Skip to content

Privacy policy

Connected OÜ is the controller of personal data.

Below is an explanation of how your (i.e. data subject) personal data is processed. Processing of your personal data is based on the General Data Protection Regulation and possible specific laws.

Our data protection contact is: Marek Kullas (info@connected.ee)

I Definitions

In order for the privacy policy to be understandable and comprehensible to you, we will explain some of the most important definitions presented in the privacy policy:

  1. Data subject – natural person, whose personal data Connected OÜ is processing. The data subjects are: Other contact, Company representatives, Company contact persons, Partner employees, Current employees, Software users, Actual beneficiaries
  2. Personal data – any information relating to an identified or identifiable natural person („data subject“). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  3. Controller – Connected OÜ as a controller itself determines the purposes and means of personal data processing. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
  4. Third party – a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  5. Profiling – any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
  6. Automated decision-making – making a decision by automated means without any data subject, e.g. human involvement that evaluates his character traits, abilities or other personality traits, if this leads to legal consequences for the data subject or significantly affects him in some other way.
  7. Partners – natural or legal persons or authorities with whom Connected OÜ processes personal data for business purposes or to whom the data is transmitted. According to this document, cooperation partners are recipients of personal data, processors and third parties.
  8. Recipient – a natural or legal person, public authority, agency or another body, to which the personal data is disclosed due to processing.
  9. Processor – a natural or legal person, who is authorised to process personal data on behalf of Connected OÜ, i.e. the controller, based on the instructions of the controller.

Connected OÜ ensures that the personal data is processed lawfully and considers keeping personal data confidential and personal data protection very important. The purpose is to ensure responsible personal data processing based on the interests, fundamental rights and freedoms of the data subject.

The exact extent of the personal data processed by Connected OÜ depends on the purpose for which the personal data is processed. Personal data is collected only for specified and legitimate purposes and will not further process data in a manner that is incompatible with those purposes.

Below, the necessary information is presented about your personal data processing purposes and activities, depending on whether the data was received from you, or which was created during the cooperation between you and Connected OÜ, or which was received from a third party.

Connected OÜ will store personal data for as long as it is necessary to achieve the purpose of the processing. If personal data needs to be kept longer than it is necessary due to the purpose of collection, the personal data will be anonymised so that you are no longer identifiable as a data subject.

II Processing activities where personal data is obtained from you

Here Connected OÜ gives you an overview of the purposes and activities for which we collect your personal data, on which legal basis we process it and how long we store this data. In addition, we outline whether the provision of personal data is voluntary, a legal or contractual obligation or a necessary requirement for concluding a contract and what are possible consequences of not providing the data.

Activities

ActivityPurposeLegal basisData provision basisPossible consequence of failure to provide dataData retention period
Activating serviceProviding serviceData processing for concluding contract at request of data subject and performance of contractVoluntary assignmentFailure to provide service3 years, 6 months from terminating contract
Answering price requestsSalesLegitimate interests (Increasing company turnover)Voluntary assignmentFailure to deliver sales offers1 month from answering
Compliance with data protection requirements (responding to inquiries, resolving incidents)Person protectionLegal obligationVoluntary assignmentData protection compliance may be hindered3 years from answering; 3 years from registering incident
Contract managementProtecting business interestsLegitimate interests (Protecting business rights)Voluntary assignmentNo contract is concluded3 years, 6 months from terminating contract
Customer registrationProviding serviceData processing for concluding contract at request of data subject and performance of contractVoluntary assignmentFailure to provide service3 years, 6 months from terminating contract
InvoicingFinancial operationsData processing for concluding contract at request of data subject and performance of contractContractual obligationViolation of contract7 years from making economic transaction entry
Making sales callsSalesLegitimate interests (Increasing company turnover)Voluntary assignmentFailure to deliver sales offersData not retained
Pre-contract negotiationsSalesLegitimate interests (Increasing company turnover)Voluntary assignmentNo contract is concluded5 years, 6 months from ending negotiations
Responding to customer inquiriesCustomer serviceData processing for concluding contract at request of data subject and performance of contractVoluntary assignmentCustomer service may be prevented5 years, 6 months from answering
Sending price offersSalesLegitimate interests (Increasing company turnover)Voluntary assignmentFailure to deliver sales offers5 years, 1 month from making offer
Verifying right of representationProtecting business interestsLegitimate interests (Company credit risk mitigation, Fraud prevention)Necessary requirement for concluding a contractNo contract is concluded; Customer service may be preventedData not retained

You can get acquainted with legitimate interests assessments by submitting a corresponding request: info@connected.ee

III Processing activities where personal data have been created during our cooperation or obtained from a third party

In addition to providing personal data to Connected OÜ yourself, We’ll also generate data during our cooperation and store your data in the systems used by us. We also obtain data about you from third parties.

Here Connected OÜ gives you an overview of the purposes, activities and on which legal basis we process your personal data what have been created during our cooperation or obtained from a third party. In addition, we outline which categories of personal data we process for which purposes and activities and how long we store this data.

Activities

ActivityPurposeLegal basisCategories and sources of personal dataData retention period
AccountingFinancial operationsLegal obligationBank account number (System); Bill payer’s data (System); Email address (System); Invoice data (System)7 years from making economic transaction entry
Activating serviceProviding serviceData processing for concluding contract at request of data subject and performance of contractCustomer number/ID (System); Email address (Data subject); Name (Data subject); Personal identification code (Data subject)3 years, 6 months from terminating contract
Applying information security measuresProtecting business assets; Person protectionLegitimate interests (Protecting company assets, incl. information assets)Email address (Data carriers (excl. systems), System); Home address (Data carriers (excl. systems), System); Logs (System); Name (Data carriers (excl. systems), System); Personal identification code (Data carriers (excl. systems), System); Phone number (Data carriers (excl. systems), System)10 years from logging
Compliance with data protection requirements (responding to inquiries, resolving incidents)Person protectionLegal obligationEmail address (Data subject, System); Name (Data subject, System); Personal identification code (Data subject, System); Query response (System)3 years from answering; 3 years from registering incident
Customer account managementProviding serviceData processing for concluding contract at request of data subject and performance of contractCustomer number/ID (System); Email address (System); Invoice data (System); Name (System); Personal identification code (System)3 years, 6 months from deleting account
Debt collectionProtecting business interestsLegitimate interests (Protecting business rights, Damage avoidance)Debt data (System); Email address (System); Name (System); Personal identification code (System)3 years, 6 months from when claim becomes enforceable
Ensuring performance of serviceProviding serviceData processing for concluding contract at request of data subject and performance of contractContract data (System); Invoice data (System)3 years, 6 months from terminating contract
InvoicingFinancial operationsData processing for concluding contract at request of data subject and performance of contractBank account number (System); Bill payer’s data (Data subject); Email address (System); Invoice data (System)7 years from making economic transaction entry
Notifications to customerCustomer service; Ensuring customer satisfactionData processing for concluding contract at request of data subject and performance of contract; Legitimate interests (Ensuring customer satisfaction)Email address (System); Name (System); Phone number (System)Data not retained
Personal data management (modifying, correcting, deleting)Person protectionLegal obligationCustomer number/ID (System); Email address (System); Name (System); Personal identification code (System); Phone number (System)5 years from booking
Recording chat conversationsCustomer service; Ensuring customer satisfactionLegitimate interests (Ensuring customer satisfaction, Protecting business rights)Chat recordings (System)6 months from saving
Reporting to official authoritiesSharing data to official authoritiesData processing for concluding contract at request of data subject and performance of contract; Legal obligationName (System); Personal identification code (System)Data not retained
Responding to customer inquiriesCustomer serviceData processing for concluding contract at request of data subject and performance of contractCustomer inquiries (Data subject); Email address (System); Name (System); Phone number (System)5 years, 6 months from answering
Responding to inquiries from official authoritiesSharing data to official authoritiesLegal obligationName (System); Personal identification code (System); Query response (System)Data not retained
Sending promotional offersMarketingConsent; Legitimate interests (Increasing company turnover)Email address (System); Name (System)Data not retained
Software developmentProduct developmentLegitimate interests (Ensuring company software performance, incl. development)Customer inquiries (System); Email address (System); Name (System); Personal identification code (System)Data not retained

You can get acquainted with legitimate interests assessments by submitting a corresponding request: info@connected.ee

IV Disclosure of personal data to cooperation partners

As part of our cooperation, it is necessary to disclose or transfer personal data to Connected OÜ cooperation partners, which are following:

Partners

Accounting service provider
Cloud partner
Communications service provider
Data protection service provider
Sales platform provider
Server solution provider
Technology partner
Workspace management software provider

Cooperation partners have the right to process personal data only to the extent that it is necessary to fulfill the specified purposes. Cooperation partners must comply with the processing requirements given by Connected OÜ.

V Transfers of personal data to a third country cooperation partners

As part of our cooperation, it is necessary to transfer personal data to Connected OÜ cooperation partners located in a third country, therefore we’re applying the following appropriate safeguards:

CategoryMain establishmentSafeguards
Technology partnerUnited StatesAdequacy decision by the EU Commission (incl. EU-US Data Privacy Framework)
Cloud partnerUnited StatesAdequacy decision by the EU Commission (incl. EU-US Data Privacy Framework)
Workspace management software providerAustraliaCertification mechanism
Workspace management software providerUnited StatesAdequacy decision by the EU Commission (incl. EU-US Data Privacy Framework)

You can get additional information about appropriate safeguards by submitting a corresponding request: info@connected.ee

VI Profiling and automated individual decision-making

We are not performing profiling and/or automated decisions on you.

VII your rights

You have the right to get any information about processing principles of your personal data. Connected OÜ makes the principles of processing data available to you on the basis of this document or by submitting an inquiry.

You have the right to consult the information specified in points 1 and 2 of Article 15 of the General Data Protection Regulation. We make the information specified in the Regulation available to you on the basis of this document and/or a corresponding inquiry, which you can submit to: info@connected.ee

You have the right to request correction of personal data. you can correct the data by submitting corresponding request: info@connected.ee

You have the right to request erasure of personal data (“right to be forgotten”). you have the right to demand that your personal data be erasured, for example, if you have withdrawn your consent to data processing and there is no other legal basis for processing your data.

You have the right to restrict the processing of personal data. you have the right to demand the restriction of personal data processing if the processing of personal data is not permitted by law or if you dispute the correctness of the personal data. you have the right to request the restriction of the processing of personal data for a period that allows us to verify the correctness of the personal data or if the processing of personal data is illegal, but you do not request the deletion of personal data.

You have the right to receive the personal data, concerning you that you have submitted to us and the right to transfer this data to another controller (right to data portability).

You have the right to object at any time to the processing of your personal data, which is necessary in case of legitimate interests, including profiling based on legitimate interests.

You have the right to file a complaint with us, the Data Protection Inspectorate or the court if you find that your rights have been violated in the processing of personal data. The contacts of the Data Protection Inspectorate can be found on their website: https://aki.ee

You can contact us with a request or objection: info@connected.ee. We will respond to you no later than one month after receiving the request or objection. If necessary, we can extend this period by two months, taking into account the complexity and amount of the request or objection. In this case, we will inform you about the extension of the deadline for submitting the answer and the reasons for the delay within one month of receiving your request or objection. Upon receiving your electronic request, we will also respond to you electronically, unless you prefer another way of receiving a response.

We have the right to reject your requests if we cannot identify you as a data subject.

If we do not apply measures in accordance with your request or objection, we will inform you of the reasons for not taking measures within one month of receiving your request or objection at the latest, and we will explain to you the possibility of filing a complaint with the supervisory authorities and using legal remedies.

VIII Other principles

Connected OÜ has the right to update, specify and supplement the principles at any time, based on changes in legislation and personal data processing.

Last updated: 16.12.2025 13:40:33




—————————————————————————————————————————————————–

Privacy Policy for Google Calendar Integration and Google API Data Use

Service description 

What private data do we collect from the people who visit our Platform and use our Services? 

Data About Your Accounts on Other Services: 

Service description 

When do we acquire information? 

Automatically collected information about your use of our Services or tools

How do we use your details? 

Enquiries, issues and complaints against the personal data 

Customer data processing appendix: 

GDPR-EU data protection law 

How do we protect your details? 

Do we use cookies? 

We use cookies to: 

Types of Cookies we use 

General Use 

Can-spam act 

We accumulate your email to be able to: 

Limitation of liability 

INDEMNIFICATION 

GOVERNING LAW AND JURISDICTION 

Changes to this privacy notice 

Contacting us 

Privacy Policy

This online privacy policy has been put together to better provide those who find themselves worried about how their ‘Personally Identifiable Information’ (PII) has been used online. PII, as defined in US privacy regulation and information security, is information that can be used alone or with other information to recognize, contact, or find a single person, or even to identify a person in framework. Please read our online privacy policy carefully to obtain a clear knowledge of how we accumulate, use, protect or elsewhere take care of your Personally Identifiable Information relative to our website.

Service description

What private data do we collect from the people who visit our Platform and use our Services?

Data About Your Accounts on Other Services: 

We do send to Google Calendar:

  1. Patients’ forename,
  2. Initial of family name
  3. Reason for the visit (remark)

We use Google OAuth as an authentication and authorization mechanism to link our Platform’s calendar with your Google Calendar. When you authorize our Platform to access your Google Calendar through Google OAuth, we may collect, use, and share information obtained from Google Calendar API in accordance with Google’s API Services User Data Policy, including the Limited Use requirements. Please review Google’s API Services User Data Policy for more information on how your data is collected, used, and shared when using our app.

When do we acquire information?

We get data from you when you get enlisted on our site, respond to an audit, give us reactions on our items or enter information on our site below are the examples:

Automatically collected information about your use of our Services or tools,

This Information is registered automatically with the visit by own configuration or manual of each tool on the website

This for the purpose of improving the website, services and security among which we include security inspection by the administration of the website and third parties.

How do we use your details?

We may utilize the data we procure from you when you enlist, make a buy, join our bulletin, respond to an examination or promoting correspondence, peruse the site, or utilize certain other site includes in the following ways:

Enquiries, issues and complaints against the personal data

Customer data processing appendix:

Customer Data” means any personal data that processes on behalf of Customer via the Service, as more particularly described in this DPA.

Data Protection Laws” signifies all information protection laws and guidelines appropriate to a gathering’s handling of Customer Data under the Agreement, including, where pertinent, EU Data Protection Law and Non-EU Data Protection Laws.

GDPR-EU data protection law  

EU Data Protection Law” signifies all data protection laws and guidelines appropriate to Europe, including (I) Regulation 2016/679 of the European Parliament and of the Council on the insurance of common people with respect to the preparing of individual information and on the free development of such information (General Data Protection Regulation) (“GDPR”); (ii) Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector; (iii) applicable national implementations of (i) and (ii); and (iii) in respect of the United Kingdom (“UK”) any applicable national legislation that replaces or converts in domestic law the GDPR or any other law relating to data and privacy as a consequence of the UK leaving the European Union).

“Europe” signifies, for the motivations behind this DPA, the European Union, the European Economic Area as well as their part states, Switzerland and the United Kingdom. 

“Non-EU Data Protection Laws” means the California Consumer Privacy Act (“CCPA”); the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”); and the Brazilian General Data Protection Law (“LGPD”), Federal Law no. 13,709/2018.

How do we protect your details?

All deals are processed through the gateway service provider and aren’t stored or refined on our machines.

Do we use cookies?

Yes. Cookies are small documents a site or its provider exchanges to your computer’s hard drive through your Browser (if you allow) that permits the site’s or service provider’s systems to identify your internet browser and capture please remember certain information. For example, we use cookies to help us keep in mind and process the things in your shopping cart software. Also, they are used to help us understand your requirements based on prior or current site activity, which permits us to offer you improved upon services. We also use cookies to help us put together aggregate data about site traffic and site conversation so that people may offer better site experience and tools in the foreseeable future.

We use cookies to:

You are able to choose that your personal computer warns you whenever a cookie has been directed, or you can select to carefully turn off all cookies. You can perform that through your web browser settings. Since internet browser is just a little different, check out your browser’s Help Menu to learn the way in which to change your cookies.

If you change cookies off, a number of the features that produce your site experience better might not exactly function properly. It will not have an impact on the user’s experience that produces your site experience better and might not exactly function properly.

Types of Cookies we use

Mandatory Cookies 

required cookie empower you to explore the website and utilize its features, for example, getting to get secure areas of the site and using services at our website. In the event that you have decided to recognize yourself to the website, the Company may put on your program treats containing an encoded, one-of-a-kind identifier. These cookies permit the Company to extraordinarily recognize you when you are signed into the Web site and Services and to deal with your online exchanges and demands.

Focus or Targeting cookies

Site may in some cases use cookie conveyed by outsiders to show you promotions for Website items and administrations that we think may intrigue you on any gadgets you may utilize and to follow the exhibition of Company notices. For instance, in these cases, cookie recall data, for example, which programs have visited the Company’s Web locales. The data gave to outsiders does exclude individual data, yet this data might be re-related with individual data after the Company gets it. In the event that the Website is utilizing one of its own treat related items on our own Website, at that point a cookie identified with promotions may show up on our Web webpage under the Website or one of our associated organization’s name.

Performance Cookies

Performance Cookies permit the Company’s Web destinations and Services to recollect data you have entered or decisions you make, (for example, your username, language, or your area) and give upgraded, closer-to-home highlights. These Cookies additionally empower you to improve your utilization of Connected LLC’s Web site and Services subsequent to signing in. These Cookies can likewise be utilized to recall transforms you have made to message size, text styles and different pieces of website pages that you can change.

 Performance Cookies may likewise be utilized to improve how the Company’s Website and Services work and perform, to upgrade and redo your associations with the Company, and to assist us with furnishing you with more pertinent messages, including promoting interchanges. These Cookies gather data about how Visitors utilize our Web destinations and Services, including which pages guests go to frequently and in the event that they get blunder messages from specific pages.  Connected LLC may utilize its own innovation (under the Connected LLC brand name or a partnered brand name) or outsiders to follow and examine use and volume factual data from Visitors, Attendees, and Customers, to give upgraded associations and more pertinent correspondences, and to follow the presentation of the Company’s commercials.  Connected LLC and its outsider accomplices may likewise use HTML5 nearby capacity or Flash Cookies for these reasons. Streak Cookies and HTML neighborhood stockpiling is unique in relation to program Cookies due to the measure of, sort of, and how information is put away.  Connected LLC likewise utilizes Flash Cookies, to store your inclinations or show content depending on what you see on our Website and Services to customize your visit.

Google Analytics 

We use Google Analytics to investigate the utilization of our site of users and visitors. Google Analytics assembles data about site use through cookies. The data assembled identifying with our site is utilized to make reports about the utilization of our site.

Name of cookieExpiry periodPurposeCompany
_gaPersistent – 2 yearsAnalyticsGoogle Analytics, Google LLC
_ga_JMDY11H0YJPersistent – 2 yearsAnalyticsGoogle Analytics, Google LLC
_gatPersistent – 2 yearsAnalyticsGoogle Analytics, Google LLC
_gidPersistent – 1 dayAnalyticsGoogle Analytics, Google LLC
_sp_root_domain_test_* (x 1535)Session cookieAnalyticsConnected LLC
gaVisitorTypeLongPersistent – 2 yearsAnalyticsGoogle Analytics, Google LLC
gaVisitorTypeShortPersistent – 30 minutesAnalyticsGoogle Analytics, Google LLC

General Use 

To become consistent with Fair Information Methods we will need the following responsive action, should a data breach happen:

We also agree to the average person Redress Rule which requires that peoples have the right to legally go after enforceable privileges against data collectors and processors who neglect to adhere to the law. This theory requires not just that people have enforceable protection under the law against data users, but also that person have recourse to courts or federal government agencies to research and/or prosecute non-compliance by data processors.

Can-spam act

The CAN-SPAM Take action is a regulation that sets the guidelines for commercial email, establishes requirements for commercial announcements, offers recipients to have emails ceased from being delivered to them, and spells out hard fines for violations.

We accumulate your email to be able to:

If anytime you want to unsubscribe from receiving future e-mail, you can email us at by using contact form at our website Connected LLC and we’ll immediately remove you from ALL communication.

Limitation of liability

INDEMNIFICATION

GOVERNING LAW AND JURISDICTION

Changes to this privacy notice

We reserve the right to alter this privacy notice at any time. Such alterations will be posted on our website. You can also obtain an up-to-date copy of our privacy notice by contacting us.

Contacting us

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may do so via the contact us or email us at  klienditugi@connected.ee

Connected LLC

klienditugi@connected.ee

This document was last updated on June 9, 2021