Last modified: 05.02.2026
PERSONAL DATA PROCESSING POLICY
General Provisions
The purpose of this Policy is to provide you with information regarding the purposes for which MDA GRUPA collects and processes your personal data, the types of data processed, the duration of data processing, and data protection measures, as well as to inform you of your rights and obligations.
MDA GRUPA is entitled to make changes or amendments to this Policy by publishing the current version of the Policy on the MDA GRUPA website in the "Privacy Policy" section.
Terms
Processor – other legal entities, institutions, or organizations that process your personal data on our behalf (e.g., a competition organizer).
Data Subject – is you.
Personal Data – information relating to you as an individual that allows for your identification. This data reveals facts about your personality, such as date of birth/age or your contact information.
Controller – is us, SIA MDA Grupa, unified registration number: 40203454177; we choose and determine the purposes (why) and means (how) of personal data processing, and we hold the obligations of a controller as defined by law. Below, in the CONTROLLER'S CONTACT INFORMATION section, you will find information on how to contact us.
Regulation – European Union Regulation No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation / GDPR).
Cookies – small text files sent to your computer or mobile device during your visit to our website, which the website stores on your computer or mobile device when you open the site. The Cookie Policy is available on the MDA GRUPA website in the "Cookie Policy" section.
CONTROLLER’S CONTACT INFORMATION
The contact information for the Controller – SIA MDA Grupa, unified registration number: 40203454177, is as follows: Legal address: Rīga, Katlakalna iela 9A, LV-1073; telephone: +371 29104430; e-mail address: info@mdagrupa.lv; website address: https://mdagrupa.lv.
To contact MDA GRUPA, please write to: info@mdagrupa.lv. Please note that MDA GRUPA does not provide general consultations regarding the compliance of personal data processing with the Regulation and the Law on the Processing of Personal Data of Natural Persons, but provides general information regarding the processing of personal data carried out by MDA GRUPA.
WHAT CATEGORIES OF PERSONAL DATA WE PROCESS, FOR WHAT PURPOSE, AND ON WHAT LEGAL BASIS
It is your responsibility to provide only truthful data that is valid and necessary for the fulfillment of the purposes mentioned in this text. If personal data is inaccurate, you must correct it immediately. If you are unable to fill in any of the mandatory fields, you must contact MDA GRUPA.
Before you enter into a contract with MDA Grupa, we process the following personal data for the following purposes:
Personal data categories / data | Purpose (why and for what purpose we process this data) | Legal basis |
Requesting communication via our website, in the Contacts section |
| |
Your name
| Necessary for identification (to distinguish you from other individuals with identical names). | Taking steps at your request prior to entering into a contract; Article 6(1)(b) of the Regulation. |
Phone number or e-mail | Necessary to respond to your communication request in order to answer questions of interest to you. | Taking steps at your request prior to entering into a contract; Article 6(1)(b) of the Regulation. |
After you have entered into a contract with MDA Grupa, we will process the following personal data for the following purposes:
Personal data categories / data | Purpose (why and for what purpose we process this data) | Legal basis |
Identification information Name, surname, and personal identity number | Necessary for identification (to distinguish you from other individuals with identical names or surnames). | Processing is necessary for the performance of a contract to which the data subject is a party; Article 6(1)(b) of the Regulation. |
For bookkeeping purposes. | Compliance with a legal obligation to which we are subject – Article 6(1)(c) of the Regulation. | |
Contact information Email, phone number, WhatsApp correspondence | To inform you about the progress of the contract performance, to promptly resolve issues, and to send you invoices or other documents and information arising from the performance of the contract. | Processing is necessary for the performance of a contract to which the data subject is a party; Article 6(1)(b) of the Regulation. |
Address of the real estate property belonging to you | To accurately determine the address where, according to the contract, we are required to perform the works. | Processing is necessary for the performance of a contract to which the data subject is a party; Article 6(1)(b) of the Regulation. |
Payment information payment method, bank account number, payment description, invoice number, etc. | This data is necessary for bookkeeping, for example: to prepare and submit SRS (VID) reports, notifications, balance sheets, annual reports, etc., as well as to identify payments received from you. | Compliance with a legal obligation to which the controller is subject; Article 6(1)(c) of the Regulation. |
Communication data email content, text messages, WhatsApp correspondence | We hope this will not happen, but we cannot exclude situations where you may have claims against us, or we against you; therefore, communication data is necessary for the review and management of claims. | Our legitimate interests (e.g., to bring an action in court or to defend against your claims) and fulfillment of legal requirements applicable to us; Article 6(1)(c) and (f) of the Regulation. |
Transaction information date and place of the transaction, transaction amount, invoice, contract, etc. | We hope this will not happen, but we cannot exclude situations where you may have claims against us, or we against you; therefore, transaction information is necessary for the review and management of claims; additionally, transaction information is necessary for bookkeeping. | Our legitimate interests (e.g., to bring an action in court or to defend against your claims) and fulfillment of legal requirements applicable to us; Article 6(1)(c) and (f) of the Regulation. |
FROM WHAT SOURCES DO WE OBTAIN PERSONAL DATA?
We obtain your personal data when you provide it to us by:
- Filling out the contact form on our website in the Contacts section;
- Entering into a contractual relationship with us;
- Contacting us via post, e-mail, the WhatsApp application, by telephone, or in person;
- Fulfilling payment obligations.
DISCLOSURE OF PERSONAL DATA
MDA GRUPA does not use or share the information you provide, except in the following cases:
- If the data must be transferred to a relevant third party for the performance of a concluded contract or the fulfillment of a function delegated by law, for example, to a credit institution for settlements or to a bookkeeping service provider for accounting purposes.
MDA GRUPA transfers the data necessary for bookkeeping to an accounting firm, which acts as a processor on behalf of MDA GRUPA.
- To persons provided for in external regulatory acts upon their reasoned request (e.g., law enforcement agencies, rescue services, the State Revenue Service, etc.).
- For the protection of MDA GRUPA's legitimate interests in the manner prescribed by regulatory acts, for example, by appealing to a court or other state institutions against a person who has infringed upon the legitimate interests of MDA GRUPA, or for debt collection by transferringdata to a debt recovery service provider.
WHERE DO WE PROCESS YOUR PERSONAL DATA?
We process your personal data within the boundaries of the European Union/European Economic Area.
When we use Google Analytics, your personal data may be transferred to or processed in a country outside the EU/EEA, as Google Analytics data is stored on Google servers located in various countries worldwide. For more detailed information, please read our Cookie Policy.
HOW LONG WILL MY PERSONAL DATA BE STORED?
MDA GRUPA stores and processes your personal data as long as at least one of the following criteria is met:
- The contract concluded with you remains in force;
- MDA GRUPA or you can exercise legitimate interests;
- Either party has a legal obligation to store the data (for example, according to the Law on Accounting, issued invoices must be stored for at least 5 years, etc.);
- Your consent for data storage is in effect (applies only to cases where no other legal basis for data storage exists, e.g., in cases where data was obtained during marketing activities).
Accounting source documents, such as contracts, invoices, and payment information – to fulfill accounting requirements in accordance with Section 28, Paragraph five of the Law on Accounting (to ensure the availability of payment source documents) – are stored for 5 years.
If your personal data is necessary to protect our or your legitimate interests in the event of civil disputes – no longer than 10 years after the right of claim arises for you or us.
If a claim and/or request is resolved by signing a settlement agreement, this agreement containing your personal data is stored for 10 years.
HOW WE ENSURE DATA SECURITY
MDA GRUPA protects your personal data by using modern technologies, taking into account the existing risks to the privacy of natural persons, as well as the technical, organizational, and financial resources reasonably available to MDA GRUPA, including the use of the following personal data protection security measures:
- Use of antivirus software;
- Data encryption (HTTPS SSL protocol);
- Updating email and computer passwords every 2 months;
- Employee training.
YOUR RIGHTS
Data protection laws grant you a range of rights regarding the processing of your personal data.
- Access to personal data You have the right to request confirmation from us as to whether we are processing personal data related to you, and in such cases, to request access to the personal data we process. To exercise this right, you may submit an application to us.
- Rectification of personal data Furthermore, if you believe that the information about you is incorrect or incomplete, you have the right to ask us to correct it.
- Withdrawal of consent If we process your personal data based on your consent, you have the right to withdraw your consent to the processing of personal data at any time. You can change your preferences and withdraw consent by submitting an application to us.
- Objection to processing based on legitimate interests You have the right to object to the processing of personal data based on our legitimate interests. However, we will continue to process your data even if you have objected to it if we have compelling, motivated reasons to continue the processing. To exercise this right, please submit an application to us.
- Erasure ("Right to be forgotten") Under certain circumstances, you have the right to request that we erase your personal data. However, this does not apply to cases where the law requires us to retain the data. You may request the deletion of specific data by submitting an application to us.
- Restriction of processing Under certain circumstances, you have the right to restrict the processing of your personal data. Please note: if you request restricted processing of your data, it may affect your ability to receive our services. To exercise this right, please submit an application to us.
- Data portability Finally, you have the right to receive or transfer your personal data further to another data controller ("data portability"). This right applies only to data you have provided to us based on your consent or a contract, and where the processing is carried out by automated means. To exercise this right, please submit an application to us.
We will review your request without undue delay and provide a response regarding the fulfillment or non-fulfillment of the request no later than within one month from the date of receipt. In the event that fulfilling the request takes longer, we have the right to extend the period by an additional two months, but in any case, you will be informed of this within the first month.
We have the right not to fulfill your request if:
- It is not formulated clearly;
- We cannot identify you;
- We have already provided a response to such a request;
- The volume of requested information is disproportionate;
- The request is unfounded (it does not apply to our company, or no explanation is provided as to why the request should be fulfilled);
- Regulatory acts stipulate that we are not authorized to provide such information to you or that we are obliged to retain specific data of yours.
WHO CAN YOU CONTACT IF YOU HAVE QUESTIONS?
If you have questions regarding the processing of your personal data, please contact us; our contact information is as follows: SIA MDA Grupa, unified registration number: 40203454177, legal address: Rīga, Katlakalna iela 9A, LV-1073, telephone: +371 29104430; e-mail address: info@mdagrupa.lv.
SUBMITTING COMPLAINTS
If you are not satisfied with our response to your application or believe that we are violating personal data protection regulations, you have the right to submit a complaint to the Data State Inspectorate:
- Telephone: +371 67223131
- E-mail: pasts@dvi.gov.lv
- Address: Elijas iela 17, Rīga, LV-1050
Uzņēmuma nosaukums SIA "MDA Grupa" Reģ.Nr. 40203454177
Atveseļošanas fonda ietvaros veic ieguldījumu komercdarbības procesa uzlabošanā.
Atbalsta darbība: Pārdošanas process
Risinājums: Jauna uzņēmuma tīmekļa vietne vai e-komercijas risinājums