Privacy Policy

1. Data controller and contact details

The data controller (and, in certain cases, the data processor) is the limited liability company "SIA Rāmkalni Nordeco” (hereinafter – the Company), Unified Registration No. 40003629003, registered office: Sigulda District, Inčukalns Parish, Krustiņi, "Beverīnas", LV-2141.

The Company’s contact details for matters relating to the processing of personal data are kaspars@ramkalni.lv. Where the Company processes your personal data, you have the right to ask questions regarding the processing of your personal data by sending a request to the contact details provided or by visiting the Company’s office in person at Sigulda District, Inčukalna pag., Krustiņi, "Beverīnas", LV-2141.

2. Purposes of personal data processing

When processing personal data, the Company complies with the applicable laws and regulations of the Republic of Latvia, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – the Regulation), as well as other legislation in the field of privacy and the processing of personal data. 

The Company’s data protection policy applies to all processing of personal data carried out by the Company. This data protection policy explains how the Company processes personal data and how it ensures the exercise of data subjects’ rights in matters relating to the protection of personal data. 

The Company processes personal data obtained either directly from the data subject (i.e. the person who has provided the personal data) or indirectly (from corporate clients). Personal data received indirectly is processed only where the Company needs to process personal data in order to provide a service within the scope of its contractual obligations.

The company’s purposes for processing personal data:

• For the provision of services within the framework of contractual obligations. Personal data is processed only to the extent necessary for the conclusion of the contract and the fulfilment of the contractual obligations set out therein. Legal basis for processing – performance of a contract (Article 6(1)(b) of the Regulation).
• For recruitment and management – to ensure the proper conduct of the recruitment process and to protect our legitimate interests insofar as this relates to recruitment. Legal basis for processing – compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation, the Labour Law).
• Processing of transaction data in accordance with the Accounting Act. In this case, all your data protection rights may apply, with the exception of the right to erasure, the right to object and the right to data portability. Legal basis for processing – compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).
• To improve the quality of customer service – The purpose of processing personal data is to enable the Company to assess any complaints or comments you have made regarding customer service, thereby preventing similar incidents in the future and improving customer service. Personal data is processed only to the extent necessary to identify the nature of the improvements required. This personal data is not used for the further improvement of the Company’s services or the achievement of its objectives. Legal basis for processing – the legitimate interests of the Controller (Article 6(1)(f) of the Regulation).
• To operate the online shop, including the creation of an account/profile on ramkalni.lv. The purpose of processing personal data is related to the provision of the online shop service. The online shop processes personal data for the preparation, conclusion and administration of distance contracts (invoice preparation, delivery, communication). Legal basis for processing – performance of a contract (Article 6(1)(b) of the Regulation), consent of the data subject (Article 6(1)(a) of the Regulation), compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).
• To provide information to public authorities and operational entities in the cases and to the extent specified in external legislation. Legal basis for processing – compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).

To safeguard data subjects’ right to privacy, the Company adheres to the principles of confidentiality and strictly limits the disclosure of personal data. Only persons authorised by the Company are entitled to amend and process personal data. Once none of the circumstances specified in this clause apply, the data subject’s personal data shall be deleted or destroyed, or transferred to the national archives for storage, in accordance with the requirements of regulatory enactments. 

3. Categories of recipients of personal data

The company does not disclose personal data to third parties, except in cases specified by law. Personal data cannot be accessed in third countries (i.e. countries outside the European Union and the European Economic Area).

4. Retention period for personal data

The company stores and processes personal data for as long as any of the parties has a legal obligation to retain the data:

• All information obtained during the recruitment process regarding job applicants will be retained for no longer than one year in order to safeguard the Company’s legitimate interests. In the event that the Company receives complaints regarding a specific recruitment process, all information processed during that recruitment process will be retained for as long as necessary for that specific process.
• All information processed for the purpose of improving the quality of customer service is retained only for as long as is necessary to identify the nature of the improvements required, but for no longer than six months. 
• All information required to fulfil a legal obligation applicable to the Company is retained for as long as necessary to achieve the purpose of the processing of personal data in accordance with the applicable legislation, i.e. for as long as there is a legal obligation to retain the data (for example, in accordance with the Accounting Act, the Labour Law, the Audit Services Law, the Law on the Prevention of Money Laundering and Terrorist Financing, etc.);

Company The following criteria are used to determine the retention period for personal data:

• until the expiry of the data retention and processing period specified in external legislation, or until the date on which the data subject can exercise their legitimate interests and rights (for example, to lodge objections and/or bring a claim before a court);
• for as long as the data subject’s consent to the processing of their personal data remains valid, provided there is no other lawful basis for the processing.
• until the contractual obligations have been fully fulfilled (including negotiations in which a verbal agreement is reached and/or a service request is made).

5. Cookies

The company does not use cookies on its website.

Third-party cookies
The company’s website may contain third-party cookies, such as Google Analytics.
The Google Analytics tool is provided by Google Inc. (a US company), which has access to the statistical data collected by this tool. Google Inc. has adhered to the European Union (EU)–United States (US) Privacy Shield, the EU–US Privacy Shield List, which confirms that the service provider complies with the privacy standards required by the EU. This service provider is also subject to contractual obligations designed to ensure privacy.

Cookie settings
The data subject may delete cookies at their discretion (for further information – www.AboutCookies.org and/or www.youronlinechoices.com/lv/).

6. Rights of the data subject

The rights of the data subject apply to any natural person whose personal data is processed by the Company and apply to the processing of personal data regardless of the form in which you or any other natural person has provided personal data: on the Company’s website, via the information systems provided, in paper format or by telephone. The data subject has the following rights:

• Please contact us if you have any questions regarding the management of your data, by emailing kaspars@ramkalni.lv or in person at our office in Sigulda District, Inčukalna parish, Krustiņi, "Beverīnas", LV-2141.

• the right to access this data. If we process your data, we are obliged to provide information about the processing of your data free of charge. Before you provide your personal data, we are obliged to verify your identity, thereby ensuring that information about your data is not disclosed to third parties.
• If the information held by the Company is incomplete or incorrect, you have the right to request that any inaccuracies in your personal data be corrected.
• the right to object to the processing of personal data by the Company where there is no longer any obligation to retain such data;
• the right to request the erasure of your data if the Company continues to store it after the retention period has expired, as well as, in certain situations, to restrict the processing of data and/or obtain copies in electronic format of the information held by the Company.

You can exercise these rights by contacting the Company – by emailing kaspars@ramkalni.lv or in person at the office in Sigulda District, Inčukalna parish, Krustiņi, "Beverīnas", LV-2141, and we will make the corrections specified in your request, insofar as this complies with applicable legislation and professional standards.

7. Changes to the policy

The company may revise this privacy notice at any time to incorporate the latest privacy terms. We will notify you of any significant changes to the processing of personal data described in this privacy notice via an appropriate communication channel.

8. The policy and its validity

The company is committed to protecting the privacy of your personal information. If you have any questions or comments regarding the management of your personally identifiable information, please contact us by email at kaspars@ramkalni.lv or in person at our office in Sigulda District, Inčukalna parish, Krustiņi, "Beverīnas", LV-2141.

You may also use this contact information to raise any queries you may have regarding compliance with our privacy policy.

We will respond within one month of receiving your email. If your query is complex or we receive a large number of queries, we will inform you that it will take longer than one month to resolve the matter, and we will resolve it no later than three months from the date the enquiry was first submitted.

You also retain the right to lodge a complaint with the Latvian data protection authority, the State Data Inspectorate (http://www.dvi.gov.lv).

9. Safety

The Company protects the data subject’s data using state-of-the-art technology, taking into account existing privacy risks and the Company’s reasonably available organisational, financial and technical resources, such as data encryption, firewalls, intrusion protection and other security measures.

In the event of a personal data breach, where this is likely to result in a high risk to the rights and freedoms of the data subject, the Company will notify the data subject concerned, where possible, or the information will be published on the Company’s website or by other appropriate means.

16.01.2025