Privacy policy
Supellex.lv SIA
Reg. No. 40203483443
Legal address: Ķekavas nov., Baldone, Zīļu iela 5, LV-2125
1. Introduction
Supellex.lv SIA (hereinafter – the Controller), on the website supellex.lv (hereinafter – the Website), processes personal data obtained from the data subject – the Website user (hereinafter – the User).
The Controller cares about the User's privacy and personal data protection, respects the User's rights to the lawfulness of personal data processing in accordance with the applicable laws – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation) and other applicable laws in the field of privacy and data processing.
Considering the aforementioned, the Controller has developed this privacy policy with the aim of providing the User with the information stipulated in the Regulation.
The Privacy Policy applies to data processing regardless of the form and/or environment in which the User provides personal data (on the Website, in paper format, in person, or by telephone).
The Controller reserves the right to change these terms at any time. It is the responsibility of the Website visitor to independently check the Website content to familiarise themselves with changes to the terms.
2. Identity and Contact Information of the Controller
Supellex.lv SIA
Reg. No. 40203483443
The Controller's address is: Ķekavas nov., Baldone, Zīļu iela 5, LV-2125
Website – supellex.lv
Email – info@supellex.lv
Phone – +37126743970
3. Purposes of Personal Data Processing and Legal Basis for Processing
If the User submits their personal data to the Controller, by telephone, using the Website's contact forms, email, or other types of mail, we store and use this information to fulfil or conclude the relevant service agreement, including for customer identification; preparation and conclusion of a contract; provision of services (performance of contractual obligations); customer service; examination and processing of objections; increasing customer loyalty; payment and settlement administration; debt recovery and collection; proving facts, maintaining and improving the Website's operation; business planning and analytics; planning and accounting. Likewise, we will process this data to provide information to state administrative bodies and operational activity subjects in the cases and extent specified in external regulatory acts.
The legal bases for data processing are the conclusion and performance of a contract, compliance with regulatory acts, based on the Client's – data subject's consent, and our legitimate interests (for example, to verify the Client's identity before concluding a contract; to ensure the performance of contractual obligations; to analyse Website usage activity, to ensure the efficiency of service provision, etc.).
4. Categories of Personal Data
Categories of personal data – name, surname, personal identification number, email or postal address, IP address, phone number, content of message or letter, etc.
5. Categories of Personal Data Recipients
Data is disclosed to those employees of the Controller who need it to perform their direct duties to fulfil or conclude the relevant service agreement.
When obtaining and using personal data, we partially use the services of external service providers who strictly follow our instructions in accordance with the contract and whom we constantly monitor before and during the use of the service.
6. Categories of Data Subjects
Categories of data subjects – existing, former, and potential clients of the Controller, as well as other persons who express a desire to contact the Controller.
7. Data Transfer Outside Latvia
The received data is not planned to be transferred outside Latvia, the European Union, or the European Economic Area, nor will it be transferred to any international organization. At the same time, given that the Website is linked to Google and Facebook services, the Controller cannot guarantee that the mentioned companies will not transfer data outside the European Union or the European Economic Area.
8. Data Storage Duration
We process and store the User's personal data as long as one of the parties has a legal obligation to store the data.
After the aforementioned circumstances cease, and unless otherwise stated in the data protection instructions, we delete personal data at the latest three months after the initial reason for data retention is no longer valid, except in cases where our legal obligation is to continue to store this data (for example, but not limited to, for accounting or litigation purposes).
9. Data Subject's Access to Personal Data
The data subject has the right to access their personal data within one month from the day of submitting the respective request.
The User can submit a request for the exercise of their rights in written form in person at the Controller's legal address (by presenting an identity document), by mail, or by email, signed with a secure electronic signature;
Upon receiving the User's request for the exercise of their rights, the Controller verifies the User's identity, evaluates the request, and executes it in accordance with regulatory acts.
The User has the right to receive the information stipulated in regulatory acts regarding the processing of their data, the right to request access to their personal data, and to request the Controller to supplement, correct, or delete them, restrict processing, or the right to object to processing, insofar as these rights do not contradict the purpose of data processing (conclusion or performance of contracts).
The data subject does not have the right to receive information if this information is prohibited from being disclosed by law in the fields of national security, national defence, public safety, criminal law, as well as for the purpose of ensuring the financial interests of the state in tax matters or the supervision of financial market participants and macroeconomic analysis.
10. Cookie Processing
Data about Website visitors is collected on the Website, thereby allowing the Website maintainer to evaluate how useful the Website is and how it could be improved.
The Controller constantly improves the Website with the aim of improving its use, which is why the Controller needs to know what information is important to Website visitors, how often they visit the Website, what devices and browsers they use, from which region the visitors come, and what content they prefer to read.
The Controller uses the Google Analytics system, which allows the Controller to analyze how visitors use the Website. You can find out about the basic principles of Google Analytics on the Google website https://support.google.com/analytics/answer/1012034?hl=lv&ref. The Controller uses the collected data in its legitimate interests to improve understanding of the Website visitors' needs and to improve the accessibility of the information published by the Controller. The Visitor can stop data collection by Google Analytics at any time, as described here: https://tools.google.com/dlpage/gaoptout/.
The server hosting the Website may record requests sent by the visitor (device used, browser, IP address, date and time of access). The data mentioned in this point are used for technical purposes: to ensure the proper functioning and security of the Website and to investigate possible security incidents. The basis for collecting the data mentioned in this point is the Controller's legitimate interest in ensuring the technical accessibility and integrity of the Website.
Cookies are small files that the browser saves on the visitor's computer each time the visitor visits the Website, to the extent specified in the visitor's computer browser settings. Certain cookies are used to select and apply information and advertisements offered to the visitor, based on the content the visitor has previously viewed, thereby making the use of the Website simple, convenient, and individually tailored for visitors. Additional information about cookies, as well as their deletion and management, can be found on the website www.aboutcookies.org.
The Website uses cookies to collect user IP addresses and browsing information and to allow the Website to remember the visitor's choice. Cookies allow the Controller to track Website data traffic and user interaction with the Website – the Controller uses this data to analyze visitor behaviour and improve the Website. The legal basis for the use of cookies is the Controller's legitimate interest in ensuring the functionality, accessibility, and integrity of the Website.
The Visitor can control and/or delete cookies at their discretion. More information about this process is available here www.aboutcookies.org. The Visitor can delete all cookies that are on their computer, and most browsers can be set to block the placement of cookies on the computer. The Visitor can refuse cookies in the browser menu or at https://tools.google.com/dlpage/gaoptout. To make the necessary settings, the visitor needs to familiarise themselves with their browser's terms. In the event of blocking cookies, the visitor will have to manually adjust the settings every time they visit the Website, and there is a possibility that some services and functions will not work.
Statistical data on Website visitors can only be accessed by those employees of the Controller who are responsible for the analysis of such data.
Unless otherwise specified, cookies are stored until the action for which they were collected is fulfilled, and then they are deleted.
If a forum or comment option is provided on the Controller's Website, in this case, the IP address, as well as the data provided by the visitor themselves, are stored on the Website. Cookies containing this data may be stored for one year for your convenience (so you don't have to re-enter them next time).
11. Third-Party Websites
We may cooperate with third parties authorized to place third-party cookies on our websites or our services, applications, and tools with your consent. These service providers allow us to provide you with a better, faster, and safer website usage experience. Note that third-party cookies are subject to the third party's privacy policy, so we assume no responsibility for these privacy policies.
The "Facebook pixel" tool is installed on the Website. The purpose of using this tool is to customize content and advertisements for Facebook users. To learn more about Facebook's privacy policy, click here https://www.facebook.com/about/privacy/. You can also change ad settings in your Facebook profile.
12. Right to Lodge a Complaint with a Supervisory Authority
The data subject has the right to lodge a complaint with a supervisory authority (Data State Inspectorate). Documents are accepted at the Data State Inspectorate by mail, electronic mail (documents signed with a secure electronic signature), and can also be left in the mailbox on the 1st floor at Blaumaņa iela 11/13, Rīga. The Data State Inspectorate accepts electronic mail submissions received at the email address info@dvi.gov.lv.
13. Validity of the Privacy Policy
We reserve the right to change and supplement the content of this privacy policy from time to time to clarify the description of how we process your data.
Considering the aforementioned, we invite you to regularly review this privacy policy so that you are aware of the processing of your personal data on the Website.