Privacy Policy
Privacy Policy for the website www.spgroup.lv
"SP GRUPA", SIA
Reg. No.: 50003563771
Address: "Pētes", Viļķenes pag., Limbažu nov., LV-4050
1. Introduction
"SP GRUPA", SIA (hereinafter the Controller) processes personal data obtained from the data subject—the Website user (hereinafter the User)—on the Website www.spgroup.lv (hereinafter the Website).
The Controller is committed to protecting Users’ privacy and personal data, and respects Users’ rights to the lawful processing of personal data in accordance with applicable laws and regulations—the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation), and other applicable privacy and data protection laws.
For these reasons, the Controller has prepared this Privacy Policy to provide the User with the information required under the Regulation.
This Privacy Policy applies to data processing regardless of the format and/or environment in which the User provides personal data (on the Website, in paper form, in person or by telephone).
The Controller reserves the right to change these terms at any time. Website visitors are responsible for checking the Website content themselves to keep up to date with any changes to the terms.
2. Controller’s identity and contact details
The Controller is "SP GRUPA", SIA
Reg. No. 50003563771
The Controller’s address is "Pētes", Viļķenes pag., Limbažu nov., LV-4050
Website – www.spgroup.l
Email - spgrupa@inbox.lv
Phone - +371 29105207
3. Purposes of personal data processing and legal basis for processing
If a User submits their personal data to the Controller by phone, through the Website’s contact forms, by email or by post, we store and use this information to enter into or fulfill the relevant service agreement, including to identify the customer; prepare and enter into the agreement; provide services (perform contractual obligations); provide customer support; review and handle objections; build customer loyalty; administer payments and settlements; recover and collect debts; establish facts; maintain and improve the Website; support business planning and analytics; and for planning and record-keeping. We also process this data to provide information to public authorities and law enforcement agencies in the cases and to the extent required by law.
The legal bases for processing data are entering into and performing a contract; complying with legal requirements; the Client’s (data subject’s) consent; and our legitimate interests (for example, verifying the Client’s identity before entering into a contract, ensuring contractual obligations are fulfilled, analysing use of the website and ensuring the efficient provision of services, etc.).
4. Personal data categories
Categories of personal data: first name, last name, personal identity number, email or postal address, IP address, telephone number, message or letter content, etc.
5. Categories of recipients of personal data
Data is disclosed to the Controller’s employees who need it to perform their duties in order to enter into or fulfill the relevant service agreement.
When collecting and using personal data, we use some third-party service providers. They are contractually required to follow our instructions and are subject to our ongoing oversight, both before and throughout their engagement.
6. Categories of data subjects
Categories of data subjects: the Controller’s current, former and prospective customers, as well as other individuals who wish to contact the Controller.
7. Transfer of data outside Latvia
The data collected is not intended to be transferred outside Latvia, the European Union or the European Economic Area, or shared with any international organization. However, as the Website is connected to Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.
8. Data retention period
We process and store the User’s personal data for as long as either party has a legal obligation to retain it.
Once the circumstances described above no longer apply, and unless the data protection instructions state otherwise, we will delete personal data no later than three months after the original reason for retaining it ceases to apply, except where we are legally required to retain the data for longer (including, but not limited to, accounting or legal proceedings).
9. Data subject’s right of access
The data subject has the right to access their personal data within one month of submitting the relevant request.
Users may submit a written request to exercise their rights in person at the Controller’s registered address (presenting proof of identity), by post, or by email signed with a secure electronic signature;
Upon receiving a User’s request to exercise their rights, the Controller verifies the User’s identity, reviews the request and processes it in accordance with applicable laws and regulations.
Users have the right to receive information required by law concerning the processing of their data, request access to their personal data, and ask the Controller to supplement, correct or erase it, restrict its processing, or object to its processing, insofar as these rights do not conflict with the purpose of processing the data (entering into or performing a contract).
Data subjects are not entitled to receive information where its disclosure is prohibited by law in the interests of national security, national defense, public safety or criminal law, or to protect the State’s financial interests in tax matters, supervise financial market participants or conduct macroeconomic analysis.
10. Cookie processing
The Website collects data about its visitors, enabling the Website operator to assess how useful the Website is and how it could be improved.
The Controller continually improves the Website to make it easier to use. To do this, the Controller needs to know what information is important to visitors, how often they visit the Website, which devices and browsers they use, where they are visiting from, and what content they prefer to read.
The Controller uses Google Analytics to analyse how visitors use the Website. Find out how Google Analytics works on Google’s website: https://support.google.com/analytics/answer/+371 64225807?hl=lten&ref_topic=6157800. The Controller uses the data collected in its legitimate interests to better understand the needs of Website visitors and improve access to information published by the Controller. Visitors can opt out of Google Analytics data collection at any time, as described here: https://tools.google.com/dlpage/gaoptout/.
The server hosting the Website may log requests sent by visitors (device used, browser, IP address, access date and time). The data mentioned in this section is used for technical purposes: to ensure the proper functioning and security of the Website and to investigate potential security incidents. The legal basis for collecting the data mentioned in this section is the Controller’s legitimate interest in ensuring the technical availability and integrity of the Website.
Cookies are small files that the browser saves on a visitor’s computer each time they visit the Website, subject to the visitor’s browser settings. Some cookies are used to select and display information and advertising relevant to visitors based on content they have viewed previously, making the Website simple, convenient and personalised to use. For more information about cookies and how to delete and manage them, visit www.aboutcookies.org
The Website uses cookies to collect users’ IP addresses and browsing information and to remember visitors’ preferences. Cookies allow the Controller to monitor Website traffic and users’ interactions with the Website. The Controller uses this data to analyse visitor behaviour and improve the Website. The legal basis for using cookies is the Controller’s legitimate interest in ensuring the Website’s functionality, availability and integrity.
Visitors can manage and/or delete cookies as they choose. More information about this process is available at www.aboutcookies.org. Visitors can delete all cookies stored on their computer, and most browsers can be set to block cookies. Visitors can opt out of cookies through their browser settings or via https://tools.google.com/dlpage/gaoptout. Visitors should consult their browser’s instructions to make the necessary changes. If cookies are blocked, visitors will need to adjust their settings manually each time they visit the Website, and some services and features may not work.
Only the Controller’s employees responsible for analysing Website visitor statistics can access those statistics.
Unless stated otherwise, cookies are stored until the action for which they were collected has been completed, after which they are deleted.
If the Controller’s Website provides a forum or comments feature, the visitor’s IP address and the information they provide themselves will be stored on the Website. For your convenience, cookies containing this data (so you do not have to enter it again next time) may be stored for one year.
11. Third-party websites
We may work with third parties who are authorised to place third-party cookies on our websites or in our services, apps and tools with your consent. These service providers help us offer you a better, faster and more secure website experience. Please note that third-party cookies are subject to the third parties’ privacy policies, and we accept no responsibility for those policies.
The website uses the Facebook Pixel. This tool is used to tailor content and ads for Facebook users. To learn more about Facebook’s privacy policy, click here https://www.facebook.com/about/privacy/. You can also change your ad settings in your Facebook profile.
12. Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority (the Data State Inspectorate). Documents for the Data State Inspectorate may be submitted by post to Elijas iela 17, Rīga, LV-1050, or by email to pasts@dvi.gov.lv
13. Validity of the Privacy Policy
We reserve the right to amend and supplement this Privacy Policy from time to time to clarify how we process your data.
For these reasons, we encourage you to review this Privacy Policy regularly so that you stay informed about how your personal data is processed on the Website.
