Privacy Policy

PRIVACY POLICY 

The Privacy Policy (hereinafter – the Policy) describes the procedure for processing personal data using the tourism services offered on the website www.latviarivers.com. 

The Privacy Policy explains how customers’ personal data is collected and used, and how customers can request, change or delete this information. Our aim is to guarantee that data processing occurs in accordance with the General Data Protection Regulation (GDPR), which must be applied in all the EU Member States from 25 May 2018.

PART 1 GENERAL TERMS AND CONDITIONS

1.1. The Customer is any natural person who uses, has used or has expressed a wish to use any services provided by www.latviarivers.com.

1.2. Personal data is any information directly or indirectly related to the Customer.

1.3. Personal data processing is any activity performed with personal data (including collection, recording, storage, modification, granting of access, making requests, transfer, deletion, etc.).

1.4. The manager is Vitalio Echazabal Acosta (hereinafter – LatviaRivers), a taxpayer registered with the State Revenue Service and a tourism service provider in whose name and interest personal data is processed and who is responsible for data processing.

1.5. LatviaRivers legally processes and protects customers’ personal data. Information obtained from customers is protected in accordance with the requirements of this Policy and the requirements of laws and regulations. 

1.6. Within the framework of applicable legislation, LatviaRivers ensures the confidentiality of personal data, and has implemented appropriate technical and organizational measures to protect personal data from unauthorized access, illegitimate processing or disclosure, accidental loss, alteration or destruction.

1.7. LatviaRivers uses IT systems to protect the privacy and integrity of customers’ personal data, and access to customer’s contact information. Customers’ data can be accessed only by those persons who really need to process this personal data in order to meet LatviaRivers’ liabilities to their customers.

PART 2 PERSONAL DATA PROCESSING

2.1. Categories of customers’ personal data collected and processed by LatviaRivers:

• Identification data, such as name, surname, personal identification number, date of birth.
• Contact information, such as declared and actual address (including the country of residence), phone number, email address, social network accounts.
• Financial data, such as the bank or other payment platform, account number.
• Service-related data, such as submitted applications, selected routes, transfer routes, choice of accommodation, choice and specifics of catering services, requests and complaints, correspondence within the service.
• Insurance data – insurance period, insured risks.
• Data on habits, likes and satisfaction, such as service usage activity, services used, personal settings, Customer’s satisfaction.
• Other personal data – language of communication, gender, family composition, specific diet.

2.2. Objectives and reasons of personal data processing:

• processing of informative and request emails, providing the potential Customer with the requested information about the tourism service on the basis of the legal interest of LatviaRivers; 
• tourism service application processing and provision of subsequent services (such as development and provision of a tourist route, boat rental, guide services, transfer, transport services, insurance, accommodation, catering (specific diet at the Customer’s request), etc.), providing data topicality and accuracy on the basis of the legal interest of LatviaRivers, as well as to ensure feedback to the Customer or potential customer who has intentionally provided this data;
• automatic addition of a standardized insurance policy to the tourism service package on the basis of the legal interests of LatviaRivers and the requirements of legislation;
• communication with the Customer by telephone and electronically to inform about any changes regarding the operation and services of LatviaRivers, on the basis of the legal interest in ensuring and improving the quality of services as well as developing new tourism services; 
• implementation of marketing activities – to advertise the services of LatviaRivers on the website and other means of communication, to conduct surveys, market analyzes, compile statistics for the purpose of measuring advertising effectiveness, getting the Customer’s consent and on the basis of the legal interest in evaluating existing services and developing new services;
• use of the data in any other lawful way that complies with the laws and regulations. 

2.3. Types of data collection. Information is obtained:

• on the online website www.latvianrivers.lv, when the Customer fills in the application; 
• via email, social networks, telephone or other electronic communication means; 
• during the provision of services, by applying for additional services in person. 

2.4. Personal data will only be processed for as long as necessary. The storage period may be based on the duration of the business relationship with the Customer, the legal interest of LatviaRivers or applicable legislation (for example, on accounting, limitation period, debt collection, etc.). The data storage period may be longer than the business relationship between LatviaRivers and the Customer, but not longer than the limitation period.

PART 3 AUTOMATIC DECISION MAKING 

3.1. The company does not make automatic decisions or profiling in the processing of customers’ personal data.

PART 4 PERSONAL DATA RECEIVERS

4.1. The Customer’s personal data processed at LatviaRivers may be transferred to other recipients (third parties) if it is necessary for the provision of a quality service.

4.2. Personal data may be transferred to other institutions and organizations, such as:

• payment service providers (credit card companies, banks and other payment service providers, such as Stripe.com, PayPal.com);
• law enforcement institutions, debt collection service providers, sworn enforcement officers, tax administration institution;
• accounting service providers, auditors, lawyers, financial consultants;
• LatviaRivers service providers, such as archiving and postal service providers, couriers, IT solution technical support specialists, website maintenance service provider, email system maintainer, marketing service providers;
• transport, catering and accommodation providers selected by the Customer.
• insurance service provider.

4.3. In some cases, when transferring data to other independent institutions or organizations, the data recipients themselves are responsible (other data controllers) for the processing of personal data, which means that LatviaRivers does not control how the information transferred to these institutions will be processed. Examples of such cases are:

• law enforcement institutions (police, SRS, etc.) if the data is requested in accordance with the requirements of legislation or due to suspicion of a crime;
• payment service providers (credit card companies, banks and other payment service providers such as Stripe.com, PayPal.com).

4.4. Data transfer may occur without the Customer’s consent in cases where it is required by legislation or where non-transfer of data may harm and endanger the legitimate interests and security of the company, LatviaRivers, the Customer or other persons.

4.5. Security measures for the further transfer and processing of data are followed to the same extent as provided by LatviaRivers, in compliance with this Policy and other internal documents within the legal ensuring of personal data processing.

4.6. The Customer’s data is not transferred outside the European Union and the European Economic Area. Should such a transfer occur, the requirements of laws and regulations regarding the transfer of data outside the borders of the European Union and the European Economic Area would be complied with, including the transfer could take place if there was a legal basis for implementing a legal obligation, such as execution of contract, or the Customer’s consent would be obtained and appropriate security measures taken.

PART 5 CUSTOMER’S RIGHTS AND OBLIGATIONS 

5.1. The customer as a data subject has the rights: 

• request the correcting of their personal data if they are inappropriate, incomplete or incorrect.
• object to the processing of their personal data if the use of personal data is based on the implementation of the legal interest of LatviaRivers,
• request the deletion of their personal data, for example, if the personal data is processed on the basis of consent, but the Customer has withdrawn their consent. The right to request the deletion of their data is not valid if the personal data whose deletion is requested are also processed on the basis of another legal basis, such as a contract or obligations under the relevant laws and regulations,
• receive information on whether LatviaRivers collects and processes the Customer’s data,
• withdraw their consent to the processing of their personal data in the way it was provided or in another easily accessible way,
• receive information from the Company about the purposes of the Customer’s personal data processing,
• find out the information about third parties to whom personal data have been transferred, unless the providing of such information is prohibited by law,
• submit complaints regarding the use of personal data to the Data State Inspectorate, if the Customer considers that the processing of their personal data violates their rights and interests in accordance with the applicable laws and regulations.

5.2. The Customer is obliged to provide LatviaRivers with information on changes in their personal data in due time and to the necessary extent, if this may affect the quality of the tourism service.

PART 6 RULES FOR THE USE OF COOKIES 

6.1. “Cookie” is a small piece of information or a small text file that the website stores on a computer or mobile device when the Customer visits the LatviaRivers website. The cookie itself does not contain any personal data, such as email address or customer’s name, but is used to make the website application easier. It also does not affect the customer’s computer or mobile device in any way. It allows the server to collect the information from the Client’s browser, so there is no need to re-enter the data when returning to the website or moving from one page to another. It is temporarily stored in your computer’s memory while the browser is searching for information, but disappears as soon as the browser is closed.

6.2. LatviaRivers website uses cookies to improve the quality of the offered services. LatviaRivers uses technical cookies that allow you to use the website and ensure its functioning. Data received in this way is stored for 3-6 months, after which it is deleted. Other – analytical or functional cookies are not used and data on user habits are not analyzed or used.

PART 7 POLICY AMENDMENTS AND CONTACTS 

7.1. LatviaRivers has the right to unilaterally make amendments to the Policy. The current version of the Policy will be available on the website www.latviarivers.com.

7.2. This Privacy Policy applies only to this website and does not apply to the sites owned by third parties.

7.3. Links to other websites with the intent to redirect the customer to another website have their own privacy policy. As LatvianRivers does not control these websites, their maintainers are responsible for them. Therefore, the Customer should read the privacy policy of the website which is visited.

7.4. LatviaRivers contact information – email: info@latviarivers.com; mobile phone: +371 26579275 (Latvia), +346 39259479 (Spain).