Privacy Policy

Manager and its contact details

 

1. The controller of personal data processing is the association “VEFRESH”, hereinafter – the Association, registration number: 40008285662, legal address: Gustava Zemgala Gatve 78-1, Riga, LV-1039.
2. Contact information related to the processing of personal data: hello@vefresh.com. By using this contact information or by addressing the legal address of the Association with a written submission, questions may be asked regarding the processing of personal data within the Association, as well as to report possible data protection violations.

General provisions

3. The privacy policy applies to the following persons whose data are processed by the Association, hereinafter referred to as data subjects:

• Members of the Association;
• persons who have applied for membership status within the Association, hereinafter – candidate members;
• persons who communicate with the Association, including on social media, by e-mail, or by using other communication possibilities on the websites of the Association www.vefresh.com and cityinnovationhub.lv, hereinafter – contacts;
• persons visiting the websites of the Association, hereinafter – visitors;
• persons who participate in activities organised by the Association (including jointly with third parties) or register for participation in activities of the Association, hereinafter – participants of the event;
• persons whose data are indicated on the websites of the Association or materials published in the social media of the Association.

Purposes for processing personal data

4. The Association shall process personal data for the following purposes:

• the provision of information (including reports) to the competent authorities, as well as to the Association for the performance of other legal duties specified in regulatory enactments (for example, the keeping of a register of members);
• identification of the members and candidate members of the Association;
• communication with members of the Association and candidate members;
• the provision of information to members and supporters of the Association regarding the activities of the Association;
• the involvement of members and candidate members of the Association in achieving the objectives indicated in the statutes of the Association; 
• registration of participants in the event and, to the appropriate extent, ensuring participation of participants in the event;
• answer provision to Contacts ;
• the Association websites content quality improvement and content adaptation to the needs of visitors.

Legal basis for the processing of personal data

5. The Association shall process personal data of data subjects on the following legal bases:

• with the consent of the data subject (by providing members of the Association, supporters and candidate members with information regarding themselves to the Association, participants of the event are involved in the activities of the Association, contacts communicating with the Association);
• ensuring the implementation of regulatory acts (including, but not limited to, preparing documentation of the activities of the Association, ensuring accounting);
• if processing is necessary for ensuring the legitimate interests of the Association (including, but not limited to, the raising of claims, the defence of its rights, including in legal proceedings);
• if data processing has been performed for journalistic purposes (On the websites of the Association or on the social media of the Association, implementing the right to freedom of expression and information, publishing material related to the public interest).

Types of personal data

6. The Association shall process the following types of personal data of members of the Association and candidate members:

• name, surname;
• personal identification number;
• The place of residence or registered address;
• contact details;
• image and behaviour of the person (if video recordings are performed of the Association member meetings, meetings of the board of directors or events organised by the Association in which the members or candidate member participates, video recordings);
• date of becoming a member of the Association (members of the Association);
• payments made by members of the Association (members of the Association);
• information regarding participation in activities organised by the Association.

7. The Association shall process the following types of personal data of participants in the event:

• name, surname;
• personal identification number (if the person has one and if it is necessary);
• the profession of person, the organisation represented and the position to be held (if such information is provided);
• contact details 
• image and behaviour of the person (if video recordings are performed of the Association member meetings, meetings of the board of directors or events organised by the Association in which the Members or candidate member participates, video recordings);
• information regarding participation in activities organised by the Association;
• necessary information for ensuring the participation of the participant of the event in the event, if it is current.

8. The Association processes the following types of contact data:

• name, surname;
• the profession of person, the organisation represented and the position to be held (if such information is provided);
• contact details.

9. The Association processes Visitors’ personal data obtained from the Associations websites cookies.
10. When processing personal data for journalistic purposes, the Association shall process only those data and to the extent necessary in the particular case for the publication of information affecting the public interest.

Processing and protection of personal data

11. The Association shall process personal data taking into account existing privacy risks and organisational, financial and technical resources available to the Association.
    
12. The Association shall not carry out automated processing of personal data.

Transfer/disclosure of personal data

13. The Association shall not disclose personal data to third parties, except for:

• in cases provided for in external regulatory enactments (for example, the State Revenue Service or upon the request of the police);
• where personal data need to be transferred to third parties for payment purposes;
• The protection of the legitimate interests of the Association;
• if the data subject’s permission to disclose the data to third parties has been received.

14. The processing of personal data for journalistic purposes (which includes the publication of personal data) and information regarding the participation of the data subject in public events organised by the Association shall not be regarded as the disclosure of personal data within the meaning of Paragraph 13.
15. If personal data are transferred to subcontractors of the Association, they shall enter into a written contract in which the requirements for the protection of personal data are determined.
    

Access of third-country entities to personal data

16. The Association shall not transfer personal data to third countries (for countries outside the European Union and the European Economic area).
    

Duration of retention of personal data

17. The Association shall store and process personal data of the data subject until at least one of the following criteria exists:

• the data are necessary for the purpose for which they were received;
• The Association has a legal obligation to store the data;
• the data are necessary for the protection of the legitimate interests of the Association;
• consideration or enforcement of the data subject’s request/application;
• the consent of the data subject to the relevant processing of personal data shall be valid if there is no other legal basis for the processing of the data.
  

Data subject’s rights with regard to data processing

18. The data subject has the right to request the Association to have access to his personal data, to request the addition or correction of false or incomplete personal data, as well as to request the deletion of the data and to object to data processing.
19. The rights of data subjects referred to in Paragraph 18 of this document shall be exercised if it is not prohibited by regulatory act (for example, it is not possible to request deletion of data if the storage of data is provided for by law) and personal data are not necessary for ensuring the legitimate interests of the Association.
20. The data subject may submit a request for the exercise of his or her rights referred to in paragraph 18:

• by sending a written letter to the Association;
• by sending an email to the Association to the email address hello@vefresh.com.

21. Upon receipt of a request from the data subject regarding the exercise of its rights, the Association shall ascertain the identity of the data subject, including, if necessary, also requesting the presentation of a personal identification document in person.
22. If a reply is requested in writing by post, it must be addressed to the data subject (the person whose personal data are requested) by registered letter.