1. DATA CONTROLLER

When you visit and interact with this website and our social media accounts, the data controller of your personal data is SIA “R.A.L.”, registration number: 50003259951.

Contact

Address: 85 Brīvības Street, Centra distr., Riga, LV-1001

Phone: 67316372

E-mail: ral85@inbox.lv

What is “R.A.L.” scope of activity?

SIA “R.A.L.” is engaged in retail and wholesale of various medical products in Latvia and the Baltic States and cooperates with more than 20 world leading manufacturers of medical products.

2. WE COLLECT THE FOLLOWING PERSONAL DATA

Communication

“R.A.L.” collects information that individuals provide when contacting us. For example, when you send us an email, we collect the information contained in the email: the email address and phone number, the content of the correspondence, as well as your name.

When you use our social networks to contact us, such as our Facebook account, “R.A.L.” processes the user’s contact details, the content of correspondence, as well as the user’s profile information and, if available, the user’s photo available on these networks. In addition, the processing of data on these platforms is subject to their privacy and terms of use.

Settlement details

When we provide you with a service, we collect your email address, telephone number, name and billing details.

3. WHAT ARE THE PURPOSES AND LEGAL BASES FOR PROCESSING?

Your data is only processed if there is a specific purpose and legal basis for the processing. “R.A.L.” data processing is carried out in accordance with the requirements of the General Data Protection Regulation and Latvian laws and regulations

Communication, collection and processing of requests. When we contact you to answer your questions, our legitimate interests are the basis for processing the data.

Service provision. If you buy “R.A.L.” goods offered by R.A.L., in this case the legal basis for processing the data is between you and R.A.L. contract.

4. HOW LONG AND WHERE IS PERSONAL DATA STORED?

Personal data are stored until the purpose of the processing has been achieved. Typically, we keep personal data for 1 year from the date of collection, unless the requirements of laws and regulations provide for a longer retention period. Once the retention period has expired, the personal data shall be securely and permanently deleted. Personal data is not transferred to countries outside the European Economic Area.

We may transfer data to third parties that provide technical support to us and with whom we have entered into an appropriate contract, as well as to law enforcement and supervisory authorities upon their reasoned request and to the extent necessary for the performance of their functions.

5. WHAT ARE COOKIES?

Cookies are small text files that are sent to a user’s computer or mobile device when they visit a website and that are stored by the website on the user’s computer or mobile device when the user opens the website. Cookies act as a memory for a particular website, allowing that website to remember the user’s computer or mobile device on subsequent visits, including cookies that may remember the user’s settings or make the website more convenient to use. Cookies are stored for 8 months from the last time you visited our website. You can delete cookies at any time using your internet browser settings.

6. WHAT COOKIES DOES R.A.L. USE?

R.A.L. collects functionality cookies that store the language used by the user. The legal basis for placing such cookies is our legitimate interests.

7. RIGHTS OF THE DATA SUBJECT

Right to information

You may ask us to:

  • confirm whether we process your personal data;
  • provide you with a copy of that data;
  • provide you with other information about your personal data, such as what data we hold, what we use it for, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, what your rights are, how you can make a complaint, where we obtained your data, to the extent that such information is not already provided to you in this Privacy Policy.

Right to rectification

You can ask us to correct inaccurate personal data.

Right to delete

You can ask us to delete your personal data, but only if:

  • they are no longer necessary for the purpose for which they were collected; or
  • you have withdrawn your consent (if the processing was based on consent); or
  • they have been unlawfully processed; or
  • to comply with a legal obligation to which we are subject.

We are not required to comply with your request to erase your personal data where the processing of your personal data is necessary for

  • to fulfil a legal obligation
  • to bring, exercise or defend legal claims

Restriction of data processing

You can ask us to restrict (keep but not use) your personal data, but only if:

  • their accuracy is disputed to allow us to verify their accuracy; or
  • the processing is unlawful but you do not wish to erase them; or
  • we no longer need them for the purpose for which they were collected but we still need them to establish, exercise or defend legal claims; or
  • You have exercised your right to object and the verification of the primary data processing ground is ongoing.

We may continue to use your personal data after a restriction request if:

  • we have your consent; or
  • to bring, exercise or defend legal claims; or
  • to protect the rights of another natural or legal person.

Right to portability

You can ask us to provide your personal data in a structured, commonly used, machine-readable format, or ask us to “port” it directly to another data controller of your choice, but in any case only if:

  • the processing is based on your consent or the performance of a contract with you; and
  • processing is carried out by automated means.

The right to portability covers only the data you provide.

Right to object

You may object to the processing of your personal data based on “legitimate interests” if you consider that your fundamental rights and freedoms override our legitimate interests.

Once you have objected, we have the opportunity to demonstrate that we have important legitimate interests that override your rights and freedoms.

Exercising your rights is free of charge. However, if your request for access to information is unreasonable or excessive, we have the right to charge you a reasonable amount in the circumstances based on administrative costs. We will inform you of any costs before we carry out your request.

“R.A.L.” reserves the right to ask you to prove your identity if you make a request to exercise any of the rights described here.

Providing a reply

You have the right to make a request to us about your personal data. We will reply within one month of receipt. However, if the requests are particularly complex or if you have made several requests, this period may be extended to three months. We will inform you if it will take more than one month to reply.

Right to apply to the supervisory authority

If you have any concerns about the lawfulness of the processing of your data, you have the right to contact the supervisory authority – the Data State Inspectorate, pasts@dvi.gov.lv, address: 17 Elijas Street, Riga, LV-1050.