Data processing

Processing of personal data

Privacy and Trust in

We take a variety of steps to ensure the security of your personal data and that they are processed in accordance with the regulatory framework. Our data Protection Officer monitors compliance with the requirements, guidelines and procedures of the personal data Protection Framework.

Why we collect personal data?

Postal services

process personal data to provide our basic services - processing and delivery of mail. If you don't provide the personal data you need, you won't be able to receive it. You can specify your e-mail address and/or phone number for

You can receive an SMS notification about a mailing sent to you that has not been issued or delivered to your mailbox if you have a mobile phone number in the to your mailing . in this case, will receive an SMS notification asking you to come to your mailing location.

when you fill out a specific form of submission, you can also receive an SMS notification about a mailing addressed to you that it does not contain a mobile phone number.

mail services by processing information in the

mobile app If you use our mobile app and have activated device location functionality, the app can determine the location of the user (location data) to display the nearest postal service locations to receive our services at that time. This option is also available by manually choosing the relevant customer center or post office. the phone number specified in the user profile in the

after registration in the application is processed to inform the user about upcoming mailings that contain the customer's phone number, thus expressing such a desire and providing the information necessary for receiving an e-call to the sender of the mailing. the

application uses the address specified in the registered user profile to inform the user about upcoming mailings, to which the mailing address record is provided according to the address structure of the national address Registry of the national Land Service, and the mailing has been linked to the user as the recipient and the mobile phone number specified by the user in our information system. the

application invokes the call and email function on request so that the user can call the mail customer support team. the

application requires Internet access and can stop using at any time, uninstalling and deleting data.

kontaktinformācija personas legal basis Juridiskais Personiskā personal information (Name)

provision of

tālruņa phone number

tālruņa email address

the type of personal identification document (passport or identity card) by the to identify the personal

by using postal services, certify that the personal data indicated are accurate and correct. We cannot guarantee the provision of services if they are inaccurate. Subscribing to the

we are processing your personal data for press subscription. If you do not provide them, you will not be able to receive the service. You can choose to provide your e-mail address and/or phone number for

personal data category
Contact information (address of residence) payment information if cashless payment (payment card number) phone number on mailing
location data	your consent
shall be	by the legal duty of the

personal data category

Contact information (address of residence)

payment information if cashless payment (payment card number)

phone number on mailing

location data

your consent

shall be

by the legal duty of the

Contact information (residence address)

payment information when making a cashless payment (payment card number, account number) provision of

consent to

legal basis
personal information (Name)
service for
email address phone number

legal basis

personal information (Name)

service for

email address

phone number

by mail, confirm that the personal data provided is accurate and correct. We cannot guarantee the provision of services if they are inaccurate.

Financial services

process your personal data to provide financial services, including cash and non-cash transfers (transfers), home delivery of pensions, benefits and rewards, payment of bills by utilities and other providers, administration of loan and credit applications (transfer to lender). We are bound by the obligations of financial service providers laid down in laws, including the duty to identify our client by verifying identity.

Juridiskais Juridiskais legal basis

personal identification document (passport or identity card) data legal interest and legal duty identify personal

personal information (given name, surname)

Contact information (address of place of residence, e-mail address, telephone number) provision of

Service

video surveillance Vike video surveillance and process your personal data when visiting our Postal Service locations, for the safety of both you and our employees, customers, and property. We conduct video surveillance on strict security and privacy rules using modern technology and equipment. We store video surveillance records in postal systems for up to three months.

personal data Category legal basis biometrics data (facial image) legitimate interest and vital interests, including health and life protection

unaddressed advertising/informational materials

sanitizing your consent, we inform you of various mail and third-party news and updates we deliver as advertising and informational materials. If you 't want to receive the unaddressed ad, you must provide it on our website or in one of the postal locations.

Juridiskais
personal information (Name) Contact information (address of residence, email address, mobile phone number) demographic data (age, gender, number of people in the family) Social Economic data (income, language, number of pets, car) Pichographic data (circle of interest, hobbies)	your consent to

Juridiskais

legal basis

personal information (Name)

Contact information (address of residence, email address, mobile phone number)

demographic data (age, gender, number of people in the family)

Social Economic data (income, language, number of pets, car)

Pichographic data (circle of interest, hobbies)

your consent to

Cookies (Cookies) Cookies are small text files created and stored on an Internet user's device (computer, tablet, mobile phone) by visiting the mail website. Cookies “remember” your experience and basic information and thus improve the ease of use of your website. using cookies in your

processes your website's usage history data, diagnoses problems and weaknesses in how your website works, collects user habits statistics, and ensures the full and easy use of site functionality.

If you don't want to allow cookies, you can stop using cookies by changing your Internet browser settings, but your website may be disrupted and difficult to use. Deleting stored cookies is possible in the Internet browser settings section of your device by deleting the saved cookie history.

http://www.pasts.lv/pakalpojumi

from which sources are collecting personal data?

We collect personal data you provide, what is detected before we provide our service, and when you visit the locations where postal services are provided (video surveillance), the home page (when applying for the targeted advertising), or the customer self-service site mans.pasts.lv and manspasts.lv (for mailing).

transfer personal data to whom?

service providers and collaborators

to fulfill their obligations, we provide your personal data to companies that provide the services required to fulfill the obligations. We carefully check the providers who process your personal data on our behalf and on our behalf. We assess whether cooperation partners (personal data controllers) apply appropriate security measures to ensure that the processing of personal data takes place in accordance with our tasks, instructions, instructions and legal requirements. These companies are not entitled to use personal data for other purposes. in the of

rights protection, State and local government institutions

in order to fulfil the duties of laws, we may transfer your personal data to law enforcement institutions (for example, police), as well as State and local government institutions upon their request. We can also transfer your personal data to law enforcement authorities (such as courts), as well as state and local government authorities to defend the legal interests of the postal service by drawing up, filing and defending legal claims. the transfer of personal data
by the

outside the European Union and the European Economic area (EU/EEA)

We always seek to process your personal data within the territory of the European Union and the European Economic area (EU/EEA). They are not processed in a country outside the EU/EEA to provide the service you have chosen. the transfer and processing of

personal data outside the EU/EEA can take place if there is a legal basis, that is to say, to fulfil a legal obligation, to enter into or perform a contract, or with the consent of the customer, and appropriate safeguards have been taken.

How long do we keep personal data?

all personal data is stored for so long, while using our services or until you revoke your consent, if they are processed on that basis. for

, longer retention periods for personal data are allowed to meet legal requirements for minimum retention periods for documents or information, or to protect the legitimate interests of the mail. for

, when this period is over, we safely delete personal data or make it unavailable (archiving) or unidentifiable.

as protecting personal data?

provisioning, we continually review and improve safeguards to protect personal data from unauthorized access, accidental loss, disclosure or destruction. We apply modern technology, technical and organizational requirements, including through firewalls, intrusion detection, analysis software, and data encryption.

, however, we recommend that you follow the general security rules for your computer and Internet use, as well as the protection and storage requirements for your private data (especially personal identification documents).

Mail does not accept responsibility for unauthorized access to personal data and/or loss of data, if this is due to fault or negligence on the part of the client. the

your right to

the

regulatory framework in the field of data protection confers a number of rights on the processing of personal data. in the

Access to personal data , you have the right to request confirmation or to process personal data related to you, and in such cases request access to personal data we are processing, or to provide personal data information, if there is no provision for direct access. Repair of

personal data

If you believe that information about you is incorrect or incomplete, you have the right to ask for it to be corrected. revoking the consent of the

You have the right to revoke consent to the processing of personal data at any time.

objection to the processing of data for the purposes of delivering the addressed advertising

You have the right to object at any time to the processing of your personal data for the purposes of delivering the addressed advertising.

objection to processing, on the basis of legitimate interests in

, you have the right to object to the processing of personal data that we process on the basis of our legitimate interests, however, we will continue to process them if we have motivated reasons to do so.

to implement the above, you must submit a written submission to the Mail or Postal data Protection Officer. Deleting

under certain circumstances You have the right to request the deletion of personal data, however, this does not apply when the law requires them to be retained.

to implement the above, you must submit a written submission to the Mail or Postal data Protection Officer. restriction of processing of

in certain circumstances You have the right to restrict processing of your personal data. If you request limited data processing, this may affect the receipt of postal services.

to implement the above, you must submit a written submission to the mail or postal data protection officer. transfer of

data to the

You have the right to receive or transfer your personal data to another data controller. This right includes only data that you have provided to us on the basis of consent or contract, and if processing is automated.

to implement the above, you must submit a written submission to the Post or Postal data Protection Officer.

to contact whom?

VAS “Latvijas Pasts” North Street 10,
Airport “Riga”, Marupes County,
LV-1000
< a href = “mailto:info@pasts.lv” > info@pasts.lv information phone: 27008001, 67008001

data Protection Officer Contact information

< a target = “_ blank” href = “mailto:juristi@pasts.lv” title = “mailto:juristi@pasts.lv” rel = “noreferrer noopener” > juristi@pasts.lv

If you are not satisfied with the response you receive, you have the right to file a complaint with the data State Inspectorate ( www.dvi.gov.lv ).

13.03.2020

personal data processing notification

in order to assess your eligibility as an applicant, as an employer, we must process your personal data. in the

, the
controller and his/her contact details in the

with regard to the processing of the applicant's personal data, the employer shall be considered as a controller of personal data within the meaning of the General data Protection Regulation. in the

, the contact details of the employer with regard to the processing of personal data shall be :

address of the

: Ziemelu Street 10, Riga Airport Marupes Parish, Marupes District, LV-1053;

email address: < a target = “_ blank” href = “mailto:juristi@pasts.lv” title = “mailto:juristi@pasts.lv” rel = “noreferrer noopener” > juristi@pasts.lv

personal data

personal data is any information about an identified or identifiable natural person, in this case the applicant. The employer shall process the personal data of the applicant only to the extent reasonably necessary, taking into account the requirements of the laws and regulations in force in the . in the of

, the employer may process the following categories of personal data, for example: identification of the

: given name, surname, personal identity number; contact details of the
: address, email, phone data characterising the qualification of the
: education, professional experience, CVs and information contained in the application; recommendations of the
: the identity and contact details of the former employer's representative, the content of the reference; data generated during the
selection process: tests, tasks, interviews and information obtained during them;
convictions: criminal record information (for a competent person who requires such verification for the performance of his or her duties in accordance with the requirements of the Law on Prevention of money Laundering and terrorism and Proliferation financing or other binding laws and regulations; for a
bank account: if a job offer is made to the applicant, a bank account for the preparation of the employment contract and the transfer of salary; video recording of the
: if the applicant is invited to interview, we shall inform that video surveillance is performed at the premises of the employer; other data shall be
: all other data, submitted at the discretion of the applicant in the selection process. the

advises against providing personal data that are not necessary for the selection process, such as pregnancy and marital status information, religious or philosophical beliefs, sexual orientation information and the like.

in cases where the applicant submits personal data that are not necessary and/or inappropriate for the selection process (e.g. religious beliefs), they shall be erased/redacted as far as possible by the employer.

processing purposes and legal basis

purpose
personal data legal basis selection of identification data, contact details, qualification characterisation data, recommendations, data generated during the selection process, other data identification data, contact information, qualification characterisation data, recommendations, data generated during the selection process, other data the legitimate interests of the to employment contract conclusion of the to comply with the requirements of the regulatory framework; for example, with regard to the members of the board of directors and Council, personal data specified in the to ensure a safe environment and protect their immovable property, video surveillance is performed at the premises of the employer in the legitimate interests of the – protection of immovable property, vital interests – safety in the working environment in the

applicants
consent: the applicant sends the application and CV
applicants database maintenance consent: the applicant chooses to store in the CV database with his or her active activity in order to receive information regarding job offers in the future evaluation of applicants for

(conformity with the criteria specified by the employer) identification data, contact information, qualification characterisation data, recommendations, data generated during the selection process, other data employer, such as the selection of the best employees in order to ensure effective functioning of the

Communication with the applicant Contact information consent: the applicant, through his or her active activities, sends an application to the the preparation of the identification data, contact details, bank account contract and fulfilment of legal obligations under the Labour Law to the
to the regulatory framework, for example, criminal record performance of legal duties of the

video recording

regarding the members of the board of directors and Council the requirements of Section 31, four of the Law on the Management of capital shares and capital companies of a public person are also applicable. Additional personal data, such as political affiliation and criminal record, are also examined accordingly. in the

, these activities are performed in order to fulfil the obligations laid down in laws and regulations. The employer has the right to request a statement from the punishment Register regarding impunity of the applicant for a specific position for the last 12 months, as well as to examine publicly available information (LLLursoft IT, SRS, SIA Creditreform Latvia, SIA PAUS consults and other databases) regarding the applicant in order to perform an in-depth reputational study thereof. recipients of personal data of the

We may transfer your personal data to the
: a

service provider providing candidate evaluation and evaluation services, informing the applicant thereof prior to the transfer of the data;

to law enforcement authorities, such as the police, but only upon request and only if provided for by the regulatory framework. the companies mentioned in the

may process your personal data only in accordance with our instructions. the transfer of

data to third countries to the

will not be transferred by the employer to the applicant's personal data outside the European Union. sources of data
by the

the sources of personal data: the applicant for

shall submit his personal data, such as his resume or correspondence, independently; in the

, we may request feedback on the applicant to one of the previous employers in the last 12 months, in agreement with the applicant; in

, we can check information about applicants' business and employment objectives on social networks such as LinkedIn ;

in individual cases recruiting companies and public databases. the

retention period
personal data shall be stored up to: the

for achieving the stated purpose of processing;

in so far as the regulatory framework obliges the employer to process and/or store such data; in the

, where processing takes place on the basis of consent, personal data shall be processed as long as the consent given is valid and has not been withdrawn. in the

, the
employer shall retain the personal data of the applicant four months after the end of the relevant vacancy competition. If the written consent of the applicant has been received for the storage and inclusion of data in the register of applicants of the employer, then personal data shall be stored 12 months after the end of the competition for the relevant vacancy. in the

, if the employer establishes an employment relationship with the applicant, the personal data of the applicant may be stored longer and internal regulations and requirements of regulatory enactments of the employer shall be applicable for the processing thereof. For example: the
of

in accordance with Cabinet Regulation No. 690 of 13 November 2018, Regulations regarding documents certifying the course of work or service of a person and documents certifying education, which have archivist value and the time periods for the storage thereof, documents regarding establishment, amendment and termination of employment legal relations (order documents, employment contracts and amendments thereto, surnames and agreements regarding termination of employment relations), documents equivalent thereto and the registers thereof, which are necessary for administration of employment legal relations the shelf life shall be 75 years; for

in accordance with the accounting law, the shelf life of the corroborative documents regarding the monthly salary (wages) calculated for employees, divided by years and months, shall be ten years. for

, the security of personal data of the

shall be ensured, continuously reviewed and improved by the employer in order to protect personal data from unauthorised access, accidental loss, disclosure or destruction. To implement this, the employer applies modern technology, technical and organizational requirements, including through firewalls, anti-virus programs, encryption. in the event of a

personal data security incident, if this poses as high a risk as possible to the rights and freedoms of the individual, we will immediately notify you by contacting you in person, if possible, or by publishing this information on our website, or otherwise. in the
, what laws and regulations apply? the
to the selection of the applicant is applicable to: the General data Protection Regulation of the

; the

Law on the processing of personal data; the

various special legal norms (for example, the Labour Law, the Postal Law). the right of the

to
the regulatory framework of the
in the field of data protection grants the applicant several rights to influence the processing of personal data. In order to exercise this right, please: the

shall submit a written submission to the employer in person (a passport or ID card shall be taken with it);

is sent to with a secure electronic signature signed submission to < a target = “_ blank” href = “mailto:juristi@pasts.lv” title = “mailto:juristi@pasts.lv” rel = “noreferrer noopener” > juristi@pasts.lv.

After receipt of the submission, your employer will verify your identity and respond within a month. in the

, you have all the rights guaranteed by the General data Protection Regulation, such as: the right of

to access and receive information on the processing of personal data; the right of the

to request the rectification of incorrect, inaccurate or incomplete personal data, to restrict their processing; the right of the

to be forgotten; the

's right to data portability; the right of the

has referred a complaint to the State data Inspectorate (http://www.dvi.gov.lv/lv/funkcijas/kontaktinformacija/); the
shall
the right to withdraw the tolerance. The applicant shall have the right to withdraw consent to the processing of his personal data if the basis for the processing of personal data is consent. The employer's contact details specified in this notice may be used to revoke consent. If an applicant withdraws consent to the processing of his personal data necessary to assess his or her compliance with the requirements of the advertised vacancy and the recruitment criteria of the employer, this may affect the results of the evaluation of the applicant and the employer will not be liable for such consequences. the

Additional information is available in the General data Protection Regulation, which can be found in the

, the employer has the right to make additions to this document by making available the up-to-date version thereof on its website.

the
guidelines have been developed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General data Protection Regulation) in order to verify that the cooperation partners will be able to meet appropriate requirements for the processing of personal data, including: guaranteeing their security.

which partners are subject to these guidelines? GUIDELINES is filled in.
What role is the co-operation partner role? before entering into any contract for the head of the unit, in consultation with a postal personal data specialist, it is necessary to assess whether the co-operation partner is: an independent administrator of the

(for example, credit institutions governed by the regulatory framework); a joint controller of the

(the purposes and types of processing of personal data are determined jointly with the postal service);

processor (Processing personal data on behalf of the postal service, such as IT services, recruitment services, etc.).

If the co-operation partner is a joint controller, it is necessary to enter into a contract in accordance with Article 26 of the General data Protection Regulation, which reflects the respective roles and relationships of the joint controller with the data subjects.

If the co-operation partner is a processor, it is necessary to enter into a contract in accordance with Article 28 of the General data Protection Regulation.

kam The postal service shall use the personal data processing contract prepared by the postal service or, exceptionally, the personal data processing contract prepared by the co-operation partner, if necessary. in both cases, the personal data processing contract shall comply with the conditions of Article 28 of the General data Protection Regulation, including: the subject-matter of the contract and the duration of the processing must be defined in the

; the obligations and rights of the parties should be defined in the

; the nature and purpose of the treatment must be determined in the

; the

must specify the types of personal data and categories of data subjects.

It is also necessary to include in the personal data processing contract an indication that: the processor of the

undertakes to process personal data only in accordance with the purpose of the transfer of personal data specified in writing by the Postal Service and in accordance with the mandatory technical and organisational requirements for the protection of personal data; the processor of the

shall ensure that persons authorised to process personal data, including employees, are committed to confidentiality; the

processor may not hire sub-processors without informing the mail; the processor of the

shall erase or return the data to the post after the termination of the contractual relationship; the

processor must cooperate with the postal service to ensure compliance with the requirements for the protection of personal data, including audits and inspections, in order to respond to requests from data subjects, to carry out an assessment of data protection, etc.; the processor of the

undertakes, in the event of personal data breaches, to report the personal data breaches to the Post without delay; the processor of the

undertakes to provide the data State Inspectorate of the Republic of Latvia with the information and documents necessary for the performance of its tasks related to the processing of personal data; it is also recommended that the relevant liability clauses or liability insurance requirements be included in the

. the
what are the requirements for processors? the
Mail uses only processors that provide sufficient guarantees that appropriate technical and organisational measures will be implemented in such a way that the processing will comply with the requirements of the General data Protection Regulation and ensure the protection of the data subject's rights. the
to verify that the processor complies with these requirements, the Post uses the questionnaire in the Annex to the Guidelines, which the potential collaborator must complete before entering into a contractual relationship. The survey may subsequently be attached as an Annex to the contract for the processing of personal data. the processing of personal data
by the

ar

do not need to enter into personal data processing agreements with all partners, perform compliance assessments on compliance with personal data processing requirements.

for example: when a contract is concluded for the cleaning of premises, it is not intrinsically relevant for the processing of personal data.

guidelines apply only to those collaborators whose services are intrinsically related to the processing of personal data.

for example: IT support, maintenance of information systems (you can access internal IT systems and see or perform any activity with personal data there), recruitment services (address candidates on behalf of the mail and process their personal data), out-of-court debt collection companies, etc.

before entering into a contract with the co-operation partner, an ANNEX to the

should be included in the contract for processing personal data with the processor?

in countries outside the European Economic area the
Mail shall, as far as possible, select cooperation parters processing personal data within the European Economic area. the

shall only exceptionally allow cooperation with cooperation parters processing personal data outside the European Economic area and in such cases there shall be adequate safeguards for personal data in accordance with Chapter V of the General data Protection Regulation, for example, the adequacy decision, standard contractual clauses, binding company rules, etc.,


applicants
consent: the applicant sends the application and CV
applicants database maintenance	consent: the applicant chooses to store in the CV database with his or her active activity in order to receive information regarding job offers in the future evaluation of applicants for
(conformity with the criteria specified by the employer) identification data, contact information, qualification characterisation data, recommendations, data generated during the selection process, other data	employer, such as the selection of the best employees in order to ensure effective functioning of the
Communication with the applicant	Contact information	consent: the applicant, through his or her active activities, sends an application to the	the preparation of the	identification data, contact details, bank account	contract and fulfilment of legal obligations under the Labour Law to the
	to the regulatory framework, for example, criminal record performance of legal duties of the

video recording

	ar

do not need to enter into personal data processing agreements with all partners, perform compliance assessments on compliance with personal data processing requirements. for example: when a contract is concluded for the cleaning of premises, it is not intrinsically relevant for the processing of personal data. guidelines apply only to those collaborators whose services are intrinsically related to the processing of personal data. for example: IT support, maintenance of information systems (you can access internal IT systems and see or perform any activity with personal data there), recruitment services (address candidates on behalf of the mail and process their personal data), out-of-court debt collection companies, etc. before entering into a contract with the co-operation partner, an ANNEX to the
		should be included in the contract for processing personal data with the processor?

in countries outside the European Economic area the	Mail shall, as far as possible, select cooperation parters processing personal data within the European Economic area. the shall only exceptionally allow cooperation with cooperation parters processing personal data outside the European Economic area and in such cases there shall be adequate safeguards for personal data in accordance with Chapter V of the General data Protection Regulation, for example, the adequacy decision, standard contractual clauses, binding company rules, etc.,