1.1. Processor – a natural or legal person who processes Personal Data on behalf of the Controller.
1.2. Data Subject – a natural person, directly or indirectly identified or identifiable.
1.3. Data Subject consent – any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes, by which the Data Subject, by means of a statement or an explicit affirmative action, gives consent to the processing of his or her
1.4. Special categories of Data – Personal Data relating to a person’s race, ethnic origin, religious, philosophical or political beliefs, trade union membership, genetic Data, biometric Data and Data revealing information about a person’s health, sex life or sexual orientation.
1.5. Client – a legal or natural person who uses the services offered by MMS COMMUNICATIONS LATVIA in person or remotely.
1.1. MMS COMMUNICATIONS LATVIA or We – limited liability company “MMS COMMUNICATIONS LATVIA”, unified registration No 40003330565, registered office at 12 – 7 Alberta Street, Riga, Latvia, LV-1010, telephone +371 67439875, e-mail address: firstname.lastname@example.org.
1.2. Website – the website maintained by MMS COMMUNICATIONS LATVIA http://publicislatvia.lv/.
1.3. Personal Data means any information relating to an identified or identifiable natural person; an identifiable natural person can be identified, directly or indirectly, in particular by reference to an identifier. For example, the name, identification number, location Data, online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.4. Processing of Personal Data – any operation or set of operations which is performed upon Personal Data or upon sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1.5. Controller – a natural or legal person who, alone or jointly with others, determines the purposes and means of processing Personal Data. In this case, MMS COMMUNICATIONS LATVIA.
1.6. GDPR – Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
2.4. Considering the scope of MMS COMMUNICATIONS LATVIA’s activities, additional conditions regarding processing Personal Data during the services provided by MMS COMMUNICATIONS LATVIA are available in the contract with the Client (if applicable). In case the provisions in this Privacy Notice contradict those in the contract with the Client, the provisions in the contract with the Client take precedent.
3. Information about Controller
3.1. The Controller is MMS COMMUNICATIONS LATVIA, unified registration No 40003330565, registered office at 12 – 7 Alberta Street, Riga, Latvia, LV-1010, telephone +371 67439875, e-mail address: email@example.com.
3.2. If you have any questions about our collection and processing of your Personal Data, please get in touch with the Publicis Chief Data Privacy Officer at firstname.lastname@example.org.
4. Personal Data We process, purposes and legal bases
4.1. Personal Data means any information about an identified or identifiable natural person, including a visitor to the Website, a Client, a candidate applying for a job vacancy, etc.
4.2. To process Personal Data, MMS COMMUNICATIONS LATVIA must determine the purpose and legal basis for processing Personal Data.
4.3. MMS COMMUNICATIONS LATVIA may process Personal Data on one of the six legal bases set out in Article 6 of the GDPR. Still, in practice, the following legal bases are the most commonly used:
a) consent of the Data Subject (Article 6(1)(a) GDPR);
b) the conclusion and performance of a contract (Article 6(1)(b) GDPR);
c) compliance with legal obligations imposed by external laws and regulations (Article 6(1)(c) GDPR);
d) the pursuit of legitimate interests of MMS COMMUNICATIONS LATVIA (Article 6(1)(f) GDPR). In pursuing the legitimate interests of MMS COMMUNICATIONS LATVIA, the interests of the company are weighed against the rights of the Data Subject before the processing of Personal Data is carried out so that the legitimate interests of MMS COMMUNICATIONS LATVIA of a commercial nature do not conflict with the interests and freedoms of the Data Subject. This legal basis will be used, for example, to apply to public administration, law enforcement and judicial authorities to protect the company’s legitimate interests.
4.4. The following are the cases when MMS COMMUNICATIONS LATVIA needs to process your Personal Data:
5. Sources of Personal Data
5.1. Personal Data may be collected in the following ways:
5.1.1. Some Personal Data We receive directly from you, such as questions that are sent to us.
5.1.2. some Personal Data is “produced” in the process.
5.1.3. in some cases, We also receive Personal Data from third parties, such as recruitment companies;
5.1.4. Personal Data is obtained from public Databases or social media profiles in some instances. For example, Lursoft or LinkedIn.
6. Processing of Personal Data by MMS COMMUNICATIONS LATVIA
6.1. Personal Data shall be processed fairly, lawfully and in a manner that is transparent to the Data Subject, using the organizational, financial and technical resources reasonably available to MMS COMMUNICATIONS LATVIA.
6.2. Personal Data are collected for specified, explicit and legitimate purposes and are not further processed for purposes not originally intended or in a manner incompatible with those purposes.
6.3. Personal Data shall be stored so that the Data Subject can be identified from it for no longer than is necessary for the purposes for which the Data were collected or processed.
6.4. Personal Data is collected per the principle of data minimization, which means that data is adequate, relevant and includes only what is necessary for its processing.
6.5. MMS COMMUNICATIONS LATVIA ensures the accuracy of Personal Data and, where necessary, Personal Data is updated or deleted.
6.6. Personal Data shall be processed in such a way as to ensure adequate security of Personal Data, i.e. protection against unauthorized or unlawful processing, accidental loss, destruction or damage.
7. Recipients of Personal Data and place of processing
7.1. Your data is secure and is not inappropriately passed on to others. Personal Data may be further transferred to:
7.1.1. Public authorities in the cases provided for in the legislation. To comply with the obligations arising from the regulatory framework, We may transfer your data to state and local authorities upon their request;
7.1.2. Courts and other rights-protecting bodies. For example, to protect our legal interests by drafting, filing and defending legal claims in court;
7.1.3. Our business partners and our Processors. MMS COMMUNICATIONS LATVIA is entitled to engage and authorize external service providers to perform certain activities on behalf of MMS COMMUNICATIONS LATVIA. If, in the performance of these tasks, persons authorized by MMS COMMUNICATIONS LATVIA process Data Subject data held by us (e.g. IT service providers, security service providers, recruitment companies in respect of candidates), the persons performing the task shall be deemed to be Processors and MMS COMMUNICATIONS LATVIA shall be entitled to transfer the Data Subject Personal Data necessary for the performance of these activities to the Processors to the extent necessary for the performance of the activities. In cases where We authorize Processors to perform a particular task, MMS COMMUNICATIONS LATVIA and Processors shall ensure the protection of Personal Data processing following the GDPR. They shall not use Personal Data for purposes other than the performance of established obligations towards the Data Subject on behalf of MMS COMMUNICATIONS LATVIA.
7.2. We will provide you with more detailed information about the recipients of Personal Data upon your request.
7.3. MMS COMMUNICATIONS LATVIA processes Personal Data within the European Economic Area as far as possible. In the event of a transfer of Personal Data to countries outside the European Economic Area, MMS COMMUNICATIONS LATVIA shall ensure that the procedures set out in the GDPR are in place to ensure the processing of Personal Data and a level of protection equivalent to that set out in the GDPR.
8. Personal Data protection
8.1. MMS COMMUNICATIONS LATVIA shall protect the Personal Data of the Data Subject using modern technological means, taking into account the existing privacy risks and the organizational, financial and technical resources reasonably available to MMS COMMUNICATIONS LATVIA, including the following security measures:
8.1.2. Access to information systems containing Personal Data is limited to those employees duly authorized to use them and through proper equipment. Unique authorization tools – username and password – are created for each employee;
8.1.3. Using a firewall and antivirus software;
8.1.4. Paper documents containing Personal Data shall be stored in designated areas, i.e. special rooms, lockers, etc., according to their value and classification.
8.1.5. We ensure that there is no accidental or unlawful erasure, corruption, loss, alteration, processing, disclosure to third parties, etc., of Personal Data.
9. Storage periods for Personal Data
9.1. Personal Data is stored as long as it is necessary:
9.1.1. For the fulfilment of the obligation established by the regulatory framework (for example, accounting requirements);
9.1.2. If the processing is based on consent, Personal Data is processed as long as the given consent is valid and has not been withdrawn;
9.1.3. To achieve the specified processing purpose. For example, as long as necessary to ensure the realization of the legitimate interests of MMS COMMUNICATIONS LATVIA, including for MMS COMMUNICATIONS LATVIA to be able to submit objections or file a lawsuit.
9.2. Candidates’ documents (including Personal Data) submitted for vacant posts will be kept on file for six months after the end of the competition. With consent, documents can be stored for up to one year.
9.3. Contracts and other related information are kept for ten years to ensure the legitimate interests of MMS COMMUNICATIONS LATVIA, such as the performance of contractual obligations, in the event of potential legal proceedings.
9.4. When the retention period of Personal Data has expired, MMS COMMUNICATIONS LATVIA will securely erase the Personal Data of Data Subjects or make it inaccessible (archiving) or non-identifiable so that it can no longer be linked to the Data Subject.
10. Data Subject’s Rights and Access to their Personal Data
10.1. The Data Subject has the right to obtain information about what Personal Data the company holds and to request access to, rectification, updating or erasure of their data, to restrict or object to processing, including the processing of Personal Data based on the company’s legitimate interests, as well as to exercise the right to data portability, insofar as this is in accordance with the GDPR.
10.2. In cases of data processing, where the legal basis is only the Data Subject’s consent, the Data Subject has the right to withdraw the consent given at any time, stopping further data processing, which was carried out based on the Data Subject’s consent.
10.3. Withdrawal of consent shall not affect processing activities carried out while the Data Subject’s consent was valid.
10.1. The Data Subject may withdraw consent in the same manner and form in which it was given (in writing, electronically, etc.) and, where necessary, provide all information about the consent, its nature, and the processing of Personal Data resulting from it.
10.2. The Data Subject’s rights shall be exercised to the extent that they do not conflict with the company’s obligations under external laws and regulations.
10.3. The Data Subject may submit a request to exercise their rights in the following ways: a) by sending a written application by post; b) by submitting it in person at the premises of MMS COMMUNICATIONS LATVIA; c) by sending an application signed with a secure electronic signature and a time stamp to email@example.com.
10.4. Upon receipt of a request from a Data Subject, MMS COMMUNICATIONS LATVIA shall verify the identity of the Data Subject, assess the request and comply with it following the laws and regulations.
10.5. MMS COMMUNICATIONS LATVIA shall send the reply to the Data Subject’s e-mail address or by registered mail within one month from receipt of the Data Subject’s request. In some instances, the reply may take longer and, where necessary, this period may be extended by a further two months, considering the complexity and number of requests.
10.6. In cases where Personal Data are processed based on external laws, regulations, contractual basis, or to pursue the legitimate interests of the Company, the request for the erasure of Personal Data may not be implemented, which shall be notified to the Data Subject within one month from the moment when MMS COMMUNICATIONS LATVIA received the request for the erasure of data. The reply shall be provided with a clear, unambiguous justification as to why the erasure of Personal Data cannot be implemented. Conversely, in the event of a substantiated request for the erasure of Personal Data, an appropriate erasure of Personal Data shall be provided within one month of receipt of the Data Subject’s request.
10.7. MMS COMMUNICATIONS LATVIA values the privacy of Data Subjects and encourages them to contact MMS COMMUNICATIONS LATVIA with any questions or concerns; however, if the Data Subject believes that Personal Data is being processed inappropriately, the Data Subject has the right to apply to the courts or the Data Inspectorate. The contact details of the Data Inspectorate are as follows:
11. Other provisions