Data controller and their contact information:
Controller: SIA "Ziedleju stāsti"
Registration number: 50103836151
Legal adress : Sigulda District, Ziedlejas-Gaujmaļi, LV-2150
E- mail address: email@example.com
Classification of personal data and the purpose of processing
Personal data means any information relating to an identified or identifiable natural person (further referred to as the data subject), by which they can be identified:
A data subject can be a customer (former, present or potential), a service recipient, a guest, a visitor of a website, a cooperation partner, an employee or a job applicant.
We process personal data of subjects for the following legitimate purposes:
Legal basis for the processing of personal data
The legal interests of SIA “Ziedleju stāsti” are: to conduct business, to verify the identity of the client before concluding a contract, to ensure the fulfillment of contractual obligations, to eliminate unreasonable risks to the business, to analyze the quality of services and make improvements, to take measures to retain customers and expand the client base, to prevent fraud, to administer payments, to ensure efficient business management processes, to turn to government and public service institutions for the protection of their legal interests, to inform the public about their activities.
Access to personal data
Access to personal data is granted to the following: employees of the controller - to the extent required for the performance of their duties; processors of personal data - external service providers - to the extent required to fulfill the contract or to perform the functions delegated by law (for example, banking settlement procedure); government agencies and local government institutions - upon having submitted a substantiated request; law enforcement agencies - in cases stipulated by legislation.
Rights of the subject
According to the legislation, the subject has the right to access their personal data that is stored in the information systems of the controller, to ensure it is correct, to edit and update their personal data, to demand deletion or termination of processing of their personal data if it is incomplete, outdated or processed illegally, as well as the right to transfer their personal data elsewhere.
The subject has the following options to exercise their rights:
The subject’s request is then assessed in line with the legislation and response is sent to the contact address specified by the client in accordance with the procedure and within the time frame established by the legislation.
If the subject has reason to believe that the controller has acted unlawfully, they have the right to lodge a complaint with the State Data Inspectorate at the address: Blaumaņa 11/13, Riga, LV – 1011.
Providing us with the information we request is not compulsory, but it is a pre-requisite for our services.
We do not use personal data for automated decision making or profiling.
The personal data of SIA “Ziedleju stāsti” clients is not transferred outside of the European Union or the European Economic Area.
Retention of personal data
Personal data is retained from the time of receipt until at least one of the following criteria applies:
When all above mentioned criteria ceases to apply, the personal data of subjects is deleted or made inaccessible or unidentifiable.
The controller ensures that data processing complies with the following principles:
We constantly review and improve security measures to protect personal data from unauthorized access, accidental loss, disclosure or destruction. To do this, we use the necessary technical and organizational measures, including antivirus software and firewalls. However, we strongly recommend that our customers comply with the general data security rules as well as requirements for storing personal data when using electronic devices and the internet.
The controller carries out video surveillance, in this way processing personal data during the subject’s visits to common areas where services are provided. Video surveillance is carried out in real time and is required to protect vital interests, including the life and health of the controller's employees, customers and other subjects. Video cameras are located to provide exclusively security functions and to avoid acquiring personal data, processing of which is not necessary to achieve legitimate goals. The controller ensures complete deletion of personal data, processing of which is not necessary, unless a legitimate request for personal data has been made or in cases where it is required for detection of criminal actions or security violations.
Communication with the subject
Email address and/or contact number provided by the subject is used to communicate with the subject.
Cookies are small text files that are created and stored on user’s device (computer, tablet, mobile phone, etc.) during a visit to a website. Cookies help users remember user names and settings such as language, font size, etc., so they would not need to specify these each time they visit the website, in this way easing the use of the website.
Analytical cookies (such as Google Analytics) collect information about habits of website visitors, for example, which sections are visited most often. This information helps us to develop and improve our website, making it more user-friendly. Analytical cookies are stored on a user's device for no more than two years.
Technical or mandatory cookies (Google Chrome, Internet Explorer, etc.) help to remember the user's requests and which cookies the user has agreed to use. These cookies are stored on user's device until the browser is closed and for no longer than two years.
Targeted advertising cookies (such as Google Adwords) provide user-specific advertising. These cookies are stored on user's device permanently.
The information associated with cookies is not used to personally identify the user.