Welcome to the Rezzo app!
The following Privacy Policy applies when you use the Rezzo App and/or visit our website https://rezzo.ca ("Website"). The controller of your personal data is Astro Baltics OÜ ("Astro Baltics") registration code 10386779, legal address Raatuse 20, city of Tartu, county of Tartu, 51009. This privacy policy aims to explain how we process (collect and use) personal data through the mobile application and our website.
Your privacy is very important to us and that is why we have provided all information regarding your personal data here. We process personal data in accordance with applicable law, including the General Data Protection Regulation. In matters not regulated by this privacy policy, the applicable legislation will be applied.

WHAT DO WE COLLECT?
We collect personal data about you when you create a user account to use the Rezzo application. Based on the cooperation agreement Rezzo has with Astro Baltics, we may collect and store the following data:
Name;
Date of Birth;
contact details (such as e-mail address, telephone number, address);
information about your device (type of device used);
information about your vehicle (possible to be used in the application to identify the license plate);
location (possible to use in the app);
reviews and comments you provide (by email, telephone, Rezzo App, social media or other channel, including your comments on the Rezzo App).
We also collect data when you use the Rezzo app. In particular, we collect information about transactions made through the Rezzo application.
Please note that your credit card information (sensitive payment data) is not stored on Cloudics App (AstroBaltics) servers. Credit card information is transmitted directly to the payment service provider (such as Global Pay).

WHAT DO WE DO WITH THE DATA WE COLLECT?
Your personal data will be processed to provide you with a user-friendly and error-free payment solution. If personal data is not provided, it is not possible to use the Rezzo service (unless personal data is processed on the basis of your consent).
We process your personal data primarily for the preparation, conclusion and execution of agreements, but also for the resolution of possible disputes arising from the agreements.
We may process your personal data based on your consent. For example, in the application, it is possible to consent to the positioning of your device in order to easily identify your location at the station. With your consent, it is also possible to use information about your vehicle and to identify the license plate of the vehicle at the gas station. We may also process your personal data in other cases based on your consent. The purpose of the processing will be specified during the consent process. Any consent given for processing is voluntary and you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing based on your consent prior to its withdrawal.
We process your personal data for the purpose of complying with legal obligations. These obligations arise primarily from the General Data Protection Regulation, the Personal Data Protection Act, the Law of Obligations Act and other applicable legislation. For example, Astro Baltics has a duty to comply with tax reporting and accounting rules, and must process and use your personal data to comply with those rules. This may include the transfer of your personal data to tax authorities and other authorities, as well as to an auditor.
We process your personal data for the legitimate interests of Rezzo and Astro Baltics, including commercial interests and security interests (fraud detection and prevention, malware prevention). We may also use collected data to customize the Rezzo website and mobile application based on your feedback.

PRIVACY AND SECURITY
We use technical and organizational measures to protect the personal data we receive against loss, misuse and unauthorized alteration, and to ensure data confidentiality. We regularly review our security procedures and consider introducing new technologies and more appropriate security methods. We use modern data encryption technology to transmit the data used on the login pages. For personal data retention periods, please see Astro Baltics' general privacy policy.
Astro Baltics may disclose personal data to data processors and controllers who need to access the data in order to provide services to Astro Baltics. We will only transfer your personal data to the extent and in the form necessary to achieve the purposes listed in the privacy policy, including the preparation and execution of agreements entered into with you. For this purpose, we may transfer your personal data to Merchants with whom you enter into agreements through the Application (see Terms of Use).

YOUR RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA
You have the right to be informed about the processing of personal data concerning you, the purposes of use of the personal data, as well as the categories and sources of the data. You also have the right to receive copies and extracts of the personal data processed. You have the right to request the correction or completion of the data if it appears that the personal data processed is incorrect or incomplete. Where applicable, you have the right to request the restriction of the processing of personal data or to object to the processing of personal data. You have the right to request the transfer of personal data being processed. You have the right to request the deletion of the data, unless the right and obligation to process the data arises from legislation. Please note that ceasing to process personal data may prevent you from using our services.
For more information on data subject rights, please see Astro Baltics' general privacy policy. Astro Baltics will respond to objections and requests within one month at the latest.
We will process your personal data with respect for your rights and freedoms. If you believe that your rights have been violated when processing your personal data or if you want Astro Baltics to stop processing your personal data, please contact us at info@cloudics.eu to resolve the disagreement through negotiation. In the event of a dispute, you have the right to lodge a complaint with the Data Protection Inspectorate (Tatari 39, 10134 Tallinn; website www.aki.ee) or with a court.

THIRD PARTY PRIVACY POLICY
We are not responsible for the processing of personal data by third parties or the privacy policies of third parties or their content. We encourage you to review the privacy policies of third parties (including merchants, email service providers, etc.) before entering into agreements with them to ensure that they meet your expectations and protect your rights.

CHANGES TO THE PRIVACY POLICY
We review the Privacy Policy regularly and may modify, add or remove terms as necessary. If we change the privacy policy in a way that significantly affects the use of your personal data, we will notify you via our website or the Rezzo application. We encourage you to periodically review our Privacy Policy to stay informed of any changes.