Privacy policy
1. Introduction
SIA GT remonts, Reg. No. 40203455702 (hereinafter – the Controller), processes personal data obtained from the data subject – the user of the website https://gtgarage.lv/ (hereinafter – the Website, and the User). The Controller cares about the User's privacy and protection of personal data, and observes the Users’ rights to the lawful processing of personal data in accordance with applicable laws – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation), and other applicable legal acts regarding privacy and data processing. Accordingly, the Controller has developed this Privacy Policy to provide the User with the information required by the Regulation. This Privacy Policy applies to data processing regardless of the form and/or medium in which the User provides personal data (on the Website, in paper format, in person, or by phone). The Controller reserves the right to modify these terms at any time. It is the responsibility of the Website visitor to independently check the Website content to learn about changes to the terms.
2. Controller’s Identity and Contact Information
The Controller’s legal address is Krustabaznīcas iela 12C, Riga, LV-1010, Latvia, website: https://gtgarage.lv/,
email: info@gtgarage.lv, phone: +371 23 777 337
3. Purposes and Legal Basis of Personal Data Processing
If the User submits their personal data to the Controller by phone, using the Website’s contact forms, by email, or other means, we store and use this information to fulfil or conclude the relevant service agreement, including client identification; preparation and conclusion of the contract; provision of services (fulfilment of contractual obligations); customer service; handling and processing of complaints; customer loyalty enhancement; administration of payments and settlements; debt recovery and collection; proof of facts, website maintenance and improvement; business planning and analytics; planning and record keeping. We also process such data to provide information to public authorities and law enforcement agencies in cases and to the extent prescribed by external regulations. The legal grounds for data processing are the conclusion and performance of a contract, compliance with legal obligations, the data subject’s consent, and our legitimate interests (for example, to verify the Client's identity prior to contract conclusion; ensure fulfilment of contractual obligations; analyze website usage, ensure efficiency of service delivery, etc.).
4. Categories of Personal Data
Personal data categories – name, surname, personal identification number, email or postal address, IP address, phone number, message or letter content, etc.
5. Categories of Personal Data Recipients
Data is disclosed only to those employees of the Controller who need it to perform their direct duties in order to fulfil or conclude the relevant service contract. In acquiring and using personal data, we partially use external service providers, who strictly follow our instructions according to the contract and whom we control before and continuously during the service provision.
6. Categories of Data Subjects
Categories of data subjects – current, former, and potential clients of the Controller, as well as other persons who express a wish to contact the Controller.
7. Transfer of Data Outside Latvia
The received data is not intended to be transferred outside Latvia, the European Union, or the European Economic Area, nor to any international organization. However, as the Website is connected to Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.
8. Data Retention Period
We process and store the User’s personal data as long as there is a legal obligation for either party to retain the data. After these conditions cease, and unless stated otherwise in data protection instructions, we delete personal data no later than three months after the original reason for data retention no longer applies, except in cases where we are legally obliged to retain the data further (for example, but not limited to, for accounting or litigation purposes).
9. Data Subject’s Access to Personal Data
The data subject has the right to receive access to their personal data within one month from the date of request. The User can submit a request to exercise their rights in writing in person at the Controller’s legal address (upon presenting identification), by mail, or by email signed with a secure electronic signature. Upon receiving a User's request, the Controller verifies the User's identity, assesses the request, and complies with it in accordance with legal regulations. The User has the right to receive information on the processing of their data as provided by law, the right to access their personal data, and to request that the Controller supplement, correct, or delete it, restrict processing, or object to processing, to the extent that these rights do not conflict with the purpose of data processing (contract conclusion or performance). The data subject is not entitled to receive information if its disclosure is prohibited by law for national security, state defense, public security, criminal law, or for the purpose of safeguarding the state’s financial interests in tax matters or the supervision of financial market participants and macroeconomic analysis.
10. Cookie Processing
The Website collects data about its visitors, enabling the Website administrator to evaluate the usefulness of the Website and how it can be improved. The Controller continuously improves the Website to enhance usability, so it needs to know what information is important to visitors, how often they visit, what devices and browsers they use, from which region they come, and what content they prefer. The Controller uses Google Analytics to analyze how visitors use the Website. To learn more about how Google Analytics works, visit https://support.google.com/analytics/answer/1012034?hl=en&ref_topic=6157800. The Controller uses the collected data in its legitimate interests to improve understanding of visitor needs and accessibility to publicly available information. Visitors may opt out of Google Analytics data collection at any time as described here: https://tools.google.com/dlpage/gaoptout/.
The server hosting the Website may record visitors’ requests (device used, browser, IP address, access date and time). These data are used for technical purposes: to ensure proper functioning and security of the Website and to investigate possible security incidents. The legal basis for collecting these data is the Controller’s legitimate interest in ensuring the technical availability and integrity of the Website.
Cookies are small files that a browser stores on the visitor’s computer each time they visit the Website, to the extent specified in the browser settings. Certain cookies are used to select and tailor the information and advertisements offered to the visitor, based on content previously viewed, thus making the Website’s use simple, convenient, and individually tailored. Additional information on cookies and how to delete and manage them is available at www.aboutcookies.org.
The Website uses cookies to collect users’ IP addresses and browsing information and to enable the Website to remember visitor preferences. Cookies allow the Controller to monitor Website traffic and user interaction – these data are used to analyze visitor behavior and improve the Website. The legal basis for using cookies is the Controller’s legitimate interest in ensuring the Website’s functionality, accessibility, and integrity.
Visitors can control and/or delete cookies at their discretion. More information on this process is available at www.aboutcookies.org. Visitors can delete all cookies on their computer, and most browsers can be set to block cookies. Visitors can opt out of cookies in their browser settings or at https://tools.google.com/dlpage/gaoptout. To make the necessary settings, visitors should review their browser’s terms. If cookies are blocked, visitors will need to adjust settings manually each time the Website is visited, and some services and functions may not work.
Statistical data about Website visitors can only be accessed by those Controller employees responsible for data analysis.
Unless otherwise stated, cookies are stored as long as necessary for the action for which they were collected, and then deleted. If the Controller’s Website has a forum or comment feature, the Website will store the IP address and data provided by the visitor. Cookies containing these data may be stored for one year for your convenience (so you don’t have to re-enter them).
11. Third Party Websites
We may cooperate with third parties authorized to place third-party cookies on our websites or services, applications, and tools with your consent. These service providers allow us to provide you with a better, faster, and more secure website experience. Note that third-party cookies are subject to third-party privacy policies; therefore, we accept no responsibility for these privacy policies.
The Website uses the “Facebook pixel” tool. The purpose is to tailor content and ads for Facebook users. To learn more about Facebook’s privacy policy, click here: https://www.facebook.com/about/privacy/. You can also adjust your ad settings in your Facebook profile.
12. Right to Lodge a Complaint with the Supervisory Authority
The data subject has the right to lodge a complaint with the supervisory authority (Data State Inspectorate). Documents can be submitted to the Data State Inspectorate by post, by email (signed with a secure electronic signature), or left at the mailbox at Blaumaņa iela 11/13, Riga, 1st floor. The Inspectorate also accepts emails sent to info@dvi.gov.lv.
13. Validity of the Privacy Policy
We reserve the right to amend and supplement this Privacy Policy from time to time to clarify how we process your data. Therefore, we encourage you to review this Privacy Policy regularly to stay informed about the processing of your personal data on the Website.