PRIVACY POLICY



PRIVACY POLICY

Why do we process personal data?
“Zvērianātu advokātu birojs CersJurkāns” SIA (hereinafter - CersJurkāns) is the personal data controller of the personal data it collects and stores. The purpose of the Privacy Policy is to provide general information regarding the processing of personal data organized and carried out by CersJurkāns as the controller, in accordance with the principles of personal data processing included in Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). This Privacy Policy is also valid for the activities carried out by CersJurkāns on the office’s social networks, such as LinkedIn, Facebook, etc.
Contact information of the controller
CersJurkāns Law Firm SIA
Reg. No. 40203314614
Strēlnieku Street 9-4, Riga, LV-1010, Latvia
Phone no.: +371 67365865
E-mail: birojs@cersjurkans.lv
Confidentiality
CersJurkāns employees are subject to strict requirements to observe confidentiality, including when processing personal data. According to Article 67 of the Law on the Bar, a sworn attorney may not disclose the secrets of his principal (client) not only during the conduct of the case, but also after his release from the conduct of the case or after the completion of the case. The attorney must ensure compliance with these requirements also in the work of his staff.

We process your personal data in accordance with the following legal grounds:

  • Your consent;
  • Activities related to the provision of pre-contractual consultation and familiarization with the client's case and documents at the client's request, as well as measures for concluding a contract;
  • The legal assistance agreement concluded between us;
  • Fulfillment of legal obligations imposed on us (fulfillment of legal requirements);
  • Protection of the vital interests of the client or another natural person or performance of a task in the public interest;
  • Our legitimate interests are to ensure the quality of our legal services, to ensure the security and protection of our financial interests, to disseminate information about our services and activities, to maintain business relationships with our clients and partners, to provide good customer service, to understand and improve how people use our websites, and to find the best employees.

We process your personal data only for the purpose for which it was collected. In cases where the basis for processing is your consent, you have the right to withdraw your consent to such processing at any time. However, if the collection and processing of data is required by law, such withdrawal of consent may limit the scope of legal services offered to you.

We have taken appropriate technical and organizational measures to ensure the security of your personal data. Your data will be processed in a manner that ensures confidentiality and data integrity.
About personal data
Personal data is information about you as an individual, such as name, surname, address, personal identification number, email address, telephone number. Personal data does not include information about deceased persons, associations, foundations, organizations and merchants.
Our commitment
When processing personal data, we undertake to strictly comply with the regulatory enactments governing the protection of personal data, the principles of personal data processing, that is, to process only for a precise and specific purpose, to request only such types of personal data as are necessary for the implementation of the purpose, to process only as long as a legitimate purpose exists, to ensure the security of data storage, to consider any request for correction of personal data, termination of data processing and deletion contained in your application. At the same time, we also undertake to consider any complaint about data processing.
Personal data we process
To ensure the operation of CersJurkāns, we process the following data:

  • name, surname, personal identification number, date and place of birth of the client/potential client or its representative, copy of passport or ID card, organization, job title, office address, email address, phone number;
  • time and duration of meetings and calls;
  • bank account number and other information about payments;
  • tax information;
  • data related to the circumstances of the case/task;
  • related documents provided or collected;
  • emails sent to CersJurkāns employees, attorneys or paralegals;
  • other information provided to us or received in connection with the services.

Taking into account the requirements of the Law on the Prevention of Money Laundering and the Financing of Terrorism and Proliferation, CersJurkāns in certain cases conducts customer due diligence and identifies the customer, and may process the following personal data:

  • Personal identification data: name, surname, contact information, personal identification number, photo, passport data, residential address, declared address, telephone number, e-mail address, place of work, position, nationality;
  • Data on the share of the customer's capital or shares owned by a specific person and controlled directly or indirectly, the type of customer control to be implemented and the related supporting documents;
  • Information about a person from lists of persons suspected of involvement in terrorist activities or the production, possession, transfer, use or distribution of weapons of mass destruction; or information from the list of sanctioned persons compiled by the Cabinet of Ministers, which is based on international and national sanctions laws of the Republic of Latvia.


In special cases, based on Article 34 of the Personal Data Protection Act, data on a person’s criminal convictions may be processed.

We may also collect personal data when a natural person contacts us with a question, complaint, or to provide a comment or feedback. In such cases, the natural person chooses what personal data they provide to us, and we will use the relevant personal data only to respond to the person’s questions and in accordance with the needs of the case.

Visitors to our website also have the opportunity to send us an e-mail via our website. Such communications will include the person’s name, surname, e-mail address, and any additional information and data that the person wishes to include in their letter.
Personal data processing
You provide personal data to CersJurkāns:

  • by using CersJurkāns services;
  • by contacting CersJurkāns.


Personal data may be processed in the public interest, for example, in the interests of public safety, health, or to prevent/detect criminal offenses. We may transfer your personal data to other state or law enforcement authorities in accordance with the procedure provided for in regulatory enactments.
Transfer of personal data
We may need to transfer your personal data to other legal entities. We do this only in cases where this is stipulated in the legal provisions regulating the processing of personal data and other legal provisions.

Legal entities to whom we may transfer your personal data:

  • Your legal representatives, authorized persons;
  • state and local government institutions;
  • auditors and auditors;
  • law enforcement authorities;
  • the media;
  • security authorities;
  • such legal entities to which state and local government tasks have been delegated;
  • ata supervisory authority.
Personal data retention
Legal services data:

  • Information about the client, the person acting on behalf of the client and the transaction: at least ten years after the legal relationship with the client has ended, unless the competent authority has determined a longer retention period for the information obtained in accordance with applicable law;
  • Information about the beneficial owner and politically exposed persons: up to eight years after the legal relationship with the client has ended, unless the competent authority has determined a longer retention period for the information obtained in accordance with applicable law;
  • Information about the transaction and billing information: up to ten years after the date of the transaction.


Marketing data:

  • Registration data will be stored for up to ten years from the beginning of the year following the year of collection of the personal data;
  • Communication data will be stored for up to ten years from the beginning of the year following the year of initial communication;
  • Event data will be stored for up to ten years from the beginning of the year following the year of collection of the personal data.
  • Security data will be stored for up to one month from the date of collection;
  • Cookie data: please see our Cookie Policy.
Your rights as a data subject:

  • The right to be informed about why we process and use your personal data;
  • The right to request information about what personal data we hold about you;
  • The right to rectify data. You have the right to rectify data if it is inaccurate or incomplete. If we have a legal basis not to rectify the data, we will provide you with an explanation of why we will not rectify it and will provide you with information about your right to lodge a complaint with the Data Protection Authority;
  • The right to erasure (the “right to be forgotten”). You have the right to request that we erase your personal data or stop processing it. We may not always be able to comply with your request, for example if we have a legal obligation to retain the information. If we have a legal basis not to erase the data, we will provide you with an explanation of why we will not erase the data and will provide you with information about your right to lodge a complaint with the Data Protection Authority;
  • The right to restrict the processing of your personal data. You have the right to restrict the processing of your personal data in certain cases, for example if the information is inaccurate. If there is a restriction of the processing of your personal data, we may retain relevant information about it in order to ensure compliance with these rights in the future. If we have grounds to lift such a restriction, we will notify you;
  • Right to data portability. If we process your personal data in accordance with your consent or on the basis of a contract and they are stored in a structured, commonly used and machine-readable format, you have the right to request the transmission of your personal data from one controller to another, where technically feasible. This right does not apply to personal data processed for compliance with a legal obligation to which the company is subject;
  • Right to object. You may object to the processing of your personal data, for example for profiling, direct marketing purposes, statistical purposes or where the processing is necessary for the performance of a task carried out in the public interest.
Place of processing of personal data
We store and process personal data primarily in the European Union (EU). However, in some cases, it may be necessary to transfer and store your Personal Data outside the EU if the performance of a client assignment requires consultation with lawyers outside the EU. Personal data may also be processed by data processors operating outside the EU.
Access to information about the processing of your personal data
You can find out what specific personal data we process about you by submitting a data subject request for data processing to CersJurkāns. This can be done by submitting a handwritten, electronically signed application or by making an oral application in writing.
Additional information
You can learn more about our personal data processing policy by contacting CersJurkāns specialists by email: birojs@cersjurkans.lv, or by submitting a request addressed to the data protection officer.
Complaints
You have the right to submit complaints to us regarding the processing of personal data, as well as the right to submit a complaint to the data supervisory authority – the Data State Inspectorate (https://www.dvi.gov.lv/lv).
Changes to Privacy Policy
We may make changes to this Privacy Policy to reflect changes in our data processing methods and data protection best practices. If the Privacy Policy is changed in any way, the latest version of this Privacy Policy will be posted on our website, and in the event of material changes, we will notify you of them.