PRIVACY POLICY AND COOKIES

In this Privacy Policy (hereinafter - the "Policy") you will find information on how the foundation "Riga Technical University Development Fund", single registration number 40008067097 (hereinafter - "RTU Development Fund" or "we") collects, uses and stores your personal data when you use the services available on our website ziedo.rtu.lv (hereinafter - "website") or indirectly available - make a donation to one of the projects (hereinafter - "Services"). 

By using our website or the Services, you agree to this Policy and acknowledge that you have read and understood its terms. 

We process personal data in accordance with this Policy and relevant laws and regulations, including the Law on Processing of Personal Data and the General Data Protection Regulation (2016/679) (hereinafter - "GDPR").

We are committed to ensuring the privacy and confidentiality of information relating to past, present and potential visitors to the Website and to adhering to the following Policy in close conjunction with our obligations and applicable personal data protection laws. In this Policy, reference to "your personal data" means any information that identifies you or can reasonably be used to identify you as one of the persons referred to above ("Personal Data").

The Data Controller is RTU Development Fund or the foundation "Riga Technical University Development Fund", single registration number 40008067097, registered office at Paula Valdena iela 3, Riga, LV 1048, e-mail address fonds@rtu.lv.

POLICY SCOPE  

In this Policy you can find out how we process Personal Data in relation to: 

  • all matters relating to our current, former and prospective donors; 
  • cookies used on the website; 
  • all of our obligations under the GDPR and other applicable laws and regulations. 

PURPOSES OF PROCESSING AND DURATION OF STORAGE  

Services: we process Personal Data for the purpose of obtaining funding for projects on ziedo.rtu.lv. We only collect information that has been provided to us by donors or their authorised persons. This collection of Personal Data is necessary for the proper performance of the services selected by the donors - acceptance of donations in RTU Development Foundation bank accounts or via payment card, as well as our legal obligations in connection therewith. Upon receipt of a donation to the RTU Development Foundation's bank account, the RTU Development Foundation receives Personal Data about the donor (name, surname, personal identification number), as well as information about the donor's bank account number (if the payment is made by bank transfer), the amount of the donation and other information that the donor has indicated in the payment order. The aforementioned Personal Data are used for the accounting purposes of the RTU Development Foundation, as well as published in the donor lists on the RTU Development Foundation and ziedo.rtu.lv websites with the donor's consent.

Cookies: we use cookies to collect information about your use of our website. Cookies allow us to provide and improve the technical functionality of the website. The information obtained does not contain data that would allow us to identify you as an individual natural person. Duration of data storage: we store your data relating to donations made for as long as is necessary for accounting purposes in accordance with the law. We will process the Personal Data that you agree to publish on the ziedo.rtu.lv website for an unlimited period of time. You have the right to withdraw your consent to the publication of your Personal Data (name and surname) at any time. The duration of storage of cookies is indicated in this Policy below the description of cookies. 

LEGAL BASIS FOR PROCESSING PERSONAL DATA  

We process Personal Data on the basis of: 

  • your consent; 
  • legal obligations to which we are subject; 
  • our legitimate interest in ensuring the quality of the Services. 

The processing of Personal Data is limited to the extent necessary to achieve the specific purpose of the processing. Access to Personal Data will be limited to RTU Development Foundation personnel who need it to perform their professional duties to you as a client or to comply with RTU Development Foundation's legal obligations.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES 

In the course of providing the Services to our customers, we may be required to transfer Personal Data to third parties. 

We use the services of certain third parties to provide the Services (e.g. IT service providers, accountants). Personal Data is provided to these third parties so that they can in turn provide their services to us. Personal Data is only provided to service providers to the extent necessary for them to provide their services. You should note that the donation cannot take place without the intermediation of a payment service provider who needs to receive and process certain of your Personal Data. 

When donating money by bank transfer, you have the right to choose your payment service provider independently. RTU Development Foundation does not pass on Personal Data to payment service providers and cannot make any payments for or on your behalf without your involvement. 

YOUR RIGHTS AS A DATA SUBJECT 

You may exercise the following rights at any time: 

  • Right of access: you have the right to request access to (obtain information about) any data that may be considered your Personal Data (e.g. what categories of Personal Data we process, the purposes of processing, etc.). 
  • Right to rectification: you have the right to request that we rectify your Personal Data if you believe that it is inaccurate or incomplete. 
  • Right to object: you have the right to object to the processing of certain Personal Data to the extent that the processing is not necessary for the performance of the RTU Development Foundation's legal obligations or the provision of the Services. 
  • Right to be forgotten: you may request that your Personal Data be erased if it is no longer necessary for the purpose for which it was collected, or if you believe that its processing is unlawful or it must be erased in order for us to comply with legal requirements. 
  • Right to withdraw your consent: if the processing of Personal Data is based on your consent, you have the right to withdraw it at any time by contacting us. 

If you have a complaint about how we process Personal Data or simply want to know more about our data processing activities, you are welcome to contact us at any time using the contact details set out at the beginning of this Policy. 

You have the right to lodge a complaint with the Data Inspectorate if you believe that your Personal Data is being processed improperly or that your rights as a data subject have been violated. A sample complaint can be found at the following link: www.dvi.gov.lv. 

PLACE OF PROCESSING OF PERSONAL DATA  

Personal Data is stored and processed within the European Union ("EU") and the European Economic Area ("EEA"). However, there may be a need to transfer and store Personal Data outside the EU or EEA. Similarly, the processing of Personal Data may be carried out by a data processor operating outside the EU or EEA.

By providing or consenting to the processing of Personal Data, you consent to the processing of Personal Data outside the EU and EEA for the purposes set out in this Policy. We will take all necessary precautions to ensure that Personal Data is secure and complies with applicable data protection legislation. 

You have the right to request that we inform you of the details of the processing of Personal Data on the basis of Article 15 of the GDPR. 

PRIVACY POLICY CHANGES  

We may make changes to this Policy. If the Policy is changed, the latest version will be available on our website. We encourage you to check the Policy from time to time to see if any changes have been made. 

Your personal data will only be stored on the website for as long as is necessary for the purposes for which it was collected. Personal data is retained for as long as there is a legal obligation to retain the personal data. After the data retention period has expired, the data will be securely erased or depersonalised so that it can no longer be associated with the data subject. The personal data held by the website shall be considered as restricted information and shall be disclosed to third parties only in the cases, in the manner and to the extent provided for in the laws, regulations or agreements concluded. When personal data are transferred to the Website's contractual partners (independent controllers), additional provisions regarding the processing of personal data are incorporated into the contracts. 

If you have any questions or complaints about the processing and protection of personal data on the Website, please report them to Anita Straujuma, Executive Director of the RTU Development Foundation, by e-mail to anita.straujuma@rtu.lv, or contact the Riga Technical University's personal data processing officer (e-mail address: datuaizsardziba@rtu.lv). Data subjects have the right to lodge complaints about the use of personal data with the Data Inspectorate (www.dvi.gov.lv) if the data subject considers that the processing of his/her personal data violates his/her rights and freedoms in accordance with the applicable laws and regulations.