Privacy policy

1. The controller of personal data processing regarding seminar and event visitors, clients, website visitors, as well as candidates for vacancies who have submitted an application, is SIA “Presco Freight”, unified registration No. 41503038764, legal address: Garā iela 2, Dreiliņi, Stopiņu pag., Ropažu nov., LV-2130, Latvia (hereinafter — the Company).

2. The Company’s contact for matters related to the processing of personal data, including information on possible data protection violations, is it@presco.lv.

3. Using this contact information or contacting the Company’s legal address, you can ask questions about the processing of personal data. A request for the exercise of one’s rights can be submitted in accordance with clause 24.

4. Personal data is any information about an identified or identifiable natural person.

5. The privacy policy is applied to ensure the protection of privacy and personal data in relation to the following groups (hereinafter — Clients):

5.1. natural persons — candidates (applicants);

5.2. seminar and event visitors;

5.3. the Company’s customers (including potential, former and existing);

5.4. visitors of the website maintained by the Company.

6. The Company takes care of Client privacy and personal data protection and respects the Client’s right to lawful processing of personal data in accordance with the applicable legislation — the Law on the Processing of Personal Data, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter — the Regulation) and other applicable laws in the field of privacy and data processing.

7. The privacy policy applies to data processing regardless of the form and/or medium in which the Client provides personal data (in person, on the Company’s website, on paper or by telephone).

8. The Company processes personal data for the following purposes:

8.1. To provide services:

8.1.1. to identify the representative of the client (legal entity);

8.1.2. for the preparation and conclusion of the contract;

8.1.3. for the delivery of services (fulfilment of contractual obligations);

8.1.4. for the development of new services;

8.1.5. for consideration of objections or claims;

8.1.6. for settlement administration;

8.1.7. for debt recovery and collection;

8.1.8. for website maintenance and performance improvement.

8.2. For business planning and analytics.

8.3. For customer safety and protection of Company property.

8.4. To ensure the conduct of recruitment and the Company’s legal interests insofar as they are related to recruitment:

8.4.1. to evaluate the candidate’s compliance with the Company’s requirements for the specified vacancy;

8.4.2. to conclude a contract with a candidate who meets the Company’s requirements;

8.4.3. to bring, enforce and defend the Company’s legal claims.

8.5. For the legitimate purposes of the Company:

8.5.1. to carry out commercial activities;

8.5.2. to verify the identity of the Client (legal entity representative or authorised person, natural person) before providing services;

8.5.3. to ensure fulfilment of contractual obligations;

8.5.4. to keep Client applications and submissions regarding the provision of services;

8.5.5. to segment the customer database for more efficient provision of services;

8.5.6. to design and develop services;

8.5.7. to send reports on the progress of contract execution and events relevant to the execution of the contract, as well as to conduct customer surveys about services;

8.5.8. to prevent fraudulent activities against the Company;

8.5.9. to provide corporate governance, financial and business accounting and analytics;

8.5.10. to ensure efficient company management processes;

8.5.11. to ensure and improve the quality of services;

8.5.12. to administer payments;

8.5.13. to conduct video surveillance for business security;

8.5.14. to inform the public about the Company’s activities.

9. The Company may process candidates’ personal data for recruitment purposes for the specific vacancy to which the candidate applies, or for future recruitment if the candidate has agreed to this.

10. The legal basis of the Company’s personal data processing for the respective purposes is:

10.1. Provision of services — Article 6(1) of the Regulation: point (b) (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), point (c) (processing is necessary for compliance with a legal obligation to which the controller is subject) and point (f) (processing is necessary for the purposes of the legitimate interests pursued by the controller).

10.2. Business planning and analytics — Article 6(1)(f) of the Regulation (processing is necessary for the legitimate interests of the controller).

10.3. Safety of customers and protection of the Company’s property — Article 6(1)(f) of the Regulation (processing is necessary for the legitimate interests of the controller).

10.4. Recruitment — Article 6(1) of the Regulation: point (a) (the data subject has given consent to the processing of their personal data for one or more specific purposes), point (c) (processing is necessary for compliance with a legal obligation of the controller) and point (f) (processing is necessary for the legitimate interests of the controller); Articles 33, 35 and 38 of the Labour Law.

10.5. The legal (legitimate) interests of the Company — Article 6(1)(f) of the Regulation (processing is necessary for the legitimate interests of the controller).

11. The Company processes Client data using the capabilities of modern technologies, taking into account existing privacy risks and the organisational, financial and technical resources available to the Company.

12. The Company may make automated decisions regarding the Client. The Client is informed about such Company activities separately, in accordance with regulatory enactments.

13. Automated decisions that create legal consequences for the Client (for example, approval or rejection of the Client’s application) may only be made in the course of concluding or executing a contract between the Company and the Client, or on the basis of the Client’s explicit consent.

14. The Company protects Client data using modern technological capabilities, taking into account existing privacy risks and the organisational, financial and technical resources reasonably available to the Company, including the following security measures:

14.1. firewalls;

14.2. intrusion protection and detection programs;

14.3. other protective measures in line with current technical capabilities.

15. The Company does not disclose to third parties the Client’s personal data or any information obtained during the provision of services or the term of the contract, including information about the services received, except:

15.1. with the clear and unequivocal consent of the Client;

15.2. to persons provided for in external regulatory acts, upon their justified request, in accordance with the procedures and to the extent specified in external regulatory acts;

15.3. in cases determined by external regulatory acts, for the protection of the Company’s legitimate interests — for example, when applying to a court or other state institutions against a person who has infringed the Company’s legitimate interests.

16. The Company does not transfer personal data to third parties, except to the extent necessary for the reasonable implementation of commercial activities, ensuring that the relevant third parties maintain the confidentiality of personal data and provide appropriate protection.

17. The Company is entitled to transfer personal data to the Company’s suppliers, subcontractors, strategic partners and others who assist the Company and its customers in conducting commercial activities, in order to implement the relevant cooperation. In such cases the Company requires from the recipients of the data a commitment to use the information received only for the purposes for which the data was transferred and in accordance with the requirements of the applicable regulatory acts.

18. The Company does not transfer personal data to third countries (outside the European Union and the European Economic Area).

19. The Company stores and processes the Client’s personal data as long as at least one of the following criteria exists:

19.1. the contract concluded with the Client is valid or the service is being provided to the Client;

19.2. the data is necessary for the purpose for which it was collected;

19.3. the Client’s application is being considered and/or fulfilled;

19.4. the Company or the Client can exercise their legitimate interests (for example, submit objections or bring a claim);

19.5. the Company has a legal obligation to store the data;

19.6. the Client’s consent to the relevant personal data processing is valid, if there is no other legal basis for the processing.

20. When the conditions mentioned in clause 19 cease to exist, the Client’s personal data is deleted. Audit records are kept for at least one year from the date they were made.

21. The Company stores and processes personal data submitted by an applicant for six (6) calendar months after the end of the selection, or while the applicant’s consent to the relevant personal data processing is valid if there is no other legal basis for the processing; after this period the personal data is deleted.

22. The Client has the right to receive the information specified in regulatory acts in connection with the processing of their data.

23. In accordance with regulatory acts, the Client also has the right to request from the Company access to their personal data, their supplementation, correction or deletion, or restriction of processing, the right to object to processing (including processing based on the Company’s legitimate interests), and the right to data portability. These rights are exercisable insofar as the processing does not result from the Company’s obligations imposed by applicable regulatory enactments and carried out in the public interest.

24. The Client can submit a request for the exercise of their rights:

24.1. in writing at the Company’s office at Garā iela 2, Dreiliņi, Stopiņu pag., Ropažu nov., LV-2130, Latvia, or by post;

24.2. by e-mail, signed with a secure electronic signature, to it@presco.lv.

25. Upon receiving the Client’s request for the exercise of their rights, the Company verifies the Client’s identity, evaluates the request and fulfils it in accordance with regulatory enactments.

26. The Company’s response is sent to the Client by registered post to the contact address specified by the Client, or by e-mail with a secure electronic signature (if the request was submitted with a secure electronic signature), where possible taking into account the method of receiving the response specified by the Client.

27. The Company ensures compliance with data processing and protection requirements in accordance with regulatory enactments and, in the event of the Client’s objections, takes appropriate action to resolve them. If this fails, the Client has the right to apply to the Data State Inspectorate.

28. The Client has the right to receive, free of charge, one copy of their personal data processed by the Company.

29. The receipt and/or use of the information referred to in clause 28 may be restricted in order to prevent adverse effects on the rights and freedoms of other persons (including the Company’s employees).

30. The Company undertakes to ensure the correctness of personal data and relies on its customers, suppliers and other third parties who transfer personal data to ensure the completeness and correctness of the transferred data.

31. The Client gives consent to the processing of personal data whose legal basis is consent (for example, receiving commercial communications or analysis of personal data) in writing in person at the Company’s office, on the Company’s website, or in another place where marketing activities are organised.

32. The Client has the right to withdraw consent to data processing at any time in the same way in which it was given and/or in accordance with the procedure in clause 24. In that case, further processing based on the previously given consent for the specific purpose will not be carried out.

33. Withdrawal of consent does not affect data processing carried out while the Client’s consent was in force.

34. Withdrawal of consent does not stop data processing carried out on other legal bases.

35. The Company communicates commercial announcements about the Company’s and/or third parties’ services, and other announcements not directly related to the provision of contracted services (for example, customer surveys), in accordance with external regulatory acts or with the Client’s consent.

36. The Client gives consent to receiving commercial communications of the Company and/or its cooperation partners in writing in person at the Company’s office, on the Company’s website, or in another place where the Company organises marketing activities.

37. The consent given by the Client to receiving commercial communications is valid until it is withdrawn (including after the termination of the service contract). The Client may opt out of further commercial communications at any time:

37.1. by sending an e-mail to it@presco.lv;

37.2. by submitting a written application at the Company’s office;

37.3. by using the automated opt-out option provided in the commercial communication — the opt-out link at the end of the relevant e-mail.

38. The Company stops sending commercial communications as soon as the Client’s request is processed. Processing of the request may take up to three days, depending on technical possibilities.

39. By expressing an opinion in surveys and leaving contact information (e-mail, phone), the Client agrees that the Company may contact them using the provided contact information in connection with the evaluation provided.

40. Clients (seminar and event visitors) are informed that in some cases, when the Company’s work is covered in the media or the Company’s information channels (the Company’s website), photos or video recordings of visitors of the Company’s event may be processed. The legal basis for such processing is the Company’s legitimate interests, except where the interests of the data subject or their fundamental rights and freedoms requiring the protection of personal data override such interests, in particular if the data subject is a child.

41. Before the relevant event, the Company informs the participants about the planned processing of personal data in accordance with Article 13 of the Regulation, placing the information in the invitations and before the entrance to the venue.

42. Cookies may be used on the Company’s website as follows:

42.1. cookies are files that websites place on users’ computers to recognise the user and make the use of the website easier. Browsers can be configured to warn the Client about the use of cookies and to allow the Client to choose whether to accept them. Refusing cookies does not prevent the Client from using the website, but may limit the available functionality;

42.2. the Company’s website may contain links to third-party websites that have their own terms of use and personal data protection rules, for whose completeness the Company is not responsible.

43. The Company has the right to make changes and additions to the privacy policy and to make them available to the Client by posting them on the Company’s website.

44. The Company keeps previous versions of the privacy policy and they are available on the website.