Liepaja SUP School

1. Data controller

Sup school Liepaja
Reg. No 50008286621
Legal address: in South Kurzeme region, Nīcas pag., "Šķilas", LV-3473
Email address: gatis_pranks@inbox.lv
Tel: +371 27872042, hereinafter referred to as the Manager.

2. Purpose and legal basis for processing

2.1 The Controller processes your data in order to conclude the contract for participation in the Liepājas īriens competition and to ensure the fulfilment of the contractual obligations. It is not possible to conclude the contract without processing personal data, because according to Article 1404 of the Civil Code of the Republic of Latvia, each legal transaction must take into account its participants.

2.2 The Controller shall process your personal data in order to issue a proof of purchase for the services provided in accordance with Article 7 of the Accountancy Act.

2.3 The Controller may process your data if it is necessary to comply with a legal obligation to which the Controller is subject, such as a request to disclose your personal data to public authorities in accordance with laws and regulations.

2.4 The Controller's website buruskola.lv logs your requests. Audit records are necessary to ensure the proper functioning of the website, the security of the services and the timely prevention of information technology security threats, as well as the overcoming of the threat and its consequences.

3. Potential recipients of the data

3.1 The Controller has the right to disclose personal data:

3.1.1 where the data subject requests the information about personal data and the Controller has the possibility to verify the identity of the person requesting the information.
3.1.2. if information on personal data is requested in writing by authorised state or local government authorities in the cases and in accordance with the procedures established by the laws and regulations of the Republic of Latvia.

3.2.A natural person shall have the right to request from the Controller information about third parties who have received information about that natural person, unless otherwise provided by the laws and regulations of the Republic of Latvia.

4. Access to your personal data and data portability.

4.1 You can access your data, as well as make corrections, by sending a request to the postal address South Kurzeme County, Nīcas Municipality, "Šķilas", LV-3473 or to the e-mail aivis@supskola.lv. The Data Controller shall issue the data after identification and authorisation of the data requester.
4.2 You have the right to receive data held by the Data Controller about you in machine-readable form.

5. Rectification, erasure or restriction of processing

5.1 You are responsible for providing true, valid and complete data both at the time of entering into the contract and during the performance of the contract.
5.2 In the event of any changes to the data, you are obliged to update the data immediately by notifying the Controller of the necessary changes.
5.3 If the Controller discovers that your data is incorrect, outdated or incomplete, the Controller shall send you an invitation to make corrections by a specified deadline. If no reply is provided or the data is not updated or is found to be incorrect, the Controller shall have the right to terminate the contract.
5.4 If you are a participant in the competition and object to the processing of your personal data, the Controller shall terminate the contract as the processing of your personal data is necessary for the conclusion and performance of the specific contract.

6. Duration of data retention

6.1 The Controller is a public derivative person, which is bound by the laws and regulations on national documentary heritage, therefore personal data are stored in accordance with the procedure established by the laws and regulations of the Republic of Latvia, including the Law on Archives.
6.2 Audit records shall be kept for at least one year, but not more than two years after the entry was made.

7. Lodging a complaint

7.1 An individual has the right to lodge a complaint with a supervisory authority about an alleged personal data breach.