The purpose of this Privacy Policy is to provide information to a natural person (data subject) regarding the purpose, scope, and protection of personal data processing carried out by tpkastes.lv when processing the data subject’s personal data.

The Privacy Policy regarding the protection of personal data is based on Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation).

1. Information About the Controller

tpkastes.lv provides road and site construction, landscaping, installation of traffic management and safety elements, and equipment rental services.

2. Contact Information for Personal Data Protection Matters

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us by phone at +371 29230626 or by writing to the email address: info@tpkastes.lv

3. General Description of Our Personal Data Processing

Personal data may be collected from the client, from the use of client services, and from external sources, such as public and private registers or third parties. The categories of personal data that we primarily, but not exclusively, collect and process are:

  • Identification and research data, such as name, surname, personal identification code.
  • Contact information, such as email address, telephone number.
  • Communication data, collected when the client contacts us by telephone, visual and/or audio recordings, email, messages, and other means of communication such as social media; data obtained when the client visits our website or contacts us via our other channels; device data.

This Privacy Policy describes how we process the personal data of our clients, client representatives/contact persons, cooperation partners, website visitors, and other persons whose data may come into our possession within the framework of our business activities.

We assume that before using our website or becoming our client, you have read this Privacy Policy and accepted its terms. We reserve the right to make amendments and update this Privacy Policy as necessary.

The purpose of this Privacy Policy is to provide you with a general insight into our personal data processing activities and purposes; however, please note that other documents (e.g., service agreements, cooperation agreements) may provide additional information regarding the processing of your personal data.

Please be informed that the personal data processing terms contained in this Privacy Policy apply only to the processing of natural persons’ data.

When visiting our website, a message is displayed to the user stating that cookies are used on the website.

We acknowledge that personal data is your property and value, and we will process it in compliance with confidentiality requirements and care for the security of your personal data in our possession.

4. For What Purposes Do We Process Your Personal Data and What Is the Legal Basis for Processing?

We will process your personal data only in accordance with previously defined legitimate purposes, including:

4.1. For the initiation and provision of services, as well as for the fulfillment and assurance of contractual obligations.

Within the framework of this purpose, we need to identify you, ensure appropriate payment calculations according to your reports, facilitate the payment process, communicate with you regarding service provision and/or contract fulfillment matters, and in certain cases, ensure the recovery of unpaid payments.

For this purpose and the aforementioned sub-purposes, we may require at least the following personal data: name, surname, personal identification code, address (mailing address), bank account number, telephone number, and email address of the client or the client/partner representative.

The main legal bases used to achieve these purposes are:

  • a) Conclusion and performance of a contract with the data subject (Article 6(1)(b) of the General Data Protection Regulation);
  • b) Fulfillment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation);
  • c) Legitimate interests of the controller (Article 6(1)(f) of the General Data Protection Regulation), e.g., identifying you as a contact person for the client and/or partner, ensuring communication with you.

4.2. Fulfillment of requirements established in regulatory acts regarding client identification, research, and service provision, or fulfillment of requirements in other regulatory acts.

Within this purpose, we must comply with the requirements of the “Natural Resources Tax” law, “On Accounting,” the law “On Taxes and Fees,” the “Archive Law,” and requirements set out in other regulatory acts.

For this purpose, we may need to process the following personal data: name, surname, personal identification code, address, telephone number, and email address of the client, client representative, or contact person.

The main legal basis for achieving these purposes is:

  • a) Fulfillment of a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).

4.3. Ensuring marketing activities

Within this purpose, we may send you commercial notices or publish materials from public events organized by us.

For this purpose, we may require at least the following personal data: name, surname, telephone number, and email address of the client or the client/partner contact person.

The main legal bases for achieving these purposes are:

  • a) Consent of the data subject (Article 6(1)(a) of the General Data Protection Regulation);
  • b) Conclusion and performance of a contract with the data subject (Article 6(1)(b) of the General Data Protection Regulation);
  • c) Legitimate interests of the controller (Article 6(1)(f) of the General Data Protection Regulation), e.g., ensuring communication.

You have the right to opt out of receiving our marketing messages. You can do this by: (a) following the opt-out instructions in the relevant marketing message; (b) contacting us via email: info@tpkastes.lv

Please note that even if you opt out of marketing messages, you may still receive administrative messages, such as notices regarding unsubmitted reports, unpaid invoices, information about the electronic reporting system, information about changes to the cooperation agreement, information about changes in regulatory acts governing the fulfillment of obligations set in the cooperation agreement, or information about contract termination.

4.4. Ensuring the legitimate interests of third parties

In cases of legal necessity, we may need to disclose your information to control services, such as the State Revenue Service, bailiffs, and other state authorities, exchange information within the group of companies, and use rights granted by regulatory acts to ensure our legitimate interests.

For this purpose, we may need to process at least the following personal data: name, surname, personal identification code, address, telephone number, and email address of the client or the client/partner contact person.

The main legal basis for achieving these purposes is:

  • a) Legitimate interests of the controller (Article 6(1)(f) of the General Data Protection Regulation), e.g., requests from state authorities regarding partner data, or ensuring debt collection.

4.5. Ensuring proper service provision

Within this purpose, we need to maintain and improve technical systems and IT infrastructure, using technical and organizational solutions that may also use your personal data (e.g., via cookies) to ensure proper service delivery. Third-party systems we use include:

– Google Inc. tools such as Google Analytics. More information on the terms of service and privacy policy of these tools can be found at: Google Analytics Privacy https://policies.google.com/privacy and Terms https://www.google.com/analytics/terms/gb.html

The main legal basis for achieving these purposes is:

  • a) Legitimate interests of the controller (Article 6(1)(f) of the General Data Protection Regulation).

5. Who Might Access Your Personal Data?

We take measures to process your personal data in accordance with applicable laws and ensure that your personal data is not accessed by third parties who do not have a legal basis for processing your personal data.

Your personal data may be accessed, as necessary, by:

  1. Our employees or directly authorized persons who require it for the performance of their duties;
  2. Personal data processors according to the services they provide and only to the extent necessary, such as auditors, financial management and legal consultants, database developers/technical maintainers, and other persons involved in the provision of the controller’s services;
  3. State and local government authorities in cases specified by law, such as law enforcement agencies, municipalities, tax administrations, and sworn bailiffs;
  4. Third parties, after carefully evaluating whether there is an appropriate legal basis for such data transfer, such as debt collectors, courts, out-of-court dispute resolution bodies, bankruptcy or insolvency administrators, and third parties who maintain registers (e.g., population register, debtor registers, etc.).

6. Which Partners Do We Choose for Personal Data Processing?

We take measures to ensure the processing, protection, and transfer of your personal data to data processors in accordance with applicable laws. We carefully select personal data processors and, when performing data transfer, evaluate its necessity and the volume of data to be transferred. Data transfer to processors is carried out in compliance with personal data confidentiality and secure processing requirements.

We cooperate with the following categories of personal data processors:

  1. Auditors, financial management, and legal consultants;
  2. IT infrastructure and database technical maintainers;
  3. Other persons involved in ensuring our service provision.

Personal data processors may change from time to time, in which case corresponding changes will be made to this document.

7. Is Your Personal Data Sent to Countries Outside the European Union (EU) or the European Economic Area (EEA)?

We do not transfer data to countries located outside the European Union or the European Economic Area.

8. How Long Will We Store Your Personal Data?

Your personal data is stored for as long as its storage is necessary for the relevant personal data processing purposes, as well as in accordance with the requirements of applicable regulatory acts (e.g., laws on accounting, statute of limitations, civil law, etc.). In evaluating the duration of personal data storage, we take into account the current requirements of regulatory acts, aspects of contractual fulfillment, your instructions (e.g., in the case of consent), and our legitimate interests. If your personal data is no longer necessary for the specified purposes, we will delete or destroy it.

Below we indicate the most common personal data storage periods:

  • a) Personal data necessary for the fulfillment of contractual obligations – we will store it until the contract is fulfilled and while other storage periods apply (see below);
  • b) Personal data that must be stored to fulfill the requirements of regulatory acts – we will store it for the periods specified in the relevant regulatory acts; for example, the law “On Accounting” specifies that source documents must be stored until the day they are needed to determine the beginning of each economic transaction and track its progress, but for no less than 5 years;
  • c) Data to prove the fulfillment of our obligations – we will store it for the general limitation period for claims, in accordance with the limitation periods specified in regulatory acts – 10 years in the Civil Law, 3 years in the Commercial Law, and other periods, also taking into account the periods for bringing claims set in the Civil Procedure Law.

9. What Are Your Rights as a Data Subject Regarding the Processing of Your Personal Data?

Updating Personal Data

If changes have occurred in the personal data you provided to us, such as a change in personal identification code, contact address, phone number, or email, please contact us and provide the current data so we can achieve the relevant personal data processing purposes.

Your Right to Access and Correct Your Personal Data

In accordance with the provisions of the General Data Protection Regulation, you have the right to access your personal data in our possession, request its correction, deletion, or restriction of processing, object to the processing of your data, as well as the right to data portability in the cases and procedures set out in the General Data Protection Regulation. The State Data Inspectorate (FPDAL Section 29) has the right to perform a check to determine the compliance of personal data processing with regulatory requirements in cases where the controller is prohibited by law from providing information to the data subject and a corresponding application has been received from the data subject. We respect your right to access and control your personal data; therefore, upon receiving your request, we will respond within the timeframes set by regulatory acts (usually no later than one month, unless it is a special request requiring more time) and, if possible, correct or delete your personal data accordingly.

You can obtain information about your personal data in our possession or exercise your other rights as a data subject in one of the following ways:

  • a) By submitting a relevant request sent to us by mail to the following address: Vidzemes šoseja 1M, Garkalne.
  • b) By submitting a relevant request sent to our email: info@tpkastes.lv; it is recommended to sign it with a secure electronic signature.

Upon receiving your request, we will evaluate its content and the possibility of identifying you, and depending on the situation, we reserve the right to ask you to further identify yourself to ensure the security of your data and disclosure to the correct person.

Withdrawal of Consent

If the processing of your personal data is based on your consent, you have the right to withdraw it at any time, and we will no longer process your personal data for that purpose. However, please be informed that the withdrawal of consent cannot affect the processing of personal data necessary for the fulfillment of regulatory requirements or based on a contract, our legitimate interests, or other grounds for lawful data processing specified in regulatory acts.

10. Where Can You Submit a Complaint Regarding Personal Data Processing Issues?

If you have any questions or objections regarding our processing of your personal data, we encourage you to contact us first.

However, if you believe we have not been able to resolve the issue mutually and you feel we are violating your rights to personal data protection, you have the right to submit a complaint to the State Data Inspectorate. Sample applications for the State Data Inspectorate and other related information can be found on the website of the State Data Inspectorate (http://www.dvi.gov.lv).

11. Why Do You Need to Provide Us With Your Personal Data?

Primarily, we collect your information to fulfill contractual obligations, comply with binding legal duties, and pursue our legitimate interests. In these cases, obtaining certain information is necessary to achieve the respective purposes; therefore, failure to provide such information may jeopardize the initiation of a business relationship or the fulfillment of a contract. If data is not mandatory but its provision could help improve the service or offer you favorable contract terms and/or offers, we will indicate that providing the data is voluntary.

Additionally, we wish to inform you of the main requirements of regulatory acts regarding personal data processing:

  1. The law “On Accounting” specifies the inclusion of the following personal data in an economic transaction document (contract) where a natural person is a participant: name, surname, personal identification code (if assigned), the address specified by the person or, if none is specified, the declared place of residence.

12. How Do We Obtain Your Personal Data?

We may obtain your personal data in one of the following ways:

  1. During the process of concluding a mutual agreement, obtaining data directly from you;
  2. If a contract is concluded with a third party and they have designated you as a contact person;
  3. From you, if you submit applications or emails, or call us;
  4. On the website www.tpkastes.lv, using cookies;
  5. In certain cases, from third-party databases, e.g., verifying your right to represent a business entity (firmas.lv, etc.).

13. Is Your Personal Data Used in Automated Decision-Making?

We do not use your data in automated decision-making.