Personal data processing

Effective from 31 August 2023

Your privacy is important to “WOOD POINT” SIA (hereinafter also referred to as “we”, “our” or “us”) and we ensure that all personal data in our possession is processed and protected in accordance with the legal framework. Our processing of personal data is subject to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the Personal Data Processing Law and other laws and regulations of the Republic of Latvia. These principles generally describe how we process (including collect, aggregate, store, share, use, restrict, erase, manage) and protect personal data. Further information on the processing of personal data is contained in contracts and other documents, including our Internal Personal Data Processing and Protection Policy.

1. INFORMATION ABOUT THE CONTROLLER

The controller of personal data processing is “WOOD POINT” SIA, registration number: 40103140977, legal address: 39 Vējstūru Street, Riga, LV-1063.

Contact details: e-mail: info@woodpoint.lv, telephone: +371 20368989.

2. TERMS USED

You – a natural person who has placed an order and/or concluded a contract with “WOOD POINT” SIA, either for yourself or on behalf of a legal entity.

Personal Data – means any information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be directly or indirectly identified, particularly by referring to an identifier such as said person’s name, surname, personal identification number, location data, etc.

Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Processor – a natural or legal person who processes Personal Data in the name of and on behalf of “WOOD POINT” SIA based on a contract concluded between “WOOD POINT” SIA and the Processor.

Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

3. GENERAL PROVISIONS

3.1. These principles provide you with general information on how “WOOD POINT” SIA processes your Personal Data. In addition to the description of the Principles, more detailed information on the Processing of your Personal Data can be found in contracts and other related documents.

3.2. “WOOD POINT” SIA ensures that the Processing of Personal Data is carried out on the basis of a lawful reason, within the framework of certain purposes (objectives) and only to the extent necessary to achieve the specific purpose. Data Processing is carried out only for as long as it is necessary to fulfil one of the purposes of Data Processing (evaluation of the order, conclusion of contractual relationship, performance of contractual obligations, resolution of potential disputes, compliance with mandatory obligations under regulatory enactments, etc.).

3.3. Data Processing is conducted with respect for confidentiality, security, and in compliance with the requirements of regulatory enactments. We do not unreasonably collect, use or disclose your Personal Data, unless it is required by the laws and regulations in force in the Republic of Latvia, or it is necessary for evaluating orders, concluding/performing contracts, or protecting your rights and legal interests as provided for in the laws and regulations.

3.4. We process Personal Data in accordance with the requirements set out in the regulatory enactments in force in the Republic of Latvia and in accordance with your freely and explicitly expressed consent.

3.5. The Personal Data Controller specified in paragraph 1 of these Principles is responsible for the Processing of your Personal Data.

4. PURPOSES OF DATA PROCESSING

“WOOD POINT” SIA ensures the use and protection of your Personal Data in compliance with the Regulation and the laws and regulations of the Republic of Latvia in accordance with the purpose set for the Processing of Personal Data – ensuring the economic activity of “WOOD POINT” SIA and fulfilling its obligations, preserving property, and performing the obligations set forth in the laws and regulations. Our employees and Processors are obliged to respect the confidentiality of data.

5. CATEGORIES OF DATA PROCESSED

As per your freely and explicitly given consent, depending on the particular situation, we process the following Personal Data voluntarily provided by you – your name and surname, personal identification number, actual and/or declared address of residence, bank account details (such as bank account number), contact details (telephone number, e-mail address), and title (if you are entering into a contract on behalf of a legal entity).

6. PROCESSORS AND RECIPIENTS OF PERSONAL DATA

Your Personal Data is confidential information and, where necessary, may only be obtained by:

6.1. persons specifically authorised by “WOOD POINT” SIA (sales managers, accountant) and the management of “WOOD POINT” SIA;

6.3. debt collectors, bailiffs, notaries public, courts, out-of-court dispute resolution bodies, liquidators, insolvency administrators, and persons supervising legal protection proceedings;

6.4. state institutions, as well as other persons, when such information is obliged to be provided in the cases stipulated by the laws and regulations or in order to fulfil obligations stipulated by the laws and regulations;

6.5. Your information is also shared with Processors, such as the database maintainer or a person who ensures debt collection in the case of default. These parties only Process your Personal Data in accordance with our instructions and are prohibited from using it for any other purposes or transferring your Personal Data to other parties without our consent. Data Processors ensure the protection of your data, adhering to the requirements of the laws and regulations, as well as the terms outlined in our mutually agreed-upon written agreement. Processors do not have access to your Personal Data that is not necessary for them to perform their duties.

6.6. The Processors we choose are carefully selected and we require them to use appropriate measures to protect the confidentiality of your data and ensure the security of your personal information.

7. YOUR RIGHTS IN THE DATA PROCESSING PROCESS

7.3. We will be happy to provide you with information about the Personal Data we hold about you, the duration of data retention, its purpose of use, recipients with whom it is shared, or any parties to whom your data may have been disclosed. If this data is inaccurate, we will correct it. For any questions related to this section (clause 7), please contact us via e-mail at info@woodpoint.lv or at our legal address: 39 Vējstūru Street, Riga, LV-1063, by marking your correspondence as “Processing of personal data”.

7.4. You have the right to request information about any of your Personal Data that is held by “WOOD POINT” SIA, as well as to request to have the data corrected, or deleted, to object to the Processing of Personal Data, to request the restriction or transfer of Personal Data by submitting such a request in written (including electronic) form, either physically signed or with a secure electronic signature. We will respond to your request within a reasonable time, without undue delay, but no later than one month from the date of receipt of the request. Given the complexity and number of requests, we may extend this deadline by a further two months. We will inform you of such extension and the reasons for the delay within one month of receiving the request.

7.5. You have the right to object to the withdrawal of your consent to the Processing of Personal Data. In this case, all Personal Data submitted by you will be deleted, unless there is another lawful basis for the Processing of Personal Data.

7.6. If you are unable to resolve any disagreement with us through negotiations and you believe that the processing of Personal Data violates your rights and interests under the applicable laws and regulations, you can file a complaint regarding the use of Personal Data with the Data Inspectorate (www.dvi.gov.lv) and apply to court in accordance with the procedure established by the laws and regulations.

8. APPLICATION AND AMENDMENT OF THE PRINCIPLES

As we are constantly developing our activities, we may change and supplement these principles unilaterally from time to time, to the extent permitted by the laws and regulations in force in the Republic of Latvia. The current version of these principles (and the date of their entry into force) is available on our website(www.woodpoint.lv).