{"id":4342,"date":"2025-01-28T17:05:28","date_gmt":"2025-01-28T15:05:28","guid":{"rendered":"https:\/\/snabb.xyz\/?page_id=4342"},"modified":"2026-08-26T13:51:24","modified_gmt":"2026-08-26T11:51:24","slug":"privacy-policy-for-snabb-platform","status":"publish","type":"page","link":"https:\/\/snabb.xyz\/en\/terms-of-use\/privacy-policy-for-snabb-platform\/","title":{"rendered":"Privacy Policy for Snabb Platform"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy for Snabb Platform<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
    \n \t
  1. General Provisions<\/strong><\/li>\n<\/ol>\n

    1.1. These privacy principles (hereinafter the Privacy Policy) govern the processing of personal data by Snabb O\u00dc, registry code 12801774, address Veerenni tn 40a, Tallinn, 10138 (hereinafter the Controller).<\/p>\n

    1.2. The Controller processes personal data in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter GDPR), the Personal Data Protection Act of the Republic of Estonia (hereinafter PDPA), and other applicable legislation.<\/p>\n

    1.3. For all questions related to the processing of personal data, the Controller can be contacted by email at info@snabb.ee<\/a>.\u00a0<\/strong><\/p>\n\n

      \n \t
    1. Definitions<\/strong><\/li>\n<\/ol>\n

      2.1. Data Subject means a natural person whose personal data is processed by the Controller, such as customers, users of the Snabb platform, business partners, etc.<\/p>\n

      2.2. Personal Data means any data enabling the identification of a Data Subject, including name, personal identification code, date of birth, identity document data, contact details (address, email, phone number), bank account details, vehicle registration plate, and other personal data that becomes known to the Controller in the course of providing the service.<\/p>\n

      2.3. Processing of Personal Data means any operation performed on Personal Data, including the collection, recording, organization, storage, alteration, disclosure, granting of access, making inquiries, extraction, use, transfer, cross-use, combination, closure, erasure, or destruction of Personal Data, or several of the aforementioned operations, regardless of the manner in which the operations are carried out and the means used.<\/p>\n

      2.4. Other capitalized terms used in this Privacy Policy have the same meaning as given to them in Snabb O\u00dc’s Terms of Use or Parking Terms, unless the context requires otherwise.<\/p>\n\n

        \n \t
      1. Purposes, Legal Bases, and Retention Periods of Personal Data Processing<\/strong><\/li>\n<\/ol>\n

        3.1. The Controller processes Personal Data for the following purposes and on the following legal bases, and retains it in accordance with the specified retention periods:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n
        Personal Data Processed<\/strong><\/td>\nPurpose of Processing<\/strong><\/td>\nLegal Basis<\/strong><\/td>\nRetention Period<\/strong><\/td>\n<\/tr>\n
        Data enabling identification of the driver, responsible user, or User (first and last name, personal identification code\/date of birth, contact details).<\/td>\nConclusion and performance of the parking contract; drafting, submitting, and forwarding penalty claims to the vehicle owner or user; resolving claims and disputes.<\/td>\nPerformance of a contract: GDPR Art. 6(1)(b); Legitimate interest: GDPR Art. 6(1)(f).<\/td>\nUntil payment of the penalty or parking fee or until the claim becomes time-barred (generally 3 years from the violation; in case of court proceedings, until final resolution of the proceedings).<\/td>\n<\/tr>\n
        Vehicle and location data and visual evidence (vehicle registration plate, make\/model, time of entry into and exit from the parking area, photos of the vehicle at the location of the violation, camera detection data).<\/td>\nCalculation of parking time, verification of parking rights, documentation and proof of parking condition violations.<\/td>\nPerformance of a contract: GDPR Art. 6(1)(b); Legitimate interest: GDPR Art. 6(1)(f).<\/td>\nStandard parking session logs are deleted or anonymized after the transaction ends; in the case of a recorded penalty, photos and logs are retained until the claim is settled or time-barred (up to 3 years).<\/td>\n<\/tr>\n
        Payment and transaction data and app usage data (parking zone, payment method, amounts paid, transaction date and time, mobile app session data, IP address, device ID).<\/td>\nAccounting for payment of the parking service, processing of payments, fulfillment of accounting obligations, ensuring the security of the Snabb platform, and fraud prevention.<\/td>\nPerformance of a contract: GDPR Art. 6(1)(b); Legitimate interest: GDPR Art. 6(1)(f); Legal obligation: GDPR Art. 6(1)(c).<\/td>\nAccounting documents and transaction data for 7 years from the end of the financial year; IP addresses and security logs for up to 1 year.<\/td>\n<\/tr>\n
        Customer communication, dispute, and notification data (emails, complaints, inquiries, phone call recordings).<\/td>\nEnsuring the quality of customer service, proving statements of intent and transactions, resolving disputes and complaints before the Consumer Disputes Committee or in court.<\/td>\nLegitimate interest: GDPR Art. 6(1)(f).<\/td>\nCall recordings up to 1 year; correspondence, complaints, and Consumer Disputes Committee\/court proceeding materials up to 3 years from the conclusion of proceedings or expiry of the limitation period.<\/td>\n<\/tr>\n
        Data of underlying special conditions and discounts (e.g., parking permits).<\/td>\nVerifying whether a vehicle has parking rights in the area or a valid permit-based discount.<\/td>\nPerformance of a contract: GDPR Art. 6(1)(b).<\/td>\nUntil the validity of the parking permit or discount expires.<\/td>\n<\/tr>\n
        Marketing activity data (email address, phone number, existence of marketing consent, history of direct marketing offers).<\/td>\nSending personalized offers, newsletters, parking discounts, and notifications about the services of the Merchant or its partners.<\/td>\nConsent: GDPR Art. 6(1)(a); Legitimate interest: GDPR Art. 6(1)(f).<\/td>\nUntil consent is withdrawn (or an objection to direct marketing is submitted). The fact of withdrawal of consent is retained for evidentiary purposes for 3 years.<\/td>\n<\/tr>\n
        Cookies, web analytics, and user experience improvement (visit statistics, cookie IDs, device and browser information, navigation data).<\/td>\nEnsuring the functioning and security of the website\/application; improving user experience, compiling usage statistics and analytics (e.g., Google Analytics or similar).<\/td>\nConsent: GDPR Art. 6(1)(a); Legitimate interest: GDPR Art. 6(1)(f).<\/td>\nSession cookies expire when the browser is closed; persistent cookies and analytics data in accordance with the cookie policy (generally from 30 days up to 2 years, or until consent is withdrawn).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        3.2. In the case of processing based on legitimate interest, the Data Subject has the right to object at any time to the processing of personal data concerning them.<\/p>\n

        3.3. For the direct marketing purposes referred to in clause 3.1, the Controller processes Personal Data only if the Data Subject has given a separate, voluntary, and informed consent (e.g., by checking a box in the app or on the website). Consent may be withdrawn at any time by notifying the Controller at the contact given in clause 1.3 or by using the unsubscribe link included in the offer. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.<\/p>\n\n

          \n \t
        1. Collection of Personal Data from Other Sources<\/strong><\/li>\n<\/ol>\n

          4.1. If the Controller collects or receives a Data Subject’s personal data from third parties or public sources (e.g., payment default registers, state registers), the Controller shall inform the Data Subject accordingly, in compliance with the requirements of Article 14 of the GDPR, unless providing such information is impossible or would require disproportionate effort.<\/p>\n\n

            \n \t
          1. Transfer of Personal Data and Processors<\/strong><\/li>\n<\/ol>\n

            5.1. The Controller does not transfer, sell, or lend Personal Data to third parties, except in the cases and for the purposes set out in this Privacy Policy.<\/p>\n

            5.2. The Controller may transfer Personal Data to the following categories of persons, acting as processors or as independent controllers:<\/p>\n

            5.2.1. IT support, server hosting, and software service providers;<\/p>\n

            5.2.2. Payment service providers and banks;<\/p>\n

            5.2.3. Accounting service providers;<\/p>\n

            5.2.4. Debt collection service providers and payment default registers;<\/p>\n

            5.2.5. Partners conducting customer satisfaction surveys and direct marketing;<\/p>\n

            5.2.6. Legal and audit service providers;<\/p>\n

            5.2.7. State authorities and courts, where the transfer of Personal Data is required by law.<\/p>\n

            5.3. The processing of Personal Data generally takes place within the European Union and the European Economic Area (EU\/EEA). If Personal Data is transferred outside the EU\/EEA, the Controller applies appropriate safeguards (e.g., the European Commission’s standard contractual clauses) in accordance with Chapter V of the GDPR.<\/p>\n\n

              \n \t
            1. Rights of the Data Subject\u00a0<\/strong><\/li>\n<\/ol>\n

              6.1. The Data Subject has the following rights with respect to their Personal Data, which may be exercised by submitting a request to the email address given in clause 1.3:<\/p>\n

              6.1.1. Right of access: The Data Subject has the right to obtain confirmation as to whether Personal Data concerning them is being processed, and to access their data and the conditions of processing.<\/p>\n

              6.1.2. Right to rectification: The Data Subject has the right to request the correction or completion of inaccurate or incomplete Personal Data.<\/p>\n

              6.1.3. Right to erasure (“right to be forgotten”): The Data Subject has the right to request the erasure of their Personal Data where the basis for processing has ceased (e.g., upon withdrawal of consent or termination of the contractual relationship) and where the law does not require the Controller to retain the data (e.g., the Accounting Act).<\/p>\n

              6.1.4. Right to restriction of processing: The Data Subject has the right to request the restriction of processing under certain circumstances (e.g., while the accuracy of the data is being verified following an objection).<\/p>\n

              6.1.5. Right to data portability: Where processing is based on consent or a contract, the Data Subject has the right to receive their Personal Data in a machine-readable format or to request that it be transferred to another controller.<\/p>\n

              6.1.6. Right to object: The Data Subject has the right to object at any time to the processing of their Personal Data based on the Controller’s legitimate interest, including profiling.<\/p>\n

              6.1.7. Right to lodge a complaint with a supervisory authority: If the Data Subject believes that their rights have been violated in the processing of their Personal Data, they have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Tatari tn 39, Tallinn, 10134, email info@aki.ee) or with a court of competent jurisdiction.<\/p>\n\n

                \n \t
              1. Data Security<\/strong><\/li>\n<\/ol>\n

                7.1. The Controller implements appropriate technical and organizational measures to ensure the security, confidentiality, and protection of Personal Data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure.<\/p>\n

                7.2. In order to ensure the quality of customer support and to provide evidence of transactions, the Controller has the right to record actions, correspondence, and instructions made via means of communication (telephone, email) and to use them, where necessary, on the basis of the Controller’s legitimate interest in resolving legal disputes.<\/p>\n\n

                  \n \t
                1. Amendment of the Privacy Policy<\/strong><\/li>\n<\/ol>\n

                  8.1. The Controller has the right to unilaterally amend and supplement this Privacy Policy, in particular in connection with the development of services or changes in legislation. The current version of the Privacy Policy is always available on the Controller’s website at snabb.xyz\/<\/a>\u00a0and\/or in the Snabb mobile application.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                  Privacy Policy for Snabb Platform General Provisions 1.1. These privacy principles (hereinafter the Privacy Policy) govern the processing of personal data by Snabb O\u00dc, registry code 12801774, address Veerenni tn 40a, Tallinn, 10138 (hereinafter the Controller). 1.2. The Controller processes personal data in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the […]<\/p>\n","protected":false},"author":2,"featured_media":1568,"parent":2302,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-4342","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/pages\/4342","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/comments?post=4342"}],"version-history":[{"count":19,"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/pages\/4342\/revisions"}],"predecessor-version":[{"id":8195,"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/pages\/4342\/revisions\/8195"}],"up":[{"embeddable":true,"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/pages\/2302"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/media\/1568"}],"wp:attachment":[{"href":"https:\/\/snabb.xyz\/en\/wp-json\/wp\/v2\/media?parent=4342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}