1.1. The service provider is AS Postimees Group (Postimees Group), registry code 10184643, located at Tartu mnt 80, Tallinn 10112. Customer support phone: 666 2525 (Mon-Fr 8-17, Sat 8-12) and email: levi@postimees.ee.

1.2. The subscription is considered as an agreement concluded between Postimees Group and the subscriber, which is deemed to have been concluded upon payment of the order.

1.3. By making a subscription to Postimees Group (subscription), the subscriber agrees to follow the terms of subscription of Postimees Group.

1.3. Concepts:

• The Subscriber is a private or legal person who has subscribed to Postimees Group Publications.
• A Subscription is a contract of purchase and sale between Postimees Group and the Subscriber for the purpose of subscribing to a Publication.
• A Publication is a paper or digital product delivered based on the Subscription. A Paper Product is a Publication the contents of which are delivered on paper. A Digital Product is a Publication the contents of which can be accessed through all digital mediums: personal computers, tablet computers and cell phones.

2.1 Information required for a Subscription: first and last name, exact address (street, house number, apartment number, city/town or village/county, postal index), phone number and, if possible, email address and personal identification code.

2.2. For the purpose of delivery, the Subscriber shall ensure:

• a secure and accessible mailbox that can be identified as belonging to the Subscriber that fits the Publication and has a slot no smaller than 230 x 20 mm (length, width);
• easy access to the mailbox, cleared of ice and snow in the winter.

2.3. The Subscription can be registered to a new address within the Republic of Estonia. A corresponding application needs to be addressed to Postimees Group customer support. Re-registration will take effect inside 10 working days of filing the application.

2.4. When the Subscription period ends, Postimees Group will send the Subscriber a new advance payment invoice/sales offer to allow the Subscriber to continue their Subscription comfortably. The offer will not be sent if the Subscriber has chosen not to receive offers.

2.5. The Subscriber can apply for premature termination of the Subscription and refund of advance payments.

2.6. Premature termination of the Subscription requires a written application that lists the Subscriber's name, subscription information and time of termination, account number and name of account owner.

2.7. The Subscriber will be refunded the cost of the Subscription from the date of termination to the final date of the subscription period. The refund will be withheld if the Subscription has been registered with free added value or is a direct debit Subscription. (See clause 3 for additional information).

2.8. Upon premature termination of the Subscription, Postimees Group will refund the Subscriber using the account number provided in the Subscriber's written application, cash refunds are not possible.

3.1. You can pay for the subscription by standing order, e-invoice or card payment.

3.2. A subscription paid by a standing order is renewed automatically up to 10 calendar days before the end of the current subscription period, unless the subscription is temporarily suspended or canceled.

3.3. The duration of the new subscription period and the terms of payment will be derived from the previous subscription period, unless it is a promotional offer, the terms of which are specified separately.

3.4. In case of a standing order Subscription, the first Paper Product will reach the Subscriber's mailbox inside 10 working days.

3.5. The first payment for e-invoices delivered to the Subscriber could be for up to three subscription periods, based on the time of Subscription and the e-invoice standing order agreement:

• The first period payment is calculated based on price of Subscription delivered for the previous period by the time of issue of invoice.
• The second period payment is the price of the current period's Subscription.
• The third period payment is advance payment for the following period.

3.6. An e-invoice standing order agreement can be terminated by visiting the bank or online bank.

3.7. A subscription paid by card can be cancelled through customer support.

3.8. If you cancel a subscription paid by a standing order, the subscription will last until the end of the prepaid period and the advance payment will not be refunded.

4.1. The digital package provides access to the paid content of the websites of the publications included in the package.

4.2. The use of the service requires the existence of a user account. The user account is a personal account through which the customer identifies him/herself.

4.3. The service can be used in up to five devices at a time.

4.4. A subscription paid by a standing order is automatically renewed at the end of each subscription period, unless the subscriber cancels the subscription before the end of the current subscription period. The duration of the new subscription period and the terms of payment will be derived from the previous subscription period, unless it is a promotional offer, the price and duration of which are determined separately.

4.5. In the case of a 1-month subscription paid by a standing order, it is possible to change the package without cancelling the subscription. When exchanging a package for a higher priced one, the package will be exchanged immediately, but the price will change on the next payment date. When exchanging a package for a lower priced one, both the package and the price will change on the next payment date. You can change packages from the “My subscriptions” view of your user account.

4.6. A subscription can be cancelled from the user account under “My subscriptions” or via customer support. If you cancel a subscription, it will last until the end of the prepaid period and the advance payment will not be refunded.

4.7. The subscriber can use the discounted offer once. If the Subscriber cancels the Order and makes a new Order, the new Order is valid at the normal price.

4.8. Shows / series may have geographical restrictions on the right to show, which means that the producer of the show / series has given the right to show it only in the territory of Estonia. Geographical restrictions also extend to the subscriber of digital products.

4.9. Postimees Group has the right to analyze the activities of website users in order to improve the services, mainly regarding the users’ previous history of service use.

5.1. Postimees' loyalty program gives the subscribed subscriber the opportunity to participate in lotteries and receive a part of loyalty offers.

5.2. It is possible to join the loyalty program and you can see information about valid lotteries and offers on the website www.lojaalsus.postimees.ee

5.3. In order to join the loyalty program, the Subscriber must fill in all the required information.

5.4. Postimees Group has the right to transfer the data of the Subscriber who has joined the program to the cooperation partner (for example, if the Customer has to identify himself / herself at the cooperation partner in order to receive the discount).

5.5. We occasionally notify Subscribers who have joined the program of loyalty offers by e-mail or other channels.

5.6. Upon termination of the order, the Subscriber loses the right to participate in the draws.

6.1. For the contracts relating to the transmission of digital content that are not delivered on a physical medium, the 14-day right of withdrawal is not applicable.

6.2. The 14-day right of withdrawal does not apply to contracts concerning delivery of newspapers, magazines or other periodicals (except in the case of long-term contracts for subscription to such publications).

7.1. The subscribers has the right to submit complaints about the service to Postimees Group within 2 months from the discovery of the deficiency.

7.2. All complaints submitted to Postimees Group will be reviewed and answered as soon as possible but not later than within 14 days of the receipt of the notice.

7.3. Postimees Group undertakes to resolve the complaint by the subscriber if the reasons for the complaint are not dependent on the subscriber.

7.4. If Postimees Group does not resolve the complaints of the subscriber within a reasonable time, the subscriber may contact the Consumer Protection Board.

8.1. Postimees Group does not guarantee appropriate execution of subscriptions and has the right to terminate a Subscription if:

• information provided by the Subscriber is false and/or inaccurate:
• the Subscriber's mailbox does not meet requirements outlined in clause 2.2
• the Subscriber fails to pay for the Subscription by the payment deadline
• the Subscriber fails to comply with other subscription conditions.

8.2. Postimees Group has the right to unilaterally change the terms of subscription by notifying about in on the webpage or otherwise at least 1 month in advance.

8.3. If the subscriber does not agree to the subscription terms, s/he will be able to unsubscribe within 1 month from the publication of the change. If the subscriber does not express the willingness to terminate the subscription within 1 month, the changes are deemed to have come into effect.

8.4. Postimees Group has the right to change the price of the subscription by informing the subscribers in advance of the price change. Changes in the subscription prices come into force at the beginning of the next subscription period after the date of the price change.

8.5. Postimees Group retains the right to suspend the publishing or discontinue the Publication either in part of in full. Should Postimees Group decide to suspend the publishing or discontinue the Publication, the Subscriber will be refunded for advance payments made.

1. Joining with the AS Postimees Groupp newsletters (Postimees, rus.Postimees, Maa Elu, Elmar) is free.

2. The newsletter is an email sent to a subscriber every day, once a week, once a month or less frequently, including postimees.ee and the news of its subdomains on topics selected by the subscriber.

3. To subscribe to the newsletter, the subscriber's e-mail address must be entered, collected both by AS Postimees Group and Smaily.com, through which the newsletters are sent to the subscribers.

4. The subscribed newsletter can opted out at any time via the link LEAVING THE LIST at the end of the newsletter.

5. If you opt out of the newsletter, the email address will be removed from the list and the newsletter will no longer be sent.

6. By joining the newsletter, you consent to the storage and processing of your personal data in accordance with the general principle of the processing of personal data of Postimees Group.

7. If you have questions, you can contact turundus@postimeesgrupp.ee.

The newspaper Postimees owned by AS Postimees Group and the county newspapers belong to the Estonian Newspaper Association (EALL), which supports the possibility of commenting as a democratic manifestation in the online environment, and considers the comments as a free opportunity for discussion on various topics. The possibility for commenting generated at the online newspapers is not considered as a journalistic activity, and the comments published there are the readers' views about the content they are responsible for.

1. Providing the possibility of commenting, AS Postimees Group is based on the good practice established by the Estonian Newspaper Association (EALL), according to which:

1.1. comments that contain obscenities are deleted from the comment environment; incite hatred between peoples and races, war; call for the use of drugs and weapons, the overthrow of state or betrayal, or physical violence against specific individuals; disseminate lies or disparage other persons unjustifiably;

1.2. a comment that does not conform to the good practice must be deleted within a reasonable time after submission of the relevant notice;

1.3. at the request of a court or other procedural authority, all information that is stored in a comment that does not comply with the good practice must be rendered up;

1.4. other measures may also be taken against the writing of inappropriate comments (word filters, blocking the previously transgressed IP address, reporting to the law enforcement authorities).

2. By submitting only their opinions, notices and other information through the online environment of AS Postimees Group, their author also submits their publication rights (author's proprietary rights) to the paper publications of AS Postimees Group.

3. With the publication of the comment, the commentator has given a permission to process the personal information revealing the racial or ethnic origin, political opinions, religious or philosophical beliefs or belonging to a trade union, genetic data, biometric data used to uniquely identify a natural person, health data or data on a person’s sexual life and sexual orientation.

4. All possible works that are sent via the web-address of AS Postimees Group are not subject to remuneration, unless the parties agree otherwise.

5. AS Postimees Group guarantees the confidentiality of personal data (including contact address) of commentators, except in cases provided for by the law (incl. at the request of a court or other procedural body) and in the special agreements (for the delivery of possible game prizes, subscription, etc. to the addressee).

6. Only the identified users can comment on the AS Postimees Group online environments. An identified user is considered to be an user primarily identified by an ID card or a Mobile ID. AS Postimees Group has the right to consider as identified also a user whose internet identity, in our estimation, is sufficiently reliable.

7. AS Postimees Group guarantees the anonymity of the people giving the potential news hints according to the good journalistic practice and the Code of Ethics of the Estonian Press.

AS Postimees Group awaits readers’ hints concerning interesting or worrying events and topics. Hints can be sent in as text, image or video. Images and video require an explanation – who, where, when and why? Hints should observe the aspect of newsworthiness – news photos need to be taken inside the past two weeks.

1. Keep in mind when sending in hints:

1.1. By sending in a hint, the person gives their consent for the publication of the material.

1.2. When sending in hints, the person confirms they are the author of images/video.

1.3. By sending in hints using AS Postimees Group online portal or via email, the person also gives publication rights (the author’s financial rights) to AS Postimees Group print publications.

2. By sending in hints, the person agrees to their IP address being processed by AS Postimees Group.

3. When sending in a hint, the person can attach their contact information (name, phone, email); by adding said information, the person agrees to AS Postimees Group processing their personal information.

4. By sending in a hint, the person has allowed AS Postimees Group to process their personal data in terms of racial or ethnic background, political views, religious or philosophical convictions, union affiliation, genetic information, biometric data for the purpose of singular identification, health data or data on sexual life and orientation.

5. Works sent to AS Postimees Group online are not subject to remuneration provided the sides have not agreed differently.

6. AS Postimees Group ensures the privacy of the person’s personal information, unless sharing the information with third persons (incl. by order of the court or other bodies authorized to carry out proceedings) is necessary for AS Postimees Group to fulfill its legal obligations or if the person has provided consent for forwarding personal information (for the purpose of delivery of game victories, subscriptions etc.)

Materials published in the webpages of AS Postimees Group (including articles, photographs, blogs and forums, comments, etc.) are the copyright protection objects within the meaning of the Copyright Act, the copying and distribution of which without the written consent of AS Postimees Group is generally prohibited. For a written consent, please contact us at: isikuandmed@postimeesgrupp.ee. The right to use the digital media of AS Postimees Grupp is set out in this document of terms and conditions. The user agrees to the use of the applications or the related services under these terms. AS Postimees Group reserves the right to make corrections in the terms at any time. These changes are made available with these applications or services, and will be effective from the moment of publishing.

1.1. Validity and change in the terms of use

1.1.1. The general terms and conditions apply to all users of the Postimees Group services and visitors to the webpages.

1.1.2. AS Postimees Group has the right to change the general terms due to the substantive or technical development of the field, amendments to the laws or regulations.

1.1.3. The change to the general terms and conditions applies from the moment when the updated terms are published on the webpage related to AS Postimees Group.

1.1.4. If the users of the AS Postimees Group service or visitors of the webpage do not agree to the changes in the terms, they have the right to terminate the use of the AS Postimees Group services within one (1) month from the publishing of the terms. If the user does not waive using the service within one (1) month of the enforcement of the terms, the changes shall be deemed to come into force and the user as having accepted them.

2.1. AS Postimees Group is committed to ensuring a good and continuous availability of its digital applications, services, and content, but in no way guarantees their availability at all times and does not prevent the possible interferences in their work.

2.2. AS Postimees Group reserves the right at any time to suspend the availability of its applications, services or content for the technical or other reasons without informing users in advance. As a result, AS Postimees Group is in no way responsible for any inconvenience or damage caused by such interferences. Such interferences do not give rise to the reimbursement of fees paid for the applications or services, discounts or other financial compensation, except in cases where such interferences result from the deliberate and knowing activities of AS Postimees Group.

2.3. AS Postimees Group is not responsible for the temporary or permanent damage or the malfunctions that may arise from the use of the digital media applications or services of AS Postimees Group, or occur in use. In particular, AS Postimees Group is not responsible for the viruses or malware that may spread through the digital applications or services.

3.1. The sale of individual publications and subscriptions in the digital applications is carried out with the iOS devices through the App Store and with the Android operating systems through the Google Play Store service, and consequently the terms of use of the App Store or the Google Play Store and the resulting requirements apply to these transactions. Subscriptions and purchases made through other channels are subject to the terms of use of the respective service channels.

4.1. When using Postimees Group materials, copyright of AS Postimees Grupp and its journalists’ articles and other materials must be observed, irrespective of whether the material has been obtained through news agencies, websites or other mediums.

4.2. Use of materials is subject to legal rules and principles of the free use of works. Referencing articles is permitted in the cases and volume provided by law. For every article referenced, the publication and author need to be mentioned. When referencing online articles, a link to the original story needs to be included. It is generally permitted to reference the headline and a single sentence of an article. The sentence should not be longer than the lead of the original text. Online synopses need to be accompanied by an exact reference to AS Postimees Group original materials as follows: “The full text of the referenced article can be found on AS Postimees Group website.” The reference needs to be in the form of a hyperlink that takes the reader directly to AS Postimees Grupp original material used. These requirements apply if the sides do not have a different previous agreement.

4.3. Let it be said in the interests of clarity that without written consent or consent that can be reproduced in writing from AS Postimees Grupp, copying, publication or making available to third persons of materials on physical or electronic data mediums, including but not limited to social media, is prohibited in any capacity exceeding cases provided in the law. This rule also applies to videos uploaded to YouTube using AS Postimees Grupp accounts. It is furthermore prohibited to automatically or manually download materials, save or process them, as well as to forward materials to third persons, including for the purposes of downloading.

4.4. Use of materials in any capacity (including in full) exceeding free use of works, also use of materials for commercial purposes, is possible with written consent or consent that can be reproduced in writing from AS Postimees Grupp provided a license agreement with AS Postimees Grupp has been signed. For more information on licensing conditions and licensing fees, please contact the editorial of Postimees.

4.5. Failure to comply with aforementioned conditions for use of materials and referencing gives AS Postimees Grupp the right to charge the violator based on the following price list:

• Single instance of illegal use of materials - €200 (VAT not included);
• Repeated (two or more) instances of illegal use of materials - €320 per incident (VAT not included)

1.1. Postimees Group – AS Postimees Grupp (registry code 10184643, address Tartu mnt 80, 10112 Tallinn), which processes the User's Personal Data as a controller within the meaning of the GDPR in accordance with these Principles; Postimees and its news portals in Estonian, Russian and English; Tartu Postimees, Pärnu Postimees, Sakala, Virumaa Teataja, Järva Teataja, South-Estonian Postimees and their news portals, weekly Maa Elu ja magazines Osuti, 60+ and Koolilõpp; Entertainment websites Elu24 and Russian-language Limon; OMG.tv; in addition, more than ten thematic portals; Radio stations Kuku, Elmar, MyHits, Narodnoe Radio and DFM; BNS news agency; Postimees Publishing House; AS Kroonpress; Direct mail Target Master OÜ; SIA TVNET; SIA LETA; 15min UAB; UAB Diginet LTU; BNS Lithuania, processes the User's Personal Data as a controller within the meaning of the GDPR in accordance with these Principles;

1.2. Duo Media Networks – TV channels Channel 2, Channel 11, Channel 12, MyHits;

1.3. OMG tv A streaming service, which gives the Customer access to various films, TV series and TV channels, as well as other services offered by OMG TV or its partners.

1.4. Maaportaal Maaportaal and advertisement portal soov.ee

1.5. GDPR – Regulation by European Parliament and Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

1.6. Personal data – means any information relating to an identified or identifiable natural person;

1.7. User – a natural person who visits the Webpage; Creates an account on the Webpage or uses the Services;

1.8. Agreement – an agreement to be concluded between the Media companies and the User on the basis of which the User gains access rights to the paid content of the Webpage and/or the subscription to the newspaper, and will pay the fee to the Media companies if it is agreed upon. For the purposes of these Principles, the Agreement also includes agreements concluded between the Media companies and the User, on the basis of which the User is entitled to post comments on the articles appearing on the Webpage;

1.9. Service – all services and functionalities that have been made available to the User by the Media companies, e.g. subscribing to the publications belonging to the Postimees Group, commenting on the articles, reading the articles, subscribing to the news letters, announcements of the products, services and benefits of the companies and/or partners belonging to the Media companies; organizing consumer games, campaigns and/or lotteries;

1.10. Processing – any automated or non-automated operation or a set of operations, including collection and transferring, carried out with the Personal data or their aggregates;

1.11. Webpage – postimees.ee and all the related sub-domains, secure.pmo.ee, kliinik.ee, targetmaster.ee, maaportaal.ee, 15min.lt, tvnet.lv and all the related sub-domains and the mobile applications managed by the Media companies.

2. Personal data and the ways to collect them

2.1. The Media companies collect Personal data upon the conclusion of the Agreement, in the provision of the Services, and otherwise in the use of the Webpage by the User as follows:

2.1.1. The User himself/herself transfers to the Media companies his/her Personal data (for example, name, contact information, user name, password, posts comments, uses various Webpage features and Services);

2.1.2. The Media companies collects information about the User's behavior and activities regarding the use of the Services and the Webpage (data according to the terms of the use of cookies available from here);

2.1.3. The Media companies can confirm the User's identity and/or the payment order with the third person who provides the corresponding service. For example, a user can identify him/herself via an ID-card, Mobile-ID, a bank link, a Facebook account, or a Google+ account, and make payments under the Contract via the bank link service. The Media companies do not see the User PIN 1 or PIN 2 codes and do not save them. By authenticating via an ID-card and Mobile-ID, and by signing the statements of intent or confirmations, the User is required to comply with the security requirements and recommendations of the respective developers and the Media companies. To do this, we recommend that you get acquainted with the additional information at http://mobiil.id.ee and http://www.id.ee;

2.1.4. Media companies, including Postimees Group journalists can record their location on the premises and messages and orders received via communication channels (email, phone etc.), also information and other operations and use these recordings to prove orders or other operations as necessary.

2.2. Media companies Process the following Personal data:

• identification data (name, date of birth, gender, personal identification code)
• contact data (phone, email, address)
• In the case of contractual payments, bank data (User's bank account, bank name)
• Data of IP addresses and cookies

3. Objectives and a legal basis for the processing of personal data

3.1. The Media companies process the User's Personal data for the following purposes and legal basis:

3.1.1. To conclude or execute the Agreement to be concluded or concluded with the User, e.g.

3.1.1.1. To assist and advise the User who has entered into an Agreement, if the User has submitted a corresponding request to Media companies;

3.1.1.2. The Agreement concluded with the User for the transfer of invoices or other important notices related to the Service;

3.1.1.3 The Agreement concluded by the User for the provision of contractual Services and the delivery of goods, including the access to the contents of the Webpage.

3.1.2. Based on the User’s consent, e.g.

3.1.2.1. By the estimation of the Media companies, the display of an advertisement of interest to the User, if the User has agreed to install the corresponding cookies in his web browser;

3.1.2.2. Sending notifications to the User about the goods, services and benefits of the Media companies and the partners of the Media companies, if the User has given the corresponding consent;

3.1.2.3. Sending a newsletter to the User, if the User has forwarded his/her e-mail address to the Media companies for this purpose;

3.1.2.4. Carrying out of the consumer games, lotteries and campaigns organized by the Media companies, provided that the User has given the corresponding consent.

3.1.3. Based on the legitimate interest of the Media companies, e.g.

3.1.3.1. To contact the User for the direct marketing purposes if it is possible to assume that the User is interested in the respective offer under the previously concluded Agreement or on the basis of the provided Service, and the User has not expressed dissatisfaction or objected to such communications;

3.1.3.2. To ensure the execution of the Agreement entered into with the User, including for the detection of violations of the Agreement or the legislation by the User, and for its verification (for example, for presenting claims against the User). In this case, the legitimate interest of the Media companies in protecting their rights is the legal basis for the Processing. In the event that the User has violated the Agreement or the legislation, the interests and rights of the User are not considered superior to the legitimate interest of the Media companies;

3.1.3.3. For the collection of the statistics of the Webpage visitation, and the use of the Service, and for other non-personalized technical information regarding the use of Webpage, in order to supplement the Webpage and Services.

3.1.3.4. For processing CCTV camera recordings on the territory of media enterprises. The purpose of using cameras and processing recordings is to protect the property of employees, visitors, Postimees Grupp AS and other persons in the territory; security; defense and submission of claims, and the resolution of claims. In addition, Postimees can process camera recordings and for journalistic purposes. Read more.

3.1.4. To fulfill the obligations arising from the law on the Media companies, e.g.

3.1.4.1. statutory obligation to maintain the accounting records;

3.1.4.2. on the basis of legitimate requests, statutory obligation to transfer to the competent authorities the Users’ personal data;

3.1.4.3. the obligation arising from the law on the Media companies Act to respond to a request or order submitted by the User.

3.2. The User's personal data may also be processed if this is necessary in a specific case in the legitimate interest of the Media companies or a third party, unless such interests are overridden by the User's interests or fundamental rights and freedoms for which the personal data must be protected, or if this is necessary to protect the vital interests of the User or any other natural person.

3.3. If the Processing of Personal data is based on the legitimate interest of the Media companies, the User has the right to file an objection at any time.

4. Transfer of personal data to service providers (authorized processors)

4.1. The Media companies uses the service providers for Processing the User’s Personal data (authorized processors within the meaning of the GDPR). The Media companies is convinced of the reliability of such service providers by entering into the data processing agreements with them and being responsible for their activities.

4.2. The Media companies uses the following categories of the Authorized Processors: The companies belonging to the Media companies, providers of servers and cloud service, providers of platforms used for conducting consumer games, lotteries and campaigns organized by the Media companies, home delivery service providers.

4.3. Users have the right to request from the Media companies more detailed information on the authorized processors by using the contact details in clause 12.

5. Transferring personal data to the third persons

5.1. The Media companies will only transfer Personal data to the third parties to the extent that the Media companies is obligated to do so by law, if necessary for the execution of the Agreement entered into with the User, if the Media companies has a legitimate interest or if the User has given its consent.

5.2. The Media companies transfers the User's Personal data to the following third parties:

5.2.1. For the postal service provider to deliver orders and promotional materials. In this case, the legal basis for the transfer is the execution of the Agreement entered into with the User, the legitimate interest of the Media companies or the consent of the User;

5.2.2. for the associations belonging to the Media companies, to enable to offer the customer the discounts for the companies belonging to the Media companies. In this case, the legal basis for the transfer is the legitimate interest of the Media companies in providing the service;

5.2.3. on the bases provided for in legislation for the supervisory, investigative and law enforcement agencies. In this case, the legal basis for the transfer is the fulfillment of the statutory obligation of the Media companies;

5.2.4. for the auditors, legal and other advisers, if this is necessary for the performance of their duties to the Media companies and provided that they keep the relevant data confidential. In this case, the legal basis for the transfer is the fulfillment of the statutory obligation of the Media companies (for example, auditors) or the legitimate interest of the Media companies in protecting their rights;

5.2.5. for a debt collector if the User has incurred debts owed to the Media companies. In this case, the legal basis for the transfer is the legitimate interest of the Media companies in protecting their rights. In a situation where the User has violated the Agreement or otherwise violated the rights of the Media companies the interests and rights of the User shall not be considered superior to the legitimate interest of the Media companies.

5.2.6. for registration and self-validation, you may also use tools provided by third parties such as Google or Facebook based on your consent. In that case, we will be able to create a profile for you based on the information we receive from such third party service providers and the information about you will be provided to those service providers. You can also log in to your account using the services of these third parties, if you already have one;

5.2.7. in order to obtain website traffic, website usage statistics and other non-personalized technical information, the User's personal data may be transferred to Service Providers such as Google and Facebook to improve the Website and Services, as well as the User experience based on Media Companies' legitimate interests.

6. Transferring personal data to the third countries

6.1. In the event that the User's data is transferred or processed in a country outside the EU / EEA, Media companies will provide appropriate guarantees for the protection of your personal data, for example, by concluding a standard data protection clause that provides security measures to ensure compliance with the protection law data, and also undertakes to introduce the necessary additional protection mechanisms to ensure that the User is provided with the same data protection guarantees as GDPR.

7. Storage of personal data

7.1. The Media companies stores the User's Personal data as long as it is necessary for the purpose of their collection, for the protection of the rights of the Media companies or until required by law.

7.2. Depending on the type of personal data, Media companies stores the User’s Personal data as follows:

7.2.1. Accounting documents: 7 years from the end of the relevant fiscal year, as required by law;

7.2.2. Personal data related to the Agreement: 10 years from the termination of the Agreement, due to the maximum limitation date for the intentional infringement;

7.2.3. Cookies data: according to terms of cookies usage.

8. Security

8.1. The Media companies takes the necessary organizational, physical and info-technological security measures to ensure the User's Personal data security.

8.2. The User, who created the account on the Webpage, undertakes to keep the user name and password required for entering the Webpage in secret and in such a way that it will not fall into possession of the third parties, except if s/he has authorized a third party to use his user name and password for the use of the Services.

8.3. The User, who created the account on the Webpage, must immediately inform the Media companies if its user name or password has been lost or fallen into possession of the third parties in order to enable the Media companies to take appropriate measures to ensure the security of personal data.

8.4. The Media companies is not liable for any breach of security requirements arising from the User's activity.

9. User rights and liabilities

9.1. To the extent governed by the relevant legislation (in particular, the GDPR), the User has the right to exercise the following rights regarding the Personal data Processed by the Media companies:

9.1.1. request access to your Personal data;

9.1.2. request Personal data correction;

9.1.3. request deletion of Personal data;

9.1.4. request objections to the processing of Personal data, especially if the Media companies process them on the basis of a legitimate interest;

9.1.5. request transfer of Personal data.

9.2. In order to exercise his/her rights, the User shall contact the Media companies via the contact details given in clause 12 of the Principles. The User, who created the account on the Webpage, can also exercise certain rights via his user account.

9.3. The Media companies has the right to request the submission of additional information necessary for the identification of the User.

9.4. The Media companies meets the User's request within 1 month and informs the User whether and what measures have been taken to resolve the application of the User by the Media companies. If the application is complicated or voluminous, the Media companies may extend the deadline for replying by 2 months. If the Media companies does not take action according to the User's request, it shall notify the User of the reasons for the non-action and shall explain the possibility of submitting a complaint to the Data Protection Inspectorate or turn to the court for protection of its rights.

9.5. If the User's applications are clearly unreasonable or excessive, in particular due to their repeated nature, the Media companies may either:

9.5.1. ask for a reasonable fee, or

9.5.2. refuse to take the requested measures.

9.6. The User may only require the deletion of Personal data if one of the following grounds exists:

9.6.1. Personal data are no longer needed for the purpose for which they were collected or otherwise processed;

9.6.2. the User takes back the consent given to the Processing of Personal data and there lacks any other legal basis for the Processing of Personal data;

9.6.3. the User objects to the Processing of Personal data based on the legitimate interest of the Media companies, and there are no overriding legitimate reasons for the processing;

9.6.4. the User opposes the Processing of Personal data for direct marketing purposes;

9.6.5. Personal data has been processed illegally;

9.6.6. Personal data must be deleted in order to comply with the obligation arising from the law on the Media companies;

9.6.7. this is a Personal data of a child under 13 years of age that is processed on the basis of consent.

9.7. If the User requests the deletion of Personal data, then in the respective application, s/he must justify on the basis of which, specified in Clause 6 of the Principles, s/he demands it. The Media companies is not required to delete Personal data if there is no basis for this, or if the Personal data Processing is necessary for the following reasons:

9.7.1. for the execution of the right to freedom of expression and information;

9.7.2. in order to comply with the obligation arising from the Law on the Media companies;

9.7.3. in order to draw up, submit or defend legal requirements;

9.7.4. the Media companies has other statutory basis for the processing of Personal data.

9.8. If the User's Processing of Personal data is based on the User's consent, the User is entitled to withdraw the consent given to the Processing of Personal data at any time. The withdrawal of consent shall not affect the legality of the Processing that was made on the basis of the consent prior to the withdrawal.

9.9. If a violation should occur in connection with the User's Personal data, and according to the opinion of the Media companies, it is likely to be a major threat to the rights and freedoms of the User, the Media companies informs the User about this without an undue delay via the contact details provided by the User to the Media companies or, if that is not possible, publicly.

9.10. In order to keep the User's personal data up-to-date, the User is obligated to inform the Media companies about the change in his/her Personal data.

9.11. In the event that the User's rights have been violated, the User has the right to file a complaint with the Data Protection Inspectorate or to turn to the court for the protection of his rights.

10. Profiling for marketing purposes

10.1. The Media companies conducts profiling of Users for the marketing purposes on the users' web browsers, using the text files or cookies installed by the Media companies or some third parties. Profiling is a data processing aimed at making predictions about the demographic characteristics (gender, age) and interests of the User and, in this regard, displaying ads and offers to the User that the Media companies believes could be of interest to the User.

10.2. As a result of profiling for marketing purposes, no decision is made with respect to the User with the legal significance.

10.3. The Media companies uses profiling for marketing purposes on a legitimate basis. The User may at any time express objections to the Media companies regarding profiling in the for marketing purposes or to prohibit the saving of cookies in his web browser by setting his/her own browser. For more information on cookies used by the Media companies, including how to configure your browser to ignore the cookies, see the terms of use of cookies of the Media companies.

10.4. The Media companies does not use personal data for profiling that the User, having created an account on the Webpage, has transferred to the Media companies for the purpose of establishing the account or concluding the Agreement.

11. Change of Principles

11.1. The Media companies may need to change these Principles due to the changes in the legislation, the processes of processing personal data of the Media companies, or the instructions given by supervisory authorities or courts. In this case, the Media companies will notify the User before the appropriate changes are made within a reasonable time.

12. Contact data

12.1. In order to exercise their rights, withdraw their consent, as well as obtain additional clarifications and submit a complaint to the Media companies, the User may contact the Media companies at the following contact points:

Email:

• Postimees: isikuandmed@postimeesgrupp.ee
• Duo Media Networks: info@duomedia.tv
• OMG TV: privacy@apollo.tv
• Maaportaal.ee: info@maaportaal.ee
• BNS: bns@bns.ee

Postal address:

• Tartu mnt 80, 10112 Tallinn, Eesti

In these terms and conditions of the use of cookies by the controllers Postimees Grupp AS (registry code 10184643, address Tartu mnt 80, 10112, Tallinn) and Duo Media Networks OÜ (registry code 16077430, address Tartu mnt 80, 10112, Tallinn) (hereinafter the Terms and Conditions), we explain which cookies and similar technologies on the Websites of Postimees Group and Duo Media Networks (postimees.ee, elu24.ee and all its subdomains and mobile applications managed by Postimees Group and Duo Media Networks) are used.

The terms used in the Terms should be understood as defined in the General Principles for the Processing of Personal Data of Postimees Group and Duo Media Networks.

Postimees Grupp AS and Duo Media Networks OÜ are not responsible for third party cookie technologies. Third parties and their privacy policy are set out in the description of cookie preferences at the bottom of the Website.

1. Types of cookies and data collected

1.1. Cookies and other tracking technologies are small text files that are installed on a user's computer from websites that the user visits, unless the user has disabled the installation of all or some cookies in their browser settings or on that website. Cookies allow the user to identify you when you visit websites on your device.

1.2. Cookies may be divided by the time they are installed:

• temporary or session-based cookies - allows to link the user activities temporarily during the same browsing session, i.e. opening the browser window until it closes, or up to 4 hours after the last page view;
• permanent cookies - stored permanently in the user's device for the time specified in the cookie and activated each time the user visits a site from which the cookie was installed.

1.3. Cookies may be divided by their belonging:

• first-party cookies - come from the website you are viewing. These websites may use cookies to store information that will be re-used the next time you visit the website. From the point of view of the processing of personal data, the first party cookie installer is the controller (or any processor authorized by him) who manages the website you are visiting;
• third-party cookies - originate, for example, from ads on other websites that are located on a website that a user visits. From the point of view of the processing of personal data, the third-party cookie is set by a controller who is different from the administrator of the website you are visiting.

1.4. Cookies may be divided, depending on the purpose of their installation:

• Required cookies - important for navigating websites, using its features and providing services selected by users. Without the installation of these cookies, the website and the services requested by the user cannot be provided.

  The data stored by the required cookies depends on the specific cookie. In general, cookies store changes in the privacy settings set by the user, which services the user wants to consume (ie service information), allow to log in to services (ie save user ID, etc.), detect malicious use of the website (ie information about it), distinguish between user and bots and thereby collecting the necessary information about the use of the website. This category also includes cookies used to display and process non-personalized advertising, as the services of a media company cannot be provided without advertising;

• Statistical cookies - collect information about how users use web pages, such as which web pages they visit most often and what error messages they receive from web pages. For personalized analytics cookies, see the description of the last cookie type. Some of the information collected is aggregated and anonymized. The purpose of these cookies is to improve the performance of websites;

  Statistical cookies collect data about website visits and usage (including which (sub) pages, page sections were opened). For example, the following information is collected about the user's device / user's communication / experience web page (e.g., error messages, etc.), the user's device's IP address, and location information. Analytics cookies cannot access IP addresses;

• Preferences cookies - these cookies allow you to remember the choices made by the user (such as text size, other properties that can be changed on the website) and attributes (such as username, language or country where the user is located) to provide more personal and convenient ways to use the website.

  Preferred cookies, although separated from the required cookies, are necessary for users to ensure that a suitable solution is displayed. The data stored depends on the specific cookie. Generally, the technical data of the user's device is collected to determine the appropriate video quality, record the choices made by the user (eg text size, other editable properties of the website) and attributes (eg username, language, country of location). Preference cookies also become decisive in fulfilling the obligation to ensure accessibility within the meaning of the Media Services Act (eg the choice of page display contrast for the visually impaired).

• Personalized advertising cookies (including personal analytics, tracking cookies)- these cookies allow you to show the user personalized advertising and conduct market research and analysis using data obtained about the user's behavior and interests. The information obtained may be shared with ad networks and ad service providers.

  Personal advertising cookies and personal analytics cookies collect information about visits to and use of a user's website (ie data about interests and behavior) in order to show ads that are presumably of interest to the user (information about the use of the user's website), information about already displayed ads and "interaction" ( ie whether the person has opened any advertisement / offer, etc.), information about the user's device (to identify, for example, on a new visit), etc. Advertising cookies are also understood as social media cookies in the part that does not accompany the User but only because the User wants to share the content.

1.4. Postimees Grupp AS and Duo Media Networks OÜ use the types of cookies described above on the Websites for the following purposes:

• for the smooth operation of websites and the provision of services;
• to increase the user-friendliness and accessibility of websites;
• to show an advertisement;
• to pay fair remuneration to journalists - cookies for statistics and analytics and advertising (including personal advertising) are used. Statistical cookies are the only way to measure the need and popularity of the content created, on which the journalist's salary also depends in part. Advertising cookies are also an exchange in connection with a journalist's income. A reduction in advertising cookies also automatically means less paid information, at the expense of which the journalist is paid;
• to improve content / service - statistics and analytics cookies allow to improve the content according to the number of readings. It provides the journalist with essential information about what he or she is currently interested in;
• Where appropriate, personal data collected with cookies is used as evidence in court or other law enforcement agencies (for example, to prove your data protection processes).

2. Legal bases for processing

2.1. Postimees Grupp and Duo Media Networks process personal data for the use of cookies, either on the basis of consent, on the grounds that the processing is necessary for the performance of the contract or on the basis of a legitimate interest.

2.2. Consent. Postimees Grupp and Duo Media Networks ask users for consent for the use of personal advertising cookies for general content and special paid content.

2.3. Grounds for processing (legitimate interest or necessary for the performance of the contract) depending on the type of cookies, if the processing is not based on consent:

• Necessary cookies - since the necessary cookies are necessary for the provision of the service and without them the provision of the service cannot work, the consent for the use of the respective cookies is not necessary. The required cookies are automatically turned on and cannot be turned off. Depending on the processing, the basis is either a legitimate interest or a contract, if the use of a cookie is necessary for the performance of the contract between the User and Postimees Grupp AS and / or Duo Media Networks OÜ.
• Statistics Cookies - The use of statistics / analytics cookies is essential in the media company's business to create journalistic content. In the case of the respective cookies, the processing is based on a legitimate interest and the User can turn off the respective cookies.
• Preference cookies - although cookies are not essential for the technical operation of the service, preference cookies are essential to provide a suitable service to the User and to ensure basic user convenience, given that these cookies generally store language, video quality, page size, etc. preferences. Similarly, enabling default preferences is necessary for accessibility purposes to allow maximum access to pages in accordance with the WCAG 2.1 Web Accessibility Standard. The use of preference cookies is based on a legitimate interest and the respective cookies can be turned off at the User's request.
• Cookies for personal advertising (incl. Personal analytics, tracking cookies) - the processing is based on either the consent given by the User or a legitimate interest. The respective cookies are not automatically enabled, the User consents to the use of personal advertising cookies or may be asked to provide advertising cookies for free access to special content (ie a specific story) (processing on the basis of a legitimate interest).

3. Change of cookies settings

3.1. Postimees Grupp and Duo Media Networks allow Users to manage the use of cookies, including cookies by type, on and off cookies (except necessary cookies). The User can change his / her preferences later at any time by clicking on the cookie preferences link at the bottom of the Website.

3.2. You can also manage your cookie settings via your web browser (see section 4).

4. For more information on managing cookies in your web browser:

• Internet Explorer: http://support.microsoft.com/kb/278835
• Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Firefox: http://support.mozilla.org/en-US/kb/Clear%20Recent%20History
• Opera: https://www.opera.com/help/tutorials/security/privacy/
• Safari: http://support.apple.com/kb/PH5042