Privacy Policy

We are glad to see your interest in our company. This page is developed by ___________ and administered by Ekodoma. Data protection is very important _________________. The use of ____________ websites is available without indicating the personal data, however if the data subject is willing to use the special services of the company, then the personal data processing could become necessary upon using our website. If the data processing is necessary and there the law does not specify the grounds for such processing, we usually obtain a consent from the data subject.

Personal data processing, for example, name, surname/ company name, address, email address or phone number of the data subject, is always performed in compliance with the General Data Protection Regulation and in accordance with data protection regulations applicable in each particular country, to which Ekodoma is subject to. By this data protection declaration, our company is informing the society about the type and volume of the personal data being collected, used, and processed, as well as the purpose of such actions with the personal data. Moreover, by this data protection declaration, the data subjects are being informed about their rights.

As an administrator, Ekodoma has implemented a list of technical and organisational measures in order to ensure the ultimate protection of the personal data being processed by this website. However, upon internet data transmissions there can be security failures, therefore an absolute protection cannot be guaranteed, so each data subject can communicate their personal data to us free of charge using alternative means, for example, by phone.

Definitions

Ekodoma data protection declaration is based on the terms used by the European legislator in the General Data Protection Regulation. Our data protection regulation is designed in a way to be readable and comprehensible for broad audiences, as well as our clients and business partners. In order to ensure that, we would like to start with explaining the terminology used.

This data protection declaration is using the following terms:

Personal data:

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Controller

For the purposes of the General Data Protection Regulation, other data protection regulatory enactments applied in the member-states of the European Union, and other regulations related to the data protection, the controller of the personal data is:

Ekodoma, SIA
Noliktavas street 3-3
Riga
Email: ekodoma@ekodoma.lv

Person in charge of data protection:

Email: anda.jekabsone@ekodoma.lv 

Cookie files

Ekodoma website is using cookie files. Cookie files are text files that are being stored in your computer system, using internet browser.

Any websites and servers are using cookie files. Many cookie files contain a so-called cookie ID, which is a unique cookie file identifier. It consists of strings of characters, by which websites and servers can be attributed to a particular internet browser, in which the cookie file is saved. It allows the websites and servers you are visiting to identify the browser of the data subject among other browsers that contain other cookie files. The particular internet browser can be recognised and identified using the unique cookie ID.

Using cookie files, Ekodoma can ensure a better user experience for the users of the website, which would not be possible without cookie files’ settings.

Using cookie files, the information and the offers on our website can be optimised and adjusted to the user’s preferences. Cookie files allow us to recognise the user. However, the purpose of such recognition is to provide a better user experience for the visitors of the website. For example, a website visitor who is using cookie files does not need to enter their access information every time when signing in on the website, because the website remembers this information by saving a cookie file on the user’s computer system. The same applies to shopping cart in an online shop, where the website is using cookie files to remember the items the client has put in the cart.

Data subject is entitled to suspend installation of cookie files from our website, using the setting of their website, and thus permanently deny the installation of cookie files. Moreover, the saved cookie files can be deleted any time, using your internet browser or other software. All popular internet browsers allow for such action. If data subject deactivates the cookie files’ settings in their browser, it could affect the use of functions of our website.

Collecting general data and information

This website is collecting a list of general data and information if the data subject or automated system accesses the website. These general data and information are being saved in the journal files of the servers. This information could be:

  • Types and versions of the used browsers;
  • Operating system that is used by the access system;
  • Website from which the access system forwards to our website;
  • Subdomain websites;
  • Date and time of accessing the website;
  • IP address;
  • Access system internet service provider, and
  • Any other similar data and information that can be used upon attaches on our information technology systems.

Using the general data and information, Ekodoma is making no conclusions about the data subject. This information is necessary in order to:

  • Currently deliver the content of the website;
  • Optimise the content of our website, as well as ads on it;
  • Ensure long-term viability of our information technology systems and website technologies, and
  • Provide the law enforcement authorities with the information necessary for criminal prosecution in case of cyberattack.

Therefore, Ekodoma is analysing data only in anonymous way for statistical purposes in order to increase security and safety of the data of our company, as well as to ensure the optimal level of protection of the personal data being processed by us. The anonymous data of the server journal files are being stored separately from all the personal data provided by the data subject.

Communication options, using the website

Ekodoma website provides information allowing to easily contact our company digitally, as well as direct communication with us, including the general email address. Should the data subject contact the data processor by email or using the communication form, the forwarded personal data shall be saved automatically. Such personal data that the data processor’s data subject sends voluntarily are being stored for the processing of the data subject or to contact the data subject. These personal data are not being disclosed to any third parties.

Regular deletion and blocking of the personal data

Data processor is processing and storing the personal data of the data subject only as long as it is necessary in order to achieve the purpose of the storing or as long as it is provided by the regulatory enactments of the European legislator or other legislators, or the regulations the controller is subject to.

If the purpose of the storing is not applicable, or the storage term provided by the European legislator or other competent legislator expires, the personal data should be regularly blocked or deleted in accordance with the requirements of the regulatory enactments.

The rights of the data subject

Confirmation rights

Each data subject is entitled to receive confirmation from the controller about whether any personal data attributable to them are being processed.

Access rights

Each data subject is entitled to receive the information about their personal data stored at any time from the controller free of charge, as well as a copy of this information. The European directives and regulations stipulate access for the data subject to the following information:

  • The purposes of processing;
  • The categories of the personal data;
  • The data receivers or categories of receivers, with whom the data are being or shall be shared, especially the receivers in third countries or international organisations;
  • If possible, the estimated term during which the personal data shall be stored, or, if that is not possible, the criteria to be applied for determining the said period
  • Personal data subject’s rights to demand correction or deletion of the personal data, or restrict processing of the personal data regarding the data subject, or object against such processing;
  • The rights to lodge a complaint to a supervising institution;
  • If the personal data are collected not from the data subject, then all the available information about the source of such information;
  • Automated decision-making, including profiling, as provided in Clauses 1 and 4 of Article 22 of the GDPR, and at least in the following cases a comprehensive information about the logic, as well as significance of such processing and foreseeable consequences for the data subject.

Moreover, the data subject is entitled to receive information about whether the data are being sent to any third country or international organisation. In this case the data subject is entitled to receive information about the applied security measures in relation to data transfer.

The rights to rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The right to erase

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing;
  • the data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

The right to restriction of processing

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
  • the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

The right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) of the GDPR; and the processing is carried out by automated means unless the processing is in public interest or the processing is not required.

Moreover, in exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and shall not adversely affect the rights and freedoms of others.

The right to object

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions.

In case of objection, Ekodoma suspends personal data processing if we cannot demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Should Ekodoma process personal data direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects against the processing for the direct marketing purposes by Ekodoma, then we shall suspend personal data processing for such purposes.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

The right to revoke the data protection consent

The data subject has the right to revoke their consent to the personal data processing at any time.

Lawfulness of processing

Point a) of Article 6(1) of the GDPR serves as legitimate grounds for the processing actions, regarding which we receive the consent for the particular processing purpose. If the personal data processing is necessary for the performance of a contract to which the data subject is party, for example, if the processing is necessary for delivery of products or providing any other services, the processing shall be based on point a) of Article 6(1) of the GDPR. The same applies to such processing that is necessary in order to take steps at the request of the data subject prior to entering into a contract, for example, regarding our products or services, or our company is subject to legal duty in accordance with which personal data processing is necessary, for example, for compliance with the taxation regulations, then the processing is based on point c) of Article 6(1) of the GDPR. In rare cases personal data processing could be necessary to protect significant interests of the data subject or other individual. and finally, the basis for the data processing actions could be point f) of Article 6(1) of the GDPR. This legitimate ground is used for carrying out such processing actions to which none of the abovementioned grounds applies if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Such processing actions are especially applicable if specified by the European legislator. It considers that the legitimate interests could be taken into account if the data subject is the client of the controller (preamble Clause 47, GDPR).

The term of storing the personal data

Personal data are being stored for the period of time provided by the applicable law. After the expiration of such period, the data shall be regularly deleted unless it is necessary for execution of a contract or entering into contract.


Contacts

SIA “Ekodoma”
Noliktavas street 3-3, Riga, LV-1010, Latvia
+371 6732 3212
platforma@ekodoma.lv
linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram