Your Privacy and Data Protection
Your privacy and the protection of your data are very important to the website’s data controller. We assume that before providing your personal data, you have read this Privacy Policy, which requires your consent to the processing of your personal data, and that you have agreed to such processing.
This Privacy Policy describes how and for what purposes the personal data you provide is processed. Before processing personal data, the legality of processing activities is assessed, and personal data is processed based on official authority and applicable legal obligations.
Personal Data Processing
In accordance with the General Data Protection Regulation* (GDPR), the data controller of personal data is the Riga City Municipality institution “North Riga Cultural Association,” represented by the personnel of specific municipal structural units or institutions, who determine the purposes and means of processing personal data (hereinafter – the municipality).
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Purposes of Personal Data Processing
- Customer service;
- Monthly newsletter distribution;
- Preparation of rental agreements;
- Improving customer service;
- Maintenance and improvement of websites and mobile applications;
- Statistics and business analysis;
- Planning and record-keeping;
- Measuring efficiency.
Retention Period of Personal Data
The Riga City Municipality institution “North Riga Cultural Association” stores and processes the Client’s personal data as long as at least one of the following criteria exists:
- A contract with the Client is in force;
- A legal obligation to retain the data exists for either party (e.g., in accordance with the Accounting Law, invoices issued by the company must be kept for at least 5 years);
- The Client’s consent to store the data is valid (applies only when no other legal basis for storing the personal data exists, e.g., potential client data obtained during marketing activities).
Once none of the legal bases for processing data exist, the Client’s personal data is deleted.
Audit records are kept for at least one year from the date of creation in accordance with regulatory requirements. Audit records from high-security information systems are kept for at least 18 (eighteen) months.
Access to Personal Data and Other Client Rights
The Riga City Municipality institution “North Riga Cultural Association” ensures that the Client receives all information required by law regarding the processing of their data, as well as guarantees the exercise of all rights of the data subject provided by law.
The Client has the right to request access to their personal data, request its supplementation, correction, or deletion, receive a copy of the data, object to its processing, request restrictions on processing, and ensure data portability.
The Riga City Municipality institution “North Riga Cultural Association” fulfills data subject requests to the extent that they do not conflict with its legal obligations under applicable laws or with the terms of the contract concluded with the Client.
The Client can submit a written request to exercise their rights in person at the Riga City Municipality institution “North Riga Cultural Association,” located at VEF Culture Palace, Ropažu Street 2, presenting an identity document.
Data Protection Officer – Riga City Municipality Central Administration, Data Protection and IT Security Center, address: Dzirciema Street 28, Riga, LV-1007, tel. +371 67012051, email: dac@riga.lv