Privātuma politika

Privacy policy

Privacy policy of Prolux Ltd

The purpose of the privacy policy of Prolux Ltd is to provide a natural person which is a data subject, with information about the purpose, scope of processing, protection, period of processing of personal data and the rights of the data subject, when personal data are obtained and processed.

Personal data mean any information that applies to any identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Contact details of the controller and the data protection officer

The controller of personal data is Limited Liability Company “Prolux”, registration number: 40003471371, address: Smiltnieku Street 2, Marupe, LV-2167, Latvia. Contact details of the data protection officer: telephone: +371 27806777, e-mail: prolux@prolux.lv.

Personal data processing purposes

Prolux Ltd is processing personal data for the following purposes:

selection of potential employees by receiving their CVs and applications (legitimate business interests, on the basis of the data subject’s consent);
ensuring convenient circulation of goods and services, organisation of cooperation, improvement of service (legitimate business interests, on the basis of the data subject’s consent);
sale of goods sale and formalisation of the delivery transactions and provision of services (establishment of contractual relations and performance of contractual obligations);
formalisation of transactions for the purchase of goods and services, as well as organising other types of cooperation (establishment of contractual relations and performance of contractual obligations);
ensuring rapid and high-quality communication in response to questions sent by persons (legitimate business interests, on the basis of the data subject’s consent);
analytical and market studies on the use of our website, products and services (legitimate business interests, on the basis of the data subject’s consent);
ensuring safety and security in the premises and territory of the company through video surveillance (legitimate business interests).

Legal basis for processing of the data

The processing of candidate’s personal data is required for Prolux Ltd to fulfil its legal obligation (GDPR (Article 6(1)(c) of the General Data Protection Regulation; State Civil Service Law and Labour Law).

A candidate’s application received by Prolux Ltd gives rise to its legal interest to process the candidate’s application evaluating the information provided therein, organising the interview process, conducing an interview and securing evidence justifying legitimate course of the process. In case of disputes, the information obtained in the selection process may be used to reflect the legal course of the process (Article 6(1)(f) of GDPR).

Telephone conversations are recorded to ensure quality control.

From which source do we obtain personal data?

– You

We process your personal data that you provide to us before we provide the service.

Whom do we transfer your personal data?

Recipients or categories of recipients of the personal data are:

The controller and the person authorised by it, the data subject regarding himself/herself, law enforcement or supervisory authorities, as well as court in the cases and in accordance with the procedures specified in regulatory enactments.

How is your information protected?

The controller takes all reasonable and appropriate technical and organisational measures necessary to ensure confidentiality, integrity, privacy, and security in relation to the processing of personal data by the controller in accordance with regulatory enactments. The controller applies internal procedures and means of control to prevent unauthorised use, access, disclosure, copying, modification or damage of personal data. The user’s personal data are disclosed only to the employees of the company who need them to perform their duties.

Your rights

In accordance with regulatory enactments, the user (data subject) has the following rights:

right to access – the user has the right to receive from the controller information about (i) the user’s personal data processed by the controller and categories thereof; (ii) the source of acquisition of the user’s personal data (if those are used and regulatory enactments allow to disclose them); (iii) the date of the last change in the user’s personal data; (iv) the purposes, for the achievement of which the user’s personal data are processed; (v) the persons, whom the user’s personal data have been transferred; (vi) the period of retention of the user’s personal data; (vii) whether the personal data are processed in an automated way; and (viii) other information in accordance with regulatory enactments. In exercising the rights referred to in this paragraph, the controller is entitled to ask the user to pay a reasonable fee based on its administrative costs;
right to rectification – the user has the right to request that his or her personal data be rectified or supplemented if they are inaccurate;
right to erasure or right “to be forgotten” – the user has the right to request from the controller erasure of the user’s personal data without undue delay, if (i) they are no longer necessary in relation to the purposes for which they were collected or processed, (ii) the user objects to their processing; or (iii) they have been unlawfully processed. If the user exercises his or her rights referred to in this paragraph, the controller is entitled to continue the processing of the user’s personal data so that the controller can exercise or defend its legitimate interests and rights;
right to restriction of processing – the user has the right to restrict processing of its personal data, if (i) they are inaccurate, outdated, incomplete, false, unlawfully processed or no longer meet the initially mentioned proposes of processing of the data; (ii) the controller no longer needs them for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or (iii) the user, having exercised his or her rights has objected their processing in the cases defined in regulatory enactments. If the user exercises his or her rights referred to in this paragraph, the controller is entitled to continue the processing of the user’s personal data so that the controller can exercise or defend its legitimate interests or rights or to protect other person’s legitimate interests and rights;
right to object – the user has the right to object the processing of his or her personal data in the cases defined in regulatory enactments;
right to refuse – to refuse to receive news about the goods available on the website, expected events, marketing event, campaigns and news;
right to complain – the user has the right to submit a complaint against the processing of personal data by the controller in accordance with the procedure defined in regulatory enactments, including to submit a complaint to the Data State Inspectorate (the data protection supervision authority in the Republic of Latvia). The controller kindly asks the user to contact the controller before filing a complaint to the Data State Inspectorate.

If the user wishes to exercise any of the above-mentioned rights of the data subject, the user shall submit to the controller a written request by sending it to the controller’s (i) e-mail: prolux@prolux.lv or (ii) registered address: Smiltnieku iela 2, Mārupe, LV-2167, Latvia. The Controller shall send a reply to the user’s application using the method used by the user to send it to the controller, unless the user asks otherwise.

When submitting an application, the user shall ensure that the controller is able to identify him or her as a specific data subject and to ascertain the substance and justification of the submitted request. The user’s applications shall be examined by the controller free of charge and without undue delay within one month from the date of receipt of the application. In view of the complexity of the request for user information, the controller is entitled to extend the period referred to above by two months, informing the user thereof in writing.