Back

Privacy Policy

APPROVED

by SIA Clean R management board

order No ADM53 of 10 May 2018

Personal data processing policy

1. Purpose of personal data processing

The purpose of the personal data processing policy is to provide the natural individual (data subject) with information about the purpose, scope, protection and duration of the processing of personal data, during the collection and processing of the data subject’s personal data.

2. Data controller and contact details

The personal data controller is SIA Clean R (‘Clean R’), uniform registration No 40003682818, registered address Vietalvas iela 5, Riga, LV-1009, phone 67111001, e-mail [email protected]

The Clean R contact for personal data processing is the Customer Service Centre. You can ask questions about our processing of personal data by calling 67111001, sending an e-mail to [email protected], or contacting Clean R at its registered address. You may submit a request for the exercise of your rights in accordance with Section 12 of this document.

3. Scope

Personal data are any information about an identified or identifiable natural individual. The definitions, explanations, and categories of personal data are specified in Annex 1.

The privacy policy applies to the protection of privacy and personal data for:

Clean R works to ensure its Clients’ privacy and the protection of their personal data, observes the Clients’ right to the lawfulness of personal data processing in accordance with applicable law, i.e. Regulation (EU) of the European Parliament and of the Council No 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (‘Regulation’), and other applicable laws in the field of privacy and data processing.

This privacy policy applies to data processing, regardless of the form and/or environment in which the Client provides personal data (Clean R’s website, mobile applications, self-service portal, in paper format, or via phone), and what company systems or paper forms they are processed in.

Additional, special rules may be set for specific types of processing (e.g. cookies, etc.), environments, purposes of data processing, of which the Client is informed when providing the data to Clean R.

4. Purposes of the processing of personal data

Clean R processes personal data for the provision of services and sale of goods:

Clean R processes personal data for business planning and analysis:

Clean R processes personal data for the provision of information to public authorities and operational agencies in the cases and to the extent provided for in external regulations, and for other specific purposes, of which the Client is informed at the time of providing the data to Clean R.

5. Legal grounds for the processing of personal data

Clean R processes the Client’s personal data based on the following legal grounds:

The legitimate interests of Clean R are to:

6. Transfer of data from one controller to another

These data processing regulations apply only to the processing of personal data resulting from contracts for services provided by Clean R to another legal entity.

Each such party acts as an independent data controller.

The parties take appropriate technical and organisational measures to ensure the security of the processing of personal data.

The parties must promptly, and in any event within two (2) business days, inform the other party of a request received from a data subject if it concerns or affects the processing of personal data by the other party (for example, a request to restrict the processing) or affects personal data (for example, a request for rectification). The parties cooperate with each other in good faith (for example, by exchanging information about the processing of personal data) to comply with reasonable requests from data subjects and to ensure the accuracy of the data throughout the processing.

7. Processing of personal data

Clean R processes the Client’s data using the options provided by modern technologies, taking into account the existing privacy risks and organisational, financial, and technical resources that are reasonably available to Clean R.

Clean R may use automated decision-making with regard to the Client. The Client is informed about these Clean R activities individually, in accordance with laws and regulations. The Client may object to the use of automated decision-making in accordance with legal acts, yet understanding that in separate cases this can restrict the Client’s right to use individual possibilities potentially available thereto (for example, to receive commercial offers).

The use of automated decision, which results in legal consequences for the Client (for example, approval or rejection of the Client’s application), can be carried out only in the process of entering into, or execution of, the contract between Clean R and the Client, based on the Client’s unambiguous consent or in the cases stipulated in external laws and regulations.

For the high-quality and fast execution of the contractual obligations arising out of the contract entered into with the Client, Clean R may authorise Clean R group companies, its cooperation partners to perform individual deliveries of goods and activities for the provision of services, such as service deployment works, billing, and the like. If, in carrying out these tasks, Clean R group companies or partners process the Client’s personal data available to Clean R, these Clean R group companies or partners are considered to be data Clean R’s processing operators (processors), and Clean R is entitled to transfer the Client’s personal data to Clean R group companies and partners for the performance of these activities, to the extent necessary to carry out these activities.

Partners of Clean R and Clean R group companies (in the status of a processor of personal data) ensure the fulfilment of the requirements for personal data processing and protection in line with the requirements of Clean R and laws, and do not use personal data for other purposes, except for the fulfilment of the contractual obligations arising out of the contract entered into with the Client, on behalf of Clean R.

8. Protection of personal data

Clean R protects the Client’s data using the options provided by modern technologies, taking into account the existing privacy risks and organisational, financial, and technical resources that are reasonably available to Clean R.

9. Categories of recipients of personal data

Clean R does not disclose to third parties any of the Client’s personal data or any information obtained during the provision of services and the contract, inter alia, information regarding received electronic communications, content or other services, except the following:

Clean R ensures compliance with the binding statutory procedures to ensure the level of personal data processing and protection equivalent to the level set forth in the Regulation.

11. Duration of storage of personal data

Clean R stores and processes the Client’s personal data for as long as at least one of the following criteria exists:

Once the conditions referred to in this clause cease, the personal data of the Client are deleted.

12. Access to personal data and other Client rights

The Client has the right to receive information specified in laws and regulations regarding the processing of their data. Most of the Client’s information is already posted in the e-services section on the cleanr.lv website, where the Client can verify the accuracy of their data.

In accordance with applicable laws and regulations, the Client also has the right to request from Clean R access to their personal data, and to ask Clean R to expand, correct or delete these data, or to restrict the processing of the Client’s data, or to object to the processing (including the processing of personal data carried out on the basis of legitimate interests of Clean R); there is also the right to data portability. These rights can be exercised in so far the processing does not arise out of the obligations imposed on Clean R by the applicable laws and regulations and that are in the public interest.

The Client may submit a request for the exercise of their rights:

Having received the Client’s request for the exercise of their rights, Clean R verifies the Client’s identity, evaluates the request and carries it out in accordance with laws and regulations.

Clean R sends the reply to the Client by registered letter to the contact address provided by the Client, by electronically signed reply via e-mail at the Client’s request, or via the self-service portal cleanr.lv, taking into account, as far as possible, the method of receipt of the reply indicated by the Client.

Clean R ensures the compliance with data processing and protection requirements in accordance with laws and regulations and, in the case of the Client’s objections, performs meaningful actions to resolve the objection. However, if this fails, the Client has the right to contact the supervisory authority, the Data State Inspectorate.

13. Client’s consent to data processing and the right to withdraw it

The Client may give their consent to the processing of personal data, the legal basis for which is consent (for example, analysis of data on the habits of using services, customised advertising, etc.), on the self-service portal at cleanr.lv, in Clean R service application forms, in Clean R service portals/applications,  on Clean R’s and other websites (for example, newsletter subscription forms), by calling the Customer Service Centre at 67111001, via e-mail at [email protected], or in person at the Customer Service Centres.

A list of the categories of personal data that may be processed in accordance with the Client’s consent and other legal grounds is available in Annex 1.

The Client has the right to withdraw their consent to the data processing at any time in the same manner as it was provided, that is on the self-service portal at cleanr.lv, by calling the Customer Service Centre at 67111001, via e-mail at [email protected], or in person at the Customer Service Centre, and in this case, the further processing of data, which is based on the previously given consent, will no longer be carried for the particular purpose.

The withdrawal of consent does not affect the processing performed at the time when the Client’s consent was valid.

The withdrawal of consent cannot stop the processing of data carried out on the basis of other legal grounds.

14. Communication with the Client

Clean R communicates with the Client using the contact details provided by the Client (phone number, e-mail address, postal address, www.cleanr.lv website)

Clean R communication concerning the fulfilment of contractual service obligations (e.g. change of service or product (e.g. waste container) , information about invoices, changes in services, etc.) is based on the contract.

As part of the communication (incoming calls, e-mails), Clean R verifies the identity of the Client according to the following criteria:

Clean R conducts communication about commercial messages regarding Clean R and/or third-party services and other messages not related to the provision of directly contracted services (such as client surveys) in accordance with external laws and regulations or with the consent of the Client.

The Client may give their consent to the receipt of commercial messages from Clean R and/or its partners by signing in to the self-service portal at cleanr.lv, in Clean R’s service application forms, via Clean R’s service portals/applications, Clean R and other webpages (for example, newsletter subscription forms).

The Client’s consent to receive commercial messages is valid until its withdrawal (also after the termination of the service contract). The Client may at any time refuse to receive further commercial messages in any of the following ways:

Clean R stops sending the commercial messages as soon as the Client’s request is processed. The processing of a request depends on technological capabilities, and may take up to three full days.

When expressing their opinion in the surveys and leaving their contact details (e-mail, phone), the Client agrees that Clean R can communicate with them in relation to the assessment provided by the Client, using the contact details provided by the Client.

16. Use of cookies

Cookies are small pieces of information that a website saves on your computer or mobile device when you visit a website. It allows the server to collect information from your browser, so you do not always have to re-enter data when you return to a website or move from one page to another. More information about how cookies work is available at www.cookiecentral.com.

Our website uses cookies to improve the quality of our services. We use session cookies, persistent cookies and third-party (partner) cookies to:

Please note that some cookies may be placed by a third-party service provider that performs certain functions for us.

We work with third parties to track your activities on our website, to improve our marketing efforts, and to provide you with advertising based on your visit to our website.

Clean R’s websites may contain links to third-party websites which have their own user and personal data protection policies, for which Clean R bears no responsibility.

17. Other provisions

Clean R has the right to expand the privacy policy, making its current version available to the Client in their user profile on the Clean R’s self-service portal cleanr.lv, and by posting on the Clean R website, and in its invoices.

Clean R keeps the previous versions of this policy and they are available on Clean R website, at www.cleanr.lv.

 

 

Annex1

SIA Clean R privacy policy annex Data categories

No Data category Examples
1 Person’s identification data name, surname, personal identity number/ID, date of birth, passport No/ID card No
2 Contact details Address, phone number, e-mail address
3 Special categories of data (sensitive) disability note
4 Client contact person data name, surname, e-mail address, phone number of the contact person
5 Client data client contract number, registration date, status, client number
6 Self-service portal cleanr.lv data user number, actions performed on the cleanr.lv self-service portal
7 Supplier details supplier number, invoice details, address, bank account number
8 Client profiling data category assignment, segment (profiling is subject to the client’s permission for data analysis)
9 Service data service number, service name, service address, price, discount,

expiry date of the discount

10 End device data name, type, serial number, MAC address, meter number of the end device
11 Service contract data contract number, date of signature/approval, type, annex number, annex date
12 Transaction details transaction number, date, transaction name, type, status, service

installation information

13 CRM2 activity data activity number, type, date, category, owner
14 Communication data incoming/outgoing communication type, number, date, content, channel,

delivery status

15 Product purchase data product name, code, date of purchase, consignment note number, product

receipt method, price, method of payment, invoice information, accessories, RFID code

16 Service purchase data purchase information: customer orders, purchases, applications linked to the contract; address of service provision
17 Instalment payment details number of the instalment agreement, decision, payment schedule
18 Lease (with a purchase option) data date of lease payment, monthly payment, lease number, RFID CODE of the device
19 Solvency verification data status of external debt, credit risk rating, solvency status
20 Payment data payment system account number, bank account number, invoice number, date, amount, billing method, date of payment, amount owed, debt recovery information
21 Fault data fault number, date of recording/resolution, type, description
22 Complaint data complaint number, date of registration/resolution, type, description
23 Client survey data survey title, date of sending, date of reply, survey questions and answers provided
24 Clean R website

actions

IP address, name of the action taken, section of the web page, date and time
25 Photos and pictures Photos from customer events, photo-shooting date
26 Video data videos from client events, video surveillance on Clean R sites, recording date
27 Phone conversation record data Clean R customer service phone conversation records, date and time
28 Data on access to systems usernames and passwords assigned to the customer
29 Consent information 4 client’s statement of consent broken down by subject; date and time of consent, source
30 Location data 5 Location of waste containers

 

* This is not an exhaustive list of data included in a certain data category

1 Profiling consists of any form of automated processing of personal data which involves the assessment of personal aspects relating to a natural individual, in particular to analyse or predict aspects relating to work performance, economic situation, health, personal preferences or interests, trustworthiness or behaviour, location or movements, while such processing has legal effects concerning the natural individual or significantly affects the natural individual in a similar way.

2 CRM: Client Relationship Management.

3 Stored data include voice telephony (any information or data processed for the purposes of billing and payment accounting),

4 Consent is a freely given, unambiguously expressed declaration of will by the client, by which the client authorises the processing of their personal data in accordance with the information provided by Clean R.

5 Location data include data processed electronically in record-keeping systems.