The purpose of the Privacy Policy of the Society “Latvian Society of the Blind” (hereinafter – the Society) is to provide the natural person – the data subject with information on the purpose, scope and protection of personal data processing, as well as other information when processing the personal data of the data subject.
The Society processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the Regulation), as well as other applicable laws and regulations.
Contact information Legal address: 3, Braila Street, Riga, LV-1024, telephone +371 67532607, e-mail address: info@lnbiedriba.lv.
The Personal Data Protection Officer Uldis Sīpols can be contacted by e-mail at info@fpda.lv or by phone +371 26658265.
The Society shall ensure the confidentiality of personal data and has implemented appropriate technical and organisational measures to protect personal data.
Please be aware that the above mentioned forms of communication with the personal data protection officer of the Society are not intended for requests for information in the exercise of your rights as a data subject.
Please be advised that the Association may change this Privacy Policy (the ” Policy“), so please check this Policy to ensure that you are aware of and familiar with any changes.
THIS POLICY WAS LAST RENEWED ON 28 MAY 2022
Purposes, legal bases and principles for processing personal data
The Association processes personal data mainly for the following purposes:
- Identifying the natural person, drafting, concluding and executing the contract;
- For the provision of the service within and outside the premises of the Society, including the organisation of prior appointments, data entry into information systems and other activities to be carried out within the framework of social services as stipulated by the applicable regulatory enactments;
- Personnel management, including recruitment, conclusion and implementation of employment contracts, accounting requirements for payroll, including relevant supporting documents, provision of social benefits (health insurance, etc.); control of working time and performance of duties;
- For financial management;
- For handling and processing complaints, submissions and suggestions;
- Contact us via www.lnbiedriba.lv;
- For the safety of the Society.
Please be informed that the list of purposes of data processing contained in this Privacy Notice is not exhaustive, and that personal data of natural persons may also be processed for purposes not mentioned in this Privacy Notice, which are necessary for compliance with the requirements of regulatory enactments.
The Association processes your personal data on the following legal grounds:
- in accordance with your express, free and unambiguous consent(Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“the Regulation”));
- the processing results from your contractual obligations as a data subject or for the performance of pre-contractual measures at your request(Article 6(1)(b) of the Regulation);
- processing is necessary for compliance with a legal obligation to which the Society is subject(Article 6, first paragraph, point (c));
- processing is necessary for the pursuit of the legitimate interests of the Association, you or a third party (Article 6(1)(f) of the Regulation).
Data collected on natural persons
- When a natural person receives social care services, in accordance with the requirements of regulatory enactments, the Society as an institution processes the data subject’s identifying information and information that confirms the diagnosis, justifies examinations and treatment methods, as well as accurately depicts the results of treatment. In order to fulfil the purpose of providing social care services, the Society processes the widest possible scope of personal data, which includes: name, surname, personal identification number, contact details, lifestyle, information about the diseases contracted, information about the social care services received and to be received (identity of the doctor, frequency of visits, services, etc.), etc., information chosen by the treating person in a specific situation and recorded in the medical records.
- When a natural person enters/leaves the premises of the Society or its territory where video surveillance is carried out, the subject’s video image and the time when he/she visited the premises may be processed.
Please note that you are responsible for providing accurate personal data to the Society, and in case of any changes, you are obliged to correct your inaccurate personal data by informing the Society.
Video surveillance
The Society shall carry out video surveillance in the territory with the aim of ensuring public order and reducing the risk of threats to public safety, for the prevention or detection of criminal offences, in connection with the protection of property and the protection of vital interests of persons, including life and health. Information on video surveillance shall be posted in the form of warning signs in front of the video surveillance area. Please be informed that only persons authorised by the Society may have access to the CCTV recordings in connection with the purposes of processing personal data.
Recipients of personal data
Personal data may be received from the Society by state and municipal institutions in accordance with the procedure established by normative legal acts. The Society may use personal data processors to process personal data. In such cases, the Society shall take the necessary measures to ensure that such personal data processors carry out the processing of personal data in accordance with the instructions of the Society and in compliance with the applicable laws and regulations and shall require appropriate security measures to be taken. Please be informed that the personal data is not intended to be transferred to a third country of the world.
Duration of storage of personal data
The Society shall keep personal data in accordance with the defined purposes of processing personal data and the legal grounds for processing personal data as long as at least one of these criteria exists:
- there is a legal obligation to keep the data;
- need to pursue their legitimate interests;
- it is necessary to fulfil the contractual obligations entered into;
- the data subject’s consent to the processing of personal data is valid.
Access to your personal data and other rights of the data subject
- In order to obtain information on personal data processed by the Society about the data subject, the data subject shall have the right to apply to the Society and obtain information in accordance with the procedure established by the regulatory enactments.
- The data subject has the right to request the restriction of the processing of personal data, to object to the processing of personal data, to request the rectification of personal data, as well as, in certain cases, their erasure, in accordance with the provisions of the Regulation.
- The Society shall communicate with the data subject: in person in person, having first identified the data subject; by post, by sending items to the person’s registered address of residence by registered post; by e-mail, by replying to the e-mail address provided by the data subject in the application, signed with a secure electronic signature.
- In the event of a personal data breach or suspected personal data breach, we encourage you to contact the Society or to contact the Society’s data protection officer. Complaints about personal data breaches may also be submitted to the personal data supervisory authority – the Data State Inspectorate (address: Elijas iela 17-2, Riga, LV-1050).
Profiling
Profiling is any form of automatic processing of personal data for the purpose of analysing or predicting you. The Society does not.
Data subject’s consent to data processing and right to withdraw it
- The data subject shall have the right to withdraw the consent given for the data processing at any time by writing to info@lnbiedriba.lv or by submitting an application to the registered office of the Society, in which case no further data processing based on the consent given for the specific purpose will be carried out.
- Withdrawal of consent cannot interrupt the processing of data carried out on the basis of other legal grounds.
Ensuring data security
To guarantee the security of the information collected, the Society has implemented electronic, physical and administrative security measures. Your data is kept secure. It is protected against unauthorised access, disclosure, alteration or destruction by any organisation or individual.