PRIVACY POLICY
"SUMMUS-T", SIA
Reg.No. 40203592729
Address: Kuldīgas nov., Padures pag., "Dzilnas", LV-3321
1. Introduction
"SUMMUS-T", SIA (hereinafter – the Controller), processes personal data obtained from the data subject – the user of the website www.goldlande.com (hereinafter – the User) – on the website www.goldlande.com (hereinafter – the Website).The Controller is committed to safeguarding the User’s privacy and the protection of personal data, and respects the User’s rights regarding the lawfulness of personal data processing in accordance with applicable legislation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation) and other applicable legislation in the field of privacy and data processing.In view of the above, the Controller has drawn up this privacy policy with the aim of providing the User with the information required by the Regulation. This Privacy Policy applies to the processing of data regardless of the form and/or medium in which the User provides personal data (on the Website, in paper format, in person, or by telephone).The Controller reserves the right to amend these terms at any time. It is the responsibility of the Website visitor to check the content of the Website independently in order to familiarise themselves with any changes to the terms.
2. Identity and contact details of the data controller
The controller is “SUMMUS-T”, SIA, Reg. No. 40203592729. The controller’s address is “Dzilnas”, Padure Parish, Kuldīga District, LV-3321; website – www.goldlande.com; email – goldlande1@gmail.com; telephone – +371 27020793.
3. Purposes of personal data processing and the legal basis for processing
If a User submits their personal data to the Controller by telephone, via the Website’s contact forms, by email or by post, we store and use this information to fulfil or conclude the relevant service provision contract, including for the purposes of identifying the customer; to prepare and conclude a contract; to provide services (to fulfil contractual obligations); to provide customer service; to examine and process complaints; to enhance customer loyalty; to administer payments and settlements; to recover and collect debts; to substantiate facts, maintain the website and improve its operation; for business planning and analysis; for planning and accounting. We will also process this data to provide information to public authorities and law enforcement agencies in the cases and to the extent specified in external legislation.The legal bases for data processing are the conclusion and performance of a contract, compliance with legislation, the consent of the Customer (the data subject), and our legitimate interests (for example, verifying the Customer’s identity prior to concluding a contract; to ensure the fulfilment of contractual obligations; to analyse website usage and performance, to ensure the efficiency of service provision, etc.Payment processing is provided by the payment platform https://makecommerce.lv/; therefore, our company transfers the personal data necessary for the execution of payments to the platform’s owner, Maksekeskus AS.
4. Categories of personal data
Categories of personal data – first name, surname, personal identification number, email or postal address, IP address, telephone number, the content of a message or letter, etc.
5. Categories of recipients of personal data
Data is disclosed to those employees of the Controller who require it to carry out their direct duties in order to fulfil or conclude the relevant service provision contract.When collecting and using personal data, we make partial use of the services of external service providers who, in accordance with the contract, strictly follow our instructions and whom we monitor both prior to the use of the service and on an ongoing basis thereafter.
6. Categories of data subjects
Categories of data subjects – the Controller’s current, former and potential customers, as well as other individuals who express a wish to contact the Controller.
7. Transfer of data outside Latvia
There are no plans to transfer the data received outside Latvia, the European Union or the European Economic Area, nor will it be transferred to any international organisation. However, given that the Website is linked to Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.
8. Data retention period
We process and store the User’s personal data for as long as any of the parties is under a legal obligation to retain the data.Once these circumstances cease to apply, and unless otherwise specified in the data protection guidelines, we will delete personal data no later than three months after the original reason for retaining the data has ceased to apply, except where we are under a legal obligation to continue to retain such data (for example, but not limited to, for accounting or legal proceedings).
9. Data subject’s right of access to personal data
The data subject has the right to access their personal data within one month of the date on which the relevant request is submitted.The User may submit a request to exercise their rights in writing, either in person at the Controller’s registered office (upon presentation of a valid identity document), by post, or by email, signed with a secure electronic signature;Upon receiving a User’s request to exercise their rights, the Controller shall verify the User’s identity, assess the request and comply with it in accordance with the relevant legislation.The User has the right to receive the information specified in the relevant legislation regarding the processing of their data, the right to request access to their personal data, as well as to request that the Controller supplement, rectify or erase such data, restrict processing, or to object to processing, insofar as these rights do not conflict with the purpose of data processing (the conclusion or performance of a contract).The data subject is not entitled to receive information, if the disclosure of such information is prohibited by law in the interests of national security, national defence, public security, criminal law, as well as for the purpose of safeguarding the State’s financial interests in tax matters or the supervision of financial market participants and macroeconomic analysis.
10. Processing of cookies
Data on visitors to the Website is collected, thereby enabling the Website operator to assess how useful the Website is and how it could be improved.The Controller is constantly improving the Website with the aim of enhancing the user experience, so the Controller needs to know what information is important to Website visitors, how often they visit the Website, what devices and browsers they use, which region visitors come from, and what content they prefer to read.The Controller uses Google Analytics, which enables the Controller to analyse how visitors use the Website. You can find out how Google Analytics works on the Google websitehttps://support.google.com/analytics/answer/1012034?hl=lten&ref_topic=6157800. The Controller uses the collected data in its legitimate interests to improve its understanding of the needs of the Website’s visitors and to improve access to the information published by the Controller. Visitors may opt out of data collection by Google Analytics at any time, as described here: https://tools.google.com/dlpage/gaoptout/.The server on which the Website is hosted may record requests sent by visitors (device used, browser, IP address, date and time of access). The data referred to in this section is used for technical purposes: to ensure the proper functioning and security of the Website and to investigate potential security incidents. The legal basis for the collection of the data referred to in this section is the Controller’s legitimate interest in ensuring the technical accessibility and integrity of the Website.Cookies are small files which, each time a visitor accesses the Website, the browser stores on the visitor’s computer to the extent specified in the browser settings on the visitor’s computer. Certain cookies are used to select and tailor the information and advertisements offered to the visitor, based on content the visitor has previously viewed, thereby making the use of the Website simple, convenient and personalised for visitors. Further information about cookies, as well as how to delete and manage them, can be found on the website www.aboutcookies.org. The Website uses cookies to collect users’ IP addresses and browsing information and to enable the Website to remember the visitor’s preferences. Cookies enable the Controller to monitor data traffic on the Website and users’ interactions with the Website – the Controller uses this data to analyse visitor behaviour and improve the Website. The legal basis for the use of cookies is the Controller’s legitimate interest in ensuring the functionality, accessibility and integrity of the Website.Visitors may manage and/or delete cookies as they wish. Further information on this process is available here: www.aboutcookies.org. Visitors can delete all cookies stored on their computer, and most browsers can be configured to block cookies from being stored on the computer. Visitors can opt out of cookies via their browser menu or at https://tools.google.com/dlpage/gaoptout. To make the necessary settings, visitors should consult their browser’s help section. If cookies are blocked, visitors will need to manually adjust their settings each time they visit the Website; furthermore, there is a possibility that some services and features may not work.Statistical data on Website visitors can only be accessed by those employees of the Controller who are responsible for analysing such data. Unless otherwise specified, cookies are stored for as long as it takes to fulfil the purpose for which they were collected, after which they are deleted.In the event that the Controller’s Website features a forum or comments section, the Website will store the IP address as well as the data provided by the visitor themselves. Cookies containing this data may be stored for one year for your convenience (so that you do not have to re-enter the information next time).
11. Third-party websites
We may work with third parties who are authorised to place third-party cookies on our websites or within our services, apps and tools, with your consent. These service providers enable us to provide you with a better, faster and more secure website experience. Please note that third-party cookies are subject to the third parties’ privacy policies, so we accept no responsibility for these privacy policies. The website uses the ‘Facebook pixel’ tool. The purpose of this tool is to tailor content and adverts to Facebook users. To find out more about Facebook’s privacy policy, click here: https://www.facebook.com/about/privacy/. You can also change your ad settings on your Facebook profile.
12. Right to lodge a complaint with the supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority (the State Data Inspectorate). Documents may be submitted to the State Data Inspectorate by post to Elijas iela 17, Riga, LV-1050, or by email to pasts@dvi.gov.lv.
13. Validity of the Privacy Policy
We reserve the right to amend and supplement the content of this Privacy Policy from time to time in order to clarify how we process your data.In view of this, we encourage you to review this Privacy Policy regularly so that you remain informed about the processing of your personal data on the Website.