Policy in the processing of personal data of
citizens of the European Union
Definitions
Customer - is any individual or legal entity that uses, used or expressed a desire to use any services provided by InvoiceBox or in any other way related to them.
Customer data - is any information that InvoiceBox knows about the Customer or its representative.
Personal data - is any information directly or indirectly related to the Customer being an individual.
Processing - is any action performed with the Customer Data (including collecting, recording, storing, modifying, granting access, making requests, transferring, etc.).
    General provisions
    1.1. These Rules describe how InvoiceBox handles the processing of Customer Data. More information about Customer Data Processing can also be found on the Invoicebox website: www.invoicebox.ee .
    1.2. As part of the applicable normative acts, InvoiceBox ensures the confidentiality of Customer Data and applies appropriate technical and organizational measures to protect Customer Data from unauthorized access, illegal processing or disclosure, accidental loss, alteration or destruction.
    1.3. In order to process Customer data, InvoiceBox can use authorized data operators. In these cases, InvoiceBox takes all necessary measures to ensure the processing of customer data by such operators in accordance with the guidelines of InvoiceBox and applicable normative acts, and also requires that operators apply appropriate security measures.
      Personal Data Operator
      If you live in the Russian Federation, the personal data operator is: USC LLC
      If you live in the European Union, the personal data operator is: InvoiceBox OU
      As a rule, Customer Data is processed in the European Union, but in some cases, it can be processed in non-EU countries. In such cases, a sufficient level of data protection is ensured in accordance with the decision of the EU Commission.

      InvoiceBox OU
      Name: InvoiceBox OU
      Taxpayer reference: EE101948799
      Registration number: 12855913
      Address: Luise tn 4-46, Tallinn, 10142, Estonia
      Data Protection Officer (DPO): The user can contact the employee using the following email address: privacy@invoicebox.ee or in writing to the InvoiceBox address marked "For Data Protection Officer".

      USC LLC
      Name: USC LLC
      Taxpayer reference: 7810532221
      Registration number: 1089847384362
      Address: 196105, Russian Federation, St. Petersburg, 1 Yuri Gagarin Ave.
      Data Protection Officer (DPO): The user can contact the employee using the following email address: privacy@invoicebox.ee or in writing to USC LLC address marked "For Data Protection Officer".
        Collected information
        Obtaining Customer Data is possible from the Customer due to the use of the services by the Customer and from third sources, for example, public and private registers or from third parties. InvoiceBox mainly collects the following information, but not limited:

        • Identification data, for example, name, surname, personal code, date of birth;
        • Contact information, such as address, phone number, email, IP address;
        • Information about relations with legal entities, for example, data provided by the Customer or obtained from public registers or from third parties for carrying out transactions on behalf of the respective legal entity;
        • Financial data, such as bills;
        • Data obtained and/or compiled when fulfilling an obligation arising from the fulfillment of an obligation arising from the law;
        • Data obtained through communication, for example, by telephone, as well as data obtained by e-mail, from messages and other means of communication, for example, social media channels;
        • Service-related data, for example, submitted applications, requests and complaints, payment for services, data of tickets purchased and airlines used, booking and flight details.
          Use of Information
          InvoiceBox collects and processes information for the following purposes:

          5.1. For general customer relationship management, ensuring and administering access to products and services.
          InvoiceBox uses the information collected to provide, personalize, support and improve the quality of our services. This includes using the information for the following purposes: to conclude and execute contracts, for example, to provide transportation services, to make transfer or pay for purchased services, to carry out internal transactions required to provide our services, including correcting software errors and problems with transactions, analyzing, testing and researching data.

          5.2. To protect the interests of the customer and/or InvoiceBox
          InvoiceBox uses the collected data to ensure the security, protection and integrity of services, provision of support services. The data is also used to provide evidence of business transactions and other commercial communications based on the performance of the contract or the execution of pre-contractual measures at the request of the Customer or to fulfill a legal obligation, or on the basis of the legal interest of InvoiceBox to prevent, restrict and investigate unfair or illegal use of services.

          5.3. To perform legal obligations
          To comply with applicable laws and international agreements, for example, in order to fulfill market transparency requirements and provide information about them to competent institutions; to prevent, detect, investigate and report possible money laundering and terrorist financing if the Customer is subject to financial sanctions or is a politically exposed person, and to verify identity based on: the execution of the contract or the fulfillment of pre-contractual measures at the request of the Customer, or for the fulfillment of a specific legal obligation, or on the basis of the legitimate interest of InvoiceBox.

          5.4. To prove the implementation and protection of legal requirements
          To prove, implement and protect legal requirements, based on the performance of the contract or execution of pre-contractual measures at the request of the Customer or to fulfill a specific legal obligation, or on the basis of the legal interest of InvoiceBox for the implementation of legal requirements.

          5.5. To carry out transactions in the settlement system
          To fulfill obligations to execute international transactions through credit organizations and local payments through intermediary of domestic, European and international payment systems and to comply with the rules and obligations stipulated, for example, by European and international standards and certification systems related to payment cards and security based on: execution of the contract or performance of pre-contractual measures at the request of the Customer, or to perform certain legal obligations.

          5.6. To prevent fraudulent use of services and provide adequate services
          To improve technical systems, IT infrastructure, adapt the image of services in devices and develop InvoiceBox services, through testing and improvement based on the legitimate interest of InvoiceBox.

          Transmission and Disclosure of Information
          In certain cases, InvoiceBox may provide the collected data to other individuals and organizations, including:

          Partners of the company, in particular, include:

          Upon prior notice and with your consent, InvoiceBox may also transfer information to third parties not specified in this Policy.
          Data Storage
          The collected data is stored no longer than is necessary to fulfill the purpose of collecting the processed data in accordance with these customer data processing rules. InvoiceBox can keep the collected data longer, if it is necessary to fulfill the requirements arising from the legislation, duties or the legitimate interest of InvoiceBox. InvoiceBox stores the collected customer data for a maximum of 24 months, starting with the last transaction performed through the services or tools of InvoiceBox.
          Customer Rights
          The Customer, being an individual, has the following rights regarding the processing of his data:

          These rules are available to customers on the company's website: www.invoicebox.ru

          • Users and organizations as per your request.
          • Individuals, organizations and government bodies (to resolve legal issues and settlement of disputes). InvoiceBox has the right to provide your data if it believes that this is required by law, normative act, contract in force, legal process or a request from a government agency or if it is necessary for security purposes, etc.
          • Affiliates and subsidiaries of InvoiceBox. We transfer information to our affiliates and subsidiaries that assist in the provision of services and process data on our behalf.
          • Partners of the company.
            • operators for acceptance and handling of payments;
            • cloud storage providers;
            • partners ensuring safety and security of applications;
            • consultants, lawyers, accountants and other professional services providers;
            • partners providing transportation services and airports;
            • Other persons with your permission
            • To require correction of their Personal data in case of their inconsistency, incompleteness or incorrectness;
            • To object to the processing of their personal data if the use of personal data requires their consent;
            • To require to erase your Personal Data, for example, if Personal Data is processed on the basis of the consent of the Customer. This right does not apply if the Personal data that the Customer requires to erase is also processed on the basis of a different legal reasoning, for example, a contract or obligations arising from the relevant regulatory acts;
            • To restrict the processing of their personal data in accordance with applicable normative acts;
            • To receive information about whether InvoiceBox processes their Personal Data and, if it does, access those data;
            • To receive their personal data provided by themselves and processed on the basis of the consent and performance of the contract in writing or in any of the most commonly used electronic formats and, if technically possible, transfer these data to other service providers (data portability);
            • To withdraw their consent to the processing of their personal data;
            • To submit claims about the use of Personal Data to the Data Protection Inspectorate of the Republic of Estonia (webpage www.aki.ee) if the Customer considers that the processing of his Personal data violates his rights and interests in accordance with applicable normative acts.
          InvoiceBox OU accepts money transfers as a person authorized by the supplier. Financial services are provided by the partner banks.
          Services are provided within the framework of information and technological interaction between the parties to settlements.
          The information on the website is not a public offer.