2. Identity and Contact Information of the Controller
Controller: SIA "VMS Timber"
Registration Number: LV45403035414
Controller’s address: “Zāģeri”, Sarkaņu pagasts, Madonas novads, LV-4870, Latvija
Phone number: +371 25 411 162
3. Purposes of Personal Data Processing and Legal Basis of Processing
If the User provides their personal data to the Controller by phone, using the Website contact forms, email, or any other means, we store and use this information to fulfill or conclude the relevant service provision agreement, including customer identification; contract preparation and conclusion; service provision (performance of contractual obligations); customer service; handling and processing of objections; raising customer loyalty; payment and settlement administration; debt recovery and collection; providing planning and record-keeping. We also process this data to provide information to state administrative authorities and operational entities in the cases and to the extent specified in external regulatory acts. The legal basis for data processing is the conclusion and performance of a contract, compliance with regulatory acts, with the consent of the Customer – the data subject, and our legitimate interests (for example, verifying the Customer’s identity before concluding a contract, ensuring the performance of contractual obligations, analyzing website usage, ensuring the effectiveness of service provision, etc.).
4. Categories of Personal Data
Categories of personal data include name, surname, personal identification number, email or mailing address, IP address, phone number, the content of messages or letters, etc.
5. Categories of Recipients of Personal Data
Data is disclosed to those employees of the Controller who need it to perform their direct duties in order to fulfill or conclude the relevant service provision agreement. When obtaining and using personal data, we partially use the services of external service providers who strictly follow our instructions in accordance with the contract we constantly control.
6. Categories of Data Subjects
Categories of data subjects include existing, former, and potential customers of the Controller and other individuals expressing a desire to contact the Controller.
7. Transfer of Data Outside Latvia
The received data is not planned to be transferred outside Latvia, The European Union, or the European Economic Area. However, considering that the Website is associated with Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.
8. Data retention period
We process and store the personal data of the User as long as there is a legal obligation for either party to retain the data. After the aforementioned circumstances cease to exist, and unless otherwise specified in the data protection guidelines, we delete data within three months from the date the original reason for data retention is no longer valid, except in the cases where our legal obligation is to continue storing this data (e.g., for accounting records or litigation purposes).
9. Data subjects access personal data
The data subject has the right to access their personal data within one month from the date of the respective request. The User can submit a request for the exercise of their rights in writing in person at the Controller’s legal address (by presenting an identification document), by mail, or by email with a secure electronic signature.
Upon receiving the User’s request for the exercise of their rights, the Controller verifies the User’s identity, evaluates the request, and fulfills it in accordance with the relevant regulations. The User has the right to receive the information stipulated in the regulations regarding the processing of their data, the right to request access to their personal data, as well as the right to request the Controller to supplement, correct, or delete the data, restrict processing, or object to processing, to the extent that these rights do not contradict the purpose of data processing (e.g., contract conclusion of performance).
The data subject does not have the right to receive information if disclosing such information is prohibited by law in the areas of national security, defense, public security, criminal law, or in order to protect the state’s financial interests in tax matters or to supervise financial market participants and conduct macroeconomic analysis.
10. Cookie processing
The Website collects data about Website visitors, allowing the Website owner to evaluate the usefulness of the Website and how it can be improved. The Controller constantly improves the Website to enhance its usability, which is why the Controller needs to know what information is important to the Website visitors, how often they visit the Website, what devices and browsers they use, where visitors come from, and what content they prefer to read. The Controller uses the Google Analytics system, which allows the Controller to analyze how visitors use the Website. The basic principles of how Google Analytics works can be found on the Google website at https://support.google.com/analytics/answer/1012034?hl=lten&ref_topic=6157800. The Controller uses the collected data for their legitimate interests in improving the understanding of the needs of Website visitors and improving the accessibility of the Controller’s published information. Visitors can opt out of data collection by Google Analytics at any time, as described here: https://tools.google.com/dlpage/gaoptout/.
The server hosting the Website may record visitor requests (device used, browser, IP address, access date, and time). The data mentioned in this section is used for technical purposes, to ensure the proper functioning and security of the Website, and to investigate potential security incidents. The legal basis for collecting this data is the Controller’s legitimate interest in ensuring the technical availability and integrity of the Website.
Cookies are small files that the browser saves on the visitor’s computer each time the visitor accesses the Website, according to the setting of the visitor’s browser. Certain cookies are used to select and provide visitors with relevant information and advertisements to the visitor based on the content the visitor has previously viewed, thereby making the Website usage simple, convenient, and individually tailored for visitors. Additional information about cookies, as well as their deletion and management, can be obtained on the website www.aboutcookies.org.
Visitors can control and/or delete cookies according to their preferences. More information about this process is available here: https://www.aboutcookies.org/. Visitors can delete all cookies stored on their computers.
Visitors can opt out of cookies through the browser menu or at https://tools.google.com/dlpage/gaoptout. To make the necessary settings, visitors need to familiarize themselves with the terms of their web browser. In case of blocking cookies, visitors will need to manually adjust the settings each time they visit the Website, and there is a possibility that some services and features may not work.
Access to statistical data about Website visitors is only available to employees of the Controller who are responsible for analyzing such data. Unless otherwise specified, cookies are stored until the action for which they were collected is completed, and then they are deleted.
In the event that the Website provides a forum or comment option, the Website stores the IP address and data provided by the visitor in such cases. Cookies containing this data can be stored for your convenience (to avoid rewriting it) for up to one year.
11. Trešo personu tīmekļa vietnes
12. Right to lodge a complaint with the supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority (Data State Inspectorate). The Data State Inspectorate accepts documents by mail, and email (documents signed with a secure electronic signature), and they can also be left in the mailbox on the 1st floor at Elijas Street 17, Riga, LV-1050. The Data State Inspectorate accepts electronic mailings received at the email address firstname.lastname@example.org.