The purpose of this Privacy Policy is to provide information on the processing of personal data by Limited Liability Company “Stiga RM.” This Privacy Policy applies to the processing of personal data of clients, visitors, and business partners of Limited Liability Company “Stiga RM.”

1. General Provisions

1.1. This Privacy Policy describes how Limited Liability Company “Stiga RM,” Registration No. 40003194846, with its legal address at Meistaru iela 1, Kuldīga, Kuldīgas novads, LV-3301 (hereinafter referred to as the “Data Controller”), collects, processes, and stores personal data obtained on the website https://stigarm.lv/lv/ (hereinafter the “Website”) from its clients and visitors to this Website (hereinafter referred to as the “Data Subject” or “You”).

1.2. This Privacy Policy has been developed in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council, as well as the current regulatory framework of the Republic of Latvia and the European Union.

1.3. Personal data is any information relating to an identified or identifiable natural person, i.e., the Data Subject. Processing is any action taken with personal data, such as obtaining, modifying, using, viewing, deleting, or destroying it.

1.4. The Data Controller adheres to the principles of data processing as provided by law and ensures that personal data is processed in compliance with applicable regulations.

1.5. The contact information for questions related to personal data processing is: birojs@stigarm.lv. By using this contact information or addressing the Data Controller at its legal address, you may obtain information about the processing of personal data.

2. Collection, Processing, and Storage of Personal Data

2.1. This Privacy Policy also applies to the processing of personal data regardless of the form and/or environment in which the Data Subject has provided personal data: on the Website, in other online environments, in paper format, by telephone, via video conferencing, etc.

2.2. By visiting and using the Website and other forms, ways, or environments offered for communication or service provision, you agree that any information provided will be used and managed in accordance with the purposes outlined in this Privacy Policy.

2.3. The Data Subject is responsible for the amount and accuracy of the personal data provided, and must notify the Data Controller of any changes immediately.

2.4. The Data Controller is not responsible for any loss incurred by the Data Subject or third parties due to inaccurately provided personal data.

2.5. Specific terms may apply to certain types of data processing (e.g., the use of cookies on the Website), and the Data Subject will be informed at the time the data is collected.

3. Data Subject Data Processing

3.1. The Data Controller processes personal data for the following purposes:

3.1.1. Providing services and selling goods;

3.1.2. Business planning and analysis;

3.1.3. Fulfilling obligations as stipulated by regulatory acts;

3.1.4. Other specific purposes as informed at the time of data collection.

3.2. The Data Controller may process the following personal data:

3.2.1 Contact details (name, surname, email address, and/or phone number);

3.2.2 Potential transaction data (forest or felling area value, cadastral number of the real estate specified by the Data Subject);

3.2.3 Any other information provided for the acquisition of goods and services offered on the website or in communications.

3.3. In addition, the Data Controller has the right to verify the accuracy of submitted data using publicly available registers.

3.4. The legal basis for data processing is Article 6, Section 1, points (a), (b), (c), and (f) of the General Data Protection Regulation (GDPR).

3.5. The Data Controller retains and processes personal data of the Data Subject as long as at least one of the following criteria is met:

3.5.1. The personal data of the Data Subject is necessary for the purposes for which it was collected;

3.5.2. Necessary for contract conclusion and fulfillment;

3.5.3. Required to exercise legitimate interests, such as submitting objections or filing legal claims;

3.5.4. Necessary for compliance with legal obligations;

3.5.5. Valid with the consent of the Data Subject.

3.6. Legitimate interests of the Data Controller include conducting commercial activities, identity verification, fulfilling contractual obligations, managing financial risks, ensuring effective corporate governance, and improving service quality.

3.7. To fulfill its obligations, the Data Controller may share personal data with partners, data processors, or other persons directly associated with the Controller. Data may also be shared with public authorities as required by law.

3.8. The Data Controller implements organizational and technical measures to protect personal data from accidental or unlawful destruction, alteration, disclosure, or other unauthorized processing.

3.9. Personal data is generally processed within the European Union (EU) and European Economic Area (EEA). In cases where data is transferred outside the EU/EEA, specific protective measures are applied to ensure data security.

3.10. The Data Controller does not engage in automated decision-making or profiling when processing personal data.

4. Data Subject Rights

4.1. According to the GDPR and Latvian legislation, you have the right to:

4.1.1. Access your personal data and obtain a copy;

4.1.2. Request rectification of inaccurate, incorrect, or incomplete personal data;

4.1.3. Request deletion of your personal data (“right to be forgotten”) or restrict processing, unless legally required to retain the data;

4.1.4. Withdraw your prior consent for data processing;

4.1.5. Request a temporary halt to the processing of all your personal data.

4.2. Withdrawing consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

4.3. Any objections may be addressed to the Data Controller via the contact information provided in this Privacy Policy. Upon receipt, the Data Controller will promptly review the objection and address any deficiencies.

4.4. If dissatisfied with the response, the Data Subject may contact the supervisory authority, the Data State Inspectorate.

5. Final Provisions

5.1. The Data Controller processes data based on appropriate legal grounds and adheres to data minimization and transparency principles.

5.2. The Data Controller protects the data using available organizational, financial, and technical resources, taking into account existing privacy risks and the available technical advancements.

5.3. The Data Controller does not disclose personal data or information obtained during service provision to third parties, except under the following circumstances:

5.3.1. Data sharing necessary to execute a contract with the Data Subject;

5.3.2. With the explicit consent of the Data Subject;

5.3.3. Upon request of authorized entities (e.g., law enforcement);

5.3.4 For the protection of the Data Controller’s legitimate interests as permitted by law.

5.4. The Data Controller reserves the right to amend or supplement the Privacy Policy at any time without prior notice. Amendments are effective upon publication on the Website. The current version is valid as of 01.