Privacy Policy

Limited Liability Company

“FERAMAGUS”

Privacy Policy

Purpose and Scope of the Privacy Policy

1.1. The Privacy Policy (hereinafter – the Policy) describes and provides information to identifiable natural persons (hereinafter – the Data Subject) as SIA FERAMAGUS, registration number 41203056332, legal address: 9. Maija iela 5, Talsi, hereinafter – the Controller) processes the personal data of the Data Subject if they have decided to visit the website maintained by the Controller on the website www.petplanet.lv, come to the office premises, execute transactions or attend any other events organized by the Controller.

1.1. In this Policy, the Controller has described the measures to ensure that the interests and freedoms of the data subject are protected, while ensuring that their data are processed fairly, lawfully and in a manner transparent to the data subject.

1.2. The Policy applies to the processing of personal data of natural persons regardless of the form and/or environment in which the natural person provides personal data (when entering the territory and/or premises, by telephone, orally, etc.) and the source of personal data, as well as regardless of the Controller's systems (video, audio, web, etc.) in which they are processed.

1.3. If this Policy is updated (updated), amendments to this Policy shall enter into force on the date specified in the notices of changes to this Policy. The current version of the Policy, in order to ensure transparent and fair data processing, will be posted on the Controller's website www.petplanet.lv in the privacy policy section and in retail stores.

Controller contact information

2.1. Limited Liability Company SIA FERAMAGUS, registration number 41203056332, legal address: 9. Maija iela 5, Talsis, can be reached by writing a letter to the indicated legal address, or by e-mail to info@feramagus.lv or by calling +371 20111009

Applicable legal acts

3.1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the Regulation).

3.2. Other applicable legal acts in the field of processing and protection of natural persons' data, including laws and regulations governing information society services.

Purposes of personal data processing

In carrying out its business activities, the Controller has determined that it has several purposes for processing personal data, the data processing of which is indicated below, the Controller provides more detailed information in this policy:

Data processing with the aim of ensuring the accurate provision of services, the performance of contractual obligations and the protection of the Controller's legitimate interests.

What personal data does the Controller process?

The categories of personal data processed by the Controller depend on the services used by the Controller by natural persons. For example, when a data subject receives or expresses a desire to receive services provided by the Controller, purchase materials and goods from the Controller, in accordance with the requirements of regulatory enactments and the Controller's legitimate interest, the Controller has the obligation and the right to process the data subject's identifying information and information confirming the identity of the person. For example, if you return a product or make a claim about its quality, the Controller is obliged to examine your claim, as a result of which the Controller needs to identify the complainant or the person who needs to prepare a response. In this case, in order to achieve the purpose of providing services, the Controller may process the amount of personal data, which includes both name, surname, personal identification number, contact information, and information about the services received and to be received and the assortment of goods, etc. The relevant information is recorded in the documentation and stored in the Controller's data processing system. When the data subject receives services, personal data is processed in accordance with the contract concluded between the Parties.

What is the legal basis for the processing of personal data?

Data processing for the purpose of providing services is carried out on the basis of Article 6(1)(b), (c) and (f) of the Regulation, i.e. processing is necessary for the performance of a contract to which the data subject is a contracting party or for taking measures at the request of the data subject prior to entering into a contract; processing is necessary for the performance of a legal obligation to which the Controller is subject. As well as, in certain cases, to ensure the legitimate interests of the Controller and third parties (for example, to investigate cases where complaints have been received about the quality of service provision, to conduct follow-up checks to improve service provision, as well as to provide evidence in the event of complaints and claims).

What is the period of processing of personal data?

All information obtained when a candidate applies for vacancies and/or provides additional information, for example, during an interview, will be stored in whole or in part in the Controller's database for no longer than six months after the conclusion of the specific position competition in order to ensure the Company's legitimate interests. The Company, in accordance with the principle of data minimization, undertakes to delete the relevant information after the legitimate interest has been achieved. In the event that the Controller receives complaints about the specific selection process, all information processed in the selection process will be stored until the complaint is reviewed and at least until the final court judgment comes into force.

In the event that you have expressed a desire to be included in the Controller's job seeker database, then, in any case, information about you will be stored for no longer than one year to ensure that the Controller has up-to-date information. Taking the above into account, the Controller, if you are still interested in working in one of the Controller's stores, re-apply for the specific advertised vacancies.

Who has access to the information and to whom is it disclosed?

The Controller confirms that its employees will process the candidate's personal data in accordance with the scope of personal data processing specified in their job duties, in compliance with the requirements set out in personal data protection and other regulatory enactments, as well as the (technical and organizational) requirements for personal data processing set out in the Controller's internal regulatory enactments. In the event that complaints are received about any selection process, the information obtained and processed during the selection process may be transferred to law enforcement or supervisory authorities, as well as to the court.

6. How will the data subject be informed about the processing of his or her personal data?

6.1. The Data Subject is informed about the processing of personal data specified in this Policy using a multi-level approach, which includes the following methods:

Notices are placed at video surveillance locations, warning Data Subjects (visitors, employees, etc.) that video surveillance is taking place in the Controller's territory, providing basic information related to video surveillance, as well as informing about the possibilities of receiving more detailed information in this policy;

This Controller's Policy is publicly available on the Internet on the Controller's website petplanet.lv and at the Controller's customer service points.

7. Data Subject Rights

7.1 The Data Subject has the right to request access to their personal data from the Controller and to receive detailed information about what personal data about them is in the Controller's possession, for what purposes the Controller processes these personal data, the categories of recipients of personal data (persons to whom personal data have been disclosed or to whom they are intended to be disclosed, unless regulatory enactments in a specific case allow the Controller to provide such information (for example, the Controller cannot provide the Data Subject with information about relevant state institutions that are the initiators of criminal proceedings, subjects of operational activities or other institutions about which regulatory enactments prohibit the disclosure of such information)), information about the period for which personal data will be stored, or the criteria used to determine the aforementioned period.

7.2. If the Data Subject believes that the information in the Controller's possession is outdated, inaccurate or incorrect, the Data Subject has the right to request the correction of their personal data.

7.3. The data subject has the right to request the erasure of his or her personal data, or to object to the processing if the person considers that the personal data have been processed unlawfully, or are no longer necessary in relation to the purposes for which they were collected and/or processed (implementing the principle of the right to be forgotten).

7.4. The Controller informs that the personal data of the Data Subject cannot be erased if the processing of personal data is necessary: ​​

for the Controller to protect the vital interests of the Data Subject or another natural person, including life and health;

to protect the Controller's property;

for the Controller or a third party to establish, exercise or defend legitimate (legal) interests;

for archiving purposes in accordance with the laws and regulations in force in Latvia that regulate the creation of archives.

7.5. The data subject has the right to request that the Controller restrict the processing of the personal data of the Data Subject if one of the following circumstances applies:

The data subject contests the accuracy of the personal data – for a period during which the Controller may verify the accuracy of the personal data;

the processing is unlawful and the Data Subject objects to the erasure of the personal data and requests the restriction of the use of the data instead;

The Controller no longer needs the personal data for the purpose of processing, but they are required by the Data Subject for the establishment, exercise or defence of legal claims;

The Data Subject has objected to the processing, pending verification of whether the legitimate grounds of the Controller override those of the Data Subject.

7.6. If the processing of the Data Subject’s personal data is restricted in accordance with paragraph 7.5., such personal data shall, with the exception of storage, be processed only with the consent of the Data Subject or for the establishment, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or important public interests.

7.7.Before lifting the restriction on the processing of the Data Subject's personal data, the Controller shall inform the Data Subject.

7.8. The Data Subject has the right to file a complaint with the State Data Inspectorate if he/she believes that the Controller has processed his/her personal data unlawfully, at the same time, the Controller invites you to first contact him/her by writing to info@feramagus.lv in order to find a solution promptly if your rights to personal data protection have been violated.

7.9. The Data Subject may submit a request for the exercise of his/her rights in the following manner:

in written form in person at the Controller's premises, presenting a personal identification document (e.g. passport or ID card, etc.), since the Data Subject is obliged to identify himself/herself;

by electronic mail, signing it with a secure electronic signature. In this case, it is presumed that the Data Subject has identified himself/herself by submitting a request signed with a secure electronic signature. At the same time, the Controller reserves the right to request additional information from the data subject in case of doubt, if it considers it necessary. Electronic submissions shall be sent to the Controller to the e-mail address: info@feramagus.lv

by post. The response will be prepared and sent by registered mail, thus ensuring that unauthorized persons will not be able to receive this message. At the same time, the Controller reserves the right to request additional information from the data subject in case of doubt, if it considers it necessary.

7.10. The data subject is obliged, as far as possible, to specify in his request the date, time, place and other circumstances that would help to fulfill his request.

7.11. After receiving a written request from the Data Subject regarding the exercise of his rights, the Controller:

7.11.1. shall verify the identity of the person;

7.11.2. evaluates the request if:

– the request can be provided, for example, viewing or listening to video materials, then the Data Subject as the requester may receive a copy of the video material or other data.

– additional information is required to identify the Data Subject requesting the information, then the Data Subject will be asked to provide additional information in order to be able to correctly select the information (for example, the room visited

– additional information is required to identify the Data Subject requesting information, then the Data Subject will be asked to provide additional information in order to be able to correctly select information (for example, time of visits to premises, use of services) in which the Data Subject is identifiable.

the information has been deleted or the person requesting information is not a Data Subject or the person is not identifiable, then the request may be rejected in accordance with this Policy and/or regulatory enactments.

in the event that the Controller has received a request, but you have not left your contact information so that the Controller can contact you during the consideration of the request and inform you about the result of the consideration of the Request, then the Controller undertakes to prepare a written response within a month, which will be available in the Controller's administration or in the structural unit where the request was submitted. The relevant response letter will be stored for receipt in the relevant structural unit for no longer than two months, counting from the date of submission of the request.

8. How are personal data protected?

8.1. The Controller ensures, constantly reviews and improves personal data protection measures to protect personal data of natural persons from unauthorized access, accidental loss, disclosure or destruction. To ensure this, the Controller uses appropriate technical and organizational requirements, including using firewalls, intrusion detection, analysis software and data encryption.

8.2. The Controller carefully checks all service providers that process personal data of natural persons on behalf of and on behalf of the Controller, as well as assesses whether cooperation partners (personal data processors) apply appropriate security measures so that the processing of personal data of natural persons takes place in accordance with the Controller's delegation and the requirements of regulatory enactments.

8.3. In the event of a personal data security incident, if it poses a potentially high risk to the rights and freedoms of the data subject, the Controller will notify the relevant Data Subject, if possible, or the information will be made public on the Controller's website or in another possible manner, such as through the media (TV, radio, newspaper, social networks, etc.).