Personal data processing controller:

SIA URSUS FORWARDING

reg. No 40003931354

registered address: Raunas iela 44 k-1, Riga,

LV-1039, Latvia

phone: +371 66100250

E-mail: info@ursus.lv

What types of information does the company collect, and for what purpose?

In order to provide the services necessary, and to ensure their quality, the company collects and processes a certain scope of personal data necessary on a case-by-case basis (e.g. name and surname, personal ID number, address, phone number, e-mail address, website visit data etc.).

The company uses personal data, for example, to:

• identify the user (client);

• provide answers to questions, suggestions, complaints, messages or claims submitted by the user (client);

• improve the company’s customer/warranty service and find out the opinions of the user (client) of the company’s products/services;

• notify the user (client) of any news of the company and/or URSUS FORWARDING brand using the medium selected by the user (client);

• promote the visibility of the company’s services and the URSUS FORWARDING brand;

• prepare, conclude and carry out agreements;

• manage payments and enforce contractual obligations/collect debts;

• ensure fulfilment of warranty obligations;

• carry out statistical and business analysis;

• maintain and develop the website;

Collection of personal data may take place:

• when contacting the company’s staff in person, by phone, or online;

• if the user provides their personal data to the company;

• if the personal data are received from third parties in accordance with the law;

• when concluding contracts, agreements etc.;

• when providing services;

• by submitting questionnaires, forms or participating in events organised by the company (including events recorded on video and photographed);

• when using cookies.

Legal grounds for personal data processing

The company shall only process the personal data of the user (client) if provided with sufficient legal grounds to do so, i.e.:

Consent of the data subject

The company notifies the user (client) of the company news, and send advertising materials to them based on the consent provided by the user (client).

Conclusion and fulfilment of agreements

The personal data of the user (client) are necessary to conclude and fulfil and agreement.

Fulfilment of legal duties

In some situations, the processing of personal data is necessary to comply with applicable legal regulations (law, cabinet regulation etc.).

Transfer of personal data

The personal data of the user (client) shall not be sold or transferred to third parties in any inappropriate manner

The company shall have the right to disclose personal data:

• if information about the personal data is requested by the data subject, and the company can confirm the identity of the party that requested the information;

• if information about the personal data is requested in writing by authorised state or municipal bodies, in situations and in accordance with the procedures specified in the legal regulatory documents of the Republic of Latvia.  

The company shall not send the personal data of the user (client) to any third countries (outside the European Union or the European Economic Area).

Storage duration

The personal data of the user (client) are stored until the goal of processing is achieved. If the processing takes place based on the consent of the user (client), their personal data shall be processed while such consent is still in effect, and is not revoked, or to the extent that legal regulations require the company to process and/or store such data.

Security

The company shall store the personal data of the user (client), using the technical and organisational measures that conform to the modern requirements.

Data subject rights

The user (client) has all the data subject rights provided by the General Data Protection Regulation and the law of the Republic of Latvia. These include, without limitation, the following rights of the user (client):

• the right to access the user’s (client’s) personal data and to get information about how these data are processed;

• the right to request corrections in false, inaccurate or incomplete personal data;

• the right to be forgotten (you have a right to delete your personal data, preventing any further processing thereof, provided such data are not anymore necessary for the purposes, which they were collected for, or if you should retract your consent. However, the right to be forgotten is not absolute, and it may not be enforced in situations when we have a legal duty to process (and store) these data, or if such processing is necessary for us to protect our legitimate interests);

• the right to limit processing;

• the right to transfer data (the right to receive your own personal data provided to the data controller in a structured, commonly used and machine-readable format, and the right to transfer said data to another controller);

• the right not to be subject to decisions based solely on automated processing (including profiling), which result in legal consequences for you, or significantly affect you in a similar manner;

• the user (client) may also revoke their consent to the processing of their personal data at any time. Such revocation of consent shall not affect the legality of any prior personal data processing carried out while the consent in question was still in effect. With respect to receiving advertising messages, the user (client) may refuse to receive them at any time, by using the automated option to do so provided at the end of the corresponding e-mail messages, or sending an e-mail request to cease communication to info@ursus.lv.

• the right to appeal to the Data State Inspectorate.

In order to enforce their right to access their personal data and receive information about the processing of said data (data subject request), the user (client) may submit a request for the enforcement of their rights:

• personally and in writing, at the company office: at Raunas ielā 44 k-1, in Riga, producing their passport or ID card to confirm their identity;

• online using a secure electronic signature.

Having received a data subject request, the company must confirm the identity of the user (client), in order to ensure the security of the personal data, and guarantee that the personal data are not disclosed to unauthorised persons, because of which any information requests that are not formalised in accordance with the requirements specified (e.g. without a secure electronic signature) shall not be processed as data subject requests.

Cookies

The company website uses cookies that make it possible to provide user-friendly, effective and reliable online support (e.g. to speed up website navigation, or to assess the frequency of page views and general navigation). Cookies are small text files stored in the computer system, in order for the user (client) to have access to all the features of the website. Some cookies are sent from the server to the user’s (client’s) computer system, i.e. ‘session cookies’. They are automatically deleted from the computer’s hard drive as soon as the user (client) ends their web browser session.

Other cookies are stored in the computer system of the user (client), making it possible to recognise the system during the user’s next visit of the website.

The user (client) may choose not to receive cookies at any time by switching their storage on the hard drive off: if necessary, the help function available in most web browsers will provide support.