PRIVACY POLICY

Based on the General Data Protection Regulation (GDPR) No. 2016/679 and the Personal Data Processing Law of the Republic of Latvia.

PRIVACY POLICY

  1. 1LIST OF TERMS USED IN THIS DOCUMENT
  2. 2PROCESSING OF PERSONAL DATA
  3. 3CATEGORIES OF PERSONAL DATA FOR PROCESSING
  4. 4GROUNDS FOR PROCESSING PERSONAL DATA
  5. 5PURPOSES OF PERSONAL DATA PROCESSING
  6. 6METHODS OF OBTAINING PERSONAL DATA
  7. 7Storage period of personal data
  8. 8Sharing of personal data
  9. 9Methods of protecting personal data
  10. 10Client rights
1

LIST OF TERMS USED IN THIS DOCUMENT

Personal data
Any information related to an identified or identifiable client.
Personal data processing
Any actions performed with personal data, including their collection, registration, input, storage, organisation, transformation, use, provision, transfer and disclosure, blocking or deletion.
Client
An individual (data subject) who can be directly or indirectly identified by using the data available in the data processing system.
Client consent
A free and unambiguous expression of the will of the client (data subject), by which the client gives permission for the processing of their personal data for the specified purpose.
Personal data manager
An individual or legal entity, agency or other structure that, independently or jointly with others, determines the purpose and means of processing, and also provides access to personal data. The data manager is SIA FlatShare Riga, Reg. No. 40103875689, Gertrudes iela 54, Riga, LV-1011.
Authorised person
A person who, on behalf of FlatShare Riga as personal data manager, processes personal data.
Cookies
Small text files that are created and stored on the client's device (computer, tablet, mobile phone, etc.) when visiting or browsing the FlatShare Riga website at flatshareriga.com.
Legitimate interest
The interest of FlatShare Riga is based on the provision of quality accommodation services, and also has a legal basis, provided that the interests, rights and fundamental freedoms of the data subject are not more important than the legitimate interests of the company. FlatShare Riga has the right to process the client's personal data to the extent that is objectively necessary and sufficient to ensure high-quality, convenient, timely service.
Profiling
Any automatic processing of personal data that allows the use of personal data related to a specific individual for the purpose of assessing or predicting aspects (wishes, interests, reliability, behaviour, location or movement of the said person). Profiling is performed only for the purpose of direct marketing and will not create any legal consequences for the client.
2

PROCESSING OF PERSONAL DATA

FlatShare Riga processes (collects, registers, enters, stores, systematises, uses, transfers, deletes, etc.) personal data in accordance with the Personal Data Protection Law and other applicable laws and regulations in the Republic of Latvia.

In accordance with applicable laws and regulations, FlatShare Riga, as the personal data manager, adheres to the following principles:

  • FlatShare Riga ensures that data is processed fairly and lawfully.
  • The processing of the received data serves specific purposes and is carried out only in accordance with these purposes.
  • The received data is adequate and not excessive.
  • The received data is accurate.
  • The received data is not stored longer than the required period and is destroyed upon reaching the specified purpose.
  • FlatShare Riga processes the received data in accordance with the rights of individuals.
  • FlatShare Riga ensures that the received data is stored securely.
  • FlatShare Riga does not provide the data it receives to other organisations or abroad without secure, adequate protection within the framework of regulations and the General Data Protection Regulation No. 2016/679.
3

CATEGORIES OF PERSONAL DATA FOR PROCESSING

The categories of personal data of the client for processing depend on the accommodation services used by the client. FlatShare Riga has the right to process the following categories of personal data:

Data obtained with the consent of the client (which the client themselves provided).

  • Name, surname, personal identification number or date of birth;
  • Correspondence address, telephone number, e-mail address;
  • Payment and bank details;
  • Communication data - information from letters and e-mails related to communication between the client and FlatShare Riga;
  • Cookies and data on visiting the FlatShare Riga website;
  • If the client does not wish to allow the use of cookies, they can disable them in their browser settings, however some site features may become limited;
  • Date, time and volume of views on flatshareriga.com.
4

GROUNDS FOR PROCESSING PERSONAL DATA

Client Consent - The client, as the subject of personal data, gives consent to the collection and processing of their personal data for specific purposes. Consent is an independent decision of the client which they can give or revoke at any time. Revocation of consent does not affect the legality of processing that occurred before its cancellation.
Legitimate interests of FlatShare Riga - FlatShare Riga has the right to process the client's personal data to the extent necessary and sufficient to ensure high-quality, convenient, timely accommodation services, and to create and support internal process resources.
Legal obligations of FlatShare Riga - FlatShare Riga is obliged to process the client's personal data to comply with the requirements of regulatory acts and to provide responses to requests from state and municipal authorities.
To conclude and fulfil contractual obligations - In order to provide quality accommodation services, FlatShare Riga processes certain personal data that are collected before the conclusion of a rental agreement or during its term.
To implement public interests or to exercise legal powers - In such cases, the basis for processing personal data is described in regulatory enactments.
Profiling - When processing the client's personal data, FlatShare Riga has the right to perform profiling for the purpose of providing automated individual commercial offers strictly for business purposes; this will not create any legal consequences for the client.
5

PURPOSES OF PERSONAL DATA PROCESSING

  • To conclude and fulfil contractual obligations with the client, including rental agreements for rooms and apartments.
  • To assess the client's ability to fulfil contractual obligations.
  • To effectively manage cash flows, to control payments and client debts.
  • To provide technical support related to the provision of accommodation services.
  • To develop and improve our services and range of accommodation options.
  • To conduct statistical data processing and market analysis.
6

METHODS OF OBTAINING PERSONAL DATA

The client provides FlatShare Riga with their data when the client:

  • Subscribes to FlatShare Riga news and updates;
  • Enquires about, books, or uses FlatShare Riga accommodation services;
  • Agrees to participate in surveys or promotional activities;
  • Visits or views the FlatShare Riga website at flatshareriga.com.

FlatShare Riga and its authorised persons, within the framework of the Personal Data Protection Law (GDPR No. 2016/679), have the right to process the personal data of the client received from a third party (e.g. a university referral or partner organisation) if the client has given their consent to this.

FlatShare Riga and its authorised persons, within the framework of the Personal Data Protection Law (GDPR No. 2016/679) and partner organisations, have the right to process the personal data of the client received from the client themselves.

7

Storage period of personal data

FlatShare Riga has the right to store the client's personal data:

  • Until the client has withdrawn their consent to the processing of their personal data;
  • For the period required to implement and protect the legitimate interests of FlatShare Riga;
  • According to the storage period of personal data determined by regulatory acts and GDPR;
  • While the client is in a contractual relationship with FlatShare Riga;
  • Until the purpose of using the data, which is determined upon their receipt, is achieved.
8

Sharing of personal data

  • FlatShare Riga provides the client's personal data to the extent necessary and sufficient, in accordance with the requirements of regulatory enactments and taking into account the objective reasons for a specific situation;
  • If it is necessary to provide the client's personal data to FlatShare Riga's authorised persons, partners, agents or service providers who are associated with the booking and provision of accommodation services in order to improve the quality of service;
  • FlatShare Riga is obliged to provide information about the client's personal data to law enforcement agencies and state or municipal authorities if this is regulated by regulatory enactments or a request is received from the relevant institution.
9

Methods of protecting personal data

  • In order to improve the methods of protecting the client's personal data from unauthorised access, loss, destruction or disclosure, FlatShare Riga uses modern technologies and complies with technical and organisational requirements;
  • FlatShare Riga carries out thorough checks of authorised persons, partners, agents, service providers and employees who process the client's personal data, and also evaluates the relevant measures to ensure the security of the processing and storage of personal data;
  • FlatShare Riga is not responsible for unauthorised access or loss of the client's personal data if this occurred due to reasons beyond the control of FlatShare Riga, for example due to the fault or negligence of the client.
10

Client rights

  • The client has the right to refuse to receive commercial offers and profiling of their personal data at any time;
  • Withdrawal of consent does not affect the legality of the processing of personal data or the quality of the services received that related to the consent before its cancellation;
  • The client has the right to correct (by making changes) all available personal data about themselves;
  • The client has the right to request the deletion or restriction of their personal data ("Right to be forgotten") by submitting a written application;
  • The client has the right to receive information about those persons who were provided with information about their personal data;
  • The client has the right to transfer their personal data to another processor. These rights include only those data that the client provided based on their voluntary consent or agreement, or if automatic processing occurs. To exercise the above rights, it is necessary to submit a written application to [email protected].