WEBSITE PRIVACY AND DATA PROCESSING TERMS

1. General Provisions

The purpose of these terms is to provide natural persons ("data subjects") with information on how the website controller collects and processes personal data. Any processing of personal data is carried out lawfully, fairly, and in a transparent manner in relation to the data subject.

2. Data Controller

SIA ASTERES, registration number 44103137920, legal address Gaismas 19/10-15, Ķekava, Ķekavas nomads, LV-2123. The controller is the entity which, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. Purposes of Processing and Legal Basis

Personal data are collected for specified, explicit, and legitimate purposes. The primary legal bases for data processing on this website are:

  • Consent: the data subject has given consent to the processing of his or her personal data for one or more specific purposes (e.g., subscribing to a newsletter).

  • Performance of a contract: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  • Legal obligation: processing is necessary for compliance with a legal obligation to which the controller is subject.

  • Legitimate interests: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

4. Categories of Personal Data and Storage

  • The website may process data such as name, surname, contact information, and online identifiers (e.g., IP addresses and cookie identifiers), which may leave traces that can be used to create profiles.

  • Data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. The controller establishes time limits for erasure or for a periodic review.

5. Rights of the Data Subject

As a data subject, you have the following rights, which the controller is committed to facilitating:

  • Right of access: the right to obtain confirmation as to whether or not personal data concerning you are being processed, and to access that data.

  • Right to rectification: the right to obtain the rectification of inaccurate personal data without undue delay.

  • Right to erasure ("right to be forgotten"): the right to obtain the erasure of personal data where the data are no longer necessary or consent has been withdrawn.

  • Right to restriction of processing: the right to restrict the use of data under certain circumstances.

  • Right to data portability: the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.

  • Right to object: the right to object at any time to processing based on legitimate interests or for direct marketing purposes.

  • Withdrawal of consent: where processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Security

The controller implements appropriate technical and organisational measures (such as pseudonymisation or encryption) to ensure a level of security appropriate to the risk, protecting data against accidental loss, destruction, or unauthorised access.

7. Communication and Complaints

  • If you have questions regarding data processing, you may contact the controller.

  • You have the right to lodge a complaint with a supervisory authority (in Latvia – the Data State Inspectorate) if you consider that the processing of your personal data infringes the regulation.

8. Protection of Children

In relation to the offer of information society services directly to a child, the processing of personal data is lawful where the child is at least 16 years old. If the child is below the age of 16, such processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child.