Privacy policy

What is the Privacy Policy?

The Privacy Policy governs the relationship between STAFOR and a natural person (hereinafter also referred to as the “User”) who communicates with STAFOR and/or uses the J Konsult website and/or the services provided.

STAFOR is committed to protecting the User’s personal data. The Privacy Policy enables the User to understand what information is collected when the User submits data to STAFOR or when STAFOR obtains such data through other means, why STAFOR collects this information, and how it will be used. The Privacy Policy also provides information about how STAFOR collects, processes, stores, deletes, and protects the User’s personal data, thereby ensuring that the User’s personal data is processed in a lawful, fair, and transparent manner.

This Policy applies to the User’s personal data, any processing of personal data of natural persons, and the services provided to the User. If STAFOR updates this Policy, all changes will be published on the STAFOR website. In order to provide the User with better and more appropriate services, as well as to ensure, maintain, protect, and improve existing services, STAFOR processes data collected during the provision of its services.

For What Purposes Is the User's Data Collected?

The User's personal data and other information are collected for the following purposes:

• to offer and provide appropriate services;
• to monitor transactions and activities;
• to protect Users from unlawful or harmful actions by third parties, whether direct or indirect, intentional or unintentional, in the course of processing information and data available to such persons;
• to process any requests for information submitted by the User;
• to fulfil the obligations specified in STAFOR’s internal regulatory documents;
• to provide support services to the User;
• to conduct customer research, surveys, and analysis;
• to provide the User with information regarding STAFOR’s offers, products, and services, where the User has given consent to receive such information.

What User Data Does STAFOR Process?

STAFOR processes the following User data:

• first name, last name, personal identification number/date of birth, correspondence address, telephone number, and e-mail address;
• banking details, where such information has been provided;
• data voluntarily supplied by the Customer to STAFOR;
• information relating to the User’s IP address;
• cookies (website browsing data);
• other personal data depending on the type of service provided to the Customer.

This information is stored on STAFOR servers located within a secure infrastructure.

When the User interacts with STAFOR services, STAFOR’s servers maintain a unique activity log for the User’s security purposes, containing certain administrative and traffic-related information, including:

• IP addresses;
• access times;
• access dates;
• previously visited pages;
• language preferences;
• software error reports generated by the web browser being used.

This information is important for ensuring the quality of the services provided.

Personal information is not collected without the User’s consent.

User data will not be transferred outside the European Union or the European Economic Area. However, should such a need arise, the User’s data may only be transferred to countries that ensure a level of protection for personal data equivalent to the level of protection provided within the European Union.

In order to fulfil our obligations towards you, the data controller is entitled to transfer your personal data to cooperation partners and data processors that perform the necessary data processing on our behalf, such as accounting service providers, courier services, and other service providers. Such data processors process personal data only to the extent required for the performance of the assigned tasks.

Payment processing is provided through the makecommerce.lv payment platform. Therefore, our company transfers the personal data necessary for payment execution to the owner of the platform, Maksekeskus AS.

Upon request, we may disclose your personal data to governmental and law enforcement authorities where necessary to protect our legal interests, including the preparation, submission, and defence of legal claims and proceedings.

What Means Does STAFOR Use to Collect and Process Data?

STAFOR may automatically collect the above-mentioned data and receive personal data that the User provides while using the services or otherwise communicating and interacting through the website. STAFOR may also receive personal information from other online service providers.

In addition, STAFOR may engage third-party service providers to ensure the technical support necessary for the provision of its services. STAFOR may access information that the User has provided to such service providers and third-party e-commerce service providers, subject to compliance with all provisions and requirements of this Privacy Policy.

What Is the Legal Basis for the Processing of Users’ Personal Data?

User Consent

The User, as a data subject, by completing application forms and/or contact forms, voluntarily provides consent to the collection and processing of personal data for specific purposes. The User also agrees to the processing of personal data for direct marketing purposes in order to receive new and personalized offers (such consent may, of course, be withdrawn by the User at any time).

The User’s consent constitutes the User’s free will and independent decision and may be provided at any time, thereby authorizing STAFOR to process personal data for the specified purposes. The User’s consent shall be binding if it is given directly and unambiguously.

The User has the right to withdraw previously granted consent at any time through the communication channels provided by STAFOR. Requested changes shall take effect within three business days. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Provision of Services

In order for STAFOR to provide high-quality services to the User, STAFOR must collect and process certain personal data gathered through the STAFOR website.

Legitimate Interests

Taking into account STAFOR’s legitimate interests, which are based on providing high-quality services and timely support to the User, STAFOR is entitled to process the User’s personal data to the extent objectively necessary and sufficient for the purposes specified in this Privacy Policy.

STAFOR’s legitimate interests include the processing of personal data for direct marketing purposes, as a result of which the User may receive new and/or personalized offers for STAFOR services.

Compliance with Legal Obligations

STAFOR is entitled to process personal data in order to comply with applicable legal and regulatory requirements and to respond to lawful requests from state and municipal authorities.

Exceptions for the Disclosure of User Data

STAFOR is entitled to disclose personal data only in cases provided for by applicable legislation.

What Are Cookies?

Cookies are small text files that a website stores on your computer or mobile device when you visit our website. During each subsequent visit, cookies are sent back either to the originating website or to a third-party website that recognizes the particular cookie.

Among other functions, cookies allow a website to remember the settings selected by the User during previous visits so that they do not have to be entered again each time the website is accessed. Cookies are not used to personally identify the User.

STAFOR may use cookies as a means of obtaining information from the web server for the purposes described above by monitoring the User’s use of the website. By continuing to use the website, the User agrees to STAFOR’s use of cookies.

Cookies contain information that is transferred to the User’s computer hard drive. They help STAFOR improve the website and provide a better and more personalized service.

The collected data is used by the administrator of the STAFOR website and by Google, which receives anonymized data that is not linked to any specific individual or IP address. The security of Google Analytics data is supported by ISO 27001 certification and applicable EU-US privacy protection mechanisms. Further information is available at: Google Analytics Privacy Information.

If the User wishes to delete all cookies already stored on their computer or stop cookies that track their activities on the website, this may be done by deleting existing cookies and/or changing the browser’s privacy settings to block cookies (the procedure varies depending on the browser used).

More information can be found at All About Cookies.

Retention Period of Users’ Personal Data

STAFOR will process the User’s personal data for as long as at least one of the following conditions exists:

• for as long as the User uses the service;
• for the period during which the retention of personal data is required under the laws and regulations of the Republic of Latvia and the European Union;
• for as long as it is necessary for the exercise and protection of STAFOR’s legitimate interests;
• until the User withdraws their consent to the processing of personal data.

Security Measures

By using STAFOR services or communicating with STAFOR, the User agrees to the terms and conditions governing the provision of STAFOR services.

STAFOR implements, continuously reviews, and improves security measures designed to protect the User’s personal data from unauthorized access, accidental loss, disclosure, or destruction. To ensure such protection, STAFOR applies modern technologies and appropriate technical and organizational measures, including firewalls, intrusion detection systems, analytical security software, and data encryption.

STAFOR carefully evaluates all service providers that process Users’ personal data on behalf of and under the instructions of STAFOR and assesses whether cooperating partners (data processors) apply adequate security measures to ensure that the processing of personal data is carried out in accordance with STAFOR’s instructions and applicable legal requirements.

Data processing partners are not permitted to process personal data held by STAFOR for their own purposes.

STAFOR shall not be liable for any unauthorized access to personal data and/or loss of personal data where such incidents are beyond STAFOR’s control, for example when a User has disclosed their personal data to third parties.

In the event of a personal data security breach affecting the User’s personal data, STAFOR will notify the User accordingly.

Furthermore, in the event of an information/data processing security incident or potential security incident, STAFOR shall, without undue delay and no later than 72 hours after becoming aware of the breach, notify the competent authorities and affected individuals of the data/information security breach as required by applicable laws and/or European Union legislation, except where STAFOR can demonstrate, in accordance with the accountability principle, that the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.

STAFOR stores all personal information received from the User in a secure database. Certain data is encrypted, and the connection used for data transmission and storage is appropriately secured.

What Are the User’s Rights?

The User has the right to:

• contact STAFOR to obtain a copy of the personal data held by STAFOR concerning the User;
• request the correction of any personal data concerning the User that is held by STAFOR;
• obtain information regarding the natural or legal persons who, during a specified period, have received information about the User from STAFOR. However, STAFOR will not provide information regarding public authorities conducting criminal proceedings, operational activity authorities, or other institutions where disclosure of such information is prohibited by law;
• request the deletion or restriction of the processing of personal data that is no longer necessary for the purposes for which it was collected and processed (the “right to be forgotten”);
• exercise the right to data portability with respect to their personal data;
• contact STAFOR or the supervisory authority responsible for personal data protection matters (the Data State Inspectorate of Latvia, www.dvi.gov.lv) regarding any issues related to the processing of personal data.

For communication with STAFOR, the following e-mail address may be used: info@stafor.lv.

For all matters relating to the information security system and any information/data security issues not specifically covered by this Policy, Users should contact STAFOR by telephone at +371 67603399 or by e-mail at info@stafor.lv.