JSC DIANA Privacy Policy
JSC DIĀNA, registration No LV41203000447, registered office at 5 Andreja Street, Ventspils, Latvia, LV- 3601 (hereinafter – DIĀNA), is a Data Controller that complies with the requirements of the European Union General Data Protection Regulation No 2016/679 in Latvia.
This Privacy Policy explains how DIĀNA processes personal data and protects your personal data held by DIĀNA.
DIĀNA only processes your personal data which you have voluntarily consented to or which is carried out on the basis of a contractual relationship, the laws and regulations in force and binding in the Republic of Latvia, and is carried out to protect the legitimate interests of DIĀNA.
What personal data is processed by DIĀNA:
This Privacy Policy applies to all personal data that you provide to DIĀNA or that DIĀNA obtains in connection with your cooperation with DIĀNA. For the purposes of this Privacy Policy, “personal data” means any information relating to you that allows you to be identified, directly or indirectly (name, date of birth, address, telephone number, e-mail address, etc.), in relation to you. Birth data – to determine the age group of card users when offering individual commercial offers. By providing DIĀNA with your personal data, you acknowledge and fully agree that DIĀNA processes your personal data in accordance with this Privacy Policy and the applicable and binding laws and regulations in the Republic of Latvia.
Loyalty Programs:
The processing of loyalty program members’ personal data is carried out for the purpose of keeping records of the members of the loyalty program of buyers and transactions carried out by them, as well as making individual commercial offers to those customers who have agreed to receive such offers. Special offers and information of interest are sent to the e-mail address or mobile phone number provided. The loyalty program and the protection of personal data are governed by the VENTIŅKARTE REGULATIONS and the DRAUGU Card REGULATIONS”.
For legal customers:
|
Categories of personal data |
Legal basis |
| -Personal information (name of the authorized person) | For the provision of the Service |
| -Personal identification number (of the authorized person) | Our legal obligation to identify persons |
| -Type of identity document (passport or ID card) | Our legal obligation to identify persons for the purpose of imposing material liability |
For natural persons:
|
Categories of personal data |
Legal basis |
| -Personal information (name, surname) | Your consent |
| -Birth data (date and year) | Your consent |
| -Contact details (home address) | Your consent |
| -E-mail address | Your consent |
| -Phone number | Your consent |
Video surveillance: this privacy policy explains that the data controller DIANA processes the data of natural persons in video form. The purpose of video surveillance is for the prevention and detection of criminal offences. At the same time, DIĀNA informs that personal data may be transferred to the Latvian State Police upon request. The procedure for video surveillance and the protection of personal data at DIĀNA are regulated by the Rules for the Protection of Video Surveillance Data and Systems”.
|
Categories of personal data |
Legal basis |
| -Biometric data ( facial image) | Our legitimate interest and protection of vital interests, including health and life. For the prevention and detection of crime. |
Submission of Curriculum Vitae (hereinafter – “CV”): This privacy policy applies to the data you provide to DIANA when applying for a job vacancy, DIANA will only use the information you provide for its intended purpose, i.e. to assess whether your candidature is relevant to the current vacancy. The rules governing the circulation of CVs and the protection of personal data at DIĀNA are governed by the Rules Governing the Circulation of CVs (Curriculum Vitae)
|
Categories of personal data |
Legal basis |
| -Personal information (name, surname) | Our legal obligation to identify persons |
| -Contact information (home address) | Our legal obligation to identify persons |
| -E-mail address | Your consent |
| -Phone number | Your consent |
| -Type of identity document ( passport or ID card | Our legal obligation to identify persons |
Lease processing: DIĀNA is the data processor that fills in your application on the website of the leasing provider. The submission of information is carried out in accordance with this Privacy Policy and the applicable and binding laws and regulations in the Republic of Latvia. The processing of personal data is carried out by the leasing company.
|
Categories of personal data |
Legal basis |
| -Personal information ( name, surname) | Your consent to submit information to the leasing company |
| -Personal identification number (personal code) | Your consent to submit information to the leasing company |
| -Socio-economic data (income, expenses) | Your consent to submit information to the leasing company |
| -Contact details (home address) | Your consent to submit information to the leasing company |
| -E-mail address | Your consent to submit information to the leasing company |
| -Phone number | Your consent to submit information to the leasing company |
| -Type of identity document (passport or identity card | Your consent to submit information to the leasing company |
Retention of personal data:
The electronic storage of personal data on the company’s servers is secured with multiple layers of security:
Physical security, Servers and other IT systems are located in separate rooms and are provided with alarms and locked doors, where access is denied to persons who do not have work tasks that need to be carried out in these rooms.
Protection against external intrusion. The IT system is protected by a firewall to prevent a potential attacker from gaining unauthorized access to the data.
Protection against computer viruses and malware. The IT system is controlled and protected against computer viruses and malware.
Access control. All IT systems are protected by use of usernames and passwords where access is restricted to authorized users. Each user has their own username and password and defined roles and access.
Data security:
In order to fulfil its obligations towards you, DIĀNA does not pass on information about you to third parties, unless it is necessary for DIĀNA to do so for legitimate, contractual or business purposes.
DIĀNA observes and has implemented appropriate technical and organizational measures to ensure maximum protection of personal data against unauthorized disclosure or access, accidental or unlawful loss, destruction or alteration, as well as against any other unlawful processing
DIĀNA shall use its best endeavors to protect the personal data in its possession. However, if you believe that your rights have been infringed by DIĀNA, please contact DIĀNA. You may submit a request to exercise your rights in writing by post to JSC DIĀNA, 5 Andreja Street, Ventspils, Latvia, LV-1036 or by electronic mail, signing the request with a secure electronic signature and sending it to the following e-mail address: diana@diana.lv, so that we can resolve any ambiguities as soon as possible. You also have the right to lodge a complaint with the Data Inspectorate in case of disagreements not resolved with DIĀNA.
DIĀNA, as the data controller, informs you that you have the right to obtain information about the data collected, to request rectification/deletion of information, as well as to opt out of the loyalty program. In order to delete the data, you must fill in Annex 1, Application for deletion of data form by post to JSC DIĀNA, 5 Andreja Street, Ventspils, Latvia, LV-3601 or by electronic mail, signing the request with a secure electronic signature and sending it to the e-mail address: diana@diana.lv. To obtain or correct information about the data collected, a free form application must be filled in and sent by post to JSC DIĀNA, Andreja iela 5, Ventspils, Latvia, LV-3601 or by electronic mail, signing the relevant request with a secure electronic signature and sending it to the following e-mail address: diana@diana.lv
JSC DIĀNA has the right to make changes at any time, which are published on the www.diana.lv website
Application for deletion of personal data: Sample application