Privacy Policy
The purpose of this Privacy Policy is to provide information to the natural person (data subject) about the purpose, scope and protection of the processing of personal data carried out by SIA “AIRKARGO” when processing the personal data of the data subject.
The Privacy Policy on the protection of personal data is based on the Privacy Statement 2016. 27. 2016/679 of the European Parliament and of the Council.
1. Information about the controller
The company SIA “AIRKARGO”, registration number: 48503005413, legal address: Saldus nov., Saldus, Ausekļa iela 8A, LV-3801, offers unique adventures – balloon flights.
2. Contact details for communication on personal data protection issues
If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us by phone +371 29240461 or by e-mail: balons@gaisabalons.lv
3. General description of our processing of personal data
Personal data may be collected from the customer, from the use of the customer’s services and from external sources such as public and private registers or third parties. The categories of personal data that we collect and process include, but are not limited to:
- Identification and research data, e.g. name, surname, personal identification number.
- Contact details, e.g. email address, telephone number.
- Communication data collected when the customer contacts us by telephone, visual and/or audio recordings, email, messages and other means of communication such as social media, data collected when the customer visits our website or communicates through our other channels, device data.
This Privacy Policy describes how we process the personal data of our customers, customer representatives/contact persons, business partners, website visitors and other persons whose data may come into our possession in the course of our business activities.
We assume that before using our website or becoming our customer, you have read this Privacy Policy and accepted its terms. We reserve the right to amend and update this Privacy Policy as necessary.
The purpose of this Privacy Policy is to provide you with a general overview of our personal data processing activities and purposes, however, please note that other documents (e.g. service agreements, cooperation agreements) may also contain additional information about the processing of your personal data.
Please be informed that the personal data processing rules contained in this Privacy Policy apply only to the processing of data of natural persons.
When you visit our website, you will be presented with a message that the website uses cookies.
We recognise that personal data is your property and value and we will process it in a way that respects the confidentiality and security of the personal data we hold about you.
4. For what purposes do we process your personal data and what is the legal basis for processing your personal data?
We will only process your personal data in accordance with the legitimate purposes as defined above, including:
4.1. Pakalpojumu uzsākšanai un sniegšanai, kā arī līgumā noteikto saistību izpildei un nodrošināšanai.
For this purpose, we need to identify you, ensure that payments are properly calculated in accordance with the reports you provide, ensure the payment process, communicate with you on matters relating to the provision of the service and/or the performance of the contract, and, in some cases, ensure the collection of unpaid payments.
For this purpose and for the sub-purposes indicated above, we may need at least the following personal data: name, surname, personal identification number, address (postal address), bank account number, telephone number and e-mail address of the client, customer and/or business partner’s representative.
The main legal bases used to achieve these purposes are:
- (a) Conclusion and performance of a contract with the data subject (Article 6(1)(b) of the General Data Protection Regulation [1]);
- b) compliance with a legal obligation (Article 6(1)(c) GDPR);
- c) the legitimate interests of the controller (Article 6(1)(f) of the GDPR), such as identifying you as a contact person of a customer and/or business partner, ensuring communication with you.
4.2. Normatīvajos aktos noteikto prasību attiecībā uz klientu identifikāciju, izpēti un pakalpojumu sniegšanu izpilde vai citos normatīvajos aktos noteikto prasību izpilde.
To this end, we are required to comply with the requirements of the Natural Resources Tax Act, the Accounting Act, the Taxes and Duties Act, the Archives Act and other laws and regulations.
For this purpose, we may need to process the following personal data: name, surname, personal identification number, address, telephone number, e-mail address of the customer, customer’s representative, contact person.
The main legal bases used to achieve these purposes are:
- a) Compliance with a legal obligation (Article 6(1)(c) GDPR).
4.3. Mārketinga aktivitāšu nodrošināšana
For this purpose, we may send you commercial communications by publishing material from public events we organise.
For this purpose, we may need at least the following personal data: name, surname, telephone number, e-mail address of the contact person of the customer, client and/or business partner.
The main legal bases used to achieve these purposes are:
- (a) the data subject’s consent (Article 6(1)(a) of the GDPR);
- (b) the conclusion and performance of a contract with the data subject (Article 6(1)(b) of the General Data Protection Regulation);
- (c) the legitimate interests of the controller (Article 6(1)(f) of the GDPR), such as for the purpose of communication.
You have the right to opt-out of receiving our marketing messages. You can do this by: (a) by following the opt-out instructions in the relevant marketing message; (b) by contacting us by email: balons@gaisabalons.lv
Please note that even if you opt out of receiving marketing messages, you may still receive administrative messages, such as notifications about unfiled reports, unpaid invoices, information about the electronic reporting system, information about changes to the cooperation agreement, information about changes to laws and regulations governing the performance of obligations under the cooperation agreement, information about the termination of the agreement.
4.4. Trešo personu leģitīmo interešu nodrošināšana
In case of legitimate need, we may need to disclose your information to Control Services, such as the State Revenue Service, bailiffs and other public authorities, to exchange information within a group of companies, to exercise the rights granted by the laws and regulations for our legitimate interests.
For this purpose, we may need to process at least the following personal data: name, surname, personal identification number, address, telephone number, e-mail address of the contact person of the client, customer and/or business partner.
The main legal bases used to achieve these purposes are:
- a) Legitimate interests of the controller (Article 6(1)(f) GDPR), e.g. a request by public authorities for contractual partner data for the purpose of debt recovery.
4.5. Pakalpojumu pienācīgas sniegšanas nodrošināšanai
For this purpose, we need to maintain and improve our technical systems and IT infrastructure, use technical and organisational solutions that may also use your personal data (for example, by using cookies), in order to ensure the proper provision of our services. Third-party systems we use to ensure the proper provision of our services:
-Google inc. Google Analytics tools, for more information on the terms of service and privacy policies of these tools, please visit.
The main legal bases used to achieve these purposes are:
- a) the legitimate interests of the controller (Article 6(1)(f) GDPR).
5. Who would have access to your personal data?
We take steps to process your personal data in accordance with applicable law and to ensure that your personal data is not accessed by third parties who do not have an adequate legal basis for processing your personal data.
Your personal data can be accessed as necessary:
- our employees or directly authorised persons who need to do so in order to carry out their work;
- processors of personal data in accordance with the services they provide and only to the extent necessary, such as auditors, financial management and legal consultants, database developers/technical maintainers, other persons involved in the provision of the controller’s services;
- State and local authorities in cases provided for by law, such as law enforcement authorities, local authorities, tax authorities, bailiffs;
- third parties, carefully assessing whether there is an appropriate legal basis for such transfers, such as debt collectors, courts, out-of-court dispute resolution bodies, bankruptcy or insolvency administrators, third parties maintaining registers (e.g. population register, debtors’ register, etc.).
6. Which cooperation partners do we choose for the processing of personal data?
We take measures to ensure the processing, protection and transfer of your personal data to data processors in accordance with applicable law. We carefully select our personal data processors and, when making a transfer, we assess the necessity and the amount of data to be transferred. Data transfers to processors are carried out in compliance with the requirements of confidentiality and secure processing of personal data.
We work with the following categories of personal data processors:
- auditors, financial management and legal advisers
- IT infrastructure, database maintenance
- other persons involved in the provision of our services.
Personal data controllers may change from time to time. This document will then be amended accordingly.
7. Is your personal data transferred to countries outside the European Union (EU) or the European Economic Area (EEA)?
We do not transfer data to countries outside the European Union or the European Economic Area.
8. How long will we keep your personal data?
Your personal data will be kept for as long as it is necessary for the relevant purposes of processing your personal data and in accordance with the requirements of applicable law (e.g. accounting laws, statutes of limitation, civil law, etc.).
In assessing the duration of the retention of personal data, we take into account the applicable legal requirements, the performance of contractual obligations, your instructions (e.g. in the case of consent) as well as our legitimate interests.
If your personal data is no longer necessary for the purposes specified, we will delete or destroy it.
Below we list the most common retention periods for personal data:
- a) personal data necessary for the performance of a contractual obligation – we will retain until the contract is performed and other retention periods have been met (see below);
- b) we will keep personal data that need to be kept to comply with the requirements of the law for the periods specified in the relevant laws and regulations, e.g. the Law on Accounting stipulates that supporting documents must be kept until the date they are necessary to establish the beginning of each economic transaction and to trace its progress, but not for less than 5 years;
- c) we will keep the data to prove the fulfilment of our obligations for the general limitation period of the claim, in accordance with the statutory limitation periods for claims – 10 years in the Civil Code, 3 years in the Commercial Code and other periods, taking into account also the time limits for bringing claims set out in the Civil Procedure Law.
9. What are your rights as a data subject in relation to the processing of your personal data?
Updating personal data
If there are changes to the personal data you have provided to us, such as a change of personal identification number, contact address, telephone number or email address, please contact us and provide us with the updated data so that we can meet the relevant purposes of processing your personal data.
Your right to access and rectify your personal data
In accordance with the provisions of the General Data Protection Regulation, you have the right to access your personal data held by us, to request its rectification, erasure, restriction of processing, to object to the processing of your data, as well as the right to data portability in the cases and in the manner provided for in the General Data Protection Regulation. The right to carry out an inspection to determine the compliance of the processing of personal data with the requirements of the regulatory enactments, in cases where the controller is prohibited by law from providing information to the data subject and a request to that effect has been received from the data subject, is vested in the State Data Inspectorate (Article 29 FPDAL). We respect your right to access and control your personal data, therefore, in the event of receipt of your request, we will respond to it within the time limits set out in the laws and regulations (usually no later than one month, unless there is a specific request that requires more time to prepare a response) and, if possible, we will then correct or delete your personal data accordingly.
You can obtain information about your personal data held by us or exercise your other rights as a data subject in any of the following ways:
- a) by submitting a request to us by post to the following address: Saldus Coun., Saldus, Ausekļa iela 8A, LV-3801.
- b) by submitting a request to our e-mail address: balons@gaisabalons.lv, preferably signed with a secure electronic signature.
Upon receipt of your Request, we will assess its content and the possibility of your identification and, depending on the relevant situation, we reserve the right to ask you to identify yourself further in order to ensure the security and disclosure of your data to the relevant person.
Withdrawal of consent
If the processing of your personal data is based on your consent, you have the right to withdraw it at any time and we will no longer process your personal data that we processed on the basis of your consent for the relevant purpose. However, please be informed that the withdrawal of consent may not affect the processing of personal data which is necessary to comply with the requirements of laws and regulations or which is based on a contract, our legitimate interests or other grounds for lawful processing set out in laws and regulations.
10. Where can you lodge a complaint about issues related to the processing of personal data?
If you have any questions or objections regarding our processing of your personal data, we encourage you to contact us in the first instance.
However, if you believe that we have not been able to mutually resolve the problem and you believe that we have violated your right to the protection of personal data, you have the right to lodge a complaint with the Data Inspectorate.
You can find sample applications to the Data Inspectorate and other related information on the website of the Data Inspectorate (http://www.dvi.gov.lv/lv/datu- protection/private/application-samples/).
11. Why do you need to provide us with your personal data?
We primarily collect your information to fulfil our contractual obligations, to comply with our legal obligations and to pursue our legitimate interests.
In these cases, it is necessary for us to obtain certain information in order to achieve the relevant purposes, so failure to provide such information may jeopardise the establishment of a business relationship or the performance of a contract.
If the data is not strictly necessary but its provision could help us to improve the service or to offer you favourable contractual terms and/or offers, we will indicate at the time of collection that the provision of the data is voluntary.
In addition, we would like to inform you about the main requirements of the laws and regulations on the processing of personal data:
- The Accounting Act requires the following personal data to be provided in the document (contract) of an economic transaction to which a natural person is a party: name, surname, personal identification number (if any), address given by the person or, if none is given, the address of the declared place of residence.
12. How do we obtain your personal data?
We may obtain your personal data in one of the following ways:
- in the process of entering into a reciprocal agreement, by obtaining data from you;
- if the contract is with a third party and that third party has named you as the contact person;
- from you, if you make any submissions, send us emails, call us;
- www.gaisabalons.lv by using cookies;
- in certain cases, from third party databases, for example when checking your right to represent a company (firmas.lv, etc.).
13. Is your personal data used for automated decision-making?
We do not use your data for automated decision-making.
