarewake.ee.
  21. To protect their rights, the data subject can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
  22. This privacy policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia, and the legislation of the Republic of Estonia and the European Union.
  23. The controller has the right to amend this privacy policy in part or in full, notifying data subjects of the changes via the website www.saarewake.ee.