Grounds for processing personal data
The Valga municipality government has the right, the ability and the duty to independently organise and manage the life of Valga municipality on the basis of the law, based on the legitimate needs and interests of the municipality's residents and taking into account the specific features of the municipality's development.
The municipality ensures the protection of the legal rights and freedoms of the residents and the observance of the law in the performance of its functions and duties. In the performance of its functions, the municipality exercises public authority and performs public tasks, for which reason the obligation to process personal data of the residents of the municipality may be directly specified in the legislation or derived from the need to fulfil it, on the basis of contracts concluded or by voluntary consent.
The municipality as data controller
Vald, as controller, determines the purposes and means of the processing of personal data. As data controller, the municipality is guided by the principles of lawfulness, fairness and transparency, and collects only the data necessary for the processing to the greatest possible extent. Data shall be stored in accordance with the retention periods laid down by law or in the documents adopted by the municipality. The municipality shall ensure the reliability of the data and shall implement appropriate technical and organisational measures to ensure an appropriate level of data security. Contact details of the municipality
Implementation of data protection
In the performance of its tasks, the municipality processes both personal and special categories of data. The processing of personal data is generally based on the initiative of the individual (request, application, memorandum, request for information, etc., or the person's approach to the authorities or local authorities). In the absence of the initiative or participation of the individual, public authorities process personal data only if the law provides for the right to do so for the performance of a public task. Upon receipt of a document, the relevant employee of the municipality checks the existence of personal data in the document. If these personal data are subject to a restriction on access, only the registration number of the document, the date of registration, the type of document (letter, statement, etc.), the reason for the restriction on access and the time limit, and the name of the official who received the document to execute it are made publicly visible in the register of documents. Personal data with access restriction will only be used within the administration and by officials who need them to perform their duties. We will only disclose personal data to other persons without the consent of the person concerned in cases provided for by law.
If the information is requested from the resident, the information will be provided on what information is required by law or contract, and the possible consequences of not providing it. If the data are obtained on the basis of consent, information on the right to withdraw consent at any time.
Implementing data protection by design and by default
When designing and implementing new products/services or changes to working practices that affect personal data, data protection principles and the implementation of appropriate security measures are taken into account from the outset and the most privacy-friendly solutions are chosen.
Transfers to third countries
The data will be stored in Estonia and will not be transferred to third parties outside the European Union.
Infringements
The municipality documents all breaches of personal data, including the circumstances, impact and corrective actions. Breaches shall be reported to the Data Protection Inspectorate within 72 hours (unless the breach does not pose a risk to the individual). The municipality will immediately notify a resident of a breach of his or her data if it poses a high risk (unless the data have been rendered unreadable or other mitigating measures have been taken, or if notification requires unreasonable efforts - in the latter case, notification of the individual will be replaced by a public notice).
Rights of a resident of Valga municipality
A resident of the municipality has the right to access his or her personal data, to request their correction or deletion, to restrict the processing of his or her personal data and to exercise the right to data portability. The following points should be borne in mind:
- the authority may request further evidence to make corrections;
- when requesting the deletion of data, it must be taken into account that personal data are stored in accordance with the retention periods provided for by law and in the documents of the municipality and if it is technically feasible after the expiry of the retention periods, the data will be deleted;
- data portability can only apply to data collected on the basis of the consent of the data subject or on the basis of a contract concluded between the data subject and the municipality as data processor;
- if data processing in a municipality is carried out in the exercise of public authority, in the performance of a public task (on the basis of a law), the right to data portability does not apply.
- you can also check your personal data in the national registers to which the public authority is a data provider (Estonian Population Register, Social Services and Benefits Data Register, Register of Economic Activities, National Register of Buildings, National Land Register, Land Register, Estonian Education Information System, Health Insurance Fund, Compulsory funded pension register, e-file information system) via the e-service of the state portal www.eesti.ee (under the heading "Citizens").
Making a complaint
If Valga Municipality has, in your opinion, processed your data unlawfully or does not provide you with personal data concerning you, you have the right to lodge a complaint with the Data Protection Officer, Data Protection Inspectorate or in court.
Data Protection Officer
In relation to the processing of different types of personal data, the municipality, as a public authority, has appointed a data protection officer whose contact details are as follows:
Executive Secretary Liina Pettai
Puiestee 8, Valga (Valga municipality)
andmekaitse@valga.ee