Home Privacy Policy
en
lv
Home Privacy Policy
Privātums

Privacy Policy

I. General Terms

1.The limited liability company "Troja" (hereinafter referred to as the Company) understands that personal data is your valuable asset. When processing it, the Company complies with confidentiality requirements and ensures its security, as well as commits to protecting it in accordance with this privacy policy (hereinafter referred to as the Privacy Policy). The purpose of this Privacy Policy is to provide you with information about the purposes for which the Company collects personal data, the scope of data and processing periods, data protection measures, as well as to inform you of your rights and obligations.

2.When processing personal data, the Company complies with the applicable laws of the Republic of Latvia, the European Parliament and Council Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the Regulation), as well as other legal acts in the field of privacy and personal data processing.

3.The Company's Privacy Policy applies to any natural person whose personal data is processed by the Company, and it applies to personal data processing regardless of the form in which you or any other natural person has provided personal data: through the Company's websites, in paper form, electronically via email, or by phone.

4.The Company applies the Privacy Policy when processing personal data on the Company's existing websites: www.troja.lv; www.celazimes.lv; www.supulzirdzins.lv; www.birojamebeles.com; www.skateboard.lv; www.rockinghorse.lv; www.darbagalds.lv; www.supamasisarkliukas.lt; www.rockinghorse.lt; www.trojasmebeles.com; www.sūpuļzirdziņš.lv; www.trojasmebeles.lv; www.trojaspaneli.lv; www.zirdzins.lv, puidustkiikhobune.ee; kiikhobune.ee.

5.The Company's cookie policy is available on the Company's website under "Cookie Usage Policy" (Annex No. 1).

II Controller's identity and contact information 

1.Controller's identity and contact information: The Company, registration number 40003093873, Bauskas iela 143, Riga, LV – 1004; phone: 67609321; email address: troja@finieris.lv; website address: https://troja.lv/lv.

III Purposes of processing, for which personal data is intended, and types of data.

1.The Company processes the following personal data for the following purposes:

  1. Name, surname, gender, date of birth, contact information, work experience, education (including courses and certifications), language skills, and other information you wish to provide to the Company – to ensure the personnel selection process and protect its legitimate interests, insofar as they relate to personnel selection;
  2. Name, surname, gender, date of birth, contact information (phone, email) – to ensure convenient product and service reservations, organize cooperation, process goods sales and delivery transactions, ensure quick and efficient communication, perform analytical and market research on the usage of our websites, products, and services, and establish contractual relationships;
  3. Name, surname, and other information – to comply with legitimate interests, such as internal and external communication and its implementation, corporate culture, protection of vital interests of property and persons, including life and health protection, etc.;
  4. Video recordings and access control – to ensure personal and property security, prevent and detect criminal offenses, provide evidence in case of disputes;
  5. E-commerce (processing personal data related to the purchase of goods and/or services – name, surname, delivery address, phone number, email address, company code and/or VAT registration number, legal address, payment account number (if the purchase is made on behalf of a legal entity and/or by a VAT payer, information about ordered goods, and/or services and other order details, payment information)) – to execute e-commerce functions, including order processing on the website, resolving issues related to product purchase, delivery, and other contractual obligations;
  6. Direct marketing (name, surname, email address, phone number) (including marketing based on consent, general marketing (based on legitimate interests), and individual (one-time) requests regarding the Company’s products and/or services). When you consent to receive direct marketing services (e.g., on the website or in any other way) and/or submit a request for an individual (one-time) offer related to the Company’s products/services, you express your consent to the processing of such personal data;
  7. Communication with you on social networks (account data, i.e., name, surname, photographs (e.g., profile and/or location marked with the Company’s managed brand), communication data, i.e., information about communication on the Company’s managed brand accounts (e.g., “like,” “follow,” “comment,” “share,” “visit”) – to properly manage the Company’s brand and promote its recognition in the public space. The Company manages its accounts on the following social networks: Facebook, Instagram, LinkedIn, Twitter, YouTube;
  8. Compliance with legal requirements and prevention of money laundering and monitoring in the area of cooperation partners, their officials (members of the board and supervisory board), representatives, participants/shareholders (their family members and closely related persons), and beneficial owners: name, surname, identification code, date of birth, position, information about owned shareholding, information about being listed on sanctions lists, and other information to comply with legal requirements.

IV Apstrādes juridiskais pamats 

8. Sabiedrības veiktās personu datu apstrādes juridiskais pamats

1. The purpose of personal data processing – to ensure the conduct of the personnel (candidate) selection process and to protect its legitimate interests, insofar as they relate to the personnel (candidate) selection:

  1. The processing of the data subject's personal data as a candidate is necessary to fulfill a legal obligation applicable to the Company (Article 6(1)(c) of the Regulation and the Labor Law);
  2. Upon receiving your application as a candidate, the Company has a legitimate interest to process the received application by evaluating the information provided, organizing the interview procedure, conducting negotiations, and securing evidence to support the lawful conduct of the respective process. In the event of a dispute, the information obtained during the selection process may be used to demonstrate the lawful conduct of the process (Article 6(1)(f) of the Regulation).

2. The purpose of personal data processing – to ensure the establishment of contractual relationships (Article 6(1)(b) of the Regulation).

3. The purpose of personal data processing – to comply with the legitimate interests of the controller or a third party. The processing of your personal data is necessary for the Company to comply with its legitimate interests (Article 6(1)(f) of the Regulation).

4. The purpose of personal data processing – to comply with the legitimate interests of the controller or a third party. The processing of your personal data is necessary for the Company to comply with its legitimate interests (Article 6(1)(f) of the Regulation).

5. The purpose of personal data processing is to conclude and/or perform contracts (orders) concluded with the client (Article 6(1)(b) of the Regulation).

5.1. When a contract/order (on the basis of which the client receives the services and/or products of the Company) is concluded with a legal entity on the website, the personal data collected during the ordering process will be processed in accordance with the lawful basis outlined in Article 6(1)(f) of the Regulation, i.e., to ensure the legitimate interests of the Company in concluding and executing contracts with legal entities and maintaining commercial relations.

6. The purpose of personal data processing is the lawful basis referred to in Article 6(1)(a) of the Regulation, i.e., your consent.

7. The purpose of personal data processing is when you indicate your consent to receive direct marketing services (for example, on the website or in any other way) and/or submit a request for an individual (one-time) offer related to the Company's products/services, you express your consent to the processing of such personal data. Therefore, the Company will process your personal data in accordance with the lawful basis outlined in Article 6(1)(a) of the Regulation, i.e., your provided consent.

8. The purpose of personal data processing is to comply with the requirements of the International and Latvian Republic National Sanctions Law, as well as, in certain cases, the requirements of the Law on the Prevention of Money Laundering and Terrorist and Proliferation Financing. This includes the identification, determination, and control of business partners, their officials (members of the board and council), representatives, participants, and beneficial owners. This data processing is based on the lawful basis outlined in Article 6(1)(c) of the Regulation – compliance with a legal obligation, and Article 6(1)(e) of the Regulation – processing is necessary to perform a task in the public interest, as well as Article 9(2)(g) of the Regulation – processing is necessary for important public interest reasons based on European Union or national law.

V. Personal Data Processing, Protection, and Storage

9. The Company uses various technical and organizational security measures to protect your personal data. Your personal data is stored securely and is accessible only to a limited number of authorized individuals. 

10.The recipients of your personal data are the Company and its authorized persons, yourself, processors, and supervisory or regulatory authorities.

11. The period for which personal data will be stored, or, if that is not possible, the criteria used to determine the duration of such storage:

  1. All information obtained during the recruitment process will be stored for no longer than 6 (six) months for applicants who were not selected for the position.
  2. All information necessary to fulfill a legal obligation applicable to the Company will be stored for as long as required to achieve the purpose of personal data processing in accordance with applicable laws.
  3. Video recordings are stored for 2 months.
  4. The following criteria are used to determine the storage period for personal data:
  1. until the Company or you can exercise your legitimate interests in accordance with external legal regulations (e.g., claims review, protection of rights, dispute resolution, filing claims in court, or adherence to the statute of limitations, etc.);
  2. as long as either party has a legal obligation to retain the data. 

Once the criteria mentioned in this section are no longer applicable, your personal data will be deleted or destroyed.

12. You have the following rights:

  1. To receive the information required by applicable laws regarding the processing or restriction of your personal data, or the right to object to processing (including the processing of personal data based on the Company’s legitimate interests). These rights can be exercised as long as the data processing does not arise from the Company’s obligations imposed by applicable laws, which are carried out in the Company’s interest.
  2. ITo submit a request to exercise your rights in writing. Requests can be submitted to the Company by mail, or by email (with securely signed electronic documents);
  3. To receive your personal data, which you have provided and is being processed, in writing or in one of the commonly used electronic formats.
  4. To request access to your data, its correction, or, if necessary, its supplementation, deletion (the right to be forgotten), restriction of processing, or to object to its processing in the cases specified by applicable laws, as well as the right to data portability. We inform you that in the case of data correction, deletion, restriction, suspension, or portability, partial or complete suspension of services/processes may occur in an irreversible manner. If you choose to receive information about yourself remotely, for example, by mail, email, to another address, etc., the applicant is responsible for the security of the chosen method of receipt and the actions of the person acting on behalf of the applicant.
  5. At any time, you can easily withdraw your provided consent. Providing or withdrawing consent is a voluntary choice, and it does not impose mandatory additional obligations. However, if a person decides to withdraw any given consent, please note that the data processing related to that consent will no longer be ensured, and the previous scope of possibilities may no longer be available. For example, withdrawing consent for receiving updates will mean that news or other updates will no longer be delivered. It is important to remember that such a withdrawal does not affect the legality of data processing performed prior to the withdrawal.

13. The Company will send the response to you by mail to your specified residential address or to your specified email address with a secure electronic signature if you wish to receive the response electronically.

14. The Company ensures the implementation of personal data processing and protection requirements in accordance with applicable laws. If you have legitimate concerns that the Company is processing your personal data in violation of legal requirements, you have the right to file a complaint in court.

VI Closing question 

15. The Company has the right to make changes or additions to this Privacy Policy by publishing the current version of the Privacy Policy in the "About Us" section under the "Privacy Policy" subsection on the Company's website.

16.You are responsible for the accuracy, correctness, and completeness of the personal data you provide. Therefore, if your personal data, necessary for the achievement of the above-mentioned purposes, changes, you are obligated to promptly inform the Company about the updated personal data.

Please note that by providing your personal data, you take full responsibility for the legality of submitting your personal data and are liable for any damages to the Company and/or third parties that may arise from the unlawful processing of such personal data.

The Privacy Policy was last updated on May 17, 2024.