1. Introduction

SIA “Latvijas Pārtikas ražotājs”, Reg. No. 40103325950, address: Sturainu (Stūraiņu) Street 6, Rumbula, Stopiņi municipality, LV-2119 (hereinafter – the Controller), processes personal data obtained from the data subject – the Website user (hereinafter – the User) on the website www.latpartika.lv (hereinafter – the Website).

The Controller shall take care of the User’s privacy and protection of personal data, respect the User’s right to the lawfulness of personal data processing in accordance with applicable law: Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation) and other applicable privacy and data processing legal enactments.

Taking into account the above, the Controller has developed this Privacy Policy for the purpose of providing the User with the information required by the Regulation.

The Privacy Policy shall apply to the processing of data, regardless of the form and/or environment in which the User provides his or her personal data (on the Website, paper form or by telephone).

2. Identity and contact details of the Controller

The Controller is SIA “Latvijas Pārtikas ražotājs”, Reg. No. 40103325950, address: Sturainu Street 6, Rumbula, Stopiņi municipality, LV-2119. Website: www.latpartika.lv, e-mail: , phone: +371 67221155.

3. Purposes and legal basis of processing

If the User submits his or her personal data such as name, surname, personal identity number, e-mail or postal address, telephone number, personal messages, etc. to the Controller by using the Website contact forms, e-mail or another type of mail, the Controller shall store and use this information to fulfil or enter into an agreement for the provision of the relevant services.

The processing of the above data shall be necessary for the Controller to identify the client, to prepare and enter into the agreement, and to prove the fact of entering into the agreement, to provide/maintain services, to provide customer service, to examine and process applications and complaints, to administer payments, as well as for other purposes directly related to entering into or fulfilling the agreements.

The legal basis for data processing shall be Section 6 (1) (b) of the Regulation stating that the data processing is lawful if the processing is necessary for the fulfilment of the agreement or for taking measures at the request of the data subject prior to the entering into the agreement.

4. Categories of personal data

Categories of personal data – name, surname, personal identity number, e-mail address, postal address, IP address, telephone number, content of the message or letter, payment information, etc.

5. Categories of personal data recipients

The data shall be disclosed to those employees of the Controller who need them for the performance of their direct duties in order to fulfil or enter into the relevant service agreement.

Upon acquiring and using personal data, the Controller shall partially use the services of the outsourcing service providers which, in accordance with the agreement, strictly follow the instructions of the Controller and which are controlled by the Controller on a regular basis before using the service and also further on.

6. Categories of data subjects

Categories of data subjects – the existing, former and potential customers of the Controller.

7. Data transfer outside Latvia

The data received are not and will not be transferred outside Latvia, the European Union or the European Economic Area, as well as they will not be transferred to any international organization.

8. Duration of data storage

Unless otherwise specified in the data protection instructions, the Controller shall delete personal data no later than three months after the original reason for data retention no longer applies, unless there is a legal obligation to continue to retain the data (for example, but not limited to accounting or legal proceeding purposes).

9. Data subject’s access to personal data

The data subject shall have the right to access his or her personal data within one month from the date of submission of the relevant request.

The User may submit a request for the exercise of his or her rights in writing in person, at the legal address of the Controller (upon presentation of an identity document) or by e-mail, signing the request with a secure electronic signature.

Upon receipt of the User’s request for the exercise of his or her rights, the Controller shall verify the User’s identity, assess the request and execute it in accordance with the regulatory enactments.

The User shall have the right to receive the information specified in the regulatory enactments in connection with the processing of his or her data, the right to request access to his or her personal data, as well as the right to request the Controller to supplement, correct or delete them, restrict processing, or the right to object to processing, insofar as this right is not contrary to the purpose of the data processing (entering into or fulfilment of the agreements).

The data subject shall not be entitled to receive information if the disclosure of this information is prohibited in accordance with the law in the field of national security, national defence, public security, criminal law, as well as for the purpose of ensuring public financial interests in tax matters or supervision of financial market participants and macroeconomic analysis.

10. The right to file a complaint with the supervisory authority

The data subject shall have the right to submit a complaint to the supervisory authority (the Data State Inspectorate) at Blaumana (Blaumaņa) Street 11/13, Riga, the Data State Inspectorate also accepts e-mails sent to the e-mail address: .