2. The iFuture processes your data in accordance with provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27-04-2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter – the Regulation), the Personal Data Protection Law of the Republic of Latvia, the Law on Electronic Communications of the Republic of Latvia and other directly applicable legislation regulating the protection of personal data, as well as instructions of competent authorities.
I. DATA CONTROLLER AND ITS CONTACT DETAILS
3. The data controller is MB iFuture Investments, company code No. 304975611. Contact phone +370 680 84992, email firstname.lastname@example.org You can find the contacts of a specific office by city at https://ifuture.lv/kontakti
II. PROCESSED PERSONAL DATA, PURPOSES, BASES AND STORAGE DURATION
4. The iFuture processes personal data according to the following categories of data subjects: employees, candidates for employees, consultants (partners, intermediaries), candidates for consultants, clients and their representatives (this includes: policyholders, insured persons, pension fund participants and their employers (natural persons), third parties paying pension contributions (part of them).
7. The iFuture processes the personal data of clients and their representatives in order to fulfil its contractual obligations (to provide a service, etc.) under contract (including verbal), to establish and maintain contractual relations, for communication, to protect the legitimate interests of the company and for other legitimate purposes: name, surname, personal identification number, address, e-mail , phone number, bank account number, e-mails (other correspondence information), personal health, selected types of insurance coverage. These personal data are processed during the term of the contractual relationship and for 10 years after the end of the contractual relationship for evidence following the contractual commitments. Emails and other communication information are stored for 3 years but can be extended up to 10 years when necessary for evidence following the contractual commitments. The basis for the data processing is a contract or for the purpose of taking action at the request of the data subject before the conclusion of the contract or a legitimate interest, or legal obligation.
8. The iFuture processes the following data of consultants (partners, intermediaries), candidates for consultants: name, surname, personal identification number, address, e-mail, phone number, e-mails (other correspondence information). The data is processed in order to establish and maintain cooperation, to fulfil mutual obligations. These personal data are processed during the term of the contractual relationship and for 10 years after the end of the contractual relationship. Emails and other communication information are stored for 3 years, but can be extended up to 10 years for evidence following the contractual commitments. The basis for the data processing is a contract or for the purpose of taking action at the request of the data subject before the conclusion of the contract or a legitimate interest, or legal obligation.
9. The iFuture processes the data of the employees and candidate and agrees on the procedure individually.
10. The iFuture may process personal data to protect the rights and legitimate interests of the Company, to process and manage incoming inquiries, requests and complaints, to recover debts, and so on.
11. The iFuture may process personal data for which it has your explicit consent (e.g. for direct marketing). The consent obtained for direct marketing or other purposes is valid for 5 years.
12. The iFuture may store your personal data for a period of time from the end of the contractual relationship in order to protect its legal interests in the event of a dispute or it is required by the law. The iFuture stores your personal data for no longer than it is reasonably necessary, depending on the purposes for which the data is collected.
13. In the internal rules of the iFuture there are provided the deadlines for storage of individual data and the deadlines set by legislation. The storage of your personal data for longer than specifically indicated in this Policy may be carried out only when: 1) it is necessary for the company to be able to defend itself against demands, claims or lawsuits and to exercise its rights; 2) there are reasonable suspicions of an illegal act which is the subject of an investigation; 3) your data is necessary for proper resolution of a dispute or complaint; 4) in case of other bases provided for in the legislation.
14. At the end of the term of processing and storage of personal data, the iFuture permanently destroys the data. When certain of your data is processed on the basis of the consent, when your consent expires, is revoked or deleted, the iFuture destroys the data processed with your consent. In any case, your consent and proof of it may be stored for a longer period.
III. TRANSFERING OF YOUR DATA
15. In accordance with the Regulation and the Law on the Legal Protection of Personal Data , the iFuture may transfer your personal data to third parties for processing purposes to the extent necessary to fulfil the order and provide the service, ensuring that relevant third parties maintain the confidentiality of personal data and ensure adequate protection.
16. Categories of THE iFuture data recipients: insurance companies, pension funds, legal and financial advisers; third parties handling the registries and the software.
17. If necessary for the aforementioned purposes, the iFuture has the right to transfer your personal data to its suppliers, strategic partners and others who assist in the execution of your orders, commercial activities in order to implement the cooperation. The iFuture requires data recipients to undertake to use the information received only for the purposes for which the data was transferred and in accordance with legal requirements. Data controllers involved by the iFuture have the right to process personal data only in accordance with its instructions and only to the extent necessary for the proper performance of their contractual obligations. Involving data controllers, the iFuture seeks to ensure that data controllers also implement appropriate organisational and technical security measures and maintain the confidentiality of personal data.
18. Your personal data may be processed by data controllers providing the iFuture accounting, data centre and / or server rental, IT maintenance and other services.
19. Data may also be provided to competent authorities or law enforcement agencies, such as the police or supervisory authorities, but only upon their request and only when required by applicable law or in the cases and procedures provided for by the law to enforce the iFuture rights, employee and resource security, to make, provide and defend legal requirements.
20. The iFuture does not transfer data outside the EU to a third country or international organisation.
IV. PROTECTION OF YOUR PERSONAL DATA AND YOUR RIGHTS
21. The iFuture takes the necessary administrative, organisational, technical and physical security measures to protect the personal data you provide from accidental, unlawful or unauthorised destruction, loss, rectification, access, disclosure or use, and other unlawful uses.
22. If you believe that the iFuture is processing your data in breach of data protection law, please at first contact the iFuture, as by good faith efforts it may be resolved all your doubts, granted the requests and corrected any made errors, if any.
23. If you are not satisfied with the proposed solution or if, in your opinion, the necessary action is not taken at your request, you have the right to submit a complaint to the supervisory authority of the State Data Protection Inspectorate in the Republic of Latvia (website address https: //www.dvi.gov.lv/).
24. You have the right to:
1) turn to the iFuture for information about the processing of your personal data;
2) turn to the iFuture for a correction of your personal data and / or to suspend the processing of such personal data, except for storage, in case if after acknowledgement you find out that the data is incorrect, incomplete or inaccurate;
3) apply to the iFuture with a request to destroy personal data or suspend the processing of such personal data, except for storage – in case you become aware of the processing of your personal data, and you established that the personal data is processed illegally or fraudulently;
4) not to give the consent to the processing of your personal data when such data is processed or is intended to be processed for the purposes of direct marketing or for a legitimate interest pursued by the iFuture or a third party to which the personal data is provided;
5) request data portability, which means that a) you have the right to request access to all personal data relating to which you have provided to us in a structured, commonly used and computer-readable format, or b) to transfer that data to another controller (if this is technically possible); this right can only be exercised with regard to personal data that are processed by electronic means and are obtained from you with your own consent or on the basis of a contract;
6) restrict the processing of your personal data;
7) demand the deletion of your personal data;
8) revoke the given consents regarding data processing, when the data is processed with your consent;
25. You have a right to know which personal data is processed, for what purposes, whom it is transferred to by writing to iFuture. To provide this information, we must ascertain your identity. To protect the personal data of the data subject, we will not process anonymous and unidentified requests that have not been identified with appropriate identification documents.
26. The iFuture will resolve your request within one month of receiving your request. This term may be extended for two months in certain cases about which you will be notified.
27. If your request is made electronically, the iFuture will also provide you with an answer electronically, unless this is not possible (e.g. due to the volume of information) or if you ask you to reply in another way. The iFuture may refuse to satisfy your request with a reasoned response once the circumstances set out in the law have been established.
29. You must provide complete and correct personal data and inform of any relevant change in personal data. The iFuture shall not be liable for any damages incurred by you and / or third parties if you have provided incorrect and / or incomplete personal information or failed to notify of personal data changes in a proper and timely manner.
VI. COOKIES ON THE WEBSITE