PRIVACY POLICY

1. Who are we?
We are SIA “APV Polimērs”, registration number 40003523669, with our registered office at Loka ceļš 56, Jaunmārupe, Mārupe Municipality, LV-2166 (hereinafter: we, us, our), and this is our privacy policy. Here, we provide information to data subjects about how we process personal data.
We act as the data controller for the personal data in our possession. If you have any questions regarding data processing, you can contact us by mail at our legal address above or electronically at [info@polimers.lv].
We encourage all data subjects to review this policy periodically, as our data processing practices may change over time.

2. To whom does this policy apply?
This policy applies to:

• Visitors to our website;

• Representatives, employees, and other related individuals of our clients;

• Representatives, employees, and other related individuals of our partners;

• Visitors to our office premises;

• Job applicants;

• Any other individuals who communicate with us (e.g. by email, letter, or otherwise), where such communication results in the processing of personal data.

3. How and what data do we collect?
Most personal data is collected directly from you — for example, when you contact us by email or phone, visit our premises, or use our services. If you provide personal data, please do so to the extent necessary for the purpose and avoid submitting excessive or unrelated personal information.

We may also receive data from our clients, partners, or service providers — e.g. when it’s needed for contract execution or business communication. Additionally, we may obtain data from public sources (e.g. public registers) or from third parties including government institutions or legal bodies.

4. Why and on what legal basis do we process your data?
The primary reason we process data is to deliver quality services according to client needs — such as entering into and executing contracts, providing services, or organizing events (e.g., requiring an address for a photoshoot).

We also process data to protect our legitimate interests, such as resolving disputes or defending our rights in legal proceedings. This is done based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).

In cases where legal obligations require us to process data (e.g. for tax reporting, government requests), processing is based on Article 6(1)(c) of the GDPR.

If you consent to cookies on our website, the processing is based on Article 6(1)(a) — your consent, which can be withdrawn at any time by contacting us.

We may also send marketing emails to our clients (legal entities) unless they have opted out, in accordance with Section 9, Part 4 of the Latvian Information Society Services Law.

5. What data do we process?
The categories of data we process depend on the specific purpose. Typically, they include:

If you applied for a job:
We collect and process your CV, related documents, references (with your consent), and retain the information for 6 months after the recruitment ends (or 1 year if you consented to future opportunities). Data is used for evaluating candidates and for potential legal defense in case of complaints.

6. How do we protect your data?
We ensure the confidentiality and security of your personal data by:

• Allowing access only to authorized personnel trained in data protection;

• Implementing technical and organizational security measures (e.g. pseudonymization, minimization, backups);

• Using licensed and updated software;

• Employing technical protections like SSL encryption, firewalls, and intrusion detection;

• Involving certified data protection specialists.

7. How long do we retain your data?
We retain personal data as long as one of the following applies:

• A contract is in effect or services are being provided;

• Data is needed for the intended purpose;

• Data is relevant to a complaint or legal process;

• Legal or contractual obligations require data retention;

• A valid consent for data processing exists.

8. Who do we share your data with?
We do not share your data with third parties unless:

• You have explicitly consented;

• It is required for contract execution;

• It is requested by authorities under applicable law;

• It is necessary to protect our legal interests.

We may share data with:

• Our employees and authorized persons;

• Government bodies, courts, or law enforcement;

• Data processors under binding agreements;

• Legal advisors, auditors, IT providers, archival service providers, anti-fraud or AML entities.

We aim not to transfer personal data outside the EEA unless necessary. If so, we ensure proper safeguards as required under Chapter V of the GDPR (e.g. Standard Contractual Clauses).

9. What are your rights as a data subject?
You have the right to:

• Access and receive a copy of your personal data;

• Request correction, deletion, or restriction of data;

• Object to processing;

• Receive your data in a structured, machine-readable format (data portability).

Requests should be sent in writing to our legal address or via email signed with a secure electronic signature. Upon receiving a request, we may verify your identity and clarify any unclear submissions.

We will respond within one month (with a possible extension of up to two more months if necessary, in which case you will be notified).

If you believe we have violated your data rights, you can contact the Data State Inspectorate (Elijas iela 17, Rīga, LV-1050; www.dvi.gov.lv; phone: +371 67 22 31 31; email: pasts@dvi.gov.lv). We encourage you to contact us first for a quicker resolution.

We reserve the right to update or amend this policy unilaterally. The latest version will always be available on our website. Previous versions are also accessible online.