Privacy Notice — Baltic RCC

Baltic RCC OÜ (hereinafter Baltic RCC) is a regional coordination centre established by the Estonian, Latvian and Lithuanian transmission system operators Elering AS, AS "Augstsprieguma Tīkls" and Litgrid AB. Baltic RCC has a place of business in Estonia and permanent establishments in Latvia and in Lithuania. In its activities, Baltic RCC collects, uses and stores (i.e. processes) your data in order to comply with duties and requirements arising from legislation, perform the agreements and contracts concluded with you, or to use your personal data based on your consent. The protection of personal data is essential for Baltic RCC, and we want you to be aware of what kind of data we collect about you, what kind of purposes we use it for, and what are your options and rights. We have included the respective information in this privacy notice (hereinafter the Privacy Notice).

The processing of personal data is based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (also known as General Data Protection Regulation or GDPR) and other relevant legislation.

For the sake of clarity, please note that the Privacy Notice only applies to the processing of personal data in the course of the activities of Baltic RCC and does not reflect the processing of personal data by other companies.

If you have any questions concerning your rights in relation to the processing of your personal data or if you have any questions about how we collect and use your personal data, please contact Baltic RCC:

privacy@baltic-rcc.eu,
Kadaka road 42, 12915, Tallinn, Estonia.

What constitutes personal data and what types of personal data do we process?

Personal data means any information on the basis of which a natural person is identified or identifiable. Information on the processing of personal data applies to the personal data of natural persons. The information contained in the Privacy Notice therefore does not apply to the data of companies or other legal persons or institutions. However, the information provided in the Privacy Notice applies to the personal data of all natural persons engaged in professional activities (e.g. the employees of a company). For example, if you communicate with Baltic RCC as a person related to our contractual partner, we also register and use the data concerning you (personal data). You could be related to our contractual partner as, for example, a member of the management board, a signatory, an employee, or any other related third party.

What are our grounds and objectives for processing personal data?

We use data for the objective we collected the data for and according to the scope required to meet that objective. Once the objective has been met, we will delete the personal data.

The following is a list of objectives for which we collect and use personal data:

· to review and assess your job application;

· to carry out our obligations arising from any contracts entered between you and us and to provide you with the information that you request from us;

· to pursue any legitimate interest of Baltic RCC or the execution of a contract;

· to ensure that the content from our website is presented in the most effective manner for you and for your computer/device.

How do we protect your data?

Baltic RCC ensures the confidentiality of personal data within the framework of applicable legislation and implements relevant technical and organisational measures for protecting personal data from unauthorised access, unlawful processing or disclosure, accidental loss, alterations, or destruction.

How do we use cookies and other monitoring technologies?

Similarly, to many web environments, Baltic RCC also uses cookies on its website. Cookies are small text files that are stored in the computer of the user via the server of the online environment. The purpose of this activity is to enable the recognition of the same user as the web browser sends the cookie data back to the online environment every time it is used.

Are there any persons in addition to Baltic RCC who may process my personal data?

In some instances, Baltic RCC may use its contractual partners for the processing of personal data. Such partners conclude personal data processing activities for meeting the principal obligation as provided in their contract. The contractual partners of Baltic RCC are obligated to comply with all the rules established for the processing of personal data which Baltic RCC also complies with.

How long do we store personal data?

Baltic RCC does not use or store personal data any longer than required for performing the tasks arising from legislation, performing a contract between the parties, or for drawing up legal claims. The storage period may be based on contracts, the legitimate interest of Baltic RCC or the applicable legislation (e.g. legislation related to accounting).

Rights in relation to personal data

You will always be able to examine your personal data that has been collected and is being used as well as its sources and objectives for the use thereof. You are also able to receive information as to how long Baltic RCC stores the data and to whom and to what extent the data is disclosed. The right to access your personal data may be limited by legislation, the rights of other persons for ensuring their privacy or other justified needs (e.g. the know-how, business secrets, internal evaluations, and other materials of Baltic RCC).

In addition to the above you have a right to:

· request correction of personal data;

· request deletion of personal data (right to be forgotten);

· restrict the processing of personal data;

· receive personal data concerning you that you have submitted to us and the right to transfer this data to another data controller (right to data transfer);

· object at any time to the processing of personal data concerning you, which is necessary in case of legitimate interest.

When you apply for a job with us

Competitions and recruitment to fill positions, including evaluation of candidates, are organized by Baltic RCC’s unit to which the employee is recruited and assisted by a service provider. The organisation of the public competition is announced on the website of the Baltic RCC and on job offer portals.

The recruitment process can consist of three rounds – document round, written test and interview. Baltic RCC is processing personal data in the recruitment process on the basis of legitimate interest. In the recruitment process, additional information about the candidate may be collected from public sources. The candidate has the right to familiarize themselves with the received information and submit their own explanations and objections.

We assume that the applicant has given consent to the recommenders presented in the application documents to answer questions about themselves, and the recommenders have also agreed that Baltic RCC will contact them for information.

We offer the position to the candidate whose education, work experience, knowledge, and skills most closely meet the requirements established for the performance of service tasks. We will immediately inform those who participated in the competition about the results of the competition in writing or in another agreed way.

We retain the documents obtained during the competition until the claim expires (1 year) to resolve possible legal disputes arising in the recruitment process.

Changes to this Privacy Notice

We may update our Privacy Notice from time to time. We will notify you of any changes by posting the new Privacy Notice on this page with updated effective date at the top of this Privacy Notice. Changes to this Privacy Notice are effective when they are posted on this page.

Contact information

privacy@baltic-rcc.eu,
Kadaka road 42, 12915, Tallinn, Estonia.

Baltic RCC will answer to your question within 1 month of receipt of the question. That period may be extended by two further months where necessary. If you are not satisfied with how we process your personal data and your inquiry did not result in a satisfactory outcome, you are able to file an electronic complaint at info@baltic-rcc.eu or via post to Kadaka road 42, 12915 Tallinn.

You are also able to file a complaint with one of the supervisory bodies:

· The Estonian supervisory body is the Data Protection Inspectorate; e-mail: info@aki.ee; postal address: Väike-Ameerika 19, 10129 Tallinn; telephone 6 274 135; website: https://www.aki.ee/;

· The Latvian supervisory body is the Data State Inspectorate; e-mail: pasts@dvi.gov.lv; postal address: Elijas Street 17, Riga, LV-1050; telephone 67223131; website: https://www.dvi.gov.lv/lv;

· The Lithuanian supervisory body is the State Data Protection Inspectorate; e-mail: ada@ada.lt; postal address: L. Sapiegos str. 17, LT-10312 Vilnius; telephone 5 271 2804; website: https://vdai.lrv.lt/lt/.