The controller of personal data is Parkguard OÜ, info@parkguard.ee, +372 5377 0474, company registry code 16985958, Võidu prospekt 8, 21007, Narva, Eesti.​

1. INTRODUCTION
1.1. Parkguard OÜ values the privacy of data subjects and is committed to complying with all applicable laws and regulations concerning personal data.
1.2. Parkguard OÜ processes personal data lawfully, fairly and transparently in relation to the data subject.
1.3. This document explains how and for what purposes personal data is processed and what measures we take to protect it.

2. DEFINITIONS
2.1. Data subject - an individual about whom Parkguard OÜ holds information, or who can be identified from that information. Data subjects include, for example, customers, visitors, individuals contesting contractual penalties, business partners and employees whose personal data is held by Parkguard OÜ.
2.2. Personal data - any information relating to an identified or identifiable data subject.
2.3. Processing of personal data - any operation performed on a data subject’s personal data, including collection, recording, storage, alteration, disclosure, granting access, use, transmission, erasure, destruction and the creation of extracts.
2.4. Customer - a natural or legal person who uses, has used or has expressed an interest in using a service provided by Parkguard OÜ, or who is directly involved in the provision of a service.
2.5. Customer’s contact person - a person designated by the customer who is authorised to represent the customer in the performance of a contract concluded with Parkguard OÜ.
2.6. Business partner - a natural or legal person whose activities enable Parkguard OÜ to provide services to customers.
2.7. Processor - a natural or legal person who processes personal data on behalf of Parkguard OÜ.
2.8. Visitor - a person who uses the Parkguard OÜ website and self-service portal.
2.9. Self-service portal - an online environment through which a customer or visitor can view their contractual penalties and parking permits, perform actions relating to parking permits and contest a contractual penalty.
2.10. Contract - a contract for the provision of services, or any other contract, concluded between Parkguard OÜ and a customer or business partner.
2.11. Cookies - text files stored on a user’s device when they visit a website. Cookies are used to establish and store preferences, regional settings, service usage choices and other information.

3. CATEGORIES OF PERSONAL DATA
​​3.1. Parkguard OÜ obtains personal data through the provision of services and the use of online environments, as well as directly from customers or from other sources, such as public registers or third parties.
3.2. Personal data collected by Parkguard OÜ may include the following information: first name and surname, personal identification code, date of birth, telephone number, email address, residential address, vehicle registration numbers, billing details, details of services ordered, communication history between the data subject and Parkguard OÜ, and photographs showing the vehicle registration number, date and time. 

4. LEGAL BASES AND PURPOSES OF PROCESSING PERSONAL DATA
​​4.1. Personal data is processed for the performance of a contract, on the basis of the data subject’s consent, for the purposes of Parkguard OÜ’s legitimate interests or to comply with legal obligations.
4.2. We process personal data for the following purposes:
   4.2.1. Identifying the data subject;
   4.2.2. Responding to the data subject’s enquiries;
​   4.2.3. Providing information to the data subject;
​   4.2.4. Concluding contracts;
​   4.2.5. Handling communications and requests from the data subject;
​   4.2.6. Performing and enforcing parking contracts for private car parks, including verifying parking entitlement and identifying breaches of parking terms and conditions;
​   4.2.7. Providing services;
​   4.2.8. Correcting and supplementing the data subject’s data;
​   4.2.9. Processing applications contesting contractual penalties that have been issued;
​   4.2.10. Preparing reports;
​   4.2.11. Preparing sales offers;
​   4.2.12. Accounting, including preparing and issuing invoices and collecting payments;
​   4.2.13. Recovering debts and assigning debt claims;
​   4.2.14. Responding to enquiries from public authorities;
​   4.2.15. Protecting rights, including disclosing personal data to courts, bailiffs, legal advisers and dispute resolution bodies;
​   4.2.16. Supporting marketing activities, including service development;
​   4.2.17. Improving the user experience;
   ​4.2.18. Preventing fraudulent activities.

5. SECURITY OF PERSONAL DATA PROCESSING​​

5.1. Parkguard OÜ uses appropriate and reasonable technical and organisational security measures to protect the personal data it processes.

5.2. In the event of an incident involving personal data, Parkguard OÜ will take all reasonably necessary measures and make every effort to ensure that the data subject’s personal data is processed securely and in accordance with this Privacy Policy and the laws of the Republic of Estonia. Where necessary, Parkguard OÜ will contact the Estonian Data Protection Inspectorate and notify the data subject directly or by means of a public notice.

6. DISCLOSURE OF PERSONAL DATA

6.1. Personal data may be disclosed to third parties to achieve the purposes set out in Section 4.

6.2. Personal data may be disclosed to:

   6.2.1. The data subject’s representative or a person authorised by the data subject;

   6.2.2. Processors providing services such as archiving, debt recovery, assignment of debt claims, preparation and issuance of invoices, information system development and other services;

   6.2.3. Business partners, including mobile network operators, debt recovery service providers, IT partners, billing service providers, postal service providers and others;

   6.2.4. Public authorities, including the Police and Border Guard Board, the Tax and Customs Board, courts, the Competition Authority, the Consumer Protection Board and others;

   6.2.5. Other third parties where required by law.

7.  DATA SUBJECTS’ RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA

7.1. The right to receive information and access their personal data.
7.2. The right to have inaccurate personal data rectified.
7.3. The right to request the erasure of personal data where there is no lawful basis for further processing.
7.4. The right to request restriction of the processing of personal data. This right arises where the processing of personal data is not permitted by law or the data subject contests the accuracy of the personal data. The data subject has the right to request restriction of processing for a period that enables the controller to verify the accuracy of the personal data, or where the processing is unlawful but the data subject does not request erasure.
7.5. The right to data portability. The data subject has the right to receive their personal data in a machine-readable format or to request that the data be transmitted to another controller.
7.6. The right to object to the processing of their personal data.
7.7. The right to withdraw consent where the processing of personal data is based on the data subject’s consent.
7.8. The right to contact Parkguard OÜ using its general contact details with questions, requests or complaints relating to the processing of personal data.
7.9. The right to lodge a complaint with Parkguard OÜ or the Estonian Data Protection Inspectorate, or to bring a claim before a court, if the data subject considers that their rights have been infringed in the processing of their personal data.

8. RETENTION OF PERSONAL DATA

8.1. Parkguard OÜ retains personal data in a form that permits the identification of data subjects only for as long as necessary for the purposes for which the data was collected.
8.2. Parkguard OÜ retains the data subject’s personal data for four years where necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.
8.3. Where Parkguard OÜ no longer needs to process the data subject’s personal data, it will erase or anonymise that information. If this is not possible, for example because the personal data is stored in backup archives, Parkguard OÜ will securely store the personal data and isolate it from any further processing until erasure becomes possible.

9. COOKIES AND OTHER WEB TECHNOLOGIES

9.1. Parkguard OÜ may automatically collect certain information about website visitors using cookies.

9.2. The information stored in cookies is used to analyse trends, administer the website, monitor visitors’ activities on the website and collect demographic information. The information obtained is neither intended nor capable of identifying an individual.

9.3. Further information about cookies is available in our Cookie Notice: www.parkguard.ee/kupsised. Data subjects may disable cookies in their browser settings. However, doing so may affect the service provided to them.

10. UPDATES TO THIS DOCUMENT
10.1. Parkguard OÜ reserves the right to amend the document entitled “Parkguard OÜ Personal Data Processing Principles” as necessary.

10.2. Parkguard OÜ will inform data subjects of changes to this document through its website, by email or by other means.
10.3. When this document is updated, Parkguard OÜ will change the document’s update date shown at the bottom.
10.4. If a data subject continues to visit and use the Parkguard OÜ website after this document has been updated, Parkguard OÜ will consider this to constitute the data subject’s implied consent to the changes.

11. DOCUMENT REVISION MANAGEMENT
11.1. The publication date of the new version of this document is 8 March 2026.