PRIVACY POLICY OF SIA “RAGS” FOR VISITORS, CLIENTS AND COOPERATION PARTNERS
Controller: SIA “RAGS”, single registration No. 40003133752, legal address Durbes iela 8, Riga, LV-1007 (hereinafter referred to as the “Company”, “We”).
E-mail address for communication on data processing issues: rags@rags.lv.
With this privacy policy, we provide you with information about the processing of Personal data in the company and inform you about what data the company may process, also indicating your rights regarding the data processing processes performed by us. We comply with the requirements of regulatory enactments, including the Law on the Processing of Personal Data and Regulation No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) regarding the processing of your personal data.
The company regularly monitors data protection issues, therefore, in the event of changes in the data processing conditions, this privacy policy may be updated, changed or supplemented to correspond to the actual data processing. The current version of the privacy policy will be published on this website.
1. For what purposes, on what basis and what personal data of yours are processed?
– Order processing and fulfillment. In order to ensure the fulfillment of your orders, we process the following data: name, surname, telephone number, e-mail address, order delivery address, history of orders placed. Such personal data will be obtained and processed on the basis of Article 6, paragraph 1, subparagraph b) of the GDPR, i.e. for the purposes of concluding and executing the contract.
– Video surveillance. In order to ensure the protection of property, as well as the life and health of persons, and to facilitate the detection and investigation of criminal offenses, video surveillance is carried out on our premises. As part of video surveillance, the data contained in the video surveillance recordings, the image of the person and the video recording, the time and date of the video recording are obtained. Audio recording is not performed. The legal basis for this data processing is Article 6, paragraph 1, letter f) of the GDPR, i.e. our legitimate interests in ensuring the protection of property, life and health of persons, as well as in investigating and detecting criminal offences committed on the premises of the company.
– Marketing. In order to inform you about our special offers, news, promotions or other events, we may send you commercial communications. Such communications may be sent to you on the basis of Article 6, paragraph 1, letter a) of the GDPR, i.e. your consent.
2. Data recipients
Your personal data obtained for the purposes of processing and fulfilling orders, sending commercial communications and video surveillance will be transferred to our employees or to persons directly authorized by us who need your data to perform their duties.
Your personal data may be transferred to couriers and other service providers in connection with the execution and delivery of the order, to law enforcement authorities and courts for the detection and investigation of criminal offenses, to state and municipal authorities, if necessary for the fulfillment of our legal obligations, as well as to legal aid providers.
Personal data is processed only within the EU/EEA and is not transferred outside it.
3. Duration of storage of personal data
Your personal data is stored for as long as their storage is necessary in accordance with the relevant purposes of personal data processing, as well as in accordance with the requirements of applicable legal acts. Personal data may be stored longer if it is necessary to continue processing them for the purposes of initiated legal proceedings.
Data related to the conclusion of a contract with a customer and its execution – payment justification documents will be stored for 5 years, and the contract with the customer – 3 years after the expiration of the contract.
Data related to sending commercial communications will be stored no longer than until you withdraw your consent.
Video surveillance recordings will be stored for 30 days, or if a criminal offense is detected, until the investigation and trial of the case is completed.
4. Your rights regarding data processing
You have the following rights regarding the protection of your personal data:
- Right to access your data
When exercising your right to access data, you need to indicate a specific period of time and the data you want to obtain from us. You have the right to request information from us about what data about you we have, why we process it, how we obtained it and to whom we transferred it, how long it will be stored and to receive a copy of your data. The request will be able to be fulfilled more quickly if the period of time is as short as possible and the request for information about your data is formulated as detailed as possible. It will help us to provide you with an answer if we know for what purpose you want to access the data.
- Right to rectification
If you need to clarify or correct your personal data that we hold about you, you must clearly indicate which data needs to be clarified and what the current information is. If the data was not obtained from you, please provide a justification as follows: the information to be corrected is considered inaccurate in order to facilitate a faster and more appropriate assessment of accuracy.
- Right to erasure
In order for us to erase your data, you must indicate exactly which personal data need to be erased and provide a justification for this request. Please note that erasure may not be possible in all cases.
- Right to restriction of processing
If you are not sure whether We are processing the data appropriately, you can ask us to restrict the processing of specific data. The request for restriction of data processing must indicate why, in your opinion, this processing needs to be restricted.
- Right to object to processing
In certain cases, you may have the right to object to processing on your own individual grounds. In such a request, it is important to indicate your individual circumstances due to which you object to the processing.
- Right to data portability
If you want us to collect and transfer your personal data to another controller or send it to you, it is important to indicate what data you want to transfer.
If you want to submit a request to exercise your rights, please contact us by submitting a relevant application and sending it to our e-mail: rags@rags.lv. We ask you to sign the application with a secure electronic signature so that we can verify your identity.
We will consider your request without undue delay and will provide a response on the execution or non-execution of the request no later than one month from the date of its receipt. In the event that the execution of the request takes us longer, we have the right to extend its execution by another two months, but in any case you will be informed about it within one month.
We have the right to not execute your request if:
- it is not formulated in an understandable way;
- we will not be able to identify you;
- we have already provided a response to such a request;
- the amount of information requested is disproportionate;
- the request is unfounded (not applicable to our company, no explanation is provided as to why the request must be fulfilled);
- the regulatory enactments stipulate that we are not entitled to provide you with such information.
If you have any concerns about how we use your personal data, you can submit a complaint to us by writing to the e-mail address: rags@rags.lv.
If you believe that we have processed your data inappropriately, you have the right to submit a complaint to the data protection supervisory authority regarding the processing of data by our organization:
Data State Inspectorate, Elijas iela 17, Riga, LV-1050
pasts@dvi.gov.lv
www.dvi.gov.lv
67223131
The latest changes to the privacy policy were approved on October 23, 2025.
