Privacy policy
I General provisions
1.1 The Data Controller Foundation “Vides risinājumu institūts”, registration No 50008131571, Legal address: “Lidlauks”, Priekuļu pag., Cēsu nov., LV-4126, Latvia, Actual address: “Lidlauks”, Priekuļu pag., Cēsu nov., LV-4126, (hereinafter referred to as the “Vides risinājumu institūts”/The Data Controller)
1.2 The purpose of the Privacy Policy is to provide the data subject – the natural person – with information on the purposes of the processing of personal data, the legal basis, the categories of recipients of personal data, the duration and security of data retention, as well as the rights of the data subject.
1.3 The Institute for Environmental Solutions applies the Privacy Policy when processing personal data, including the processing of personal data transferred to the website www.vri.lv.
1.4 The Institute for Environmental Solutions ensures that the personal data of the data subject are protected in accordance with the provisions of the Policy and in compliance with the requirements of the EU General Data Protection Regulation 2016/679 of 27 April 2016. The Institute for Environmental Solutions undertakes to take all measures necessary to ensure that the data subject’s personal data are kept confidential and stored securely.
1.5 The Privacy Policy uses the terms defined in the EU General Data Protection Regulation No 2016/679 of 27 April 2016 and the Law on the Processing of Personal Data.
II Purposes and legal basis for processing personal data
2.1 The Institute for Environmental Solutions may process personal data of the data subject for the following purposes:
2.1.1. for the recruitment of potential employees, upon receipt of the data subject’s Curriculum Vitae and application (legitimate interest, based on the data subject’s consent);
2.1.2. personnel management (legitimate interest, on the basis of statutory regulation);
2.1.3. accounting (on the basis of laws and regulations);
2.1.4. for the processing of the sale, purchase and lease of property, rental transactions, and the provision of services (for the establishment of contractual relations and the performance of contractual obligations, based on the consent of the data subject);
2.1.5. video surveillance of the premises and territory of the Institute for Environmental Solutions for security purposes (legitimate interest for security purposes);
2.1.6. recording of visitors’ personal data for visitor control purposes (legitimate interest, regulation of laws and regulations);
2.1.7. archiving of documents (legitimate interest, regulation of laws and regulations);
2.1.8. management of information systems (legitimate interest, delegation, regulatory provisions);
2.1.9. sale of goods and provision of services (legitimate interest, based on the data subject’s consent);
2.1.10. remote observation or photographic recording for monitoring, quality control and security purposes (legitimate interest, statutory regulation, on the basis of the data subject’s consent);
2.2. photographic images and video recordings may be taken during events organised by the Institute for Environmental Solutions for the purpose of informing the public and creating a historical archive.
2.3. photographic images and video recordings may be taken in the buildings, managed areas and objects of the Institute for Environmental Solutions in order to prevent or detect criminal offences related to the protection of property and the protection of vital interests of persons, including life and health
III Duration of storage of personal data
3.1 3.1 Personal data shall be processed only for the purposes set out above and only for as long as is necessary to achieve the purposes set out above, to protect the interests, or in accordance with the time limit set out in the laws and regulations. After the expiry of the data use period, the personal data will be deleted, destroyed or archived.
3.2 Personal data is restricted information which can only be accessed by employees who are authorised to do so or whose duties require them to do so.
IV Categories of recipients of personal data
4.1 Personal data may be transferred to third parties only to the extent and in the manner required for the purposes set out in the privacy policy and to the extent that the Institute for Environmental Solutions has the right or obligation to do so in accordance with laws, regulations or a contract concluded with the data subject:
4.1.1. to public authorities for the fulfilment of the requirements of regulatory enactments;
4.1.2. organisations and institutions within the framework of the performance of a contract;
4.1.3. in certain cases, service providers may be engaged as processors of personal data who guarantee to implement appropriate technical and organisational measures in such a way as to ensure the protection of the rights of data subjects in the processing in accordance with the requirements of regulatory enactments.
V Rights of the data subject
5.1 The data subject has the right to:
5.1.1. to obtain confirmation from the Institute for Environmental Solutions as to whether or not personal data of the data subject are being processed, unless the data subject is already in possession of the relevant information;
5.1.2. to request rectification, erasure and restriction of processing of the data subject’s data, to object to processing, and to withdraw consent, without affecting the lawfulness of the processing based on consent given before revocation;
5.1.3. lodge a complaint with the supervisory authority, the Data Inspectorate.
5.2 The Centre shall communicate with the data subject using the contact information (telephone number, e-mail address, address) provided by the data subject.
5.3. If the data subject’s right to the protection of personal data has been violated on a prima facie basis, the data subject has the right to lodge a complaint with the personal data supervisory authority – the Data Inspectorate.
VI Protection of personal data
6.1 The Institute for Environmental Solutions shall ensure, continuously review and improve personal data protection measures to protect personal data against unauthorised access, accidental loss, disclosure or destruction. To this end, the Centre shall employ appropriate technical and organisational requirements.
6.2 The Institute for Environmental Solutions shall implement and maintain appropriate administrative, physical, technical and organisational measures to protect personal data provided by the data subject against accidental or unlawful destruction, loss of personal data transmitted, stored or otherwise processed,
alteration, unauthorised disclosure or access.
VII Contact details
7.1 Data Subjects have the right to make a submission with questions or comments about the Institute for Environmental Solutions Privacy Policy:
7.1.1. by sending an e-mail to lidlauks@vri.lv
7.1.2. by sending a letter to the registered office “Lidlauks”, Priekuļu pag., Cēsu nov.
7.2 The Institute for Environmental Solutions shall communicate with the data subject using the contact details (telephone number, e-mail address, correspondence address) provided by the data subject.”
