Privacy policy

This is a formal translation of the provided Privacy Policy from Latvian into English. I have maintained the legal terminology consistent with GDPR (General Data Protection Regulation) standards.

Privacy Policy

Who we are
What are personal data
Sources of obtaining personal data
Purpose of personal data processing
Lawfulness of personal data processing
Processing of special categories of personal data
Website visits and cookie processing
Notifications
Recipients of personal data
Duration of personal data storage
Data security
Your rights
How to contact us

1. Who we are (Data Controller)

SIA "APPROVED PROJECTS" (hereinafter – the Controller) is a commercial company registered in the Republic of Latvia, engaged in providing advertising agency services, manufacturing, coordination, and sale of marketing and advertising products, and administers the website www.approvedprojects.eu.

To ensure its economic activity, the Controller performs the processing of personal data of natural persons. Personal data is processed in compliance with the laws and regulations in force in the Republic of Latvia, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – the Regulation), as well as other laws and regulations in the field of privacy and personal data processing.

2. What are personal data

According to the Regulation, personal data is any information relating to an identified or identifiable natural person (data subject). Personal data includes any type of information by which a person can be directly or indirectly identified, such as the person's name, surname, personal identity number, residential address or actual location, factors characterizing the physical, physiological, genetic, mental, economic, cultural, or social identity of said person, and other similar information. Regarding your personal data, we are joint data controllers who determine the purposes and means of processing personal data. Our intention is to provide you with maximum information about our activities with these personal data so that you are aware of how they will be used when submitting them to us.

3. Sources of obtaining personal data

The Controller may receive personal data in various ways, for example:

The data subject submits their personal data themselves (e.g., purchasing goods/services, requesting information, submitting an application, or visiting the company's premises).
Personal data is obtained when the data subject visits the Controller's website, fills out a contact form, or leaves contact information on social networks.
Personal data is obtained from other sources, such as recruitment companies, publicly available registers, law enforcement authorities, etc.

4. Purpose of personal data processing

The Controller processes personal data only for specific and necessary purposes based on defined legal grounds, including our legitimate interests, such as:

Conclusion and execution of sales/service/delivery contracts: Maintaining contact information, ensuring communication, and tax accounting. Data: name, surname, contact info (phone, email), residential address (for VAT invoice), payment data.
Administration of candidate selection (CV) for vacancies: Data: name, surname, date of birth, address, contact info, education, work experience, language skills, driver's license status, and recommendations.
Debt management: Data: name, surname, personal identity number/date of birth, payment history, address, and other debt-related info.
Administration of applications, comments, and complaints: Data: name, contact info, and the content of the communication.
Other purposes: Based on consent, legitimate interests, or legal obligations.

5. Lawfulness of personal data processing

The Controller performs only lawful processing of personal data if at least one of the following grounds is established:

Processing is necessary for the performance of a contract to which the data subject is a party.
Processing is necessary for the purposes of legitimate interests pursued by us or a third party (unless overridden by the interests or fundamental rights of the data subject, especially children).
The data subject has given consent for one or more specific purposes.
Processing is necessary for compliance with a legal obligation to which the Controller is subject.

6. Processing of special categories of personal data

Special categories include data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic/biometric data, health data, or data concerning a person's sex life or sexual orientation. The Controller does not process special categories of data for its clients.

7. Website visits and cookie processing

The website www.approvedprojects.eu uses cookies. These are small files stored on your browser or hard drive that help us distinguish you from other users to improve your experience. You can block cookies in your browser settings, though some parts of the site may become inaccessible.

Detailed info: www.youronlinechoices.com
The server (hosted by Shopify International Ltd) records requests (IP address, device, browser, access time) for technical security and functioning based on legitimate interests.
The Controller does not use cookies for tracking user habits. We are not responsible for the privacy policies of third-party websites linked on our site.

8. Notifications

Commercial notifications and reminders are sent only if permitted by law or if explicit consent is received. Clients can opt-out at any time by emailing hello@approvedpromo.eu or writing to Hanzas iela 16, Rīga, LV-1045. An "unsubscribe" link is also provided in emails.

9. Recipients of personal data

The Controller uses third-party services to assist in business operations (e.g., credit institutions, IT/database maintainers, cloud providers, legal/accounting services, debt collectors, delivery services).

Data is transferred only to the extent necessary for the specific task.
Data is protected according to the Regulation and deleted after the task is completed.
The Controller does not send data to third countries (outside the EU/EEA).
Data may be disclosed to authorities (State Revenue Service, police, courts) as required by law or to protect legitimate interests (debt collection).

10. Duration of personal data storage

Data is stored no longer than necessary for the purposes of processing. Storage continues as long as:

The agreement/contract is in force and legitimate interests can be realized (claims/court actions).
There is a legal obligation to store the data.
Consent is valid (if no other legal basis exists).
After these conditions end, data is permanently deleted.

11. Data security

We take the security of your data seriously and use various technologies and procedures to protect it from unauthorized access. However, please note that no transmission over the internet is 100% secure. You assume the risks associated with confidentiality when transmitting data via the internet.

12. Your rights

Under the Regulation, you have the following rights:

Right of access: To receive confirmation of processing and details about the data.
Right to rectification: To correct inaccurate data.
Right to erasure ("Right to be forgotten"): If data is no longer needed, consent is withdrawn, or processing is unlawful.
Right to restriction of processing: In cases of disputed accuracy or unlawful processing.
Right to object: To object to processing based on legitimate interests or direct marketing.
Right to lodge a complaint: With a supervisory authority (Data State Inspectorate) if you believe your rights are violated.

13. How to contact us

You may contact the Controller:

In writing: SIA "APPROVED PROJECTS", Piena iela 16 - 7, Rīga, LV-1045.
Electronically: hello@approvedpromo.eu
To receive information about yourself, the Controller must verify your identity (e.g., by requesting an ID document).
If requests are manifestly unfounded or excessive, the Controller may charge a reasonable fee or refuse to act.

14. Other provisions

This policy applies to all data subjects regardless of the form in which data is submitted (oral, paper, electronic, etc.). Amendments take effect upon publication on the website www.approvedprojects.eu.