1. General information
   1.1. SIA BALTS, hereinafter — the Controller, is the administrator and maintainer of this website www.baltspaper.lv. The goal of this Privacy Policy is to provide information regarding the purpose and extent of personal data processing, the protection of personal data and the period of processing to a natural person, hereinafter — the Subject, when collecting and processing the Subject’s data.
   1.2. Details of the Controller:
   SIA BALTS
   Unified registration No.: 40003375832

Address: Valguma iela 10, Riga, LV-1048, LATVIA
E-mail: birojs@baltspaper.lv
1.3. Contact information for data protection matters:
1.3.1. Employee’s e-mail: evelina@baltspaper.lv
1.3.2. .Data Protection Officer:
Līga Černuho
e-mail: liga@zitc.lv, tel.: +371 63026600
1.4. The Controller undertakes to protect the privacy of the Subject’s personal data as well as to process and accumulate only the personal data which have been lawfully collected and are necessary for ensuring the operation of the company, for compliance with laws, regulations and contractual obligations.
1.5. By visiting and using the website www.baltspaper.lv, visitors agree to the provisions of the Privacy Policy described herein, including methods of use of cookies, and to the use of statistical data obtained by Google Analytics for the purposes of improving services and marketing.
1.6. The meaning of definitions used in this Privacy Policy shall be the same as that of the definitions used in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC

2. Area of Application of the Document
2.1. ‘Personal data’ means any information relating to an identified or identifiable natural person.
2.2. This Privacy Policy is applied to ensure privacy and the protection of personal data with regard to the following:
2.2.1. natural persons – representatives of clients, contact persons, partners and other users of services (including, potential, former and current), as well as third parties which, in relation to the provision of services to a natural person (clients, partners), receive or transfer any information to the Controller (including contact persons, payers, etc.);
2.2.2. visitors to the Controller’s office and other premises;
2.2.3. clients of the website maintained by the Controller, hereinafter — Clients
2.3. The Controller ensures the privacy of Clients and the protection of personal data, and observes the right of Clients to the lawfulness of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and other applicable laws and regulations in the field of privacy and data processing.
2.4. The Privacy Policy applies to the processing of data regardless of the form and/or environment in which the Client provides his/her personal data (on the Controller’s website, in paper form or by phone) and of the company’s system or paper form in which they are provided.

3. Collection and Use of Personal Data
3.1. We can collect personal data from you at the moment when you provide information to the Controller to register yourself on the website www.baltspaper.lv, receive information or consignments, leave a comment, ask a question, download files, contact the Controller or for other purposes. Please note that we will not collect personal data on you unless you provide this information voluntarily.
3.2. Data which can be collected by the Controller directly from you:
3.2.1. name, surname;
3.2.2. postal address;
3.2.3. e-mail address;
3.2.4. telephone number;
3.2.5. age;
3.2.6. date of birth;
3.2.7. sex.
3.3. If you subscribe to our newsletter, the Controller can send information regarding organised activities, campaigns/lotteries and planned events to your specified e-mail address.
3.4. The Controller processes personal data for the following purposes:
– the preparation and conclusion of a contract;
– ensuring/maintaining the provision of services;
– the improvement of services, the development of new services;
– facilitating the use of services;
– the provision of services to partners;
– the examination and processing of objections;
– the improvement of loyalty; satisfaction measurements;
– the administration of settlements;
– the recovery and collection of debts;
– the maintenance of the website and the improvement of operation;
– statistics and operation analysis;
– planning and accounting;
– the measurement of effectiveness;
– ensuring data quality; – the preparation of reports;
– the performance of client surveys;
– other specific purposes, regarding which the Client is informed at the moment he/she provides the data concerned to the Controller.

4. Legal Basis for the Processing of Personal Data.
4.1. The Controller processes the personal data of the Client based on the following legal grounds:
4.1.1. for the conclusion or performance of a contract — to conclude a contract after the application of the Client and ensure its performance;
4.1.2. for the observance of laws and regulations — to comply with the Controller’s obligation determined by external laws and regulations;
4.1.3. according to the consent of the data subject;
4.1.4. for the purposes of lawful (legitimate) interests — the purposes of the legitimate (lawful) interests pursued by the Controller arising from the obligations or the contract concluded by the Controller and the Client, or the law.
4.2. The lawful (legitimate) interests of the Controller are the following:
4.2.1. to verify the identity of the Client before the conclusion of a contract;
4.2.2. to ensure the fulfilment of contractual obligations;
4.2.3. to prevent unjustified financial risks to its operation;
4.2.4. to analyse the websites of the Controller, develop and introduce their improvements;
4.2.5. to develop and improve services;
4.2.6. to advertise its services by sending informative messages;
4.2.7. to send other messages regarding the performance of a contract and events crucial for the performance of a contract, as well as to carry out Client surveys regarding services and their user experience;
4.2.8. to ensure and improve the quality of services;
4.2.9. to administer payments;
4.2.10. to administer outstanding payments;
4.2.11. to apply to state administration and operational working institutions and court for the protection of its legal interests;
4.2.12. to inform the public about its operation.

5. Data Security
5.1. The Controller protects Client data using modern technology possibilities, taking into account existing privacy risks and reasonably available organisational, financial and technical resources of the Controller, inter alia, taking the following security measures:
5.1.1. Data encryption when transmitting data (SSL encryption);
5.2. The company stores your personal information as long as is necessary to achieve the aforementioned purposes or fulfilling the requirements of laws.
5.3. All personal data which have become known to the Controller about the users of the website www.baltspaper.lv are deemed confidential information. Personal data are processed and used solely for the purpose specified herein and to the necessary extent.
5.4. In processing and storing personal data, the Controller ensures the protection of personal data from accidental or unlawful disclosure, change or any other unlawful processing.
5.5. Access to data processing and modification functions is granted to authorised responsible persons of the Controller.
5.6. The Controller does not disclose to third parties the personal data of the Client or any information obtained during the provision of services and the validity period of a contract, including information regarding received services, except the following:
5.6.1. if data have to be transferred to the third party concerned within the framework of a concluded contract in order to fulfil a function necessary for the performance of the contract or delegated by law (for example, to a bank within the framework of settlements or to ensure the service);
5.6.2. in accordance with explicit consent from the Client;
5.6.3. to persons stipulated by laws and regulations at their justified request, pursuant to the procedures and to the extent determined by external laws and regulations;
5.6.4. in the cases determined in external laws and regulations for the protection of legitimate interests pursued by the Controller, for example, by applying to court or other state institutions against the person who has infringed upon these legitimate interests of the Controller.

6. Storage of Personal Data
6.1. The Controller stores and processes the personal data of the Client as long as at least one of the following criteria exists:
6.1.1. only as long as the contract concluded with the Client is valid;
6.1.2. as long as the Controller or the Client can pursue their legitimate interests (for example, to submit objections or establish or exercise a claim in court) pursuant to the procedures laid down in external laws and regulations;
6.1.3. as long as any of the parties has a legal obligation to store data;
6.1.4. as long as the consent of the Client to the processing of personal data is valid, unless there is another legal basis for the processing of data.
6.2. After the referred to circumstances cease to exist, the personal data of the Client are erased.

7. Rights of the Data Subject (Client’s Rights)
7.1. The Controller undertakes to ensure the accuracy of personal data according to the information which has become known to an association while using the website www.baltspaper.lv.
7.2. Visitors to the website have the right to access their personal data by sending a request to the Controller for the provision of information by e-mail to: evelina@baltspaper.lv.
7.3. Visitors have the right to request the following information:
7.3.1. the purpose of and legal basis for the processing of personal data;
7.3.2. the date of last data modification;
7.3.3. the source of collection of personal data;
7.3.4. information regarding whether personal data are processed by automated means; and
7.3.5. other information, if stipulated by laws and regulations.
7.4. In accordance with laws and regulations, the Client has the right to obtain from the Controller access to his/her personal data, as well as to obtain from the Controller the supplement, rectification or erasure of data, or restrictions on the processing of personal data with regard to the Client, or the right to object to processing (including to the processing of personal data for the purposes of legitimate interests pursued by the Controller), as well as the right to data portability. These rights can be exercised in so far as the processing does not arise from the obligations of the Controller, imposed thereon by applicable laws and regulations and fulfilled for the purposes of public interests.
7.5. Visitors to the website www.baltspaper.lv have the right to obtain from the Controller the supplement and rectification of their personal data, the termination of data processing or the erasure of data, if they are outdated, incomplete, false, unlawfully processed or no longer comply with the referred to purpose of data processing. In the event you wish to erase your personal data or make changes therein, or you have any questions regarding the use of your personal data, please contact the Controller by email: evelina@baltspaper.lv.
7.6. The Client has the right to receive information determined by laws and regulations with regard to the processing of his/her data.
7.7. The Client may submit a request for the exercise of his/her rights:
7.7.1.in writing in person at the Controller’s office, producing a personal identification document;
7.7.2.by e-mail.
7.8. After receiving the Client’s request for the exercise of his/her rights, the Controller checks the identity of the Client, examines the request and fulfils it in accordance with laws and regulations.
7.9. The Controller provides a reply to the Client by post to his/her specified contact address in a registered letter or by e-mail, taking into account the method of receiving the reply specified by the Client as much as possible.
7.10. The Controller ensures the fulfilment of data processing and protection requirements in accordance with laws and regulations and, in the event of Client objections, takes appropriate measures to address objections. However, in the event of failure to do so, the Client has the right to apply to the supervisory authority, i.e., the Data State Inspectorate.

8. Changes to the Privacy Policy
8.1. We assume that before using the website www.baltspaper.lv, you have read and accepted this Privacy Policy. Should you disagree with this Privacy Policy, please do not provide any information when using the website www.baltspaper.lv. The Controller reserves the right to change and supplement the Privacy Policy without warning and at any time. The current wording of the Privacy Policy is available on the website www.baltspaper.lv.
8.2. On matters relating to the Privacy Policy or the processing of data as well as in other cases, please contact us by e-mail: birojs@baltspaper.lv.

9. Use of cookies. 

9.1. Cookies are small information files stored in your browser on your computer’s hard drive that are used as a mechanism for websites to remember useful information, such as your login information, and can make the website easier to navigate.

9.2.Cookies store information such as the IP address, the type of device used, the browser used, the activity on the Website and the websites visited.

1. Required cookies: Cookies are used to ensure the operation of the website, including allowing you to use our services and log in to your account. The required cookies are stored until the end of the session.
2. Functional cookies. These cookies are used to ensure the navigation of the website and the use of its functions, such as the shopping cart.
3. Analytical / performance cookies: Cookies are used to identify and count the number of visitors to the website, to see how these visitors navigate the website. Analytical / performance cookies are stored on your device at all times.
4. Target / Advertising Cookies: These cookies are used with your consent. Cookies are used to record your visit to the website, the websites you visit and the links you use to offer and display the products or services of us or our partners that are of interest to you. By visiting the website and using our services, you agree to the use of target / advertising cookies. Target / advertising cookies are stored until you delete cookies in your browser.
5. We use Google Analytics services. You can opt out by downloading and installing the Google Analytics Opt-out Browser Add-on. You can opt out of cookies using the private browsing mode provided by most browsers (private window, incognito window). Any cookies created in private browsing mode are deleted as soon as all browser windows are closed.