Privacy policy

The protection of your personal data is important to us, and we want to ensure that any actions taken with your data are transparent. With this Privacy Policy, we wish to inform you about the processing of your personal data, the purposes of the processing, as well as other important issues. 

The controller of personal data is the limited liability company “Kivi Real Estate” (sabiedrība ar ierobežotu atbildību "Kivi Real Estate"), registration number: 40103246260, legal address: 5 Terbatas Street (Tērbatas iela), Office 4, Riga, LV-1050, Latvia (hereinafter - “we”, “us”, “our”).

If you have any questions about the processing of your personal data, you can contact us by using the following contact information:
E-mail:
Address: 5 Terbatas Street, Office 4, Riga, LV-1050, Latvia
 
For what purposes do we process your personal data?

Provision of services
Legal basis for data processing: performance of the contract or pre-contractual measures

We process your personal data to provide you with the services you have requested. This includes the processing of personal data required for contract preparation, contract execution and payment administration, as well as your identification.

In such cases, we collect and process only the personal data necessary to provide the specific service and may include the transfer of personal data to our contractual partners, as well as the provision of the necessary support to you.

Receipt of news and offers
Legal basis for data processing: consent

If you have subscribed to receive news by e-mail or telephone, we will use the e-mail address and/or telephone number you provided to send out news and offers that may be of interest to you.

You may opt out of receiving such further information at any time by clicking on the “Unsubscribe” link in the email you received.
 
Communication with us
Legal basis for data processing: legitimate interest

When you contact us to get answers to your questions, we process your name, e-mail address, telephone number and other information provided voluntarily.

Such data processing is necessary for you to receive answers to your questions, get consultations or suggestions, as well as for us to be able to provide the necessary support.

Applying for vacancies and keeping the application for future evaluation of the candidate
Legal basis for data processing: consent

If you have sent us an application for a job vacancy, we will evaluate your suitability for the employment in our company, as well as inform you about the results of the job tender.

Upon receipt of a separate consent, we may retain information about you and your application after completion of the tender to assess your suitability for other positions in our company. If you wish to delete your application, please contact us by using the contact information provided in this Privacy Policy.


Taking measures to prevent money laundering and terrorist financing
Legal basis for data processing: public interest

In accordance with the requirements of the law, we perform due diligence of the customers and risk assessment.


 To whom is your personal data transferred?

Contractual partners
As part of the provision of services, we may transfer your personal data to our contractual partners if it is necessary for the provision of services, including but not limited to concluding or evaluating a real estate transaction. Such contractual partners include real estate owners, landlords and their representatives, real estate appraisers.

Personal data processors
To support our core business, we may engage processors of personal data, including but not limited to IT system operators, consultants, real estate agents, legal and financial consultants. In such cases, the processors process the personal data on our behalf and only on the basis of our instructions.

State and local government institutions
Your personal data may be transferred to state and / or local government institutions for the execution of the laws and regulations or at the request of law enforcement authorities. Personal data may also be transferred to ensure or protect our legitimate interests.

Personal data may be transferred outside the EU/EEA if our contractual partner or processor is located outside the EU/EEA. In such cases, additional security measures, as laid down in the General Data Protection Regulation, apply to the transfer of personal data to third countries.
 
How long is personal data stored?

The duration of the storage of your personal data depends on the purpose of the data processing and the legal basis. The following are the data retention periods and / or criteria that determine the personal data retention period:
Processing of personal data for the provision of services
If you have used our services, we may retain your personal data until the end of the contract, as well as after the termination of the contract, to the extent necessary to protect our legitimate interests and to be able to prove the existence and execution of the transaction.

Processing of personal data for communication with you
We may process your data for a maximum of 2 months from the date of receipt thereof for the potential communication with you in the future.

Consent
If you have given us a consent to the processing of personal data, we will keep your personal data until the consent is revoked. In certain cases, we may keep your personal data longer if it is necessary to prove that consent to the processing has been given. The retention period in this case shall not exceed 2 years from the date of withdrawal of consent.

Taking measures to prevent money laundering and terrorist financing
In accordance with the requirements of the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing, personal data processed on the basis of this law shall be stored for 5 years.

Rights of the Data Subject

You are entitled to receive information from us about the processing of your personal data, including:

• Receive information about the data we process;
• Request the correction of personal data;
• Withdraw prior consent;
• Oppose the processing of data if the processing is justified by a legitimate interest;
• Request deletion of data (right to be forgotten);
• Request restricting the data processing;
• Receive personal data in a structured, widely used and machine-readable format.
  
We encourage you to contact us if you would like to get information on the processing of your data or any other matter.

In case of complaints, you may also contact the supervisory authority in the field of personal data protection – the Data State Inspectorate (www.dvi.gov.lv).
 
Validity of the Policy and Changes Thereto

This Policy comes into force on 30th of April 2021. You can get acquainted with the Privacy Policy and its updates on the website www.kivi.lv.