Privacy policy
1. Introduction
SIA “Pro Ceva”, Registration No. 40103262284 (hereinafter – Controller), processes personal data obtained from the data subject – the Website user (hereinafter – User) on the website https://www.proceva.com (hereinafter – Website). The Controller values the User’s privacy and personal data protection, and observes the User’s rights regarding the lawfulness of personal data processing in accordance with applicable laws – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation), and other applicable legal acts in the area of privacy and data processing. In view of the above, the Controller has developed this privacy policy to provide the User with the information required by the Regulation. The privacy policy applies to data processing regardless of the form and/or environment in which the User provides personal data (on the Website, in paper format, in person, or by phone). The Controller reserves the right to change these terms at any time. It is the responsibility of the Website visitor to independently check the Website content to keep up to date with any changes.
2. Controller’s Identity and Contact Information
Controller’s legal address:
Ropažu nov., Stopiņu pag., Ulbroka, "Piekrastmaļi", LV-2130
Website: https://www.proceva.lv
E-mail: info@proceva.lv
Phone: +371 28667786
3. Purposes and Legal Basis for Personal Data Processing
If the User submits their personal data to the Controller by phone, using the Website’s contact forms, by e-mail, or by post, we store and use this information to execute or conclude the relevant service contract, including for customer identification; contract preparation and conclusion; service provision (fulfilment of contractual obligations); customer service; complaint handling and processing; increasing customer loyalty; payment and settlement administration; debt recovery and enforcement; proof of facts, website maintenance and improvement; business planning and analytics; planning and accounting. We also process this data to provide information to public institutions and law enforcement authorities in cases and to the extent provided by law. The legal bases for data processing are contract conclusion and performance, compliance with legal obligations, the consent of the Client – data subject, and our legitimate interests (for example, to verify the Client’s identity before concluding a contract; to ensure the fulfilment of contractual obligations; to analyse website usage activities; to ensure the efficiency of service delivery, etc.).
4. Categories of Personal Data
Categories of personal data: name, surname, personal identification number, e-mail or postal address, IP address, phone number, message or letter content, etc.
5. Categories of Data Recipients
Data is disclosed to those employees of the Controller for whom it is necessary to perform their direct duties in order to fulfil or conclude the relevant service contract. When obtaining and using personal data, we may use the services of external service providers who, under contract, strictly follow our instructions and whom we continuously monitor before and during the provision of the service.
6. Categories of Data Subjects
Categories of data subjects: the Controller’s existing, former, and potential clients, as well as other persons wishing to contact the Controller.
7. Data Transfer Outside Latvia
There are no plans to transfer the received data outside Latvia, the European Union, or the European Economic Area, nor will it be transferred to any international organization. However, as the Website is linked with Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.
8. Data Retention Period
We process and store the User’s personal data as long as there is a legal obligation to retain them for either party. Once these circumstances no longer apply, and unless otherwise specified in data protection instructions, we delete personal data no later than three months after the original reason for retention ceases to exist, except in cases where we are legally obliged to retain these data further (for example, but not limited to, for accounting or legal purposes).
9. Data Subject’s Access to Personal Data
The data subject has the right to access their personal data within one month from the date of submitting the relevant request. The User may submit a request to exercise their rights in writing in person at the Controller’s legal address (presenting an identity document), by mail, or by e-mail signed with a secure electronic signature.
Upon receiving the User’s request to exercise their rights, the Controller verifies the User’s identity, assesses the request, and fulfils it according to the law. The User has the right to receive information specified by law regarding the processing of their data, the right to access their personal data, as well as to request the Controller to supplement, correct or delete them, restrict processing, or object to processing, as far as these rights do not conflict with the purpose of data processing (contract conclusion or performance). The data subject does not have the right to receive information if its disclosure is prohibited by law for reasons of national security, state defence, public security, criminal law, as well as to ensure the financial interests of the state in tax matters or the supervision and macroeconomic analysis of financial market participants.
10. Cookie Processing
The Website collects data about its visitors, thus enabling the Website administrator to evaluate how useful the Website is and how it might be improved. The Controller continuously improves the Website to enhance its usability and, therefore, needs to know what information is important to visitors, how often they visit, what devices and browsers they use, what region they come from, and what content they prefer. The Controller uses Google Analytics, which allows the Controller to analyse how visitors use the Website. To learn more about Google Analytics principles, visit: https://support.google.com/analytics/answer/1012034?hl=en&ref_topic=6157800. The Controller uses the collected data in its legitimate interests to better understand the needs of Website visitors and improve the accessibility of information published by the Controller. Visitors can opt out of Google Analytics data collection at any time as described here: https://tools.google.com/dlpage/gaoptout/.
The server hosting the Website may record requests sent by the visitor (device used, browser, IP address, access date and time). The data mentioned in this point are used for technical purposes: to ensure the proper functioning and security of the Website and to investigate possible security incidents. The legal basis for this data collection is the Controller’s legitimate interest in ensuring the technical availability and integrity of the Website.
Cookies are small files that the browser saves on the visitor’s computer each time the visitor visits the Website, as specified in the browser settings. Some cookies are used to select and tailor content and advertisements for the visitor based on previously viewed content, thus making the Website experience simple, convenient, and individually tailored. More information about cookies, as well as their deletion and management, can be found at www.aboutcookies.org.
The Website uses cookies to collect the user’s IP address and browsing information and to allow the Website to remember the visitor’s choices. Cookies allow the Controller to monitor Website traffic and user interaction with the Website – the Controller uses this data to analyse visitor behaviour and improve the Website. The legal basis for using cookies is the Controller’s legitimate interest in ensuring the Website’s functionality, availability, and integrity.
The visitor can control and/or delete cookies at their discretion. More information about this process is available at www.aboutcookies.org. The visitor can delete all cookies that are on their computer, and most browsers can be set to block cookies being placed on the computer. The visitor can opt out of cookies in the browser menu or at https://tools.google.com/dlpage/gaoptout. To make the necessary settings, the visitor needs to review their browser's rules. If cookies are blocked, the visitor will need to manually adjust settings every time the Website is visited, and some services and features may not work.
Statistics about Website visitors can only be accessed by those employees of the Controller responsible for analysing such data.
Unless otherwise stated, cookies are stored while the action for which they are collected is performed, and then they are deleted. If the Controller’s Website provides a forum or comment option, in such a case, the Website will store the IP address as well as data provided by the visitor. For your convenience (so you do not have to re-enter it next time), cookies containing this data may be stored for up to one year.
11. Third-Party Websites
We may cooperate with third parties authorized to place third-party cookies on our websites or in our services, apps, and tools with your consent. These service providers allow us to provide you with a better, faster, and safer website user experience. Please note that third-party cookies are subject to third-party privacy policies, and we assume no responsibility for these privacy policies.
The Website has installed the “Facebook pixel” tool. The purpose of using this tool is to tailor content and advertising to Facebook users. To learn more about Facebook’s privacy policy, click here: https://www.facebook.com/about/privacy/. You can also change your advertising settings in your Facebook profile.
12. Right to Lodge a Complaint with a Supervisory Authority
The data subject has the right to lodge a complaint with the supervisory authority (Data State Inspectorate). Documents may be submitted to the Data State Inspectorate by mail, e-mail (documents signed with a secure electronic signature), or placed in the mailbox at Blaumaņa iela 11/13, Riga, 1st floor. The Data State Inspectorate accepts electronic mail sent to info@dvi.gov.lv.
13. Validity of the Privacy Policy
We reserve the right to change and supplement the content of this privacy policy from time to time to clarify how we process your data. Therefore, we encourage you to review this privacy policy regularly to stay informed about how your personal data is processed on the Website.