Your privacy and data protection are very important for the GP Nord Ltd. In order to ensure the legal, fair and transparent processing of personal data, information on the processing of personal data by GP Nord Ltd is provided below. Please note that the information provided is not exhaustive and may be amended, updated, supplemented.

1. Controller:

SIA GP Nord
Registration number: 40203177406
Address: Kurzemes prospekts 23, Riga, LV-1010, Latvia
Phone: +371 66064140
E-mail: info@gpnord.com

2. Communication on personal data protection issues

If you have any questions regarding this notice or the processing of your personal data, then you can contact us:

• using the contact information specified in point 1;

• by e-mail: info@gpnord.com

2.1. For contacting the Data Protection Officer of GP Nord Ltd, you can write:

• using the contact information indicated in clause 1, by ticking the “Data Protection Specialist” on the envelope;

• by writing to e-mail info@gpnord.com indicating “Data Protection Specialist” in Subject.

3. General characterization of personal data processing

Data is processed in compliance with the requirements of confidentiality and the security of the data held by GP Nord Ltd. GP Nord Ltd uses various security measures to prevent unauthorized access to data, disclosure of data or other inappropriate use of personal data. GP Nord Ltd ensures the proper handling, storage, and integrity of the data with an appropriate level of security. Suitable and appropriate physical, technical and administrative procedures shall be used to protect personal data and their processing held by GP Nord Ltd. The security measures taken are constantly being upgraded to meet the security requirements.

In GP Nord Ltd, personal data is processed by employees or directly authorized persons, who need it for the performance of their duties, in cases stipulated by state and local government institutions legislation.

GP Nord Ltd processes the following data: name, surname, personal identity number, place of residence, contact information, age, gender and other personal identification data in order to achieve the relevant data processing objective. GP Nord Ltd does not request or collect information which is not required to achieve a specific purpose.

GP Nord Ltd continuously carries out an assessment of the security of data processing in order to prevent, as far as possible, unauthorized access to personal data, misuse, alteration, deletion, etc. of personal data.

4. The purpose of the processing of personal data and the legal basis

GP Nord Ltd processes personal data for fulfillment of the obligations specified in legislation, performance of obligations stipulated in the agreements, for informing the public, implementing GP Nord Ltd’s legal interests, as well as for other predetermined purposes.

For security measures and ordering, video surveillance is carried out in GP Nord Ltd building and its adjoining territory at Kurzemes prospekts 23, Riga.

The basis for processing in each case is one of the European Parliament and the Council Regulation (EU) 2016/679 of 27 April 2016, on the protection of individuals regarding the processing of personal data and the free movement of such data so repealing Article 6 of Directive 95/46 / EC (hereinafter referred to as the General Data Protection Regulation).

Mostly GP Nord Ltd processes personal data based on Article 6 Paragraph 1 points (b), (c) and (e) of the General Data Protection Regulation – processing is carried out to fulfill the legal obligation of GP Nord Ltd, performed in the public interest, or in the exercise of official authority conferred on GP Nord Ltd.

5. Categories of recipients of personal data

For the purposes of the processing of personal data of GP Nord Ltd, data may be transferred to other parties in accordance with the procedures specified in legislation, for example, third parties, which may be co-operating partners, authorized persons in accordance with legislation, contracts concluded, as well as controlling institutions and law enforcement agencies. Before transferring data to third parties, GP Nord Ltd will carefully evaluate whether such a transfer of data has an appropriate legal basis.

6. Provision of personal data outside the European Union or the countries of the European Economic Area

GP Nord Ltd does not transfer data to countries outside the European Union or the European Economic Area.

7. Personal data storage period

Personal data is stored for as long as their storage is necessary for the purposes of personal data processing, as well as in accordance with the requirements of applicable regulatory enactments. Storage objectives may vary. For example, data processing is initiated first to review your submission by nature. When the decision is made, the data are stored in accordance with the applicable laws and regulations on the storage of relevant documents, as well as in order to ensure the legitimate interests of GP Nord Ltd that might result from possible cases of disagreement.

8. Data subject’s rights in personal data processing process

You have the right to access and control your personal data, to limit the processing, to correct, delete, and to object to data processing, so upon receipt of your request, GP Nord Ltd will respond to it within the time limits specified in regulatory enactments and, if possible, will correct or delete your personal details accordingly. If data processing is performed based on the consent of the data subject, the data subject has the right at any time to withdraw his consent to the processing of his personal data, without prejudice to the processing of data that occurred before withdrawing consent. GP Nord Ltd will evaluate your claims in accordance with its legal interests. If personal data is no longer required for the purposes of processing previously defined, they will be deleted.

You can get information about our possession of your personal data or exercise your other rights as data subjects as follows:

submitting an application in person at GP Nord Ltd, at Kurzemes prospekts 23, Riga, every weekday from 9.00- to 17.00;
by submitting an application electronically, by sending it to the e-mail address info@gpnord.com. The application must be signed with a secure electronic signature.

Upon receipt of your application, GP Nord Ltd will evaluate its content and your identification and, if necessary, will ask you to submit additional information in order to ascertain as far as possible that the data will be sent to the relevant data subject and minimize the risk of misuse of your data.

If you visit GP Nord Ltd, take part in the events organized at GP Nord Ltd, and you do not want to be photographed or filmed, please inform us in advance.

9. The right to submit a complaint

If you have any questions or concerns regarding the processing of your personal data by GP Nord Ltd, we ask that you contact GP Nord Ltd, as indicated in paragraph 2 of this notice.

If, however, you believe that we have not been able to resolve the issue and GP Nord Ltd violates your right to the protection of your personal data, you have the right to submit a complaint to the Data State Inspectorate (http://www.dvi.gov.lv/en/inspectorate/contact-information/) at Blaumana Street 11 / 13-11, Riga, LV-1011.