Privacy policy
Personal data is any information that might be used to identify an individual. Measures are being taken to ensure that customer personal data is always secure and that customer personal data processing is conducted in accordance with applicable data protection laws, internal policies, guidelines and procedures. The aim of the privacy policy is to provide physical person – data subject – information on the purpose, scope, protection and processing time for the processing personal data during the acquisition of data and processing personal data of the data subject.
Personal Data Processing Manager: Ltd “STAFOR”, reg. No. 40103520315, legal address. Marsa gatve 5-10, Riga, Latvia, LV1082 (hereinafter – STAFOR).
Applicable law: Personal Data Protection Law, Regulation 2016/679 of the European Parliament and of the Council of April 27th, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (Regulation) and other applicable privacy and data protection legislation.
What is Privacy policy?
Privacy policy is a connection between STAFOR and physical person (hereinafter – User), communicating with STAFOR and/or uses J Konsult homepage and/or services provided.
STAFOR has undertaken to protect User’s personal data. Privacy policy lets User to understand what kind of information is obtained when User sends his/her data to STAFOR or STAFOR they are acquired in their possession in other ways, why does STAFOR collect these data and how they will be used. Similarly, the Privacy Policy provides information on how STAFOR collects, processes, stores, deletes and protects User Personal Data, thereby ensuring that User's personal data is processed lawfully, honestly and in a transparent manner to the User.
The policy applies to the User's personal data, any physical person's personal data processing and the service provided to the User. In case STAFOR renews this policy, all the changes will be published on STAFOR homepage. In order to provide the User with better and more appropriate services, as well as to secure, maintain, protect and improve existing services, STAFOR processes the data collected from the provision of services.
What purposes is User’s data collected for?
User personal data and other information is collected to:
- offer and provide appropriate services, monitor deals and protect Users from illegal or harmful acts of a person, whether direct or indirect, deliberate or unconscious, when processing information and data that is at the disposal of the persons concerned;
- to process any User Information Requests;
- to fulfil the duties specified in STAFOR normative documents;
- to provide support services to the User;
- to conduct customer research, surveys and analysis;
- to provide the User with information about STAFOR offers, products and services, if the User has agreed to it.
What User data does STAFOR process?
- Name, surname, identification code/date of birth, correspondence address, telephone number and e-mail address;
- Bank data if provided;
- Data that client informs STAFOR himself;
- Information on User IP address;
- Cookies (web browsing data);
- etc. personal data depending on, depending on the type of service provided to the Client.
This information is kept in STAFOR servers, located in a secure infrastructure.
When the User faces STAFOR services, STAFOR servers maintain a unique operations register for User’s safety storing certain administrative and data traffic information, including:
- IP addresses;
- access times;
- access dates;
- previously visited pages;
- language to be used;
- software error report by the browser application used.
This information is essential for providing service quality.
Private information is not collected without the consent of the User.
User data will not be transferred outside the European Union or the European Economic Area countries, however, in case of such a necessity, User data can only be transferred to countries that provide the same level of data protection for physical persons as the European Union does.
What means does STAFOR use for collecting and processing data?
STAFOR can automatically collect previously mentioned data and receive personal data User indicates when using services or contacting and interacting with the homepage in different ways. STAFOR can also receive personal information from other service providers online. STAFOR can also attract third-party service providers to provide technical support in the provision of the service. STAFOR can access to information that User has given to these service providers and third party e-commercial service providers, respecting all privacy policies.
What is the basis of the processing of the User's personal data?
User's personal consent – User, as personal data subject, gives consent to the collection and processing of personal data for certain purposes by completing application and / or contact forms. Similarly, the User agrees to the processing of data for direct marketing purposes in order to express new and individual offers (this consent may, of course, be withdrawn by the User). User consent is his free will and independent decision that can be made at any time, thus allowing STAFOR to process personal data for specified purposes. User consent is binding if provided directly and unambiguously. The User has the right at any time to withdraw his / her prior consent using the specified communication channels with STAFOR. The requested changes will take effect within three working days. The withdrawal of consent does not affect the legality of the processing, which is based on consent before the withdrawal.
Service providing – in order for STAFOR to provide the User with qualitative services, STAFOR should serve and process certain personal data collected from the User in STAFOR homepage.
Legitimate interests – in the interests of STAFOR, based on the provision of quality services and timely support to the User, STAFOR has the right to process the User's personal data to the extent that it is objectively necessary and sufficient for this purpose for the purposes of this Privacy Policy. The legitimate interests of STAFOR include the processing of personal data through direct marketing, resulting in the issuance of new and / or individual STAFOR service offers to the User.
Enforcement of legal obligations – STAFOR is entitled to process personal data in order to comply with the requirements of the regulatory enactments and to provide answers to legitimate requests of the state and local government.
Exceptions of user data discovery.
STAFOR has the right to disclose personal data only in cases provided in laws and regulations.
What are cookies?
Cookies are small text files stored by your website on your computer or mobile device when you visit our homepage. At each next visit, cookies are returned to the originating site or a third party site that recognizes the corresponding cookie. Cookies allow the site to remember user-selected settings for subsequent visits so that they do not need to be re-assigned each time. Cookies are not used to identify you personally. STAFOR can use cookies as a mean for obtaining information from the web server for the above-mentioned purposes, following the use of the User’s site. In case the User continues to use the homepage the User agrees on using STAFOR cookies. Cookies contain information that is transferred to the user's hard disk drive. They help STAFOR to improve the homepage and provide better and more personalized service.
The data obtained is used by the STAFOR homepage maintainer and Google, which obtains anonymous data and is not linked to either a specific person or a specific IP address. Google Analytics data safety is verified by ISO 27001 certificate and USA and EU privacy shield regulation. More detailed information is provided here: https://support.google.com/analytics/topic/2919631.
In case User wants to delete all the cookies already saved on the computer or stop cookies that follow the User's actions on the homepage, the User can do that by deleting the current cookies and / or changing browser confidentiality settings to block the cookies (the process, as it is done, differs from the browser to the browser).
For more information on how to do that visit the homepage www.allaboutcookies.org.
Duration of user data storage.
STAFOR will process User’s personal data while there is at least one of these conditions:
- while the User is using the service;
- the term for the storage of personal data is specified or arising from the laws of the Republic of Latvia and the European Union;
- how much it is necessary for the realization and protection of STAFOR's legitimate interests;
- until the User's consent to the processing of personal data has been revoked.
What are the security conditions?
Using STAFOR services or contacting STAFOR, User agrees STAFOR service providing terms and conditions. STAFOR ensures, continually reviews and improves protection measures to protect User's personal data from unauthorized access, accidental loss, disclosure or destruction. To ensure this, STAFOR applies modern technology, technical and organizational requirements, including through the use of firewalls, intrusion detection, and analysis software and data encryption. STAFOR carefully checks all service providers which on behalf of and for the purpose of STAFOR treat the User's personal data and evaluate whether the cooperation partners (data controllers) apply appropriate security measures in order to process the personal data of the User in accordance with the STAFOR delegation and requirements of the regulatory enactments. Business partners are not allowed to process personal data held by STAFOR for their own purposes. STAFOR does not take responsibility for any unauthorized access to personal data and / or loss of personal data, unless it is STAFOR-dependent, for example, the User himself discloses his personal data to third parties.
In the event of a threat to the user's personal data, STAFOR will notify the User thereof.
Also, STAFOR informs authorities and physical persons involved about information/data processing security incidents without undue delay within 72 hours from the moment of noticing the violation, as required by applicable law and / or European Union law, except, if, under the principle of accountability, STAFOR can demonstrate that a breach of personal data is unlikely to constitute a risk to individuals' rights and freedoms.
STAFOR stores all personal information received from the User, in a protected database, part of the data encrypted, whose connection is protected.
What are User rights?
Contact STAFOR to receive a copy of personal data held by STAFOR.
Correct all your personal data held by STAFOR,
The User has the right to obtain information about those physical or legal persons who have received information about this User during a certain period from STAFOR. STAFOR will not provide the User with information about the state institutions that are the guides of criminal proceedings, the operative bodies or other institutions for which the law prohibits disclosure of such information.
Request the deletion or limitation of the processing of personal data that is no longer required for the purposes for which they were collected and processed (right “to be forgotten”).
The User has the right to transfer his personal data.
Address the STAFOR or the supervisory institution of processing personal data (Data State Inspectorate, www.dvi.gov.lv) concerning the questions on the processing of personal data.
You can contact STAFOR via e-mail: info@stafor.lv.
With all information security system issues and information / data security issues not covered by this Policy, you must contact STAFOR (tel. +371 67603399 and e-mail: info@stafor.lv)