I General provisions

1.1 The Data Controller “Forest Owners Consulting Center”, registration No 44103010465, Legal address: “Lidlauks”, Priekulu parish, Cesu county, LV-4126, Latvia, Actual address: “Lidlauks”, Priekulu parish, Cesu county, LV-4126, (hereinafter referred to as the “Forest Owners Consulting Center”/The Data Controller)

1.2 The purpose of the Privacy Policy is to provide the data subject – the natural person – with information on the purposes of the processing of personal data, the legal basis, the categories of recipients of personal data, the duration and security of data retention, as well as the rights of the data subject.

1.3 The Forest Owners Consulting Center applies the Privacy Policy when processing personal data, including the processing of personal data transferred to the website www.mikc.lv.

1.4 Forest Owners Consulting Center ensures that the personal data of the data subject are protected in accordance with the provisions of the Policy and in compliance with the requirements of the EU General Data Protection Regulation 2016/679 of 27 April 2016. The Forest Owners Consulting Center undertakes to take all measures necessary to ensure that the data subject’s personal data are kept confidential and stored securely.

1.5 The Privacy Policy uses the terms defined in the EU General Data Protection Regulation No 2016/679 of 27 April 2016 and the Law on the Processing of Personal Data.

II Purposes and legal basis for processing personal data

2.1 The Forest Owners Consulting Center may process personal data of the data subject for the following purposes:

2.1.1. for the recruitment of potential employees, upon receipt of the data subject’s Curriculum Vitae and application (legitimate interest, based on the data subject’s consent);

2.1.2. personnel management (legitimate interest, on the basis of statutory regulation);

2.1.3. accounting (on the basis of laws and regulations);

2.1.4. for the processing of the sale, purchase and lease of property, rental transactions, and the provision of services (for the establishment of contractual relations and the performance of contractual obligations, based on the consent of the data subject);

2.1.5. video surveillance of the premises and territory of the Forest Owners Consulting Center for security purposes (legitimate interest for security purposes);

2.1.6. recording of visitors’ personal data for visitor control purposes (legitimate interest, regulation of laws and regulations);

2.1.7. archiving of documents (legitimate interest, regulation of laws and regulations);

2.1.8. management of information systems (legitimate interest, delegation, regulatory provisions);

2.1.9. sale of goods and provision of services (legitimate interest, based on the data subject’s consent);

2.1.10. remote observation or photographic recording for monitoring, quality control and security purposes (legitimate interest, statutory regulation, on the basis of the data subject’s consent);

2.2. photographic images and video recordings may be taken during events organised by the Forest Owners Consulting Center for the purpose of informing the public and creating a historical archive.

2.3. photographic images and video recordings may be taken in the buildings, managed areas and objects of the Forest Owners Consulting Center in order to prevent or detect criminal offences related to the protection of property and the protection of vital interests of persons, including life and health

III Duration of storage of personal data

3.1 3.1 Personal data shall be processed only for the purposes set out above and only for as long as is necessary to achieve the purposes set out above, to protect the interests, or in accordance with the time limit set out in the laws and regulations. After the expiry of the data use period, the personal data will be deleted, destroyed or archived.

3.2 Personal data is restricted information which can only be accessed by employees who are authorised to do so or whose duties require them to do so.

IV Categories of recipients of personal data

4.1 Personal data may be transferred to third parties only to the extent and in the manner required for the purposes set out in the privacy policy and to the extent that the Forest Owners Consulting Center has the right or obligation to do so in accordance with laws, regulations or a contract concluded with the data subject:

4.1.1. to public authorities for the fulfilment of the requirements of regulatory enactments;

4.1.2. organisations and institutions within the framework of the performance of a contract;

4.1.3. in certain cases, service providers may be engaged as processors of personal data who guarantee to implement appropriate technical and organisational measures in such a way as to ensure the protection of the rights of data subjects in the processing in accordance with the requirements of regulatory enactments.

V Rights of the data subject

5.1 The data subject has the right to:

5.1.1. to obtain confirmation from the Forest Owners Consulting Center as to whether or not personal data of the data subject are being processed, unless the data subject is already in possession of the relevant information;

5.1.2. to request rectification, erasure and restriction of processing of the data subject’s data, to object to processing, and to withdraw consent, without affecting the lawfulness of the processing based on consent given before revocation;

5.1.3. lodge a complaint with the supervisory authority, the Data Inspectorate.

5.2 The Centre shall communicate with the data subject using the contact information (telephone number, e-mail address, address) provided by the data subject.

5.3. If the data subject’s right to the protection of personal data has been violated on a prima facie basis, the data subject has the right to lodge a complaint with the personal data supervisory authority – the Data Inspectorate.

VI Protection of personal data

6.1 The Forest Owners Consulting Center shall ensure, continuously review and improve personal data protection measures to protect personal data against unauthorised access, accidental loss, disclosure or destruction. To this end, the Centre shall employ appropriate technical and organisational requirements.

6.2 The Forest Owners Consulting Center shall implement and maintain appropriate administrative, physical, technical and organisational measures to protect personal data provided by the data subject against accidental or unlawful destruction, loss of personal data transmitted, stored or otherwise processed,

alteration, unauthorised disclosure or access.

VII Contact details

7.1 Data Subjects have the right to make a submission with questions or comments about the Forest Owners Consulting Center Privacy Policy:

7.1.1. by sending an e-mail to lidlauks@mikc.lv

7.1.2. by sending a letter to the registered office “Lidlauks”, Priekulu parish, Cesu county.

7.2 The Forest Owners Consulting Center shall communicate with the data subject using the contact details (telephone number, e-mail address, correspondence address) provided by the data subject.”