Privacy policy

This is an English translation of the existing Latvian text. If there is any discrepancy, the Latvian version shall prevail.

Privacy policy and personal data processing policy

The controller of personal data is SIA "PROLINE BALTIC", registration number 40103221784, legal address Elijas iela 21, Riga, LV-1050. Questions concerning personal data processing may be sent to info@proline.lv or submitted at the company’s address.

Personal data is any information relating to you as a natural person. It may include your name, surname, telephone number, email or residential address; vehicle registration number, model or insurance details; bank account or payment-card details; health information; passport data and personal identification number; information about income, property and cash flow; ethnic origin, political opinions, religious beliefs, sexual orientation and trade-union membership; photographs, video recordings, appearance or biometric data; and other information about a person.

PROLINE BALTIC processes personal data in order to fulfil its obligations towards customers, employees and cooperation partners. Data is collected and processed only where and to the extent necessary for specific, clearly defined and lawful purposes. The company undertakes to respect the right to lawful processing and protection of personal data and the requirements of applicable data-protection law, including Regulation (EU) 2016/679.

1. How personal data is obtained

PROLINE BALTIC normally obtains personal data directly from the person concerned: employees, customers and cooperation partners. Information may also be received from other sources, including public or private authorities and registers. Particularly strict requirements apply to access to and processing of sensitive data.

During cooperation and communication, data may be obtained from information supplied by a person, including name, surname, personal identification number, gender, residential or correspondence address, email address, mobile telephone number, date of birth and other data relevant to contractual obligations. Data may also include location data, audit logs, data flows and other communication information, as well as information entered in forms, surveys, discussions or expressions of opinion.

2. Legal basis and purposes

Personal data is processed where processing arises from contractual obligations, is necessary in order to enter into or perform a contract, is required for the company’s legitimate interests while respecting fundamental rights and freedoms, is required by law, or is based on consent.

Personal data may be recorded electronically and used to verify identity when establishing contractual relations; communicate with the person and notify them of changes; provide and improve services; fulfil obligations towards employees, customers and partners; conduct statistical research; and pursue other purposes connected with contractual relations.

Processing of sensitive personal data requires separate consent. This includes health data processed for employee insurance arrangements, insurance claims, requests for information and communication with medical institutions or other third parties.

3. Processing and disclosure

PROLINE BALTIC may disclose personal data to service providers and cooperation partners that assist it in pursuing legitimate interests. The company requires recipients to apply appropriate data-security measures. Information may be disclosed where a company or part of it is sold. Data may be processed, stored and disclosed to third parties to the extent provided by a contract and this policy.

Where possible and following an appropriate request, PROLINE BALTIC will arrange deletion of personal data from its own databases and those of engaged third parties when the data is no longer necessary for the purpose for which it was collected, including the exercise of contractual and legal rights.

4. Storage and security

PROLINE BALTIC must maintain confidentiality. Personal data concerning employees, partners and customers may be stored on paper and in information systems for as long as necessary for the relevant processing purpose and while claims connected with contractual relations may be brought. Data no longer required for a specific purpose is deleted.

Electronic information is stored on protected servers and printed information in locked cabinets. Customer data is protected using available modern technology, taking account of privacy risks and the organisational, financial and technical resources reasonably available to PROLINE BALTIC.

5. Rights of the person

A person has the right, in accordance with applicable law, to request access to personal data, correction or supplementation, deletion, restriction of processing, objection to processing, and data portability. These rights apply to the extent that processing is not required by binding legal obligations or carried out in the public interest.

A request may be submitted in writing in person with an identity document, or electronically using a secure electronic signature. PROLINE BALTIC will verify the person’s identity, assess the request and process it in accordance with applicable law. A response is sent to the indicated contact address, taking account where possible of the requested method of receiving the response.

If an objection cannot be resolved, the person has the right to contact the supervisory authority, the Data State Inspectorate of Latvia.