LV

Privacy Policy of SIA RTU-BT1

SIA RTU-BT1 (“we”) take appropriate steps to ensure that your personal data is always safe with us and that the processing of your personal data is carried out according to the applicable data protection laws, our internal policies, guidelines and rules. We have appointed a data protection officer tasked with controlling how we comply with these laws, guidelines and rules. We respect your right to privacy and undertake to protect it according to this privacy policy (“Privacy Policy”). In this Privacy Policy we will inform you on how we process your personal data.
We undertake to be honest to you and provide clear and understandable information on what personal data we process, the purpose of processing, how long we store personal data for and the legal grounds for such processing, as well as other information that we are obligated to provide in accordance with applicable laws and regulations.

Contents of this Privacy Policy:

  • 1. What personal data do we process and why?
  • 1.1. Video surveillance;
  • 1.2. Invoices to natural persons and from natural persons;
  • 1.3. Personal data of employees/representatives of business partners or potential business partners;
  • 1.4. Reservations and accommodation of guests in the campsite.
  • 2. Protection of personal data.
  • 3. Your rights.
  • 4. Changes to our Privacy Policy.
  • 5. Contacts.
1. What personal data do we process and why?
We process the following categories of personal data, and processing has the following purposes and legal grounds:
1.1. Video surveillance
Processing of this personal data is necessary to prevent, control, monitor and identify offences related to property and assets (theft, vandalism etc.), condition of premises and car park, accessibility of emergency exits and other important objects, as well as processes e.g.:
  • • ensure security (customers, employees, visitors);
  • • identify trespassing, breaking in, theft, attacks, damage, fraud in financial transactions, and other illegal activities inside and outside of the property;
  • • monitor the movement, assembly and behaviour of people to better manage security and risks;
  • • correctly distribute resources in situations when an offence cannot be prevented or is already happening;
  • • investigate incidents.
Categories of personal data Legal grounds of processing
Image and other personal data and actions that are in the field of view of video surveillance cameras. Our legitimate interests ensure the security of our property, information, employees and third parties, to prevent, control, uncover and effectively investigate unlawful activities.
We collect and process personal data by using technical measures, i.e., video surveillance cameras, CCTV systems and other similar technologies.
We have no intention to identify you unless identification is necessary for achieving specific goals. However, taking the nature of video surveillance into consideration, we cannot guarantee that you will be able to perform your obligations or receive our services without becoming the subject of video surveillance.
We store video surveillance recordings for no longer than 15 days, with the exception of cases when information contained in a recording is necessary as evidence in civil, administrative or criminal proceedings. In such cases we normally store individual video surveillance recordings for 30 days, and they can also be stored for as long as necessary in those legal proceedings; these recordings will be destroyed as soon as they are no longer necessary.
To perform our obligations towards you, we can transfer your personal data to a security company that provides security services to us. This company only has the right to process your personal data according to our instructions and they cannot use it for any other purposes. They are required by law and our cooperation contract to protect your personal data.
To perform our legal obligation and to exercise our legitimate interests, we can transfer your personal data to law enforcement institutions, as well as state and municipal institutions, upon request.

1.2. Invoices to natural persons or invoices from natural persons
Categories of personal data Legal grounds of processing
  • • name;
  • • surname;
  • • VAT registration number (if registered for VAT);
  • • number of certificate of economic operator;
  • • address;
  • • contact details – e-mail address and/or phone number.
We process your personal data to perform the obligations specified in applicable laws and regulations.
However, if we store your personal data for the purpose of protecting our legitimate interests, for example, to recover debts and/or collect other payments, then such protection of our legitimate interests serves as the grounds for processing personal data.
We process your personal data to be able to correctly issue or receive invoices, i.e., according to the requirements of laws and regulations and to be able to ensure correctness of the information that must be provided to the State Revenue Service. We process your personal data to allow us to recover debts and/or collect other payments, and to pursue and defend legal claims according to our legitimate interests.
We obtain information about you when you provide it to us, to issue an invoice for goods and services bought, or when you issue an invoice to us.
When we issue invoices, you must provide us your name, surname, VAT registration number (if registered for VAT), address, and number of certificate of economic operator. If you do not provide the required mandatory information, we cannot issue an invoice to you.
Your personal data will be stored for 10 years after the issue or receipt of an invoice.
We transfer your personal data to banks, state institutions (mainly, the State Revenue Service), auditors, document archiving companies, legal and financial consultants, and the accounting software provider.

1.3. Personal data of employees and representatives of business partners or potential business partners
Categories of personal data Legal grounds of processing
  • • name;
  • • surname;
  • • e-mail address;
  • • phone number;
  • • position
Legitimate interests to enter into and perform agreements with business partners and to form new business relations with potential business partners.
We process your personal data as an employee or representative of a business partner to sign agreements, perform them and/or to contact you on issues concerning the implementation of such agreements.
We process your personal data as an employee or representative of a potential business partner to form new business relations (for example, when receiving commercial offers in our competitions).
We obtain your personal data from you or from our business partners or potential business partners.
We store your personal data as an employee or representative of a business partner for 10 years after the end of the term of the contract. If a contract is necessary for legal proceedings that are longer than the above-mentioned storage period, then all personal data related to the contract will be stored for a year after the responsible institution takes its final decision.
We store your personal data as an employee or representative of a potential business partner until the end of the competition.
We can disclose your personal data to auditors, state institutions (mainly, the State Revenue Service), financial and legal consultants, and accounting software provider.
1.4. Reservations and accommodation of guests in the campsite.
When filling in the reservation form on our website or sending a reservation e-mail message, the following categories of your personal data are obtained:
Categories of personal data Legal grounds of processing
  • • name;
  • • surname;
  • • e-mail address;
  • • vehicle registration plate;
  • • country;
  • • time of use of the campsite.
Legitimate interest to ensure rental service in the campsite and the related customer service.
We store your personal data for as long as the data is necessary to ensure the rental service. After the fulfilment of obligations, we will store your personal data in archived form until the end of the limitation period, and it will be possible to access your personal data only in special cases, for example, to protect our rights or property, or when performing a request of state officials and law enforcement institutions.
    2. Protection of personal data
    We apply the following precautionary measures with respect to personal data provided by you:
    • security.
    We use various technical and organisational security measures for protecting your personal data. Your personal data is stored securely and is only available to a limited number of people;
    • cross-border transfer.
    We do not transfer your personal data to third countries outside of the European Union and the European Economic Area.
3. Your rights
You have all of the rights of a data subject guaranteed by the General Data Protection Regulation and laws and regulations of the Republic of Latvia. Your rights include, without limitation, the following:
  • • the right to access your personal data and receive information on how it is processed;
  • • the right to request the correction of inaccurate or incomplete personal data;
  • • the right to be forgotten (you have the right to request that your personal data should be erased and that processing should stop, if the personal data is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent. However, the right to be forgotten is not absolute and it cannot be exercised in situations when we have a legal obligation to process or store such data, or if processing is necessary to allow the protection of our legitimate interests);
  • • the right to data portability (the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller);
  • • the right to restrict processing of your data (in certain cases you have the right to restrict the processing of your personal data);
  • • right to object against the processing of your data (you have the right to object to the processing of your data by us. This applies to cases when data processing is justified by our legitimate interests or that of third parties);
  • • the right to turn to the Data State Inspectorate (http://www.dvi.gov.lv).
In order to exercise your right to access your personal data and receive information on how it is processed (request by the data subject), you can submit a request to exercise your rights:
  • • in writing in person in our office in Riga, 8 Ķīpsalas Street, by presenting an identity document (passport or ID card);
  • • in electronic form by using a secure electronic signature.
When we receive a data subject’s request, we need to check your identity to ensure the security of personal data processing and to guarantee that personal data is not disclosed to unauthorised persons, and therefore requests for information that are not drawn up according to the indicated requirements, for example, requests that do not have a secure electronic signature, will not be processed as the data subject’s requests. (contact details are given below).
    4. Changes to our Privacy Policy
    We regularly review our Privacy Policy. This Privacy Policy has been updated on 28 May 2018.
5. Contacts
If you have questions about the processing of your personal data, requests or you wish to provide feedback, please, contact us:
SIA RTU-BT1, registration number: LV40003325653, legal address: Ķīpsalas iela 8, Riga, LV-1048, Latvia, phone number: +371 67067509, e-mail address: info@rigaexpo.lv.
You can also contact our data protection officer by sending an e-mail message to dpo@rigaexpo.lv.