**Privacy Policy**
This privacy policy regulates the processing of personal data on the website meinamaa.com (hereinafter “website”).
**1. Data controller**
The responsible processor of personal data is OÜ Epli (e-mail: heinamaa@mail.ee).
**2. Personal data collected and legal basis for processing**
The processing of personal data is based on the performance of the contract, the fulfillment of a legal obligation or the customer's consent. The website collects the following data:
* **Contact details (for the execution of the contract):** first and last name, e-mail address, telephone number.
* **Booking information (to fulfill the contract):** arrival and departure dates, number of visitors, special requests.
* **Data arising from legal acts (obligation arising from the law):** Data of the accommodation's visitor card (including citizenship, data of fellow passengers) arising from the Tourism Act.
* **Technical data (legitimate interest):** IP address and cookies to ensure website operation and statistics.
**3. Purposes of personal data processing**
Data is processed for the following purposes:
* Formalizing, changing, filling out and confirming holiday home reservations.
* Contacting the customer and answering inquiries.
* Preparation of invoices and fulfillment of accounting obligations.
* Fulfillment of the accommodation's obligations stipulated by law (visitor cards).
**4. Transfer of data to third parties**
Personal data will not be transferred or sold to third parties, except in strictly necessary cases and to authorized processors:
* Accommodation software and reservation systems (for technical management of booking).
* Payment service providers (to pay for accommodation via a bank link).
* Accountant providing services on the basis of the Accounting Act.
* National authorities (e.g. Police and Border Guard Board), if the law directly obliges it.
**5. Cookies (Cookies)**
The website uses cookies to improve the user experience and analyze web traffic. The visitor has the right to disable the use of cookies in the settings of his web browser, but this may affect the functioning of certain functions of the website.
**6. Data retention periods**
Personal data is stored according to the following deadlines:
* Visitor cards filled out on the basis of the Tourism Act are kept for 2 years from their completion.
* Original accounting documents and invoices are kept for 7 years on the basis of the Accounting Act.
* Booking and contractual data are stored until the end of the limitation periods (usually 3 years from the end of the contract) to ensure the protection of claim rights.
**7. User rights**
The user has the right at any time to:
* Consult your personal data and receive a copy of them.
* Request correction of incorrect data or completion of incomplete data.
* Demand the deletion of your personal data or restriction of processing (if this does not conflict with data retention obligations arising from the law).
* Withdraw consent given for data processing if the processing was based on consent.
* Submit a complaint to the Data Protection Inspectorate (www.aki.ee) if the user finds that legislation is being violated when processing his data.
In order to exercise questions or the data subject's rights, please contact the e-mail address specified in point 1.