REGISTER

Privacy Policy

I General terms

1. LLC “RIGA WATERFRONT” (hereinafter referred to as the Company) respects your privacy and is committed to protecting it in accordance with this Privacy Policy (hereinafter referred to as Privacy Policy). The purpose of this Privacy Policy is to provide you with information about the purposes for which the Company collects personal data, the amounts and time limits of data processing, and data protection, as well as to inform you about your rights and obligations. 2. When processing personal data, the Company complies with the laws and regulations in force in the Republic of Latvia, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to the Regulation), Personal Data Processing Law, as well as other laws and regulations in the area of privacy and personal data processing. 3. The Company’s Privacy Policy applies to any natural person (hereinafter also referred to as “data subject”) whose personal data is processed by the Company and applies to the processing of personal data regardless of the form in which you or any other natural person has provided personal data: on the Company’s website, by electronic mail, on paper or by telephone.

II Identity and contact details of the controller

Identity and contact details of the controller: LCC “RIGA WATERFRONT”, reg. No. 40203529787, address: Andrejostas iela 27, Rīga, LV-1045, telephone: +3716-731-90-90, e-mail: [email protected], website: www.rigawaterfront.com.

III Intended purposes of personal data processing, types of data, and the legal basis for data processing

The Company processes personal data for the following processing purposes:

1. Name, surname, date of birth, contact details (telephone number, e-mail address), work experience, education (including courses and certificates), language skills, other information you wish to provide to the Company to ensure the conduct of the recruitment competition and to safeguard your legal interests insofar as they relate to the recruitment. The intended purpose of personal data processing – to ensure the conduct of the recruitment competition and to safeguard its legal interests in so far as they relate to recruitment: a) The processing of your personal data as an applicant is necessary for the fulfilment of a legal obligation to which the Company is subject (Article 6(1)(c) of the Regulation and the Labor Law); b) upon receipt of your application as an applicant, the Company has a legitimate interest in processing your application by assessing the information provided in it, organizing an interview procedure, conducting interviews and providing evidence to support the legitimate conduct of the relevant process. In the event of a dispute, the information obtained in the selection process may be used to reflect the legitimate conduct of the process (Article 6(1)(f) of the Regulation). 2. Name, surname, contact details (telephone number and email address) and any other information you wish to provide to the Company yourself – in order to receive the service offered by the Company and to conclude the contract. Purpose of personal data processing – to receive a service from the Company. Legal basis for processing your personal data – Your consent to the processing of your personal data for one or more specific purposes (Article 6(1)(a) of the Regulation) and/or the processing of personal data is necessary for the performance of contractual measures at the request of the data subject prior to entering into, or for the performance of, a contract (Article 6(1)(b) of the Regulation). 3. Name, surname, personal identification number, address, as well as information that you yourself have provided to the Company and other information necessary for the Company to comply with a legal obligation to which the Company is subject. Purpose of processing personal data – to comply with a legal obligation to which the Company is subject: The processing of your personal data is necessary to enable the Company to fulfil its obligations under the laws and regulations (Article 6(1)(c) of the Regulation; Accounting Law, Archives Law, etc.).

IV Processing, protection and storage of personal data

1. The Company uses various technical and organizational security measures to protect your personal data. 2. Your personal data are stored securely and are accessible to a limited number of people, only authorized persons. 3. The recipients of your personal data are the Company and persons authorized by the Company, you, processers, law enforcement or supervisory authorities, as well as a court in the cases and in accordance with the procedure established by the laws and regulations. 4. The period for which the personal data will be kept or, if this is not possible, the criteria used to determine that period: a) All information obtained during the recruitment competition will be kept, in whole or in part, for a maximum of four months after the end of the recruitment process in order to safeguard the Company’s legal interests. In the event that the Company receives complaints about a particular recruitment process, all information processed during the recruitment process will be retained for as long as is necessary for that particular process; b) All information necessary to comply with a legal obligation to which the Company is subject shall be kept for as long as necessary to fulfil the purpose of the processing of personal data in accordance with applicable laws and regulations; c) All information obtained on the basis of your freely given consent is valid until you withdraw your consent, which you may do at any time in the same way as you provided it. Withdrawal of consent shall not affect the lawfulness of processing based on your consent prior to the withdrawal. 5. The following criteria are used to determine the period of personal data retention: a) as long as you or the Company can pursue its legitimate interests (e.g. handling claims, protecting rights, resolving issues, taking legal action or complying with limitation periods, etc.) in accordance with the procedures set out in external laws and regulations; b) as long as one of the parties is legally obliged to keep the data. After the criteria mentioned in this paragraph are no longer applicable, your personal data shall be erased or destroyed or transferred to a public archive for storage in accordance with the requirements of the laws and regulations.

V Rights of the data subject

1. You have the following rights: a) to receive the information required by the regulatory enactments in relation to the processing of your personal data or the restriction of processing, or the right to object to processing (including processing of personal data carried out on the basis of the Company’s legitimate interests). These rights shall be exercised to the extent that the processing does not result from the Company’s obligations imposed on it by applicable laws and regulations and which are carried out in the public interest; b) to submit a written request to exercise your rights. The Company accepts documents by post, electronic mail (documents signed with a secure electronic signature); c) to receive your personal data that you have provided and that are being processed, in written form or in one of the commonly used electronic formats. d) withdraw consent where the processing of personal data is carried out on the basis of consent. The Company will cease processing for the purpose for which consent was given, except where the personal data will be retained for the protection of the legitimate interests of the Company. Withdrawal of consent may not affect the processing of personal data which is necessary to comply with the requirements of laws and regulations or which is based on a contract, the legitimate interests of the Company or other grounds for lawful processing of personal data set out in laws and regulations. 2. You, as the data subject, may exercise these data subject rights by submitting a request in one of the following ways: 2.1. a written and handwritten application addressed to the Company at the address set out in this Privacy Policy; 2.2. an application signed with a secure electronic signature, addressed to the Company and sent to the e-mail address: ________________. In order for the Company to send a substantive reply to the email address, the application signed with a secure electronic signature must contain the email address of the person to whom the person wishes to receive the reply. 3. Upon receipt of a request from a person to exercise his or her rights, the Company shall verify your identity, assess the request and comply with it in accordance with the regulatory enactments. The Company shall send the reply to the person in writing by post to the address provided by you or electronically to the e-mail address provided by you, taking into account as far as possible the method of receipt of the reply provided by you. 4. The Company shall ensure compliance with the requirements for the processing and protection of personal data in accordance with the regulatory enactments. If you have reasonable concerns that the Company is processing your personal data in a way that does not comply with the requirements of the laws and regulations, or if you have other issues related to the processing of personal data, please contact us initially, but if you still believe that your rights are being violated, you have the right to contact the supervisory authority: Data State Inspectorate, Elijas iela 17, Rīga, LV-1050, e-mail: [email protected], website: www.dvi.gov.lv.

VI Closing matter

The Company may make changes or additions to this Privacy Policy by posting the current version of this Privacy Policy on the Company’s website. The Privacy Policy was last amended on  21st May 2024.
REGISTER

© 2024 All Rights Reserved