DATA PROCESSING POLICY
The controller of the processing of personal data is the office of the sworn advocate "LUMOS", registration number 90012070428, address: 16 Bruninieku Street, Riga, LV-1001 (hereinafter – the Office).
CONTACT INFORMATION:
Phone: +371 26115815
Address: Riga, 16 Bruninieku Street, Latvia, LV-1001
Email address: info@lumos.lv
CONTACT INFORMATION FOR QUESTIONS ABOUT PROTECTION OF PERSONAL DATA:
Email address: aleksandrs.locans@lumos.lv
The purpose of the data processing policy is to provide an individual – the data subject – with information about the purpose, legal basis, scope, protection and duration of data processing and the rights of the data subject during data collection and processing. The data processing policy applies to an individual (hereinafter referred to as individual or data subject) with whom the Office enters into any contract or who receives, received or intends to receive services provided by the Office, visits the premises of the Office, contacts the Office, including using electronic means of communication, visits the Office’s website www.lumos.lv, submits an application for Office services by filling out a service application form on the website, as well as to the legal representative or authorized person of such a person. The data processing policy also applies to individuals whose personal data is obtained by any other legal means, including from third parties or authorities, including courts, participants in litigation, state or municipal authorities, while representing the interests of the client.
Personal data includes any information related to an identified or identifiable natural person, including, but not limited to, name, surname, age, contact information, marital status, property information, legal relationships, etc. (hereinafter – personal data).
The data processing policy is applicable to the processing of personal data regardless of the form and / or environment in which the personal data is provided by an individual (personal communication, written communication, phone or email, visiting the Office website, etc.).
The Office processes personal data and ensures the protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter – Regulation), the Law on the Processing of personal data and other regulatory acts in force in the Republic of Latvia that regulate the protection of personal data of individuals.
WHAT PERSONAL DATA ARE PROCESSED
The Office may receive and process the following personal data: name, surname; personal identification number (and / or date of birth); contact details: phone number, email address, address of residence; citizenship; information about the property of a person, his marriage, contracts and legal relations with third parties, state and municipal authorities, criminal records and other data necessary to achieve the purposes of processing personal data.
PURPOSES FOR PROCESSING PERSONAL DATA
The Office processes personal data for the following purposes:
- Providing legal assistance to clients, including:
- customer identification;
- ensuring the interests of the client during preparation of contracts and deals;
- ensuring the interests of the client by conducting correspondence with third parties;
- ensuring the interests of the client by providing legal assistance in the courts and authorities;
- administration of payments;
- consideration of claims of customers and third parties;
- processing and storage of incoming and outgoing correspondence (e-mail, mail, etc.);
- provision of information to government bodies in the manner prescribed by the law;
- conclusion of contracts and fulfillment of obligations arising from them;
- maintaining and improving the work of the Office website.
LEGAL BASIS FOR PERSONAL DATA PROCESSING
The processing of client data in order to provide legal services to the client is based on Article 6 (1) (b), (c) and (f) of the Regulation and Article 9 (2) (f) of the Regulation.
When concluding civil law contracts, the Office processes personal data in accordance with the conditions set forth in Article 6 (1) (b) of the Rules, in order to process the data necessary for the conclusion and execution of the contract.
When providing legal assistance to a client, the Office processes the personal data of other persons in order to protect the legitimate interests of the client on the basis of Article 6 (1) (f) of the Rules.
Google Analytics, a tool that analyzes website performance and user activity on it, is used to analyze visits to the Office’s website and to receive an anonymous report of user activity on it. The Google Analytics tool uses cookies, which are sent by the web server to a web browser that stores information on the data subject’s computer, phone or other device from which the site is accessed. Further information on cookies is available at www.aboutcookies.org. The data you receive is protected by the Google Analytics Terms of Service, available at google.com/analytics/terms/us.html. The data subject may optionally delete cookies already stored on his or her device and may determine that the browser will not allow them to be stored.
PERIOD OF STORAGE OF PERSONAL DATA<
THE OFFICE STORES AND PROCESSES PERSONAL DATA, IF AND WHILE AT LEAST ONE OF THE SPECIFIED CRITERIA EXISTS:
- in accordance with the law applicable to the Office, there is an obligation to store specific data;
- until the obligations arising from the contract between the Office and the client are fully met or until the Office has finished providing the client with legal assistance;
- as long as the consent of the individual to the relevant processing of personal data is valid, unless there is another legal basis for processing;
- while personal data is required to achieve a specific processing goal.
PERSONAL DATA RECIPIENTS
THE OFFICE DOES NOT DISCLOSE PERSONAL DATA OF THE DATA SUBJECT to THIRD PARTies, EXCEPT FOR THE FOLLOWING CASES:
- the disclosure is necessary under the contract for the performance of the function necessary for the execution of the contract or established by law;
- subject to the explicit and unambiguous consent of the data subject;
- disclosure to the persons entitled by the law to receive such data – at their respective and justified request, in the manner and to the extent provided for by the law;
- in cases specified by law, to protect the legitimate interests of the Office.
In order to ensure its legitimate interests, the Office has the right to use processors to process personal data. The Office takes the necessary measures to ensure that such processors, when processing personal data, take appropriate technical and organizational measures to comply with the requirements of the Regulation and to ensure the protection of the rights of the data subject.
DATA SUBJECT RIGHTS
An individual has the right, in the manner prescribed by the law, to receive information from the Office about personal data processed by the Office, the purposes for which it is used and processed, the storage periods and recipients of such personal data.
An individual has the right to demand from the Office, without undue delay, to correct inaccurate or incomplete personal data by submitting a notification.
An individual may submit a request for the exercise of his rights in writing either at the Office’s address, showing his identification document, or by e-mail with a secure electronic signature.
An individual has the right to demand the deletion of his personal data, if the individual believes that the personal data was illegally processed, is no longer needed for the purposes for which it was originally collected and / or processed, or the individual has withdrawn its consent to their processing.
An individual has the right to object to the processing of his personal data, if such processing is carried out by the Office on the basis of its legitimate interests. In this case, the Office stops processing personal data, unless the Office indicates convincing legitimate reasons that outweigh the interests, rights and freedoms of the data subject in a particular situation, or if further processing is necessary to present, execute or protect legal requirements.
An individual has the right to receive data from the Office about himself, for the purpose of preservation or reuse by transferring it to another controller.
An individual has the right at any time to withdraw his consent to the processing of personal data in the same way as it was provided, or by sending a notification to info@lumos.lv, by sending a letter by mail to the Office or personally sending it to the Office. After the recall, the Office agrees not to further process the personal data on the basis of the previously provided consent of the individual. Withdrawal of consent does not affect the processing of personal data carried out during the validity period of the consent of the individual.
If an individual has reasonable doubts or suspicions that the processing of his personal data is not performed in accordance with the requirements of the Regulation or other regulatory acts, and the rights of the individual have been violated, he has the right to contact the State Data Inspectorate, submitting a grounded complaint.
OTHER CONDITIONS
The Office has the right to make additions and changes to the data processing policy or to develop a new policy in the event of a change in circumstances that affect the regulation of the processing of personal data. The Office publishes an updated version of the data processing policy on its website.
The data processing policy comes into force from the date of its approval, unless another date of entry into force is indicated.
The data processing policy has been approved on August 1, 2019.
