PRIVACY POLICY OF SIA ZLAUKTS

Based on the Personal Data Protection Regulation 2016/679


Definitions:
Personal data means any information relating to an identified or identifiable natural person (data subject).
Processing of personal data means any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Customer – a natural person (data subject) who can be identified, directly or indirectly, by reference to an identifier, using personal data contained in a personal data processing system.
Customer “consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by which he or she, by a statement or by an explicit affirmative action, gives his or her consent to the processing of personal data.
Controller means the natural or legal person, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data and establishes access to personal data.
Authorised person – means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Cookies are small text files (web browsing data) that are created and stored on the customer’s device (computer, tablet, mobile phone, etc.) when visiting SIA Zlaukts company’s websites (web pages).
Legitimate interests – the legitimate interests of Zlaukts SIA, which are based on the provision of quality services, and have a legal basis, provided that the interests or fundamental rights and freedoms of the data subject do not override the legitimate interests of the company. SIA Zlaukts has the right to process the personal data of the client to the extent that is objectively necessary and sufficient to provide timely, high-quality, convenient service. As well as to establish and support internal processes to prevent fraud in relation to Zlaukts Ltd.
Profiling – means any form of automated processing of personal data which consists in the use of personal data for the purpose of evaluating certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s stated personal preferences: interests, reliability, behaviour, location or movements. Profiling is carried out for the purpose of granting bonuses, creating and sending individual offers, wishes, which are offered for direct marketing purposes only (business purposes) and will not have legal consequences for the customer.

Processing of personal data

SIA Zlaukts kompānija collects, processes, stores, shares, deletes and protects personal data of the client based on the Personal Data Protection Regulation No 2016/679 and other laws and regulations in force in the Republic of Latvia.
In accordance with the laws and regulations in force governing the system of processing personal data, SIA Zlaukts kompānija complies with the following principles:
1. Zlaukts kompānija SIA ensures lawful, fair processing of personal data;
2. Processing of personal data received is carried out for specified purposes;
3. Personal data received is adequate, relevant;
4. Personal data received is accurate;
5. Personal data received is not retained longer than necessary and is eliminated upon achievement of the specified purpose;
6. Zlaukts kompānija SIA processes personal data in compliance with the rights of natural persons;
7. Zlaukts kompānija SIA ensures that personal data are stored securely;
8. Zlaukts kompānija SIA does not provide personal data received to other companies or outside the European Union in compliance with secure, adequate protection, based on and in compliance with the laws and regulations in force in the Republic of Latvia and the Personal Data Protection Regulation No. 2016/679.

Privacy Policy

The Privacy Policy applies to the processing of personal data of each customer and the service offered to the customer. The Privacy Policy provides information on how SIA Zlaukts collects, processes, stores, shares, erases and protects personal data of the customer. SIA Zlaukts company ensures lawful, fair processing of personal data of the client.
Categories of personal data processing
Categories of personal data depend on the services and products used by the client. SIA Zlaukts kompānija is entitled to process the following categories of personal data:

Data communicated by the customer to Zlaukts SIA;
Name, surname, date of birth;
Correspondence address, telephone number, e-mail address;
Bank details;
Communication details. Information from e-mail address – emails related to the client’s communication with the company;
Cookies – data about visiting the SIA Zlaukts company’s website;
If the client does not want to allow the use of cookies, the client can do so in the settings of his browser, however, in this case the use of the website may be limited;
Data, time, amount of web browsing.

Basis for processing personal data

Customer consent. The client, as the subject of the personal data, gives his/her own consent (subject consent) to the collection and processing of personal data for certain purposes.The client’s consent is his/her free will and independent decision, which may be given/withdrawn at any time, thus allowing SIA Zlaukts to process personal data. Withdrawal of consent does not affect the lawfulness of the processing or the quality of the services received based on the consent before withdrawal.
SIA Zlaukts company’s legitimate interests based on offering quality services. SIA Zlaukts has the right to process the personal data of the client to the extent that is objectively necessary and sufficient to provide timely, high-quality, convenient service. As well as for the creation and support of internal processes of Zlaukts Ltd.
Execution of legal obligations of Zlaukts Ltd. SIA Zlaukts kompānija is entitled to process personal data of the client in order to comply with the requirements of regulatory enactments, to provide answers to lawful requests of the state and local government.
Conclusion and execution of the contract. In order to provide quality services and customer care, Zlaukts Ltd collects and processes certain personal data that is collected before or during the contract.
Pursuing the public interest or official mandate. SIA Zlaukts kompānija is entitled to process personal data. In such cases, the basis for processing personal data is included and described in the regulatory enactments.
When processing the Client’s personal data, SIA Zlaukts kompānija may carry out profiling in order to grant bonuses, to send automated individual offers, which are offered for business purposes only and will not cause legal consequences to the Client.

Purposes for processing personal data

For the conclusion and performance of a contract with a client;
To assess a client’s ability to fulfil contractual obligations;
For efficient cash flow management, including the administration of client payments and debts;
To provide technical support in relation to the services provided;
To promote industry development and offer new services;
To process statistical data and perform market analysis.

Obtaining personal data

SIA Zlaukts kompānija obtains personal data of the customer when the customer:
Signs up to receive newsletters from SIA Zlaukts kompānija;
Purchases and uses products or services from SIA Zlaukts kompānija;
Participates in competitions, lotteries or surveys;
Visits or browses SIA Zlaukts kompānija websites;
SIA Zlaukts kompānija and their authorised persons, based on the Personal Data Protection Regulation No.2016/679 are entitled to process the personal data of the customer received from third parties (e.g. from a leasing company) if the customer has consented to this;
SIA Zlaukts kompānija and their authorised persons are entitled to process the personal data of the customer received from the customer based on the Personal Data Protection Regulation No 2016/679.

Period of retention of personal data

SIA Zlaukts kompānija is entitled to process and store personal data as long as:

Until the client’s consent to the processing of personal data has been withdrawn;
Necessary period for the realisation and protection of the legitimate interests of SIA Zlaukts kompani;
The retention period of personal data is established by laws and regulations;
The contractual obligations between the client and SIA Zlaukts kompani are valid;
Until the purpose for which the personal data is used, as determined at the time of receipt, has been achieved.

Sharing personal data

SIA Zlaukts kompānija provides the personal data of the client only to the extent necessary and sufficient in accordance with the requirements of regulatory enactments and taking into account the objective circumstances of the particular situation;
If necessary, SIA Zlaukts kompānija transfers the personal data of the client to persons authorised by SIA Zlaukts kompānija, based on the Personal Data Protection Regulation No.2016/679 and/or partners, agents, service providers involved in ensuring and improving the quality of products and services ordered or used by the client;
SIA Zlaukts kompānija is entitled to transfer the client’s personal data to law enforcement authorities, other state and municipal authorities, if it results from regulatory enactments or information request of the relevant authority.

Personal data protection

In order to protect the client’s personal data from unauthorised access, accidental loss, destruction or disclosure, SIA Zlaukts uses modern technologies and complies with technical and organisational requirements;
SIA Zlaukts kompānija carefully checks all authorised persons, partners, agents, service providers, employees of the company who process the client’s personal data, as well as assesses the application of appropriate security measures and the storage of personal data in accordance with the requirements of laws and regulations;
SIA Zlaukts kompānija does not assume responsibility for any unauthorised access to personal data and/or loss of personal data if it does not depend on SIA Zlaukts kompānija (e.g., due to the fault and/or negligence of the client).

Client’s rights

The Customer has the right to opt-out of receiving commercial communications and to object to the profiling of his/her personal data at any time;
Withdrawal of consent shall not affect the lawfulness of the processing of personal data and/or the quality of the services received based on the consent prior to withdrawal;
The Customer has the right to rectify any personal data held about him or her;
The Customer has the right to request the erasure or restriction of the processing of personal data the processing of which is no longer necessary for the purposes for which it was collected and processed (“right to be forgotten”) by making a request.
The Customer has the right to obtain information about those natural or legal persons who have received information about that Customer;
The Customer has the right to receive or transfer his/her personal data to another data controller (“data portability”). This right covers only data that the customer has provided to SIA Zlaukts on the basis of his consent or contract and where the processing is carried out by automated means. To exercise the above rights, you must submit a written application.