PRIVACY POLICY

With the present Privacy Policy “Nextra Latvia” LTD, registration No. 50103544531, legal address: 32 – 19 Krisjana Barona Street, Riga, LV-1011, provides information about the processing of personal data of natural persons in the company of “Nextra Latvia” LTD so that you feel confident about the security of your personal data, as well as aware of compliance of your personal data processing with the principles of personal data processing.

“Nextra Latvia” LTD may introduce additions or corrections to the Privacy Policy by publishing the current version on their website www.nextra.lv.

FOR NATURAL PERSONS SUBMITTING PERSONAL DATA (QUESTIONNAIRE, CV) TO THE DATABASE OF NEXTRA

In case a natural person submits to “Nextra Latvia” LTD a completed questionnaire and/or their CV on the website www.nextra.lv, “Nextra Latvia” LTD, registration No. 50103544531, legal address: 32 – 19 Krisjana Barona Street, Riga, LV-1011, is the Data Controller (hereinafter referred to as the Controller), while the Employer is the Separate Controller from the Controller.

For the purposes of this section of the Privacy Policy the Data Subject is a natural person who has voluntarily submitted their data using social networks or e-mails, or the option to fill in the questionnaire/add a CV available on the Controller's website www.nextra.lv (Upload your CV/Resume)( (hereinafter referred to as the Data Subject).

The e-mail address of the Controller for communication with the Data Subject is nextra@nextra.lv.

Categories of personal data to be processed

  • Name and surname;

  • E-mail address;

  • Phone number;

  • Education;

  • Work experience;

  • Skills;

  • And other information provided by the Data Subject at their sole discretion.

Purpose of personal data processing

The Controller processes personal data for the purpose of providing recruitment services and career counselling as an intermediary between the Data Subject and the Employer searching for a suitable job for the Data Subject.

Legal basis for personal data processing

The legal basis for personal data processing is the Data Subject's consent to the processing of their personal data (the Sub-clause (a) of the Clause 1 of the Article 6 of the General Data Protection Regulation(1)). When submitting a completed questionnaire and/or uploading their CV (Upload your CV/Resume) on the Controller's website www.nextra.lv, or submitting data via social networks or e-mails, the Data Subject performs clearly confirmatory actions, thus giving consent to the processing of certain personal data.

Provision of personal data as a precondition for receiving the service

In case the Data Subject refuses to provide personal data to the Data Controller, it is not possible to provide the Personnel Recruitment Service to the Data Controller. In order for the Controller to assess the suitability of the Data Subject for the available vacancies, they need to have more detailed information (2) about the Data Subject.

Storage period of personal data

Personal data are stored until the consent of the Data Subject is revoked.

Withdrawal of the Data Subject's consent should be sent to the Controller's e-mail address nextra@nextra.lv or legal address: 32 – 19 Krisjana Barona Street, Riga, LV-1011.

Disclosure of personal data

The Data Subject's personal data held by the Controller, based on the Data Subject's consent, will be disclosed to a Data Subject's potential employer for the purpose of finding a suitable job for the Data Subject.

The Employer is a Separate Controller from the Controller and assumes all obligations and rights imposed by the binding regulatory enactments in force in the Republic of Latvia, including the General Data Protection Regulation, regarding the processing of personal data and against the Data Subject.

In the event that governmental or municipal institutions, in accordance with the regulatory enactments in force in the Republic of Latvia, request information about the Data Subject from the Controller, the Controller is obliged to provide this information.

Rights of the Data Subject

  • To request the Controller to access their personal data;

  • To request the Controller to correct their personal data;

  • To request the Controller to delete their personal data;

  • To request the Controller to restrict the processing of their personal data;

  • To exercise their right to transfer personal data;

  • To withdraw their consent to the processing of personal data;

  • To submit a complaint to the supervisory authority - the State Data Inspectorate.

Security of personal data

The Controller processes personal data using modern technology, thus ensuring the highest possible level of technical and organizational measures for the security of personal data.

(1) Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

(2) Please see the section “Categories of personal data to be processed”.

FOR NATURAL PERSONS SUBMITTING PERSONAL DATA (QUESTIONNAIRE, CV) FOR A VACANCY ANNOUNCED

In case the Employer addresses “Nextra Latvia” LTD to receive a personnel selection service - to publish a job advertisement on various platforms and social networks and to find a suitable employee for the vacancy announced by the Employer, “Nextra Latvia” LTD, registration No. 50103544531, legal address: 32 – 19 Krisjana Barona Street, Riga, LV-1011, is the Data Processor (hereinafter referred to as the Processor), while the Employer is the Controller (hereinafter referred to as the Controller).

For the purposes of this section of the Privacy Policy the Data Subject is a natural person who has voluntarily, while referring to a job advertisement, submitted their data by submitting a completed questionnaire and/or their CV on the Processor's website www.nextra.lv, or a natural person about whom the Processor has obtained information from the CV databases and/or social networks of other controllers (hereinafter referred to as the Data Subject).

The identity and contact details of the Processor are specified separately in each job advertisement, so that, if necessary the Data Subject can exercise their right to the processing of personal data in accordance with the General Data Protection Regulation (3).

Sources from which personal data are derived

  • CV database of “CV-Online Latvia” LTD;

  • CV database of CV Keskus O  Latvian branch;

  • Social networks - LinkedIn, Facebook, etc.

Categories of personal data to be processed

  • Name and surname;

  • E-mail address;

  • Phone number;

  • Education;

  • Work experience;

  • Skills;

  • And other information provided by the Data Subject at their sole discretion.

Purpose of personal data processing

The Processor processes personal data for a purpose specified by the Controller - to provide personnel selection services on behalf of the Controller, acting as an intermediary between the Controller and the Data Subject, selecting an employee suitable for the vacancy announced by the Controller.

Legal basis for personal data processing

The legal basis for personal data processing is the Data Subject's consent to the processing of their personal data (the Sub-clause (a) of the Clause 1 of the Article 6 of the General Data Protection Regulation). The consent of the Data Subject shall be deemed to have been given in cases where the Data Subject:

  • Submits a completed questionnaire on the Processor's website www.nextra.lv;

  • Submits their CV to the Processor;

  • Consents (orally or in writing) to the processing of their personal data obtained from other sources.

Provision of personal data as a precondition for receiving the service

In case the Data Subject refuses to provide personal data to the Processor, the Processor shall not be able to provide the Controller with information on a possibly suitable employee for the vacancy announced, on the basis of which the Data Subject is not able to apply for the announced vacancy.

Storage period of personal data

Personal data are stored until the announced vacancy is filled or in case the Data Subject agrees to the processing of their personal data for other vacancies, the personal data are stored until the Data Subject's consent is revoked.

In case the Data Subject agrees to the processing of their personal data for other vacancies, the processing of personal data takes place in accordance with the Privacy Policy section “For natural persons, who submit personal data (questionnaire, CV) to the database of Nextra”.

Disclosure of personal data

The personal data of the Data Subject held by the Processor, based on the agreement concluded between the Processor and the Controller and the consent of the Data Subject, will be disclosed to a Data Subject's potential employer in order to assess the Data Subject's suitability for the vacancy.

Security of personal data

The Processor processes personal data in accordance with the purposes (aims) and means set by the Controller, as well as using modern technologies, thus ensuring the highest possible level of technical and organizational measures for the security of personal data.

(3) Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

FOR BUSINESS PARTNERS

In case the Employer (hereinafter referred to as the Cooperation Partner) addresses “Nextra Latvia” LTD to conclude an agreement on the personnel selection service - to publish a job advertisement on various platforms and social networks and to find a suitable employee for a vacancy announced by the Employer, “Nextra Latvia” LTD, registration No. 50103544531, legal address: 32 – 19 Krisjana Barona Street, Riga, LV-1011, is the Data Controller (hereinafter referred to as the Controller).

For the purposes of this section of the Privacy Policy the Data Subject is a natural person who represents a Cooperation Partner - a legal entity - in the process of concluding and executing the agreement (hereinafter referred to as the Data Subject).

The e-mail address of the Controller for communication with the Data Subject is nextra@nextra.lv.

Sources from which data are derived

  • Cooperation Partner;

  • Data Subject.

Categories of personal data to be processed

  • Name and surname;

  • E-mail address;

  • Phone number;

  • Job;

  • Signature.

Purpose of personal data processing

The Controller processes personal data for the purpose of concluding a cooperation agreement, executing the agreement, as well as maintaining communication with the Cooperation Partner in the process of executing the agreement in order to ensure the highest possible quality of the service.

Legal basis for personal data processing

  • The data of the Chairperson/a Member of the Board or any authorized person of the Cooperation Partner is processed on the basis of the Sub-clause (b) of the Clause 1 of the Article 6 of the General Data Protection Regulation(4).

  • The data of the Cooperation Partner's representative is processed on the basis of the Sub-clause (f) of the Clause 1 of the Article 6 of the General Data Protection Regulation - Legitimate interest of the Controller to maintain communication with the Cooperation Partner in the execution of the agreement.

Storage period of personal data

  • The agreement and its annexes containing personal data are kept for 10 years after their performance, based on the Sub-clause (f) of the Clause 1 of the Article 6 of the General Data Protection Regulation - Legitimate interest of the Controller to defend their interests.

  • Accounting supporting documents containing personal data are kept for 10 years on the basis of the Sub-clause (c) of the Clause 1 of the Article 6 of the General Data Protection Regulation – the Accounting Law.

Disclosure of personal data

In the event that governmental or municipal institutions, in accordance with the regulatory enactments in force in the Republic of Latvia, request information about the Data Subject from the Controller, the Controller is obliged to provide this information.

Rights of the Data Subject

  • To request the Controller to access their personal data;

  • To request the Controller to correct their personal data;

  • To request the Controller to delete their personal data;

  • To request the Controller to restrict the processing of their personal data;

  • To exercise their right to transfer personal data;

  • To withdraw their consent to the processing of personal data;

  • To submit a complaint to the supervisory authority - the State Data Inspectorate.

Security of personal data

The Controller processes personal data using modern technology, thus ensuring the highest possible level of technical and organizational measures for the security of personal data.

(4) Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).