Limited Liability Company “Infinitum Agency”
Registration Number: 40203114928
Legal Address: Zigfrida Annas Meierovica boulevard 16–6, Riga, LV-1050, Latvia
Phone: +371 26102165
PRIVACY POLICY
- OBJECTIVE AND SCOPE OF PRIVACY POLICY
- The purpose of the limited liability company Infinitum Agency’s (hereinafter – the Controller) Privacy Policy (hereinafter – the Policy) is to inform the Controller’s clients, potential clients, employees, business partners and other individuals about the Controller’s activities in relation to natural persons who may directly or indirectly identify (hereinafter – the Data Subject) the processing and protection of personal data. The Policy specifies which personal data of the Data Subject are processed, including obtained, transferred, rectified, stored, erased, etc., the purposes and legal basis of such processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter – the Regulation), as well as data storage periods and the rights of the Data Subject.
- The Policy applies to the processing of natural persons’ data regardless of the form and/or environment in which the Data Subject provides or the Company obtains personal data (eg at the Controller’s premises, website, written, orally, electronically by email or telephone, Controller’s social media profiles, etc.).
- The Controller has the right to make changes to the Policy at its own discretion. The Policy is available on the Controller’s website – infinitum.agency(hereinafter – the Website), as well as in the office and shall apply from the date of Policy approval.
- CONTROLLER’S IDENTITY AND CONTACT INFORMATION
- The controller of the data processing is the Limited Liability Company “Infinitum Agency”, Registration Number: 40203114928, Legal Address: Zigfrida Annas Meierovica boulevard 16–6, Rīga, LV-1050, Latvia. The Controller’s contact phone: +371 26102165, email address: [email protected].
- CATEGORIES OF PERSONAL DATA, CATEGORIES OF DATA SUBJECTS, PURPOSES OF PROCESSING AND LEGAL BASIS
- The Controller normally processes personal data of the following Data Subjects:
- Employees;
- Potential employees;
- Clients (representatives);
- Leads (representatives);
- Collaboration partners and their representatives.
- The Controller normally processes personal data of the following Data Subjects:
- The Controller shall process personal data in a lawful, fair and transparent manner in order to:
- Provide services to customers;
- Administrate legal principles of employment;
- Ensure and improve the quality of services provided by the Controller;
- Detect and prevent criminal offenses or administrative violations in the Controller’s premises and/or territory;
- Perform the duties applicable to the Controller by law;
- Implement the Controller’s public relations and marketing activities;
- Protect their own and the Data Subjects’ legitimate interests. The Controller has the following legitimate interests: to perform and administer commercial activities, verify Data Subjects’ identity prior to concluding contracts, receive payments, improve service quality, analyse requests, prevent criminal offenses or administrative violations at the Controller’s premises, protect the Controller’s and Data Subjects’ rights and legal interests, etc.
- The Controller normally processes the following categories of personal data:
- First name;
- Surname;
- Personal identification code;
- Address;
- Telephone number;;
- Email address;
- Employee education information;
- Bank account number, debit/credit card number;
- Taxpayer’s ID;;
- Health data (mandatory health examination for staff);
- Photo, video recording.
- The legal basis for the processing of personal data by the Controller may be:
- Article 6 (1) (a) of the Regulation which states that data processing is lawful if the Data Subject has given consent to the processing of his or her personal data for one or more specific purposes.
- Article 6 (1) (b) of the Regulation, which states that data processing is lawful if the processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- Article 6 (1) (c) of the Regulation, which states that data processing is lawful if the processing is necessary for compliance with a legal obligation to which the Controller is subject;
- Article 6 (1) (f) of the Regulation, which states that data processing is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require protection of personal data, in particular where the data subject is a child;
- Article 9 (2) (h) of the Regulation, which states that the processing of health data is lawful if the processing is necessary for the purposes of assessment of the working capacity of the employee on the basis of Union or Member State law or pursuant to contract with a health professional.
- The Controller processes the first name, last name, address, phone number, email address, bank account number, taxpayer ID for the purpose of providing services to its customers, to fulfil the obligations specified by law based on Article 6 (1), Subparagraphs (b) and/or (c) of the Regulation.
- The Controller shall process the first name, surname, education data for the purpose of assessing the Data Subject’s suitability for the job vacancy based on Article 6 (1) (a) of the Regulation.
- The Controller shall process the first name, surname, birth data for the purpose of congratulating the employee on their birthday based on Article 6 (1) (a) of the Regulation.
- The Data Subject’s contact details (name, telephone number, email address) may be processed for the purpose of communicating or providing information to the Data Subject only in the interests of the Data Subject and in relation to services requested by the Data Subject based on Article 6 (1) (a) of the Regulation.
- The photo and/or video, name, surname is processed for the purpose of the Controller’s public relations and/or marketing objectives based on Article 6 (1) (a) of the Regulation.
- Employee health information is processed for the purpose of assessing the employee’s ability to work based on Article 9 (2) (h) of the Regulation.
- TIME LIMITS OF PERSONAL DATA STORING
- Natural persons’ data is stored in accordance with the procedures and duration specified in the regulations of the Republic of Latvia, the consent of the Data Subject, the concluded agreement or the legitimate interests of the Controller, as well as in case there is another legal basis.
- SHARING OF PERSONAL DATA OUTSIDE LATVIA
- The personal data processed will not be transferred outside the EU and the EEA, nor will they be transferred to any international organization, unless the Data Subject has given their consent.
- CATEGORIES OF PERSONAL DATA RECIPIENTS
- With an appropriate legal basis, personal data may be transferred to organisations, insurance companies, banks, social network operators, hosting service providers, personal data processors contracted by the Controller, cooperation partners, delivery or postal service providers, Controller’s software maintainers, etc.
- SECURITY OF PERSONAL DATA PROCESSING
- The Controller shall ensure that personal data is processed with adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by appropriate technical or organizational measures.
- DATA SUBJECT ACCESS TO PERSONAL DATA
- The Data Subject has the right to receive confirmation from the Controller as to whether or not personal data is processed in relation to the Data Subject and, if yes, the Data Subject has the right to access the relevant data and receive the information specified in Article 15 (1) of the Regulation.
- The Data Subject has the right to request, providing reasonable grounds for such a request, that the Controller amends inaccurate personal data of the Data Subject without undue delay. Taking into account the purposes of the processing, the Data Subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- The Data Subject shall have the right, in accordance with the Article 17 of the Regulation, to have the Controller delete the personal data of the Data Subject without undue delay if any of the circumstances specified in that Article exist.
- The Data Subject has the right to have the Controller restrict the data processing if any of the circumstances set out in Article 18 of the Regulation exist.
- The data subject has the right to withdraw their consent to the processing of their personal data, if such has been provided.
- In order to facilitate the processing of the Data Subject’s requests, the Data Subject is advised to contact the Controller in writing (signed application in paper form or an electronic document signed with an e-signature or equivalent signature) by sending the relevant application to the Controller’s legal address or email address indicated in the Clause 2 of the Policy.
- The Data Subject also has the right to file a complaint with the Data State Inspectorate if the Data Subject considers that the Data Controller infringes the Data Subject’s rights and legal interests in the field of personal data protection. The complaint can be submitted by post, email (sending documents signed with a secure electronic signature to: [email protected]), or bringing it to the mailbox located at the 1st floor of following address: 11/13 Blaumana Street, Riga, Latvia.
COOKIE POLICY
This policy (hereinafter – the Document) describes cookie usafe on the website of the limited liability company “Infinitum Agency”, Registration Number: 40203114928, Legal Address: Zigfrida Annas Meierovica boulevard 16–6, Rīga, LV-1050, Latvia (hereinafter – the Controller) — www.infinitum.agency (hereinafter – the Website), describes the purposes of the cookie usage, as well as explains the users’ rights to change and impact the use of cookies according to their needs. What are cookies? Cookies are small text files that the web browser (such as Internet Explorer, Mozilla Firefox, Safari, etc.) stores on the user’s end-device (computer, mobile phone, tablet) when they visit the Website with the aim to identify the browser or store information or settings. With the help of cookies, the Website is able to save the user’s individual settings, recognize them and respond accordingly in order to improve user experience. The user can disable or restrict the use of cookies; however without cookies it will not be possible to fully use all Website features. Depending on the functions to be performed and the purpose of use, the Controller uses mandatory, functional, analytics and targeting (advertising) cookies. Mandatory cookies These cookies enable the user to freely visit and browse the Website and use its features, including to obtain information on and purchase on services. These cookies are identified by the user’s device, but they neither reveal the user’s identity, nor collect or gather information. Without these cookies, the Website cannot function properly, for example, it cannot provide the necessary information or it is not possible to apply for services. These cookies are stored on the user’s device until the web browser is closed. Functional cookies With functional cookies, the Website remembers the settings and options selected by the user to provide for an even more convenient usage of the Website. These cookies are stored on the user’s device continuously. Analytics Cookies Analytics cookies collect information on the Website usage, identify frequently visited sections, including the chosen content while browsing the Website. This information is used for analytics purposes to determine interesting content and improve the functionality of the Website by making it more user-friendly. Analytical cookies identify only the user’s device, but they do not reveal the user’s identity. In some cases, analytical cookies are managed by data processors (Operators), such as Google Adwords, on behalf of the Website owner, in accordance with its instructions and only for the specified purposes. Targeting (advertising) cookies Targeting (advertising) cookies are used to collect information about the websites visited by the user in order to offer relevant Controller’s services directly to the specific user or to show relevant offers according to the specific user’s interests. These cookies are usually placed by third parties, such as Google Adwords, with the permission of the Website owner. Targeting cookies are stored continuously on the user’s end-device. What are the Controller’s purposes of using cookies Controller may use cookies to improve the Website experience:- Ensure site functionality;
- Customize site functionality for the user’s habits – including language, search queries, previously viewed content;
- Obtain traffic statistics – number of visitors, time spent on the page, etc.;
- User authentication;
- In case the user is the Controller’s client, to display services customized to the user’s needs and other content and offers created or distributed by the Controller when visiting the Website.
