Privacy policy

This Privacy Statement (Privacy Policy) of Impressio (LLC (SIA) "Impressio") describes how your personally identifiable information will be collected, used and shared in connection with Impressio and Impressio.lv (website) and/or its use and any content, functions, services, or other offers that Impressio can provide in connection with them, including e-mail notifications that Impressio can send in connection with newsletter subscriptions. This Privacy Statement also describes your options and rights for using, accessing, and correcting or deleting your personal data. You will also be asked to provide a clear and unambiguous affirmative consent for the collection, processing and sharing of your user information using cookies and similar technologies if the laws and regulations require so, if required by law. See Cookie Usage Policy. The site is owned and operated by Impressio.

This Privacy Statement is based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and provides appropriate protection for the processing of your personal data in accordance with the General Data Protection Regulation. However, if you have any comments or questions about this Privacy Statement or how we use your user information, please contact us by using the contact details seen below.

Data controller and contact details

The controller of processing of personal data is the limited liability company (SIA) "Impressio", unified registration number 43603035194, legal address: Riga, Grostonas iela 12-17, Latvia.

Impressio contact details on matters related to the processing of personal data info@impressio.lv, mob. +371 29704721.

In cases where Impressio is processing your personal data, you have the right to ask questions related to the processing of your personal data by sending a request by using the indicated contact details.

Purposes of processing personal data

When processing personal data, Impressio shall comply with the General Data Protection Regulation and other laws and regulations of the privacy and personal data processing field.

Impressio processes personal data received from the data subject directly (i.e. the person who has submitted personal data) or indirectly (with corporate clients). Indirectly received personal data is processed only if Impressio has to process personal data in order to provide service in the context of contractual obligations, such as contact with corporate customers etc.

Purposes of processing personal data carried out by Impressio:

Provision of services in the context of contractual obligations;
Processing of information submitted by the data subject in order to subscribe to receive e-mail messages and newsletters from www.impressio.lv;
Processing of transaction data in accordance with the Law on Accounting and the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing;
Ensuring the security of information, information systems and the company;
Recruitment and management of staff;
Improving the customer service quality;
Provision of information to public administration institutions and operational activity subjects in the cases and amounts specified in external laws and regulations.

Impressio can be a controller in various data processing operations. In order to ensure the data subjects’ rights to privacy, Impressio complies with the principles of confidentiality and severely restricts the disclosure of personal data. Only individuals authorised by Impressio shall be entitled to change and process personal data.

Personal data recipient categories

The staff and contractual partners of Impressio shall use aggregated data only for the purpose of implementing the objectives specified above. Personal data is not sent to third countries (i.e. countries outside the European Union and the European Economic Area), except in the case of fulfilment of contractual obligations where the owner or purchaser of immovable property is located outside the European Economic Area. Such transfer of data shall take place only in accordance with the consent of the data subject.

Legal basis for processing personal data

Fulfilment of contractual obligations;
In accordance with the consent of the data subject;
Fulfilment of the obligations laid down in regulatory enactments.

Duration of retention of personal data

Impressio shall store and process personal data as long as at least one of the following criteria exists:

until the full fulfilment of contractual obligations (including negotiations in which an oral agreement is concluded and/or a service application is made);
until the cancellation of the consent, but no longer than 1 year from the date of receiving the consent;
by the time limit laid down in external laws and regulations for the period of storage and processing of data or by the time limit in which the data subject may exercise his or her legitimate interests and rights (for example, submit objections and/or bring a matter before a court);
as long as there is a legal obligation to store data (e.g. in accordance with the Law on Accounting, Labour Law, Consumer Rights Protection Law, Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing, etc.);
as long as the consent of the data subject to the relevant processing of personal data is valid, if there is no other legal basis for processing the data.

After none of the circumstances specified in this paragraph exist, the data subject's personal data shall be deleted.

Rights of the data subject

The rights of the data subject shall apply to any natural person whose personal data is processed by Impressio and are attributable to the processing of personal data, irrespective of the form in which you or any other natural person has provided the personal data: Through the website of Impressio, through information systems provided, in paper format or by phone. The data subject shall have the following rights:

to contact us in cases when you have any questions about the administration of your personal data by writing to info@impressio.lv or by contacting us at our legal address in Riga, Grostonas iela 12-17, Latvia.
to access this data. If we process your data, it is our duty to provide free information about the processing of your data. Before providing personal data, it is our responsibility to verify your identity, thereby ensuring that information about your data is not passed on to third parties.
If the information stored by Impressio is incomplete or incorrect, you have the right to request that any discrepancies in your personal data be corrected.
to object to the processing of personal data performed by Impressio if there is no longer any obligation to store this data;
to request the deletion of your data if Impressio continues to store said data after the expiry of the storage period, as well as to limit the processing of data in certain situations and/or to obtain copies of electronic format from the information at the disposal of Impressio.

You may request the enforcement of this right by contacting Impressio — by writing to info@impressio.lv or by sending a request to the legal address in Riga, Grostona iela 12-17, Latvia, and we will comply with the amendments specified in the request, insofar as it complies with the applicable laws and regulations and professional standards.

Changes in policy

Impressio may review this Data Protection Statement at any time to include the latest privacy terms. We will inform you of any affecting changes to the processing of personal data described in this Data Protection Statement through an appropriate communication channel.

Policies and their validity

Impressio works to protect the privacy of your personal information. If you have any questions or comments about the administration of your personal data, please contact us by e-mail by writing to info@impressio.lv or by sending a request to our legal address: Riga, Grostonas iela 12-17, Latvia.

You can also use this contact information to notify us about any questions you might have in relation to compliance with our Data Protection Statement.

The answer will be provided within one month from the time the e-mail is received. If your question is complicated or if we have received a lot of questions, we will inform you that we need more than a month to resolve the matter, and we will do so no later than within three months from the time when the question was first submitted.

In addition, you retain the right to submit a complaint to the regulator in Latvia responsible for the protection of personal data, the Data State Inspectorate (http://www.dvi.gov.lv).

Security

Impressio takes care of your data security through modern technology capabilities, by considering existing privacy risks and organisational, financial and technical resources such as data encryption, firewall, intrusion prevention system, and other safeguards reasonably available to Impressio.

Impressio has provided adequate training for all staff members who process personal data.

In the event of a personal data security incident, if this results in a potentially high risk to the rights and freedoms of the data subject, Impressio will notify the data subject concerned if possible, or make the information public on the website of Impressio or carry it out in other ways possible.