1. Objectives of processing personal data
For representation of s / c "Domina shopping" events in mass media and social networks in order to ensure the recognition of brand names of s / c "Domina Shopping" as well as in promotional materials for the next organized events.
2. What kind of personal data is processed by the Manager?
Visiting the events organized by s / c "Domina Shopping", visitors of the event can be photographed, captured in video footage, and may be asked to give interviews or opinion on the event, recording your name, surname and, if necessary, additional information you wish to provide. In case you receive prizes, information about this fact will be published and can be used to ensure the recognition and building up the Domina Shoppping brand by publishing a video footage, photographies on the social networks of Domina Shopping, as well as in any mass media channel. Also, in particular, if you have received an invitation to one of the events organized by s / c "Domina Shopping", in order to ensure the safe progress of the event, you may be requested additional information that identifies you (name, surname, personal identity number etc.).
3. What is the legal basis for personal data processing?
In order to reflect the activities organized by s / c Domina Shopping in mass media and social networks, personal data processing is carried out on the basis of Article 6 point 1 (a) and (f) of the General Data Protection Regulation.
The Manager is entitled to process personal data if the Data Subject himself/herself has given consent to the processing of his/her personal data for one or more specific purposes. The consent of a person is his/her free will and independent decision, which is given on a voluntary basis, thus allowing the Manager to process personal data for purposes specified in the Policy. The consent of the person is binding if it is given verbally (for example, before the event and in this Policy the person is informed that the processing of personal data will be carried out and the person, when visiting the event, giving interviews, knowingly being photographed and filmed, agrees that his/her personal data will be used to achieve the objectives set out in this Policy). A person has the right at any time to withdraw his or her prior consent using the contact details provided in this Policy. The withdrawal of consent does not affect the lawfulness of the processing performed at the time when the consent of the person was in force. With the withdrawal of consent, data processing which is carried out on other legal grounds, for example on the basis of the Controller’s and third parties' legitimate interests, can not be stopped.
The Manager has a legitimate interest in reflecting the events organized by him/her or events he or she participates, in the mass media and social networks, thus ensuring brand awareness. The Manager, when choosing what information should be published, always applies the highest ethical standards, thus ensuring that publications do not infringe upon the rights and freedoms of data subjects. At the same time, the Manager is aware that it is not possible to know all the facts and circumstances, so that, in order to ensure honest processing of data, the Manager does not prevent any data subject from communicating with the Manager at any time using the information indicated to oppose the processing of data.
4. How long will personal data be stored and the criteria for determining it?
S / c "Domina Shopping" intends to keep the information obtained until its legitimate interests are ensured, that is, for the recognition of the brand no less important is the Manager's history, therefore, the relevant information will be stored independently unless there are preconditions for its deletion in this policy or manager will not acknowledge that the relevant information is not usable for reaching the goal. Similarly, s / c Domina Shopping explains that, in order to fulfill the principle of honest data processing, given the fact that the purpose of the data processing is to release information about s / c "Domina Shopping" organized events, then the obtained materials may be publicly available.
5. Who have free access to the information and to whom it is disclosed?
The recipients of personal data may be Manager's authorized persons, data processors, law enforcement and supervisory institutions. If the personal data has to be transferred to third party within the framework of a signed contract, in order to perform any function necessary for the performance of the contract (for example, when taking photos), or if it is necessary to improve the provision of better service and quality service to visitors of the event.Personal data can be processed in an electronic environment. In this case, the Manager may have partners (google.com (google analytics), facebook.com, twitter.com, MailChimp.com, etc.) that are recognized as companies operating outside the European Union and European Economic Area. In this case, the Manager invites you to consult their privacy policies or contact the Manager with a request for additional information on the terms of cooperation.
6. How is the Data Subject informed about the processing of personal data?
The data subject is informed about the processing of personal data specified in this policy through a multi-level approach by communicating information about the manager's activities, the Manager provides basic information calling to become acquainted with this at manager's website https://www.domina-shopping.lv/lv/ or ask the Manager before or during the event.This Manager's policy is publicly available on the Internet at the Manager's website https://www.domina-shopping.lv/lv/ and at the Manager's Customer Service located at s / c Domina Shopping.
7. The data subject's rights
7.1. The data subject has the right to request the Manager access to his or her personal data and to receive precise information about which personal data is available at the disposal of the Manager, for what purposes the manager processes these personal data, categories of recipients of personal data (persons for whom personal data have been disclosed or for which they are intended to disclose, unless the normative acts permits the Manager to provide such information in a specific case (for example, the Manager can not provide the Data Subject with information about the relevant state institutions that are guiding the criminal proceedings, the strategic individuals or other institutions for which the normative acts prohibit disclosure such information)), information on the period that personal data will be stored or the criteria used to determine that period.
7.2. If the Data Subject finds out that the information available for the Manager is outdated, inaccurate or incorrect, the Data Subject has the right to request the correction of his personal data.
7.3. The data subject has the right to request the deletion of his personal data or to object to the processing if the person considers that personal data have been processed illegally or they are no longer necessary in relation to the purposes for which they were collected and / or processed (implementing the principle of the right "to be forgotten").
7.4. The Manager informs that the Data Subject's personal data can not be erased if the personal data processing is necessary for following reasons:in order to protect the vital interests of the Data Subject or other physical person, including life and health;to protect the Manager's property;for the Manager, or a third party to raise, implement or defend the legitimate (legal) interests;for archiving purposes in accordance with the Latvian normative acts, which regulates archive formation.
7.5. The Data Subject has the right to request the Manager to limit the processing of the Data Subject's personal data, if one of the following circumstances exists:- The Data Subject disputes the accuracy of personal data - for a period during which the Manager can verify the accuracy of personal data;- the processing is illegal and the Data Subject opposes the deletion of personal data and requests the use of data to be restricted instead;- The manager is no longer needed to process personal data, but it is necessary for the Data Subject to establish, enforce or defend legitimate requirements;- The Data Subject has objected to processing data until it has been verified that the legitimate reasons of the Manager are not more important than the legitimate reasons of the Data Subject.7.6. If the processing of personal data of the Data Subject is limited in accordance with paragraph
7.6., such personal data, except for storage, shall be processed only with the consent of the Data Subject or in order to establish, enforce or defend legitimate claims, or to protect the rights of another physical or legal person, or important interests of society.
7.7. Before cancellation of the Data Subject's personal data processing, the Manager informs the Data Subject.7.8. The Data subject has the right to file a complaint to the Manager if he considers that the Manager has processed his personal data illegitimately.
7.9. The Data Subject may submit a request to implement his rights in the following manner:- in written form at the Manager's premises, when presenting a personal identity document (for example, a passport or ID card), as the Data subject is obliged to identify himself;by e-mail, signed by a secure electronic signature. In this case, it is presumed that the Data Subject has identified himself by submitting a request signed with a secure electronic signature. At the same time, the Manager reserves the right, in case of a doubt, to request additional information from the Data Subject if he considers it necessary.by post. In this case, the response will be prepared and sent by registered mail, thus ensuring that unauthorized persons will not be able to receive this mail. At the same time, the Manager reserves the right, in case of doubt, to request additional information from the Data Subject if he considers it necessary.
7.10 In addition, the Data Subject is under an obligation in its request to specify, as far as possible, the date, time, place and other circumstances that helps fulfill its request.
7.11. Upon written request from the Data Subject on the implement of his / her rights, the Manager shall:
7.11.1. verifies the identity of a person;
7.11.2. assess the request if:- can provide a request, for example, then the Data subject as an applicant can receive a copy of the data.- additional information is required to identify the Data Subject who requests information, then the Manager may ask the Data Subject for additional information to be able to correctly select the information in which the Data Subject is identifiable.- the information has been deleted or the person requesting the information is not the Data Subject or person is not identifiable, then the Manager may reject the request in accordance with this policy and / or normative regulations.
8. How is personal data protected?
8.1. The manager ensures, continuously reviews and improves personal data protection measures to protect personal data of individuals from unauthorized access, accidental loss, disclosure or destruction. To do this, the Manager uses appropriate technical and organizational requirements, including using firewalls, intrusion detection systems, analysing software and data encryption.
8.2. The manager carefully scrutinizes all service providers who process the personal data on behalf of the Manager for physical persons, as well as assess whether the cooperation partners (data controllers) apply appropriate security measures in order to process the personal data of physical persons in accordance with the Manager's assignment and the requirements of the normative regulations.
8.3. In the case of a personal data security incident, if it would pose the highest possible risk to the rights and freedom of the Data Subject, the Manager will notify the corresponding Data Subject, if it will be possible, or if the information will be released on the Manager's website or in any other possible way, for example through the media (TV, radio, newspapers, social networks, etc.).
9. Who is the Manager?
Ltd “EfTEN Domina”, registration no. 40103990157, e-mail: info@domina-shopping.lv