Principles of Customer Data Processing

We require customer data primarily to fulfill contracts with customers, offer new services, and comply with legal obligations.

DISCLOSURE OF CUSTOMER DATA

AS Narva Soojusvõrk processes its customers’ personal data based on Article 6(1)(b) of the General Data Protection Regulation (GDPR), meaning for the performance of a contract concluded with the customer or for taking steps prior to entering into such a contract. According to this provision, the customer’s consent for processing personal data is not required. AS Narva Soojusvõrk transfers information about a customer who is a natural person (i.e., the data subject) to its partners only if AS Narva Soojusvõrk has obtained the data subject’s consent.

The customer has the right to access their personal data. If the data has changed or is incorrect for any reason, the customer must immediately notify the network operator by phone or email.

The customer has the right to request the termination of the processing of their data and/or the deletion of collected data if such a right arises from the General Data Protection Regulation or other legislation. If you would like a more detailed explanation regarding the processing of your personal data, please write to narvasoojus@energia.ee.


DATA PRIVACY FOR CUSTOMERS

We collect as little customer data as possible, but as much as is necessary to fulfill our tasks. Access to customer data is limited to employees whose job duties require it. Data processing is strictly limited to what is necessary to fulfill job duties. Companies that cooperate with us in data processing are also obliged to adhere to our rules regarding the storage of customer data. Contracts with them include an agreement on the confidentiality of customer data.

AS Narva Soojusvõrk is a company majority-owned by Enefit AS, and it follows Enefit AS's principles for processing customer data.