PRIVACY POLICY
This privacy policy describes in what manner and to what extent, for what purpose the Controller processes data of natural persons and what rights a natural person has in relation to the processing of his data.
The Controller processes personal data in accordance with this Privacy Policy, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and the free movement of such data and which repeals Directive 95/46/EC (General Data protection regulation), as well as other applicable regulatory enactments of the European Union and the Republic of Latvia.
1. Terminology:
Controller – Limited Liability Company "MAD Format", reg. No. 40103736873, legal address: Spāres street 18 k-1, Riga, LV-1002.
Person – an identified or identifiable natural person whose data is processed by the Controller;
Personal data – any type of information related to a Person;
Homepage – Controller’s website www.madformat.com ;
Privacy Policy – this privacy policy.
Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and the free circulation of such data and which repeals Directive 95/46/EC (General Data Protection Regulation);
2. Contact information:
The Controller’s contact information for submitting questions, requests, complaints in connection
with the processing of personal data is as follows:
– telephone no. +371 25151450
– e-mail: info@madformat.lv
3. The Controller processes the following Personal Data:
Person’s identification data (name, surname, personal code, position, etc.);
Person’s contact information (address, e-mail, phone, etc.);
Information about the Person’s location (IP address), Internet usage habits and Website visit data;
Person’s phone conversations with the Controller.
4. The Controller obtains Personal Data in the following ways:
A person himself enters his data on the Website or submits Personal data to the Controller in another way;
By phone;
Using cookies.
5. The Controller uses Personal Data as follows:
To inform the Buyer about news, special offers;
To consider complaints submitted by the Person and provide answers to them;
To meet the requirements of applicable laws and regulations;
To carry out research, surveys, marketing, development and improvement of the design and content of the Website;
To record oral agreements between the Controller and the Person;
To improve the quality of Personal service;
To open, maintain and administer user accounts.
6. Basis of data processing:
To fulfill obligations stipulated in the normative enactments;
The Controller’s legitimate interests, including:
– conducting commercial activities;
– identification of person;
– assessment or mitigation of business risks;
– retention of existing customers and attraction of new customers;
– fraud prevention;
– defense of one’s rights and legitimate interests in courts, state and municipal institutions.
In other cases, the Controller separately requests consent of the Person for processing of Personal data.
7. Data confidentiality and disclosure to third parties:
The Controller implements appropriate technical and organizational measures within the framework of the Regulation and other applicable laws and regulations to protect Personal data from unauthorized access, illegal processing or disclosure, accidental loss, alteration or destruction.
Access to Personal Data is limited to those employees of the Controller who need to process Personal Data for performance of their duties. The Controller does not disclose or transfer Personal Data to third parties for processing, except for:
– to state and local government institutions in cases, procedure and amount specified in regulatory acts.
– Controller’s external service providers such as debt collectors, accountants, lawyers, Website developers and maintainers, where fulfillment of contractual obligations towards the Controller involves performance of Data Processing on condition that these external service providers are committed to ensure security of Personal Data to an extent not less than that specified in the Privacy Policy.
8. Place of data processing:
Personal data is not transferred for processing outside the territory of the European Union (EU) or the European Economic Area (EEA).
9. Duration of data storage:
Personal data, which are processed for the fulfillment of obligations specified in the regulatory enactments, are stored for the duration specified in the regulatory enactments;
Personal data that is collected and stored based on the consent of the Individual is stored as long as it is necessary to achieve the purpose for which it was collected.
10. A person has the following rights:
10.1. To request information on whether the Controller processes this Personal data, as well as request information about this Personal data and access to this Personal data;
To request the Controller to correct Personal Data which is incorrect or incomplete;
To request deletion of Personal data whose legal basis for processing is the consent of the Person;
To request limited processing of Personal data, the legal basis of which is consent of the Person;
To receive Personal Data in a structured, generally accepted standard format and transfer the Personal Data to third parties (applies to Personal Data processed by the Controller and on the basis of the Person’s consent or contract);
To object to the processing of Personal data, the legal basis of which is the Controller’s legitimate interests or which is carried out for direct marketing purposes, including refusing to receive the Controller’s news by e-mail;
To withdraw his consent to the processing of Personal Data; the withdrawal of consent does not affect processing of Personal data carried out before the withdrawal, nor does it affect processing of Personal data carried out on other grounds; in certain cases, in case of withdrawal of consent, the Controller will not be able to fully or partially fulfill any of his obligations towards the Person;
Not be subjected to fully automated decision-making, including profiling, if such decision-making has legal consequences, except if the decision-making is necessary to conclude or fulfill a contract with the Person, if the decision-making is permitted in accordance with the applicable regulatory enactments or if the Person has given his explicit consent;
To set your browser’s security settings to prevent certain tracking or logging tools. In this case, functionality of the Website may be limited;
To file a complaint in connection with the Controller’s processing of Personal Data to the Data State Inspectorate.
11. Third party websites
The Seller informs that other websites accessible from the Website (through hyperlinks and advertisements or otherwise) have their own privacy, as well as data collection, use and disclosure policies. The Seller does not review privacy policies or terms of use of third parties and is not responsible for their privacy practices, availability or reliability of their services, or accuracy or completeness of their content.
12. Privacy Policy validity and review
The current version of the privacy policy is valid from August 1, 2023.
The Controller has the right to review and amend the Privacy Policy at any time without consultation with the Person.
The Person can familiarize himself with the latest version of the Privacy Policy at any time on the Website.