Privacy policy

1. Terms of the privacy policy

1.1. The controller of personal data is the non-profit association Mittetulundusühing Efektiivne Altruism Eesti (registry code: 80421201), located at Ilmatsalu 50, 50408 Tartu, email: info@efektiivnealtruism.org.

1.2. These terms apply to all users of the activities and services related to the association (MTÜ) and set out the principles by which the association processes data.

1.3. By using the association's website, you agree to our data processing and privacy policy terms.

1.4. We confirm that the processing of personal data (hereinafter also data) complies with the relevant laws of Estonia and the European Union.

1.5. These terms are in force as of 24.10.2026. We reserve the right to change the terms of the privacy policy, as well as to update or remove the terms of this privacy policy or the content of or access to our websites at any time, with or without prior notice.

2. Collection and processing of data

2.1. The association studies and promotes effective altruism in Estonia. Anneta Targalt is a website and platform created by the association, whose purpose is to inform donors in Estonia about effective ways to donate and to make it possible to donate conveniently, with an income tax benefit, to international high-impact charities. Your data is processed as part of collecting donations.

2.2. We process the following data:

2.2.1. information you have given us yourself. In particular, your name, personal identification code (to pass on to the Estonian Tax and Customs Board so that you can receive the income tax benefit for your donation) and email address. We email you a confirmation that your donation has been received, and may let you know when donations have been passed on to the charity or charities.

2.2.2. in addition, we process data about your contact with the association (in particular your emails, communication that can be reproduced in writing, and related data).

2.2.3. we also process technical data that the website or your device uses to connect to the association's website (in particular IP address, operating system, browser type, language, time of using the website, etc.).

2.2.4. we also process data about your specific donation (including information about the bank account).

3. Processing of certain specific types of electronic data

3.1. The website uses Plausible Analytics to compile statistics about how the website is used. Plausible is run by a company registered in Estonia and keeps its data in the European Union. It does not use cookies and does not store IP addresses or other data that would identify a visitor. It records, for example, the pages visited, the referring website, the browser, operating system and type of device, and the approximate location.

3.2. The website does not use cookies. If you close the announcement banner, your browser saves a note of this on your device so that the banner stays closed.

3.3. Payments are made on the payment page of the payment service provider Montonio, which has its own privacy policy.

4. Legal basis

Personal data is processed on the following legal bases, where:

4.1. you have given your consent to the processing of your data for one or more specific purposes;

4.2. processing is necessary to fulfil the legal obligations that apply to the association;

4.3. processing is necessary to protect your vital interests or those of another natural person;

4.4. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

4.5. processing is necessary for the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, in particular where you are a child;

4.6. other applicable legal bases for data processing, in particular provisions of the law of the member states

5. Transfer of personal data to third parties

5.1. Personal data is transferred by the association in connection with providing a service or activity related to you, if one of the association's partners takes part in it.

5.2. The association may engage external service providers who act as processors of the association's data in order to provide certain services to the association, such as website service providers, marketing service providers and IT support providers. In providing such services, external service providers may have access to your personal data and/or may process it.

5.3. The association may also transfer data to natural and legal persons who fund the association's activities, in order to demonstrate the association's activities and their scope and to ensure the association's sustainable economic activity.

5.4. The association always requires these external service providers and partners to implement and apply security measures to ensure the integrity and security of your personal data.

6. Data security

6.1. Personal data is stored on virtual and private servers located in the territory of a member state of the European Union or of countries that have joined the European Economic Area. Data may be transferred to countries whose level of data protection the European Commission has found adequate, including to US companies certified under the EU-US Data Privacy Framework, or on the basis of the European Commission's standard contractual clauses.

6.2. The association's board/employees have access to personal data, so that they can review personal data to resolve your enquiries and handle the arrangement of your use of activities and services related to the association.

6.3. We use the organisational, physical and information technology security measures needed to ensure the confidentiality, integrity and availability of data. The purpose of our information security work is to apply an appropriate level of protection to information, mitigate risks and prevent threats.

6.4. We start from the principle that transmitting and collecting personal information should be as secure as possible. However, it must be borne in mind that there are always certain risks and no technological system is perfectly secure.

7. Exercising rights related to personal data

7.1. If you have given your consent to the collection, processing and use of your personal data in a certain way, you can withdraw that consent at any time in the future.

7.2. In addition, you can object to the use of your personal data for marketing purposes without incurring any costs other than the costs of transmission in accordance with the basic tariffs.

7.3. In accordance with applicable data protection laws, you have the right to:

7.3.1. request access to your personal data,

7.3.2. request the correction of your personal data,

7.3.3. request the deletion of your personal data,

7.3.4. request the restriction of the processing of your personal data

7.3.5. request data portability,

7.3.6. object to the processing of your personal data (including objecting to your profiling)

7.3.7. object to automated decision-making (including profiling)

7.3.8. to exercise your rights, please contact us.

7.3.9. in case of complaints, you have the right to lodge a complaint with the competent data protection authority.

8. Data retention

8.1. Your data is stored both electronically and on paper. Not all data is stored in both forms, so some data is recorded and stored only electronically or only on paper.

8.2. Your personal data is stored for as long as necessary to provide the services and products you requested. When our relationship has ended, we delete your personal data or make it anonymous, unless mandatory retention requirements apply. We may keep your contact details and your interest in our activities and services for a long time if you have allowed the association to send you marketing materials.

8.3. In addition, the association may be required by applicable laws to keep some of your personal data for 7 years after the relevant tax year. We may also keep your personal data after the end of the contractual relationship if your personal data is needed to comply with other applicable laws, or if we need your personal data to protect, establish and exercise legal claims, strictly on a need-to-know basis. To the extent possible, after the end of the contractual relationship we limit the processing of your personal data to such limited purposes.