Privacy Policy
1. Introduction
SIA “ALUX STIKLOJUMI” Reg. No. LV40103417189 (hereinafter – the Controller), on the website https://www.alux.lv (hereinafter – the Website) processes personal data obtained from the data subject – the Website user (hereinafter – the User). The Controller takes care of the User’s privacy and personal data protection, respects the Users’ rights to the lawfulness of personal data processing in accordance with applicable law – Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation) and other applicable legislation in the field of privacy and data processing. Taking into account the above, the Controller has developed this privacy policy with the aim of providing the User with the information provided for in the Regulation. The Privacy Policy applies to data processing regardless of the form and/or environment in which the User provides personal data (on the Website, in paper form, in person, or by telephone). The Controller reserves the right to change these terms at any time. It is the responsibility of the Site visitor to independently check the content of the Site to familiarize themselves with any changes to the terms.
2. Identity and contact information of the Controller
The Controller's legal address is Vecozoli k-12“ Zaķumuiža Ropažu nov. LV-2133, website: https://www.alux.lv.lv, e-mail: alux@alux.lv, phone: +371 29 196 813
3. Purposes of personal data processing, as well as legal basis for processing
If the User submits his/her personal data to the Controller by telephone, using the Site's contact forms, e-mail or other type of mail, we store and use this information to fulfill or conclude a relevant service provision agreement, including for customer identification; preparation and conclusion of the agreement; provision of services (fulfillment of contractual obligations); customer service; consideration and processing of objections; building customer loyalty; administration of payments and settlements; debt recovery and collection; proving facts, website maintenance and improvement; business planning and analytics; planning and accounting. We will also process this data to provide information to state administrative institutions and operational entities in the cases and to the extent specified in external regulatory enactments. The legal basis for data processing is the conclusion and performance of the contract, the implementation of regulatory enactments, in accordance with the consent of the Client – the data subject, our legitimate (legitimate) interests (for example, to verify the identity of the Client before concluding the contract; to ensure the fulfillment of contractual obligations; to analyze the operation of the website applications, to ensure the efficiency of service provision, etc.
4. Categories of personal data
Categories of personal data – name, surname, personal identification number, e-mail or postal address, IP address, telephone number, content of the message or letter, etc.
5. Categories of personal data recipients
The data is disclosed to those employees of the Controller who need it to perform their direct duties in order to fulfill or conclude a relevant service provision agreement. When obtaining and using personal data, we partially use the services of external service providers who, in accordance with the contract, strictly follow our instructions and whom we constantly monitor before using the service and in the future.
6. Categories of data subjects
Categories of data subjects – current, former and potential employees of the Controller customers, as well as other persons who express a desire to contact the Controller.
7. Transfer of data outside Latvia
The received data is not planned to be transferred outside Latvia, the European Union or the European Economic Area, nor will it be transferred to any international organization. At the same time, taking into account that the Site is connected to Google and Facebook services, the Controller cannot guarantee that the aforementioned companies will not transfer the data outside the European Union or the European Economic Area.
8. Duration of data storage
We process and store the User's personal data as long as one of the parties has a legal obligation to store the data. After the aforementioned circumstances cease to exist, and unless otherwise stated in the data protection instructions, we delete the personal data no later than three months after the initial reason for data storage no longer applies, except in cases where we are legally obliged to continue to store this data (for example, but not limited to, for accounting or legal purposes).
9. Data subject access to personal data
The data subject has the right to receive access to the personal data of the data subject within one month from the date of submission of the relevant request. The User may submit a request for the exercise of his/her rights in writing in person at the Controller's legal address (by presenting an identity document), by mail, or by e-mail, signing with a secure electronic signature;
Upon receiving the User's request for the exercise of his/her rights, the Controller shall verify the User's identity, evaluate the request and execute it in accordance with regulatory enactments. The User has the right to receive information specified in regulatory enactments regarding the processing of his/her data, the right to request access to his/her personal data, as well as to request the Controller to supplement, correct or delete it, restrict processing or object to processing, to the extent that these rights do not conflict with the purpose of data processing (conclusion or performance of contracts). The data subject does not have the right to receive information if the disclosure of this information is prohibited by law in the field of national security, state defense, public security, criminal law, as well as for the purpose of ensuring the financial interests of the state in tax matters or supervision of financial market participants and macroeconomic analysis.
10. Processing of cookies
The Site collects data about visitors to the Site, thus enabling the Site Administrator to assess how useful the Site is and how it could be improved. The Controller is constantly improving the Site with the aim of improving its use, therefore the Controller needs to know what information is important to visitors to the Site, how often they visit the Site, what devices and browsers they use, what region visitors come from, and what content they prefer to read. The Controller uses the Google Analytics system, which allows the Controller to analyze how visitors use the Site. You can learn about how the basic principles of Google Analytics work on the Google website https://support.google.com/analytics/answer/1012034?hl=lten&ref_topic=6157800. The Controller uses the collected data in its legitimate interests to improve understanding of the needs of the Site visitors and to improve the accessibility of the information published by the Controller. The visitor can stop the collection of data by Google Analytics at any time, as described here: https://tools.google.com/dlpage/gaoptout/.
The server on which the Website is hosted may record the requests sent by the visitor (device used, browser, IP address, date and time of access). The data referred to in this paragraph are used for technical purposes: to ensure the proper functioning and security of the Website and to investigate possible security incidents. The basis for collecting the data referred to in this paragraph is the legitimate interest of the Controller in ensuring the technical availability and integrity of the Website.
Cookies are small files that, each time a visitor visits the Website, the browser stores on the visitor's computer in the amount specified in the browser settings of the visitor's computer. Certain cookies are used to select and adapt the information and advertisements offered to the visitor based on the content that the visitor has previously viewed, and thus make the use of the Website simple, convenient and individually suitable for visitors. Additional information about cookies, as well as their deletion and management, can be obtained on the website www.aboutcookies.org.
The Site uses cookies to collect the User's IP address and browsing information and to allow the Site to remember the Visitor's choices. Cookies allow the Controller to track the Site's data flow and User interaction with the Site - the Controller uses this data to analyze visitor behavior and improve the Site. The legal basis for using cookies is the Controller's legitimate interest in ensuring the functionality, accessibility and integrity of the Site.
The Visitor can control and/or delete cookies at their own discretion. More information about this process is available here www.aboutcookies.org. The Visitor can delete all cookies on their computer, and most browsers can be set to block the placement of cookies on their computer. The Visitor can refuse cookies in the browser menu or https://tools.google.com/dlpage/gaoptout. To make the necessary settings, the Visitor needs to familiarize themselves with the terms of their browser. In case of blocking cookies, the visitor will have to manually adjust the settings each time the Site is visited, and there is a possibility that some services and functions will not work.
Statistical data about the Site visitors can be accessed only by those employees of the Controller who are responsible for analyzing such data.
Unless otherwise specified, cookies are stored until the action for which they were collected is performed, and then they are deleted. In the event that the Controller's Site has a forum or comment option, in such a case, the IP address is stored on the Site, as well as data specified by the visitor himself. Cookies containing this data may be stored for one year for your convenience (so that you do not have to write a new one next time).
11. Third-party websites
We may cooperate with third parties who are authorized to place third-party cookies on our sites or in our services, applications and tools with your consent. These service providers allow us to provide you with a better, faster and more secure website experience. Please note that third-party cookies are subject to the privacy policies of third parties, so we do not assume any responsibility for these privacy policies.
The “Facebook pixel” tool is installed on the site. The purpose of using this tool is to adapt content and ads to Facebook users. To learn more about Facebook’s privacy policy, click here https://www.facebook.com/about/privacy/. You can also change your advertising settings in your Facebook profile.
12. Right to file a complaint with a supervisory authority
The data subject has the right to file a complaint with a supervisory authority (the Data State Inspectorate). Documents are accepted by the Data State Inspectorate via post, electronic mail (documents signed with a secure electronic signature), and can also be left in the mailbox at Blaumaņa Street 11/13, Riga, 1st floor. The State Data Inspectorate accepts electronic mail sent to the electronic mail address info@dvi.gov.lv.
13. Validity of the Privacy Policy
We reserve the right to change and supplement the content of this Privacy Policy from time to time in order to clarify the description of how we process your data. Taking the above into account, we invite you to regularly review this Privacy Policy so that you are aware of the processing of your personal data on the Site.