The service provider's privacy and confidentiality policy has been created with the aim of providing the User - a natural person - with information about the purpose, scope, protection and processing term of data processing during data acquisition and when processing the User's personal data on the website webnams.lv.
Data processing manager
Webnams.lv user data processing manager is Service provider SIA "VAR DATU SISTĒMAS", unified registration number: 50003226081, legal address: Riga, Bērzaunes iela 1, LV-1039.
The contact information of the Service Provider in matters related to the processing of personal data is:
e-mail: info@vardatusistemas.lv, telephone: +37129407868
Using this contact information or contacting the Service Provider in writing, you can ask a question about the processing of personal data and request the exercise of your rights.
Webnams.lv may host services for which the Service Provider is considered a processor. In such cases, both the system manager and the processor (operator) are indicated separately in the service description.
Scope of application of privacy and confidentiality policy
Personal data is any information about an identified or identifiable natural person.
The privacy and confidentiality policy is applied to ensure the protection of privacy and personal data in relation to natural people - customers and users of services (including potential, former and existing), as well as third parties who, in connection with the provision of services to a natural person, receive or transfer any information from the Service Provider (including contact persons, payers, etc.);
The service provider takes care of Customer privacy and personal data protection, respects the Customer's right to the legality of personal data processing in accordance with the applicable laws in the field of privacy and data processing.
The Privacy Policy applies to data processing, regardless of the form and/or medium in which the Customer provides personal data (on the Service Provider's Portal, in paper or electronic format, or by telephone) and in which information systems or paper form they are processed.
Regarding specific types of data processing (for example, cookie processing, etc.), environment, purposes, additional, specific rules may be established, which the Customer is informed of at the time he provides relevant data to the Service Provider.
Purposes of personal data processing
The service provider processes personal data for the following purposes:
- for the provision of services:
- for customer identification;
- for the preparation and conclusion of the contract;
- for the provision of services (fulfillment of contractual obligations);
- to ensure/maintain the operation of services;
- for the fulfillment of guarantee obligations;
- for the improvement of services, development of new services;
- to promote the use of services;
- for advertising and distribution of services or for commercial purposes;
- customer service;
- for consideration and processing of objections;
- to increase customer loyalty;
- for the administration of payments and settlements;
- for debt recovery and collections;
- webnams.lv maintenance and performance improvement;
- for business planning and analytics:
- for statistical and business analysis;
- for planning and accounting;
- for efficiency measurement;
- for data quality assurance;
- for conducting market and public opinion research;
- for preparing reports;
- to conduct customer surveys within the framework of risk management activities.
- Provision of information to the subjects of state administrative institutions and operational activities in the cases and to the extent specified in external regulatory acts.
- For other specific purposes, about which the Customer is informed at the time when he provides relevant data to the Service Provider.
Legal basis for personal data processing
The service provider processes the Customer's personal data based on the following legal bases:
- for the fulfillment of regulatory enactments - to fulfill the obligation of the Service Provider in binding external regulatory enactments;
- in accordance with the consent of the Client - data subject;
- in legitimate (legitimate) interests - to realize the legitimate (legitimate) interests of the Service provider resulting from the obligations existing between the Service Provider and the Client or the concluded contract or the law.
The legal (legitimate) interests of the service provider are:
- perform commercial activities;
- check the identity of the Client before providing the service;
- ensure fulfillment of obligations;
- save the Customer's requests to webnams.lv, including applications, submissions for the provision of services submitted to webnams.lv, and other applications and submissions, notes about them,
including those made verbally by calling the Service Provider's office and/or the Customer's contact person;
- analyze the functioning of the Portal applications, develop and implement their improvements;
- segment the Customer database for more efficient provision of services;
- develop and develop services;
- advertise your services by sending commercial messages;
- conduct customer surveys about services and their experience of using them;
- prevent fraud;
- to provide corporate management, financial and business accounting and analytics;
- ensure effective company management processes;
- efficiency of service provision and delivery;
- ensure and improve the quality of services;
- administer payments;
- apply to state administration and operational institutions and to the court for the protection of their legal interests;
- to inform the public about its activities.
Processing of personal data
The Service Provider processes the Customer's data using technology capabilities, considering existing privacy risks and the Service Provider's reasonably available organizational, financial and technical resources.
The Service Provider may perform automated decision-making with respect to the Customer. The customer is informed about such activities as the Service Provider separately in accordance with the regulatory enactments. The Customer may object to the adoption of automated decisions in accordance with the law, however, being aware that in some cases this may limit the Customer's right to use certain options potentially available to him (for example, receiving commercial offers, including receiving services on more favorable terms).
Making automated decisions that have legal consequences for the Client (for example, approval or rejection of the Client's application) can only be made based on the Client's explicit consent.
The service provider can authorize its cooperation partners to perform certain service provision activities, such as sending out commercial offers. If, while performing these tasks, the cooperation partners of the Service Provider process the Customer's personal data at the Service Provider's disposal, the relevant partners are considered operators (processors) of the Service Provider's data processing and the Service Provider has the right to transfer the Customer's personal data necessary for the performance of these activities to the extent necessary to perform these actions.
Cooperation partners and companies of the Service Provider (in the capacity of personal data processors) will ensure the fulfillment of personal data processing and protection requirements in accordance with the Service Provider's requirements and legislation, and will not use personal data for purposes other than the fulfillment of obligations on behalf of the Service Provider.
Protection of personal data
The service provider protects the Customer's data using modern technology, taking into account existing privacy risks and The service provider's reasonably available organizational, financial and technical resources, including using the following security measures:
- data encryption when transmitting data (SSL encryption);
- firewalls;
- intrusion protection and detection programs;
- other protective measures in accordance with current technical development opportunities.
Categories of recipients of personal data
The service provider does not disclose to third parties the Customer's personal data or any information obtained during the provision of services and the performance of the contract, including information about the services received, except for:
- if data must be transferred to the relevant third party within the framework of the contracted service, in order to perform some function necessary for the realization of the service or delegated by law;
- in accordance with the clear and unequivocal consent of the Client;
- to persons provided for in external regulatory acts upon their justified request, in accordance with the procedures and to the extent specified in external regulatory acts;
- in cases determined by external regulatory acts, for the protection of the legitimate interests of the Service provider, for example, by appealing to the court or other state institutions against a person who has violated the legitimate interests of this Service provider.
Access to personal data by third country entities
In certain cases, in compliance with the requirements of regulatory acts, the Service Provider accesses personal data in third countries (that is, countries outside Europe
Union and European Economic Area) existing service providers (in the sense of the Regulation - sending to third countries) in the status of data processor (operator).
In such cases, the Service Provider provides the procedures specified in the regulatory enactments for ensuring the level of personal data processing and protection, which is equivalent to that determined by the Regulation.
Duration of storage of personal data
The Service Provider stores and processes the Customer's personal data as long as at least one of the following criteria is met:
- only as long as the contract concluded with the Customer is valid;
- as long as the Service Provider or the Client can realize their legitimate interests (for example, submit objections or bring a lawsuit in court) in accordance with the procedures specified in external regulatory acts;
- as long as one of the parties has a legal obligation to store the data;
- while the Client's consent to the relevant personal data processing is valid, if there is no other legal basis for data processing.
After the mentioned circumstances end, the Customer's personal data is deleted.
Access to personal data and other Customer rights
The customer has the right to receive the information stipulated in the regulatory acts in connection with the processing of his data.
In accordance with the laws and regulations, the Customer also has the right to request the Service Provider to supplement, correct or delete its own data, or limit the processing in relation to the Customer, or the right to object to the processing (including the processing of personal data carried out on the basis of the Service Provider's legal (legitimate) ) interests), as well as the right to data portability. These rights are enforceable insofar as the data processing does not result from the obligations of the Service Provider, which are imposed on it by the current regulatory enactments.
The customer can submit a request for the exercise of his rights:
- in the form of electronic mail, by signing the application with a secure electronic signature;
- a handwritten submission in written form and submitting it to the legal address of the Service Provider and presenting a personal identification document confirming the identity of the Client.
The service provider sends the answer to the Client by post to the address indicated by him or to the e-mail address indicated in the application, signed with a secure electronic signature.
The service provider ensures compliance with data processing and protection requirements in accordance with regulatory enactments and, in the event of objections from the Client, takes appropriate actions to resolve the objection.
The customers consent and the right to withdraw
The customer can give his consent to the processing of
personal data, the legal basis of which is consent (for example, data analysis
of service usage habits, individually prepared advertising, etc.), on
webnams.lv, in the application forms, for example, in the registration form for
receiving news.
The customer has the right at any time to withdraw the consent given for data processing in the same way in which it was given, that is - on the website webnams.lv, and in that case further data processing based on the previously given consent for the specific purpose will not be carried out in the future.
Withdrawal of consent does not affect data processing carried out at the time when the Client's consent was valid.
Withdrawal of consent cannot stop data processing carried out on the basis of other legal bases.
Communication with the Client
The service provider communicates with the Customer using the contact information provided by the Customer (phone number, e-mail address, postal address).
Communication regarding the fulfillment of contractual obligations of services is carried out by the Service Provider on the basis of the concluded contract (for example, coordination of service delivery, information about invoices, about changes in services, etc.).
Commercial announcements
Communication about commercial announcements about the services of the Service Provider and/or third parties and other announcements not directly related to the provision of contracted services (e.g. customer surveys) is carried out by the Service Provider in accordance with external regulatory acts or in accordance with the Customer's consent.
The customer can give his consent to receive commercial notifications from the Service Provider and/or its cooperation partners in the Service Provider's service application forms, on the Service Provider's and other websites (for example, sign-up forms for receiving news).
The consent given by the customer to receive commercial notifications is valid until it is withdrawn (also after the termination of the service contract). The customer can at any time refuse to receive further commercial communications:
- by sending an e-mail to the address info@webnams.lv;
- receiving further communications by clicking on the opt-out link at the end of the relevant commercial communication (e-mail).
The Service Provider stops sending commercial communications as soon as the Customer's request is processed. The processing of the request depends on technological and organizational possibilities, which can be up to two working days.
By expressing his opinion in surveys and leaving his contact information (e-mail, phone), the Customer agrees that the Service Provider can contact him using the provided contact information in connection with the evaluation provided by the Customer.
Processing of cookies
Webnams.lv can use cookies. Cookie processing rules available: here.
Webnamslv may include links to third-party websites that have their own terms of use and personal data protection, for which the Service Provider is not responsible.
Other terms
The service provider has the right to make additions to the Privacy Policy, making its current version available to the Client, indicating its effective date and posting it on webnams.lv.