1. INFORMATION ABOUT THE DATA CONTROLLER
Our name is sworn advocate firm Atlācis un Partneri, registration number 90010841493, VAT registration number LV22028211369, registered address Rīgas iela 9-1, Valmiera, LV-4201, Latvia.
You may contact us by calling 64221818, or e-mailing us at info@eabirojs.lv.
2. GENERAL DESCRIPTION OF THE PERSONAL DATA PROCESSING WE CONDUCT
This statement describes the manner in which we process the personal data of our clients, their representatives/contacts, our partners, people who visit our website and other individuals whose personal data may come into our possession.
This is the latest version of the statement. We retain the right to amend and update this statement, as necessary.
The purpose of this notification is to provide you with a general overview of the personal data processing operations we perform and the reasons for performing these operations; however, please be informed that other documents (for instance, service contracts, cooperation contracts) may provide additional information as to the processing of your personal data.
We would like to inform you that the personal data processing provisions specified in this statement apply to the processing of personal data of private individuals only.
We know that your personal data are of value to you, and we will process these in accordance with the requirements of confidentiality, ensuring the security of your personal data in our possession.
3. WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA FOR, AND WHAT ARE THE LEGAL GROUNDS FOR THIS PROCESSING OF PERSONAL DATA?
We only process your personal data for pre-determined legitimate purposes, including:
a) To initiate and perform services, and to fulfil and enforce obligations established in contracts and agreements (including cooperation agreements)
As part of this purpose, we may need to identify you, to ensure the correct calculation of the payment and to enable the payment process, to contact you regarding matters associated with the fulfilment of an agreement and/or providing you with services (which includes invoicing), and in certain cases, to collect overdue payments.
The main legal grounds for achieving this purpose are:
- Signing and fulfilment of an agreement with data subjects (Article 6, Part 1, Paragraph (b) of the General Data Protection Regulation);
- Fulfilment of a legal obligation (Article 6, Part 1, Paragraph (c) of the General Data Protection Regulation);
- Legitimate interests pursued by the controller (Article 6, Part 1, Paragraph (f) of the General Data Protection Regulation): for instance, to identify you as a client, to identify the contact person of a client and/or customer of a business partner, to enable communication with you.
b) To fulfil legal requirements
As part of this purpose we may have to fulfil the requirements of laws and regulations, including the Law on Accounting, the Archives Law, and other laws and regulations.
The main legal grounds for achieving this purpose are:
- Fulfilment of a legal obligation (Article 6, Part 1, Paragraph (c) of the General Data Protection Regulation).
c) To ensure the proper provision of the service.
For this purpose we may need to maintain and improve our technical systems and IT infrastructure, and to use technical and organisational solutions that could also use your personal data (for example, via cookies) to ensure the correct provision of services.
The main legal grounds for achieving this purpose are:
- Legitimate interests pursued by the controller (Article 6, Part 1, Paragraph (f) of the General Data Protection Regulation).
4. WHO CAN ACCESS YOUR PERSONAL DATA?
We take appropriate measures to process your personal data in accordance with the applicable law and to ensure that your personal data are not accessed by third parties that do not have the legal grounds necessary for processing your personal data.
If necessary, your personal data can be accessed by:
1. Our employees or directly authorised individuals, who require access to perform their work;
2.Personal data processors, for the services they provide and only to the extent required, including auditors, finance management and legal consultants, database development/maintenance contractors, other parties involved in the provision of the controller’s services;
3. National and local government bodies in situations prescribed by applicable laws and regulations, such as law enforcement agencies, municipal councils, tax agencies and sworn judicial officers;
4. Third parties, after a thorough assessment of whether there are sufficient legal grounds for such provision of personal data: for instance, to debt collectors, courts, extrajudicial dispute settlement bodies, insolvency administrators, third parties that maintain registers (e.g. the Population Register, registers of debtors and other registers).
5. ARE YOUR PERSONAL DATA SENT OUTSIDE THE EUROPEAN UNION (EU) OR EUROPEAN ECONOMIC AREA (EEA)?
We do not transfer your data to countries outside the European Union or the European Economic Area.
6. HOW LONG WILL WE STORE YOUR PERSONAL DATA FOR?
Your personal data will be stored for as long as their storage is necessary for the purposes of processing the personal data, and in accordance with the requirements of the applicable laws and regulations.
When assessing the duration of storage of personal data, we take the applicable regulatory requirements, the aspects of fulfilling contractual obligations, your instructions (in the case of consent, for example), as well as our legitimate interests into account. If your personal data are no longer required for the purposes specified, we will delete or destroy these data.
The most common personal data storage periods are specified below:
- We store personal data necessary for the fulfilment of contractual obligations until the fulfilment of the contract and until other applicable storage periods expire (see below);
- We store personal data that must be stored in order to comply with laws and regulations for the periods set in the laws and regulations in question; for example, the Law on Accounting states that supporting accounting documents must be stored for as long as they are necessary for determining when a business transaction began, and tracking that transaction, and in any case, for at least 5 years;
- We will store data to prove the fulfilment of our obligations for the general claim limitation period, in accordance with the limitation periods set in laws and regulations, 10 years in the Civil Law, 3 years in the Commercial Law, and other periods, also taking the deadlines for filing legal action set in laws and regulations into account.
7. RIGHTS THAT YOU, AS A DATA SUBJECT, HAVE IN RELATION TO YOUR PERSONAL DATA
Updating of personal data
If any changes take place in the personal data that you have provided to us (e.g. changes in your personal identity number, contact address, phone or e-mail), please contact us and provide us with the updated information so that we can achieve the corresponding personal data processing purposes.
Your right to access and correct your personal data
In accordance with the provisions of the General Data Protection Regulation, you may request access to your personal data that we hold, to request that these data be corrected or deleted, to restrict the processing of these data, to object to the processing of these data; you also have the right to data portability, useable in the situations and in the manner prescribed in the General Data Protection Regulation.
We respect your right to access and to control their personal data, and having received a request from you, we will reply to it within the time specified in laws and regulations (usually within no more than one month, unless there is a specific request that takes longer to prepare the reply), and if possible, we will correct or delete the personal data in question accordingly.
You can obtain information about your personal data that we hold or enforce your other rights as the data subject in one of the following ways:
1.By submitting an application to that effect in person, identifying yourself at our office address at Rīgas iela 9-1, Valmiera, LV-4201, on any business days, at 10:00–16:00;
2. By submitting an application to that effect via post, to the address Rīgas iela 9-1, Valmiera, LV-4201;
3. By submitting an application to that effect via e-mail, to the address info@eabirojs.lv; we recommend signing it with a secure electronic signature.
Having received your application, we will evaluate its contents and the possibility of identifying you, and depending on the situation, we reserve the right to ask you to identify yourself additionally in order to ensure the security of your data and their disclosure to the person in question.
You may also object to the processing of your personal data, if the processing of the personal data is based on legitimate interest or is used for marketing purposes (for example, for sending commercial messages or for participation in lotteries).
8. WHERE CAN YOU SUBMIT A COMPLAINT CONCERNING PERSONAL DATA PROCESSING?
If you have any questions or concerns about the processing of your personal data that we conduct, please contact us first.
However, if you still believe that we have not been able to resolve the issue and that we are infringing on your rights to the protection of your personal data, you may file a complaint with the State Data Inspectorate.
9. WHERE CAN YOU FILE A COMPLAINT REGARDING ISSUES RELATED TO THE PROCESSING OF PERSONAL DATA?
We can obtain your personal data in one of the following ways:
1.Obtaining data from you when we conclude an agreement with you;
2. If an agreement is signed with a third party, and that party specifies you as its contact person;
3. From you, if you send us any applications, e-mails, or if you call us;
4. From you, if you subscribe to our online services;
5. From you, if you sign in to the www.eabirojs.lv website;
6. Using cookies on the www.eabirojs.lv website;
7. In certain cases, from third-party databases, e.g. when assessing your credit rating, we can obtain personal data from third parties to carry this task out;
8. In certain cases, from video surveillance recordings.
10. ARE YOUR PERSONAL DATA USED FOR AUTOMATED DECISION MAKING?
We do not use your data for automated decision making.
