1. Introduction
SIA “————-“, Reg. No. ————- (hereinafter – the Controller), processes personal data obtained from the data subject – the user of the website (hereinafter – the User) on the website ————- (hereinafter – the Website). The Controller is committed to protecting the User’s privacy and personal data, and respects their rights regarding the lawful processing of personal data in accordance with applicable legislation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation), as well as other relevant legal acts concerning privacy and data processing.
In view of the above, the Controller has developed this Privacy Policy to provide the User with the information required under the Regulation. The Privacy Policy applies to the processing of data regardless of the form or environment in which the User provides personal data (via the Website, on paper, in person, or by phone). The Controller reserves the right to amend these terms at any time. It is the responsibility of the Website visitor to regularly check the Website content to stay informed of any changes.
2. Controller’s Identity and Contact Information
Legal address of the Controller: ————-
Website: ————-
Email: ————-
Phone: ————-
3. Purposes of Personal Data Processing and Legal Basis
If the User provides us with their personal data by phone, via the website’s contact forms, email, or other mail methods, we store and use this information to conclude or fulfil a relevant service agreement. This includes identifying the client, preparing and signing the contract, delivering services (fulfilling contractual obligations), customer service, handling objections, increasing customer loyalty, administering payments and settlements, debt recovery and collection, proving facts, maintaining and improving the website, business planning and analytics, and general planning and accounting.
We also process this data to provide information to public authorities and operational entities in cases and to the extent specified by applicable legal regulations.
The legal basis for data processing includes: contract conclusion and execution, compliance with legal obligations, the Client’s (data subject’s) consent, and our legitimate interests (e.g., verifying the Client’s identity before entering into a contract, ensuring performance of contractual obligations, analysing website usage, improving service efficiency, etc.).
4. Categories of Personal Data
Categories of personal data include: first name, last name, personal identification number, email or postal address, IP address, phone number, content of a message or letter, etc.
5. Categories of Personal Data Recipients
The data is disclosed only to those employees of the Controller who require it for the performance of their direct duties in order to conclude or fulfil the relevant service agreement. When collecting and using personal data, we partially use external service providers who, under contract, strictly follow our instructions and are continuously monitored both before and during the provision of their services.
6. Categories of Data Subjects
Categories of data subjects include the Controller’s current, former, and potential clients, as well as other individuals who have expressed a desire to contact the Controller.
7. Data Transfer Outside Latvia
The received data is not planned to be transferred outside Latvia, the European Union, or the European Economic Area, nor will it be disclosed to any international organization. However, considering the Website is linked with Google and Facebook services, the Controller cannot guarantee that these companies will not transfer the data outside the European Union or the European Economic Area.
8. Data Retention Period
We process and retain the User’s personal data for as long as either party has a legal obligation to keep the data. Once these circumstances no longer apply, and unless otherwise specified in data protection policies, we delete the personal data no later than three months after the original reason for retention has expired—except in cases where we are legally required to retain the data further (for example, but not limited to, for accounting or legal proceedings purposes).
9. Data Subject’s Access to Personal Data
The data subject has the right to access their personal data within one month from the date of submitting a relevant request. The user may submit a request to exercise their rights in written form—either in person at the Controller’s legal address (with proof of identity), by mail, or via email signed with a secure electronic signature.
Upon receiving the user’s request, the Controller verifies the user’s identity, assesses the request, and processes it in accordance with applicable legislation. The user has the right to receive the information defined by law regarding the processing of their personal data, the right to access their data, and to request the Controller to supplement, correct, or delete the data, to restrict processing, or to object to processing, insofar as these rights do not conflict with the purpose of the data processing (such as contract conclusion or performance).
The data subject is not entitled to receive information if its disclosure is prohibited by law in the interests of national security, defense, public safety, criminal law, or for ensuring the state’s financial interests in tax matters or for the supervision of financial market participants and macroeconomic analysis.
10. Cookie Processing
The Website collects data about its visitors, enabling the Website owner to assess how useful the Website is and how it can be improved. The Controller continuously improves the Website to enhance its usability; therefore, it is important to understand what information is valuable to visitors, how often they visit the Website, what devices and browsers they use, which regions they come from, and which content they prefer to read.
The Controller uses the Google Analytics system, which allows analysis of how visitors use the Website. More about the core principles of how Google Analytics works can be found on the Google website: https://support.google.com/analytics/answer/1012034?hl=en&ref_topic=6157800.
The Controller processes the collected data based on its legitimate interest to better understand the needs of Website visitors and to improve access to publicly available information.
At any time, the visitor can opt out of data collection by Google Analytics as described here: https://tools.google.com/dlpage/gaoptout/.
The server hosting the Website may log requests sent by the visitor (including device used, browser, IP address, date and time of access). The data mentioned in this section is used for technical purposes: to ensure proper functionality and security of the Website, as well as to investigate possible security incidents.
The legal basis for this data processing is the Controller’s legitimate interest in ensuring the technical availability and integrity of the Website.
Cookies
Cookies are small files that a visitor’s browser stores on their computer each time they visit the Website, to the extent specified in the visitor’s browser settings. Some cookies are used to tailor and personalize the content and advertisements shown to the visitor, based on the content previously viewed. This helps make the Website more simple, convenient, and individually relevant for the visitor.
Additional information about cookies, including how to delete or manage them, is available at www.aboutcookies.org.
The Website uses cookies to collect user IP addresses and browsing information, and to remember the visitor’s preferences. Cookies allow the Controller to monitor Website traffic and user interactions – this data is used to analyze visitor behavior and improve the Website. The legal basis for using cookies is the Controller’s legitimate interest in ensuring the functionality, accessibility, and integrity of the Website.
Visitors can control and/or delete cookies at their discretion. More detailed instructions are available at www.aboutcookies.org. Visitors can delete all cookies already stored on their devices, and most browsers can be configured to block cookies altogether. Visitors can opt out of cookies via their browser settings or by using the following tool: https://tools.google.com/dlpage/gaoptout. To apply the necessary settings, visitors should refer to the rules and instructions for their specific browser. If cookies are blocked, visitors may have to manually adjust settings each time they visit the Website, and some services or features may not function properly.
Statistical data about Website visitors is accessible only to those Controller employees responsible for analyzing such data.
Unless otherwise specified, cookies are stored only for the duration necessary to complete the action for which they were collected, and are deleted afterwards. In case the Website includes forums or comments, the visitor’s IP address and any user-submitted data may be stored. Cookies containing this information may be saved for one year to make the process more convenient for returning visitors (so they do not have to re-enter information each time).
11. Third-Party Websites
We may collaborate with third parties that are authorized to place third-party cookies on our websites, services, applications, and tools—with your consent. These service providers enable us to offer you a better, faster, and more secure website experience.
Please note that third-party cookies are subject to the respective third parties’ privacy policies, and we are not responsible for those privacy practices.
The website uses the Facebook Pixel tool. The purpose of using this tool is to tailor content and advertisements for Facebook users.
To learn more about Facebook’s privacy policy, click here: https://www.facebook.com/about/privacy/.
You can also modify your advertising preferences in your Facebook account settings.
12. Right to File a Complaint with a Supervisory Authority
The data subject has the right to file a complaint with the supervisory authority — the Data State Inspectorate of Latvia. Documents may be submitted by post, by email (signed with a secure electronic signature), or left in the mailbox located on the first floor at Blaumaņa iela 11/13, Riga. The Data State Inspectorate also accepts electronic submissions sent to: info@dvi.gov.lv.
13. Validity of the Privacy Policy
We reserve the right to modify and supplement the content of this Privacy Policy from time to time in order to clarify how we process your data. Therefore, we encourage you to review this Privacy Policy regularly to stay informed about the processing of your personal data on the Website.