Privacy Policy and Cookies of the Association “Dr.Klauns”

The purpose of this privacy policy is to provide information on what personal data is processed by the association “Dr.Klauns”, the purposes and legal basis for this personal data processing, the scope of the processed personal data, the duration of personal data processing, as well as the rights related to the processing of personal data.

This privacy notice applies both to personal data we have obtained directly from you, as well as to such personal data we have obtained from third parties. As we regularly monitor whether our personal data processing complies with applicable legal requirements, we are entitled at any time to unilaterally amend this privacy notice in accordance with changes we make to our personal data processing activities.

Who is entitled to process your personal data and to whom can it be transferred?

Your personal data may be processed by the association “Dr.Klauns”, registration number: 40008199816, whose contact details are as follows:

• registered address: Tālavas gatve 3-74, Rīga, LV-1029, Latvia;
• email: info@drklauns.lv.

In certain cases, we are entitled to authorize a third party to process your personal data. Please note that we will transfer your personal data to third parties only:

• if we have concluded an agreement with the recipient of your personal data and are certain that the recipient can ensure appropriate personal data protection during processing,
• if we have a legal obligation to transfer your personal data to the respective recipient.

We may transfer your personal data to the following categories of data recipients:

• personal data processors who provide certain services necessary for our daily operations or organization of special events, such as our cooperation partners for donor data processing, IT service providers, postal and courier service providers, and other service providers:
  • the processor receives from us only the amount of personal data necessary to perform the specific task or provide the relevant service;
  • the processor processes your personal data only according to our instructions and does not use it for other purposes, nor does it transfer your personal data to other persons without our prior consent;
• other personal data recipients, including credit institutions, our financial and legal advisors, state and municipal authorities, as well as courts, so that we can fulfill legally binding obligations or defend our legal interests.

Personal data is processed only within the territory of the European Economic Area and is not transferred outside it. We process personal data in accordance with this Policy and applicable legal acts, including the Personal Data Processing Law and the General Data Protection Regulation (2016/679).

How do we protect your personal data?

We take care to ensure that your personal data is always secure and that its processing is carried out in accordance with the applicable laws and best practices. Therefore, we use various technical and organizational procedures to help ensure adequate protection of the personal data we process. We are committed to maintaining the privacy and confidentiality of information relating to former, current, and potential website visitors.

What personal data do we process, in what cases, and for what purposes?

We may process personal data of the following categories of data subjects – our donors, buyers who purchase goods from our online store, representatives of our cooperation partners, and other categories of data subjects whose personal data we may access within the scope of our operations.

Considering our activities, we may process the following categories of personal data – contact information (such as name, surname, address, email, and other data), bank account information, and any other personal data that may become available to us within the scope of our operations.

We use cookies to obtain information about how you use our website. Cookies allow us to ensure and improve the technical functionality of the website. The collected information does not contain data that would allow us to identify you as an individual natural person.

Please note that donations cannot be made without the involvement of a payment service institution, which must receive and process certain personal data about you. When donating money via bank transfer, you have the right to independently choose the payment service provider. The association does not transfer personal data to payment service providers and cannot make any payments on your behalf or in your name without your involvement.

We process your personal data only if we have a legal basis to do so:

• Your consent – in cases where you have explicitly expressed your consent in writing or confirmed it through your actions. In such cases, we process only the personal data for which you have clearly consented;
• our legitimate interests – we are interested in achieving as wide recognition as possible to attract funds and support for our activities, therefore we may process your personal data on the basis of our legitimate interests. In some cases, we may also defend our interests, for example, if you have submitted a complaint regarding our activities. In such cases, we process only the personal data that is strictly necessary to ensure our legitimate interests;
• our legal obligation – in some cases, legal acts impose obligations on us, such as submitting reports to tax authorities, etc. In such cases, we process only the personal data necessary for fulfilling our legal obligations;
• conclusion or performance of a contract – if you plan to cooperate with us, you conclude a contract with us. To conclude the contract, certain personal data is required. Personal data is also necessary for us to fulfill the contractual obligations.

If your personal data is processed based on our legitimate interests, we assess the possible impact on your rights and freedoms and ensure that our legitimate interests in processing your personal data do not adversely affect your rights and freedoms.

We are entitled to use personal data for the purposes described in this privacy notice, as well as for other purposes about which we have informed you at the time of obtaining the personal data.

How long do we store your personal data?

We process your personal data only as long as we have a legal basis to do so or as long as other binding conditions remain in force. For example, the storage periods for your personal data may be influenced by the following circumstances:

• the legally prescribed procedures for exercising our legitimate interests (such as submitting objections or filing a claim in court);
• a legal obligation requiring personal data to be stored for a certain period;
• as long as your consent for a particular data processing activity remains valid, unless another legal basis applies.

When the aforementioned conditions for processing your personal data no longer apply, your personal data is irreversibly deleted/destroyed and/or anonymized.

Your rights as a data subject

To ensure proper personal data processing, you are provided with various rights that you may exercise in relation to your personal data. To exercise your rights, please contact us using the contact details provided in this privacy policy document.

• Access to your personal data. You have the right to request information about the personal data we process related to you.
• The right to rectify your personal data. If you believe the personal data we process about you is incorrect, incomplete, or inappropriate, you have the right to request that your data be updated or corrected.
• The right to withdraw your consent. If we process your personal data based on your consent, you have the right to withdraw it at any time. If you wish to withdraw consent to receive electronic updates and news from us, you can follow the instructions in the received email or contact us.
• The right to object or restrict processing. If we process your personal data based on our legitimate interests, you have the right to object to such processing.

Upon receiving your objection to data processing based on our legitimate interests, we will cease processing your personal data or restrict it unless we can justify the processing with appropriate legitimate interests or the need to defend legal claims.

If you believe that we process inaccurate personal data about you or that our processing is unlawful, you may request that we restrict the processing of your personal data.

Please note that if the processing of your personal data is restricted, we may not be able to provide all available services, including certain benefits.

• The right to request deletion of your personal data. If you believe we no longer need your personal data for the purposes for which it was collected, or you have withdrawn your consent, you may request deletion. Please note that we can only delete your data if we do not have a binding obligation to retain it for legally prescribed purposes or if there is no other legal basis for processing it.
• The right to request data portability. You have the right to receive your personal data that you have provided and that is processed on the basis of consent or contract, in writing or in a commonly used electronic format. If technically feasible, we may transfer your personal data to another service provider upon your request.
• The right to submit complaints about our personal data processing. If you believe our processing violates your rights, you may file a complaint with us at any time. We will review your complaint and respond within the deadlines established by law. You also have the right to file a complaint with the Data State Inspectorate; a sample form is available at: dvi.gov.lv

Location of personal data processing

Personal data is stored and processed within the European Union and the European Economic Area. However, there may be a need to transfer and store personal data outside the EU or EEA. Personal data may also be processed by a processor operating outside the EU or EEA.

By providing us with personal data or consenting to its processing, you agree that it may also be processed outside the EU and EEA for the purposes specified in this Policy. We take all necessary precautions to ensure that personal data is secure and that applicable data protection laws are followed.

Cookies used for personal data processing

A cookie is a small text file that our website stores on your computer or smart device. A cookie remembers your actions and choices and allows us to provide you with the best possible experience when visiting our website. Without cookies, full website functionality would not be possible.

We use persistent cookies: Google Analytics (“_ga”, “_gat”) cookies are used to improve our website by analyzing user behavior. These cookies provide us with information such as the number of website visitors, the visited sections of the website, and the total time spent on the website. All information collected by persistent cookies is anonymous and cannot be used to identify you as an individual. “_ga” cookies are stored for two years, while “_gat” cookies are stored for ten minutes.

Most browsers allow you to control cookie usage through specific settings. If you do not wish to receive cookies, you can set your browser to reject all cookies or notify you when a cookie is being installed.

More information on managing cookies in popular browsers can be found at the following links: Internet Explorer; Chrome; Firefox; Safari; Opera.