Data Controller and Contact Information
The controller of the personal data processing of website users (hereinafter – Clients) is SIA “GastroBurg” (hereinafter – the Company),
Unified Registration No. 40003791421, legal address: G. Astras iela 3A, Riga, LV-1084.
The Company’s contact details regarding personal data processing matters are:
phone: +371 67802386,
email: info@vitrum.lv
Scope of Application of the Policy
Personal data means any information relating to an identified or identifiable natural person. Categories of personal data may include, for example, personal identification data (name, surname, personal identity number, identification number, date of birth, passport number, address), contact details (address, phone number, email address), transaction data, payment data, as well as other data.
This Privacy Policy applies to ensuring privacy and personal data protection in relation to natural persons — clients, subscribers, and service users (including potential, former, and existing), as well as third parties who, in connection with the provision of services to a natural person (subscriber, client, user), receive or transfer any information to the Company (including contact persons, payers, etc.).
The Data Controller ensures the protection of Clients’ privacy and personal data and respects Clients’ rights to lawful personal data processing in accordance with applicable laws and regulations.
This Privacy Policy applies to personal data processing regardless of the form and/or environment in which the Client provides personal data and regardless of whether the data are processed in information systems or in paper form.
Purposes of Personal Data Processing
The Company may process personal data for the following purposes:
- identification and servicing of the Client;
- preparation and conclusion of contracts;
- provision of services, including ensuring the fulfillment of contractual obligations;
- fulfillment of warranty obligations;
- advertising and promotion of services;
- debt recovery and collection;
- planning and accounting;
- providing information to public authorities in cases prescribed by law;
- other purposes for which the Client is informed at the moment when the relevant data are provided to the Company.
Legal Basis for the Processing of Personal Data
The Company may process the Client’s personal data based on the following legal grounds:
- conclusion and performance of a contract;
- compliance with legal obligations;
- the Client’s consent;
- legitimate interests — to pursue legitimate interests arising from the contractual relationship between the Company and the Client or from applicable laws.
The Company’s legitimate interests include:
- conducting commercial activities;
- verifying the Client’s identity before entering into a contract;
- ensuring fulfillment of contractual obligations;
- retaining Client inquiries submitted via the website, including applications, service requests, and other submissions, as well as notes related thereto, including those made verbally by calling the Company’s office or the Client’s contact person;
- advertising its services by sending commercial communications;
- sending other notifications related to contract performance and significant events, as well as conducting customer satisfaction surveys;
- preventing violations of law;
- ensuring effective company management processes;
- ensuring quality and efficiency of service provision and delivery;
- administering payments;
- applying to public authorities and courts to protect its rights and legitimate interests;
- informing the public about its activities.
Categories of Personal Data Recipients
The Company does not disclose the Client’s personal data or any information obtained during service provision or contract performance to third parties, including information about received services, except in the following cases:
- where the data must be transferred to a third party within the framework of a concluded contract in order to perform a function necessary for contract execution or delegated by law;
- with the Client’s consent;
- to persons specified by law upon their justified request;
- to protect the Company’s legitimate interests, for example, by applying to courts or other public authorities against a person who has infringed the Company’s rights or legitimate interests.
To ensure proper fulfillment of contractual obligations, the Company may authorize its cooperation partners to perform certain service-related activities and shall ensure compliance with personal data processing and protection requirements in accordance with the Company’s requirements and applicable laws. Such partners shall not use personal data for any purposes other than fulfilling contractual obligations on behalf of the Company.
Retention Period of Personal Data
The Company stores and processes the Client’s personal data as long as at least one of the following criteria applies:
- the Company or the Client may exercise their legitimate interests in accordance with applicable laws (e.g., submitting objections or bringing legal claims);
- one of the parties involved in data processing has a legal obligation to retain the data;
- the Client’s consent to personal data processing remains valid, provided no other legal basis for processing exists.
When none of the above criteria apply, the Client’s personal data shall be deleted.
Withdrawal of Consent and Other Client Rights
The Client has the right to withdraw consent given to the Company for personal data processing at any time. In such cases, further data processing based on the withdrawn consent for the specific purpose shall not be carried out.
Withdrawal of consent does not affect the lawfulness of data processing carried out while the consent was valid. Withdrawal of consent does not terminate data processing based on other legal grounds.
In accordance with applicable laws, the Client also has the right to request the Company to supplement, rectify, delete, or restrict processing of their personal data, to object to processing, and to request data portability, to the extent permitted by law.
The Client may submit a request to exercise their rights or file a complaint by emailing info@vitrum.lv or by post to the Company’s legal address stated above. The Client also has the right to lodge a complaint with the supervisory authority — the Data State Inspectorate.
Commercial Communications
The Company sends commercial communications regarding its own and/or third-party services and other messages not directly related to the provision of agreed services in accordance with applicable laws or based on the Client’s consent.
The Client provides consent to receive commercial communications from the Company and/or its cooperation partners by subscribing to newsletters on the website and providing their email address and other contact information.
The Client’s consent to receive commercial communications remains valid until withdrawn. The Client may opt out of receiving further commercial communications at any time by sending an email to info@vitrum.lv