Introduction
SIA “Reaton”, Registration No. 40003015277, located at Čiekurkalna 2. līnija 74, Riga, LV-1026 (hereinafter referred to as the “Controller”), processes personal data obtained from the data subject — the User of the Website www.mc2.lv(hereinafter referred to as the “Website”).
The Controller values the User’s privacy and personal data protection, and respects the User’s rights to lawful data processing in accordance with applicable laws, including the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data (the “Regulation”), as well as other relevant privacy and data protection legislation.
In light of this, the Controller has developed this Privacy Policy to provide the User with the information required by the Regulation.
This Privacy Policy applies to data processing regardless of the form or medium through which the User provides personal data (via the Website, on paper, or by phone).
Identity and Contact Information of the Controller
The Controller is SIA “Reaton”, Reg. No. 40003015277, located at Čiekurkalna 2. līnija 74, Riga, LV-1026, website: www.reaton.lv, email: reaton@reaton.lv, phone: +371 67551616.
Purposes and Legal Basis of Processing
If the User submits personal data to the Controller — such as name, surname, personal identification number, email or postal address, phone number, personal messages, etc. — via the Website’s contact form, email, or other postal means, the Controller stores and uses this information to fulfill or conclude the relevant service provision agreement.
Processing this data is necessary for identifying the client, preparing and concluding contracts, proving the fact of contract conclusion, maintaining or operating the service, client support, handling requests and complaints, billing administration, and other directly related purposes connected to contract conclusion or performance.
The legal basis for processing is Article 6(1)(b) of the Regulation, which states that processing is lawful when necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract.
Categories of Personal Data
Personal data categories include: name, surname, personal identification number, email or postal address, IP address, phone number, message or letter content, etc.
Categories of Recipients of Personal Data
Data is disclosed only to the Controller’s employees who require it to perform their duties related to fulfilling or concluding the relevant service agreement.
The Controller partially uses external service providers who strictly follow the Controller’s instructions under contract and are continuously monitored by the Controller.
On the Website, personal data is collected on behalf of the Controller by its subsidiary, SIA “SONORO”, Reg. No. 40003330599, which is considered the data processor under this Privacy Policy.
Categories of Data Subjects
Data subjects include current, former, and potential clients of the Controller, as well as their employees or contacts.
Data Transfer Outside Latvia
Received data is not and will not be transferred outside Latvia, the European Union, or the European Economic Area, nor to any international organizations.
Data Retention Period
Unless otherwise specified, the Controller deletes personal data no later than three months after the original reason for storing the data no longer applies, except in cases where legal obligations require continued retention (e.g., accounting or legal proceedings).
Data Subject Access Rights
The data subject has the right to access their personal data within one month of submitting a relevant request.
The User may submit a request in writing, in person at the Controller’s legal address (with proof of identity), or by email, signed with a secure electronic signature.
Upon receiving such a request, the Controller verifies the User’s identity, evaluates the request, and fulfills it in accordance with applicable laws.
The User has the right to receive information about their data processing, request access to their data, and ask for data correction, deletion, restriction, or to object to processing, provided these rights do not conflict with the purpose of data processing (contract conclusion or performance).
The data subject has no right to receive information that is prohibited by law from disclosure for reasons of national security, defense, public security, criminal law, or to protect state financial interests related to tax matters, financial market supervision, or macroeconomic analysis.
Right to Lodge a Complaint
The data subject has the right to lodge a complaint with the Data State Inspectorate by mail at Elijas iela 17, Riga, LV-1050, or by email at pasts@dvi.gov.lv.