Privacy Policy

SIA “INTRAC Latvia” Privacy Policy for the Website

The purpose of this Privacy Policy is to provide natural persons with information regarding the purpose, scope, protection, processing period, and rights of the data subject during the collection and processing of personal data, including client personal data.

This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (the "Regulation") and other applicable laws in the field of privacy and data processing.

---

Data Controller and Contact Information

1. The data controller is SIA "INTRAC Latvia" (hereinafter "INTRAC"), registration number 40003227920, legal address: Latgales iela 458, Riga, LV-1063.

2. INTRAC contact information for matters related to personal data processing: phone +371 67803700, email: info@intrac.lv

---

Scope of the Privacy Policy

3. Personal data means any information relating to an identified or identifiable natural person. Definitions, explanations, and categories of personal data are provided in Annex 1 of this Privacy Policy.

4. This Privacy Policy applies to the protection of privacy and personal data of:

• Natural persons – clients, representatives of legal entities (Annex 2), candidates, employees, and INTRAC event attendees/participants;

• Visitors to INTRAC stores, offices, and other premises within video surveillance areas;

• Visitors of INTRAC’s website.

5. The Privacy Policy applies to data processing regardless of the form or medium in which personal data is provided (on INTRAC’s website, in paper form, or by phone) and regardless of the systems or formats in which it is processed.

---

Categories of Data Subjects

6. The following categories of data subjects whose personal data INTRAC processes are:

• Persons filling out communication forms on the website;

• Representatives of legal entities;

• Clients – natural persons;

• Persons entering areas under video surveillance.

---

Purposes of Personal Data Processing

7. INTRAC processes personal data for the following purposes:

• Responding to inquiries from the data subject;

• Fulfilling contractual obligations and requests from business partners;

• Preventive purposes – monitoring or detecting criminal activity related to the protection of company property and the vital interests of individuals, including life and health protection;

• Ensuring the controller’s publicity.

---

Legal Basis for Personal Data Processing

8. INTRAC processes personal data of the categories mentioned in point 6 based on the following legal grounds:

• Consent of the data subject;

• Performance of contractual obligations;

• Compliance with legal obligations;

• Protection of vital interests of the data subject or another natural person;

• Tasks carried out in the public interest or in the exercise of official authority;

• Legitimate interests of the controller or a third party, balanced against the interests of the data subject.

---

Protection of Personal Data

9. INTRAC protects personal data of the categories mentioned in point 6 using modern technological means, taking into account existing privacy risks and reasonably available organizational, financial, and technical resources, including:

• Encryption;

• Pseudonymization;

• Firewalls;

• Other security measures in accordance with current technological capabilities.

---

Categories of Data Recipients

10. INTRAC does not disclose personal data of the categories mentioned in point 6 or any information obtained during service provision or contract execution to third parties, except:

• When a third party must receive data under a concluded contract to perform a function necessary for the contract or delegated by law (e.g., a bank for payment processing or service provision);

• Based on the clear and unambiguous consent of the data subject;

• To persons prescribed by external regulations upon justified request and in accordance with applicable law;

• In cases provided by law for the protection of INTRAC’s legitimate interests, e.g., in court or other state institutions against persons infringing INTRAC’s legitimate interests.

---

Retention Period of Personal Data

11. INTRAC retains personal data as long as necessary to fulfill the purpose of its processing.

---

Access to Personal Data and Other Rights of Data Subjects

12. Data subjects have the right to receive information prescribed by law regarding the processing of their personal data.

13. In accordance with applicable law, data subjects have the right to request access to their personal data, request correction, completion, deletion, restriction of processing, object to processing (including processing based on INTRAC’s legitimate interests), and exercise the right to data portability.

14. Requests may be submitted:

• In writing at any INTRAC Latvia branch or at the legal address, with a valid identification document;

• Electronically, signed with a secure electronic signature.

15. Upon receiving a request, INTRAC verifies the identity of the data subject, evaluates the request, and executes it in accordance with the law.

16. INTRAC responds to the data subject by post to the contact address provided or using the preferred method indicated by the client.

17. INTRAC ensures compliance with data processing and protection requirements and takes necessary measures to address objections. If unresolved, the data subject may contact the supervisory authority – the Data State Inspectorate.

---

Communication

18. INTRAC communicates with data subjects using the contact information provided (phone, email, postal address).

19. Communication regarding contractual obligations is conducted based on the concluded agreement.

---

Other Provisions

20. INTRAC reserves the right to update this Privacy Policy and make the current version available to data subjects on the INTRAC website.