PRIVACY POLICY

Contents:

1. DEFINITIONS
2. PERSONAL DATA PROCESSING
3. PRIVACY POLICY
4. PERSONAL DATA CATEGORIES FOR PROCESSING
5. GROUNDS FOR PERSONAL DATA PROCESSING
6. PURPOSES OF PERSONAL DATA PROCESSING
7. METHODS OF OBTAINING PERSONAL DATA
8. PERIOD OF STORAGE OF PERSONAL DATA
9. SHARING OF PERSONAL DATA
10. PERSONAL DATA PROTECTION METHODS
11. CLIENT RIGHTS

1. DEFINITIONS

Personal data - refers to any information that applies to an identified or identifiable individual (data subject);

Processing of personal data - refers to any activity or sets of activity related to personal data or sets of personal data, as conducted with or without automated resources; this applies to activities such as collecting, registering, organising, structuring, storing, adapting or transforming, recovering, reviewing, using, disclosing, sending, disseminating or otherwise making available, harmonising or combining, limiting, erasing or destroying data;

A client - an individual (data subject) who can be directly ir indirectly identified with a reference to the identifier, thus using personal data that are in the person's data processing system;

Client consent - is a free and unambiguous expression of the client’s will (data subject), by which the client gives permission for the processing of his/her personal data for the specified purpose.

The supervisor - is a person or legal entity, agency or other structure which, whether alone or with others, determines the purposes and resources of personal data processing and also provides access to personal data;

An authorised person - is an individual or legal entity, public institution, agency or other structure in the name of which personal data are processed;

Cookies - are small text data (related to visiting Websites), as established and stored in the client's device (computer, tablet, mobile telephone, etc.) when visiting SIA Creative Research Agency Internet sites;

Legitimate interests - refer to the interests of the SIA Creative Research Agency company about the provision of high-quality services, as well as the legal foundation for the rule that says that the interests, fundamental rights and fundamental freedoms of the data subject are not more important than those of the company. The SIA Creative Research Agency company reserves the right to process personal data to the extent that is objectively needed and sufficient to ensure timely, high-quality and comfortable services, as well as to establish and support internal processes at the company so as to avoid any fraud in relation to same;

Profiling - refers to any automated personal data processing that is manifested as the use of the data so as to evaluate specific personal aspects related to the person, particularly in terms of analysing or forecasting aspects related to the personal desires of said person: interests, trustworthiness, behaviour, location or movement, with the profiling being conducted to award bonuses, establish and distributed individual offers, as well as to transmit messages that are offered only for the purpose of direct marketing (business goals) and create no legal consequences for the client.

2. PERSONAL DATA PROCESSING

The SIA Creative Research Agency company collects, processes, stores, copies, erases and protects the personal data of clients on the basis of Regulation No 2016/679 on the protection of personal data, as well as other normative acts that are in force in the Republic of Latvia.

In accordance with existing laws related to the data processing system for individuals, the SIA Creative Research Agency company observes the following principles:

1. SIA Creative Research Agency processes data fairly and lawfully.
2. The processing of the received data serves specific purposes and is carried out only in accordance with these purposes.
3. The received data is adequate (not excessive).
4. The received data is accurate.
5. The received data is not stored longer than necessary and is destroyed after achieving the specified purpose.
6. SIA Creative Research Agency processes the received data in accordance with the rights of individuals.
7. SIA Creative Research Agency ensures that the received data is stored securely.
8. SIA Creative Research Agency does not provide the received data to other organizations or abroad without secure, adequate protection within the framework of regulatory enactments and the Law on the Protection of Individual Data (Regulation on the Protection of Personal Data No. 2016/679).

3. PRIVACY POLICY

The privacy policy applies to the processing of each client's personal data, as well as to the services that are provided to the client. The policy provides information about how SIA Creative Research Agency collects, processes, stores, copies, erases and protects the client's personal data. SIA Creative Research Agency always ensures the lawful and honest processing of personal data.

4. PERSONAL DATA PROCESSING CATEGORIES

Categories of personal data depend on the services and products used by the client, with SIA Creative Research Agency having the right to process the following categories of personal data:

1. Data obtained with the client's consent (provided by the client).
2. First name, last name, personal identification number, or date of birth;
3. Correspondence address, telephone number, and email address;
4. Bank details;
5. Communication data. Information from letters (email address) related to communications between the client and SIA Creative Research Agency;
6. Cookies, data about visits to the SIA Creative Research Agency homepage;
6.1 If the client does not wish to allow the use of cookies, they can disable it in their browser, but in this case, some website features may be limited;
7. Data, time, and volume of views on websites;

5. GROUNDS FOR PERSONAL DATA PROCESSING

Agreement from the client, with the client, as the subject of personal data providing agreement (subject's agreement) to the collection and processing of personal data for specific purposes, with said agreement being based on free will and a personal decision that can be made or withdrawn at any moment, thus allowing SIA Creative Research Agency to process personal data. Where agreement is withdrawn, that shall in no way affect the lawfulness of the processing or the quality of received services that are based on agreement before the withdrawal.

The legitimate interests of the SIA Creative Research Agency company that ensure the offer of high-quality services, with the company reserving the right to process personal client data to the extent that is objectively necessary and sufficient to ensure timely, high-quality and comfortable services, as well as to establish and support internal processes at the company.

The legal obligations of the company in that SIA Creative Research Agency has the right to process personal client data to satisfy legal requirements and to provide answers to lawful requests for information from state and local government agencies.

The conclusion and implementation of the agreement means that the SIA Creative Research Agency company correlates and processes certain data that are collected before the agreement is concluded or during the term of the agreement so as to provide high-quality services to the client.

Implementing public interests or implementation of official authority means that SIA Creative Research Agency has the right to process personal data, and in such cases the foundation for the processing of personal data is included in and described by normative acts.

When handling a client's personal data, the company can conduct profiling to award bonuses, as well as to send automated individual offers that are offered only for business purposes and will create no legal consequences for the client.

6. PURPOSES OF PERSONAL DATA PROCESSING

1. To conclude and fulfill contractual obligations with the client.
2. To assess the client's ability to fulfill contractual obligations.
3. To effectively manage cash flows, monitor payments and client debts.
4. To provide technical support related to the provision of services.
5. To develop areas and provide a new range of services.
6. To conduct statistical data processing and market analysis.

7. METHODS OF OBTAINING PERSONAL DATA

The SIA Creative Research Agency company obtains personal data when the client:

1. Subscribes to SIA Creative Research Agency news;
2. Orders and uses SIA Creative Research Agency products and services;
3. Agrees to participate in contests, lotteries, and surveys;
4. Visits or browses SIA Creative Research Agency websites;

The SIA Creative Research Agency company and its authorised representatives have the right to process personal client data that are received from third parties (e.g., a leasing company) if the client has agreed to this, and this is done on the basis of Regulation No 2016/679 on the protection of personal data.

The SIA Creative Research Agency company and its authorised representatives have the right to process personal client data that are received from the client, doing so on the basis of Regulation No 2016/679 on the protection of personal data.

8. STORAGE PERIOD OF PERSONAL DATA

The SIA Creative Research Agency company has the right to process and keep personal data until:

1. Until the client has revoked their consent to the processing of personal data;
2. For the period necessary to realize and protect the legitimate interests of SIA Creative Research Agency;
3. In accordance with the personal data retention period defined by regulatory enactments and the Personal Data Protection Regulation;
4. While the client is in a contractual relationship with SIA Creative Research Agency.
5. Until the data is used for the purpose determined upon receipt.

9. JOINT USE OF PERSONAL DATA

The SIA Creative Research Agency company provides a client's personal data only at the necessary and sufficient level in accordance with legal requirements and taking into account the objective circumstances of the specific situation;

Where necessary, SIA Creative Research Agency transfers personal data to authorised representatives of the company, doing so on the basis of Regulation No 2016/679, and/or to partners, agents or service providers involved in ensuring and improving the quality of goods or services ordered or used by the client;

The SIA Creative Research Agency company has the right to transfer client data to law enforcement institutions and other state or local government institutions if required to do so by law or after the request for information from the relevant institution.

10. PERSONAL DATA PROTECTION METHODS

The SIA Creative Research Agency company uses modern technologies and takes into account technical and organisational requirements to protect the personal data of clients from unauthorised access, as well as accidental loss, destruction or disclosure of the data;

The SIA Creative Research Agency company carefully examines all authorised persons, partners, agents, service providers and company employees who process personal client data, also evaluating the use of appropriate security steps and storage of personal data in accordance with legal requirements;

The SIA Creative Research Agency company bears no responsibility for any unauthorised access to personal data and/or the loss of personal data if that does not depend on the company (e.g., the client's fault and/or negligence).

11. CLIENT RIGHTS

The client has the right to withdraw the right to receive commercial announcements at any time, as well as to object to the profiling of his or her data;

This withdrawal does not influence the lawfulness of the processing of personal data and/or the quality of received services, as based on the agreement before the withdrawal;

The client has the right to amend all personal data about himself or herself that are at the company's disposal.

The client has the right to demand the erasing or limiting of the processing of personal data that is no longer necessary in accordance with the reasons why it was collected and processed after the request was submitted (the "right to be forgotten").

The client has the right to obtain information about individuals or legal entities that have received information about the client.

The client has the right to receive or transfer his or her personal data to another data supervisor ("transferability of data"), this right including only those data which the client has provided to the company on the basis of his or her approval or agreement and if the processing is automated; written requests must be submitted to receive the aforementioned rights.

Based on Regulation No 2016/679 on the protection of personal data