Privacy Policy

1. Controller

The Controller of personal data processing is Gene Investments SIA, registration No. 40003977627, legal address: Meistaru iela 1, Valdlauči, Ķekavas pagasts, Ķekavas novads, LV-1076.

For questions regarding the processing of personal data, as well as to exercise your rights as a data subject, please contact us by writing to the e-mail address: [email protected].

2. What data we process

• Application form data: name, telephone number, company name, required floor area of the premises, and a comment or other information that you provide in the application form.
• Technical data: IP address, information about the browser and device used, and other technical data that may be recorded automatically to ensure the operation, security and technical administration of the website.
• Language selection: the language selected on the website is stored in your browser and is not sent to us as personal data.

We do not knowingly collect or process special categories of personal data through the application form. Please do not include in the application form any information that is not necessary for the consideration of your request.

3. Purpose and legal basis

We process your personal data in order to:

• respond to your request;
• contact you regarding your interest in renting premises;
• arrange a viewing of the premises at your request;
• prepare and send you an offer;
• take steps at your request prior to the possible conclusion of a contract.

The legal basis for such processing of personal data is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter – GDPR), where the processing is necessary in order to take steps at your request prior to entering into a contract. Where this legal basis is not applicable, the processing may be carried out on the basis of the legitimate interests of the Controller set out in Article 6(1)(f) GDPR, including ensuring communication with potential clients and managing business-related requests.

If you separately and freely give your consent to a specific processing of personal data, the legal basis for such processing is Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal of consent.

We also process personal data in order to ensure the operation of the website and information security, to prevent misuse, and to protect our legal interests. The legal basis for such processing is Article 6(1)(f) GDPR.

4. Retention period

We retain personal data only for as long as is necessary for the specific purpose of personal data processing.

Personal data submitted in the application form that are necessary for considering your request and communicating with you are retained for as long as is necessary to consider your request, communicate with you and carry out activities related to possible cooperation. Once this purpose has been achieved, the personal data are deleted or anonymised, unless their further retention is required or permitted by laws and regulations, or unless the data are necessary for the protection of our legal interests.

Where personal data are contained in contracts, accounting documents or other documents whose retention is prescribed by laws and regulations, such data are retained for the period specified in the relevant laws and regulations.

Where a legal dispute has been initiated or there is a justified need to protect our rights and legitimate interests, personal data may be retained until the final resolution of the matter concerned or until the expiry of the limitation period for the protection of rights.

When the retention period for personal data has expired and there is no other legal basis for their further retention, the personal data are securely deleted, anonymised or otherwise rendered such that they can no longer be linked to you.

5. Data recipients

Your personal data are not sold and are not transferred to third parties for their own marketing purposes.

Personal data may be accessed by authorised employees of the Controller and persons who require such access to perform their work duties, as well as by personal data processors that process personal data on behalf of the Controller, for example, providers of website hosting, technical maintenance, information technology, e-mail or other necessary services.

Personal data may be transferred to law enforcement authorities, courts, state or local government institutions where such transfer of data is provided for by laws and regulations or is necessary for the protection of the rights and legitimate interests of the Controller.

Personal data are disclosed only to the extent necessary to achieve the specific purpose and in compliance with the requirements of applicable laws and regulations.

Personal data are processed primarily within the territory of the European Union and the European Economic Area. Where the use of a particular service provider involves the transfer of personal data or access to data outside the European Union or the European Economic Area, such transfer is carried out only if there is a legal basis provided for by the GDPR and in accordance with the safeguards set out in the GDPR.

The website uses the Google Maps service to display a map. When this service is used, Google may receive technical information, including your IP address. Where the use of this service involves the transfer of personal data outside the European Economic Area, the transfer is carried out in accordance with applicable data protection legislation and appropriate data transfer mechanisms.

6. Cookies

The website does not use analytics or advertising cookies, unless new services or technologies have been introduced on the website for which this Privacy Policy or a separate Cookie Policy states otherwise.

The website uses only such technical solutions as are necessary for its operation or for storing the user's preferences. The selected language is stored in your browser so that on your next visit the website can be displayed in the previously selected language.

If analytics, advertising, targeting or other optional cookies or similar technologies are used on the website, information about them and their use is provided separately, clearly and comprehensibly, and, where required, your consent is obtained before they are used.

7. Your rights

In accordance with the applicable personal data protection laws and regulations, you have the right to:

• request information as to whether we process personal data relating to you, and request access to such data;
• request the rectification of inaccurate or incomplete personal data;
• in certain cases, request the erasure of your personal data;
• in certain cases, request the restriction of processing of personal data;
• object to the processing of personal data where the processing is carried out on the basis of legitimate interests, as well as in other cases provided for by the GDPR;
• receive your personal data in a structured, commonly used and machine-readable format and, in certain cases, request that they be transmitted to another controller, where the right to data portability applies;
• withdraw your consent at any time where the processing of personal data is based on consent. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal of consent;
• lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija) if you consider that your personal data are being processed in a manner that does not comply with the applicable personal data protection requirements.

To exercise your rights, please send a request to the e-mail address [email protected]. In the request, please indicate as clearly as possible which rights you wish to exercise and which processing of personal data the request concerns.

In order to protect your personal data and prevent the disclosure of information to unauthorised persons, we may need to verify the identity of the person submitting the request. In such a case, we will request only such additional information as is proportionate and necessary for identity verification.

We will usually respond to your request without undue delay and at the latest within one month of receipt of the request. Where the request is complex or several requests have been received, the time limit for responding may, in the cases provided for by the GDPR, be extended by a further two months, in which case we will inform you thereof within one month of receipt of the request.

In certain cases, the exercise of your rights may not be possible or may be restricted where further processing or retention of personal data is required by laws and regulations or where there is another legal basis provided for by the GDPR.

8. Changes

Gene Investments SIA has the right to make amendments and additions to this Privacy Policy by publishing the current version on the Tilta Biroji website.

The current version of the Privacy Policy is effective from the date of its publication, unless otherwise stated therein.