Data Processing Rules

Information about the data controller

The company SIA "T-System Tyres", company registration number 43603042092, legal address Zemgales prospekts 4–36, Jelgava, LV-3001, Latvia.

Communication by e-mail: info@tavasriepas.lv

Contact information for personal data protection issues

If you have any questions regarding this notification or the processing of your personal data, you can contact us by e-mail: info@tavasriepas.lv.

General description of personal data processing carried out by us
 

This notice describes how we process the personal data of our customers, customer representatives/contact persons, lottery and raffle participants, business partners, website visitors and others whose data may come into our possession in the course of our business.

We assume that before using our website or becoming our customer, the user has read this notice by us and have accepted its terms.

This is the current version of the statement; we reserve the right to make changes and/or updates to this notice from time to time.

The purpose of this notice is to give you an overview of our personal data processing activities and purposes, however, please note that other documents (such as service agreements, cooperation agreements, lottery rules, website or portal terms of use) may also provide additional information about the processing of your personal data.

We would hereby like to inform you that the personal data processing rules contained in this notice apply only to the processing of personal data of individuals (natural persons).

We recognize that personal data is your value and will process it in a confidential manner, taking care of the security of your personal data in our possession.

What purposes do we process your personal data for, and what is the legal basis for processing of the personal data?

We will only process your personal data for the legitimate purposes defined above, including the following:

For the provision of services, as well as for the fulfilment and provision of the obligations specified in the contract:

For this purpose, we may need the following personal data: name, surname, telephone number, e-mail address.

The main legal bases used to achieve these objectives are as follows:

*for performance of the contract (Article 6, first paragraph, point (b) of the General Data Protection Regulation);

*For performance of legal obligations (Article 6, first paragraph, point (c) of the General Data Protection Regulation);

*Legitimate interests of the data controller (Article 6, first paragraph, point (f) of the General Data Protection Regulation), for example, identification of you as a contact person of the client, of the client and/or cooperation partner, for ensuring communication with you.

Provision of marketing activities

For this purpose, we may send you commercial communications, ensure your participation in lotteries and/or raffles organized by us, as well as publish materials from public events organized by us.

For this purpose, we may need at least the following personal data: name, surname, telephone number, e-mail address.

The main legal bases used to achieve these objectives are as follows:

*consent of the data subject (Article 6, first paragraph, point (a) of the General Data Protection Regulation);

*concluding and executing a contract with the data subject (Article 6, first paragraph, point (b) of the General Data Protection Regulation);

*The legitimate interests of the controller (Article 6, first paragraph, point (f) of the General Data Protection Regulation), for example to ensure communication.

Prevention of security threats, threats of property interests and other important legitimate interests of us or third parties

For this purpose, we would need to perform video surveillance of our territory, buildings and other property, use personal data processors to provide various functions, if necessary, it may be necessary to disclose information to state institutions, exchange information within a group of companies, use the rights granted in regulatory enactments to ensure their legitimate interests.

For this purpose, we may need to process at least the following personal data: name, surname, personal appearance (photographic image), location and time, and other data as necessary;

The main legal bases used to achieve these objectives are as follows:

*The legitimate interests of the controller (Article 6, first paragraph, point (f) of the General Data Protection Regulation), for example for the purpose of detecting criminal offenses, etc.

For the proper provision of services

For this purpose, we provide maintenance and improvement of technical systems and IT infrastructure.

The main legal bases used to achieve these objectives are as follows:

*The legitimate interests of the controller (Article 6, first paragraph, point (f) of the General Data Protection Regulation).

Who could access your personal data?

We take appropriate measures to process your personal data in accordance with applicable law and to ensure that your personal data is not accessed by third parties who do not have an appropriate legal basis for processing your personal data.

The following persons may have access to your personal data, as required:

*our employees or directly authorized persons who need it for the performance of their duties;

*processors of personal data in accordance with the services provided by them and only to the extent necessary, for example, auditors, financial management and legal advisers, database developers/technical maintainers, other persons who are involved in the provision of management or controller services;

*state and local government institutions in cases specified by legal acts, for example, law enforcement institutions, local governments and municipalities, tax administrations, sworn bailiffs;

*third parties, after carefully assessing whether there is an appropriate legal basis for such a data transfer, such as debt collectors, courts, out-of-court redress or mediating bodies, insolvency administrators, third parties who maintain registers (e.g., civil registers, registers of debtors, etc.).

Which cooperation partners in the processing of personal data or personal data processors do we choose?

We take appropriate measures in order to ensure that your personal data is processed, protected and transferred to data controllers in accordance with applicable law. We carefully select the processors of personal data and, when transferring data, evaluate its necessity and the amount of data to be transferred. The transfer of data to processors is carried out in compliance with the requirements of confidentiality and secure processing of personal data.

We are currently able to work with the following categories of processors:

*auditors, financial management and legal advisers;

*owners of IT infrastructure, database owners/developers/technical maintainers;

*other persons involved in the provision of our services.

The processors of personal data may change over time by making appropriate changes to this document.

Is your personal data sent to countries outside the European Union (EU) or the European Economic Area (EEA)?

We do not transfer data to countries outside the European Union or the European Economic Area.

How long will we keep your personal data?

Your personal data is stored for as long as it is necessary for the purposes of processing of the personal data and in accordance with the requirements of applicable law.

When evaluating the duration of personal data storage, we take into account the requirements of applicable laws and regulations, aspects of performance of contractual obligations, your instructions, as well as our legitimate interests.

If your personal data is no longer required for the specified purposes, we will delete or destroy it.

Below we list the most common retention periods for personal data:

*personal data necessary for the fulfilment of contractual obligations – we will keep them until the contract is fulfilled and until other retention periods are fulfilled (see below);

*personal data that must be stored in order to meet the requirements of legal acts, we will keep for the deadlines specified in the relevant regulatory enactments, e.g., in the Act on Book-keeping ["Likums par grāmatvedību"] a stipulation exists that justification and substantiation documents must be kept until the day when they are no longer necessary to establish the beginning of each economic transaction and trace its course, but for no less than 5 years;

*We will keep the data necessary to prove the fulfilment of our obligations for the general limitation period of the claim, in accordance with the statutory limitation periods for claims – 10 years in the Civil Act ["Civillikums"], 3 years in the Commercial Act ["Komerclikums"] and in accordance with other terms, taking into account also the terms for bringing actions specified in the Civil Procedure Law ["Civilprocesa likums"]

What are your rights as a data subject with regard to the processing of your personal data?

Updating of personal data

If there is a change in the personal data you have provided to us, such as a change in personal identification number, contact address, telephone number or e-mail, please contact us and provide us with up-to-date data so that we can achieve the relevant purposes of personal data processing.

Your right to access and correct your personal data

In accordance with the provisions of the General Data Protection Regulation, you have the right to access your personal data in our possession, request their rectification, erasure, restriction of processing, object to the processing of your data, as well as the right to data portability in the cases and according to the General Data Protection Regulation.

The company respects your right to access and control your personal data, therefore, in the event of receipt of your request, we will respond to it within the time limits set by the law (usually no later than one month, unless there is a specific request requiring a longer time to prepare a response), and, if possible, we will correct or delete your personal data accordingly.

You may obtain information about your personal data held by us or exercise your other rights as a data subject in any of the following ways:

*by submitting a relevant application in person and identifying yourself in our office;

*by submitting a relevant application, sending it to our e-mail: info@tavasriepas.lv and identifying yourself in our office.

Upon receipt of your application, we will evaluate its content and the possibility of your identification, and depending on the situation, we reserve the right to ask you to additionally identify yourself in order to ensure the security and disclosure of your data to the person concerned.

Withdrawal of consent

If the processing of your personal data is based on your consent, you have the right to withdraw it at any time and we will no longer process your personal data which we have processed on the basis of the consent for that purpose.

However, we inform you that the withdrawal of consent may not affect the processing of personal data that is necessary to meet the requirements of regulatory enactments or that is based on a contract, our legitimate interests or other grounds specified in regulatory enactments for lawful data processing.

Where can you complain about personal data processing issues?

If you have any questions or concerns regarding our processing of your personal data, please contact us first.

However, if you believe that we have not been able to resolve the issue with each other, and you believe that we are still violating your right to the protection of personal data, you have the right to lodge a complaint with the Data State Inspectorate [Datu valsts inspekcija] of the Republic of Latvia. Samples of applications to the Data State Inspectorate [Datu valsts inspekcija] and other related information can be found on the website of the Data State Inspectorate [Datu valsts inspekcija]

Why do you have to provide your personal data to us?

In particular, we collect your information in order to fulfil our contractual obligations, to fulfil our legal obligations and to pursue our legitimate interests.

In these cases, obtaining certain information from us is necessary to achieve the respective purposes, therefore, failure to provide such information may jeopardize the initiation of a business relationship or the performance of the contract.

If the data is not mandatory, but its submission could help to improve the service or offer you favourable contract terms and/or offers, we will indicate at the time of data collection that the provision of data is voluntary.

How do we collect your personal data?

We may collect your personal information in one of the following ways:

*in the process of concluding a mutual agreement, obtaining data from you;

*if the agreement is concluded with a third party and the said third party has indicated you as a contact person or user of the service;

*from you, if you submit any applications, e-mails to us, or if you call us;

*from you if you sign up for our services online;

*from you when placing an order on the website www.tavasriepas.lv;

Is your personal data used in automated decision making?

We do not use your data for automated decision making.