Privacy Policy

1. Information about the controller
SIA “AD project agency“, registration number: 40203168831, legal address: Latgales iela 222C-57, Riga, LV-1019, +371 28490210

2. Contact information for communication on personal data protection issues
If you have any questions regarding this notice or the processing of your personal data, you can contact us by writing to the e-mail address: [email protected]

3. General description of our personal data processing
This notice describes how we process personal data collected as a result of our video surveillance and other security measures.

The purpose of this notice is to provide visitors to our territory and premises and other persons entering the coverage area of our video surveillance cameras with the opportunity to familiarize themselves with our personal data processing regulations.

This is the current version of the notice. We reserve the right to make amendments and update this notice as necessary.

The purpose of this notice is to provide you with a general overview of our personal data processing activities and purposes. We are aware that personal data is your value and will process it in compliance with confidentiality requirements and taking care of the security of your personal data at our disposal.

4. For what purposes do we process your personal data and what is the legal basis for processing your personal data?
We will process your personal data only for previously defined legitimate purposes, including:

a) Prevention of threats to property interests and threats to life and health, investigation and detection of criminal offences, ensuring public safety and ensuring other important legitimate interests by conducting video surveillance.

Within the framework of this purpose, we need to carry out video surveillance of our territory, buildings, premises and other property, use personal data processors to ensure various functions, if necessary, provide information to investigative authorities, courts and other state institutions, assessing the need, also provide information to third parties (for example, tenants of premises/territories) to achieve their legitimate goals (for example, to detect criminal offenses), as well as use the rights granted in regulatory enactments to ensure our legitimate interests.

For this purpose, we may need to process at least the following personal data: the person's appearance (image), the person's location and time, the person's actions in the video camera's coverage area and other data as necessary;

The main legal bases used to achieve these purposes are:
– Compliance with legal obligations (Article 6(1)(c) of the General Data Protection Regulation) – because the territory is a threatened object and the regulatory enactments establish increased security requirements for the protection of such objects;
– Legitimate interests of the controller or a third party (Article 6(1)(f) of the General Data Protection Regulation);

5. Who may have access to your personal data?
We take appropriate measures to process your personal data in accordance with applicable law and to ensure that your personal data is not accessed by third parties who do not have an appropriate legal basis for processing your personal data.

Your personal data may be accessed, as necessary:
1) by our employees or directly authorized persons who need it to perform their work duties, such as security guards, security service employees, direct managers;
2) by personal data processors in accordance with the services they provide and only to the extent necessary, such as security service providers, database technical maintainers;
3) by investigative authorities, security authorities and other state and local government authorities in cases specified in law;
4) in certain cases by tenants of territories and premises for the achievement of their legitimate goals (for example, to detect criminal offenses).

6. Which cooperation partners in the processing of personal data or personal data processors do we choose?
We take appropriate measures to ensure the processing, protection and transfer of your personal data to data processors in accordance with applicable law. We carefully select personal data processors and, when transferring data, assess its necessity and the amount of data to be transferred. Data transfer to processors is carried out in compliance with the requirements of confidentiality and secure processing of personal data.

At the moment, we can cooperate with the following categories of personal data processors:
1) an outsourced security service provider;
2) a technical maintainer of IT infrastructure and databases.

7. Is your personal data sent to countries outside the European Union (EU) or the European Economic Area (EEA)?
We do not transfer data to countries outside the European Union or the European Economic Area.

8. How long will we store your personal data?
Your personal data is stored for as long as it is necessary for the relevant purposes of processing your personal data and in accordance with the requirements of applicable law.

When assessing the duration of personal data storage, we take into account applicable regulatory requirements, aspects of contractual obligations, your instructions (e.g. in the case of consent), as well as our legitimate interests. If your personal data is no longer necessary for the specified purposes, we will delete or destroy it. For example, we will store video surveillance recordings for up to 1 (one) month to ensure the existence of relevant evidence in the event of claims or incidents.

9. What are your rights as a data subject regarding the processing of your personal data?
In accordance with the provisions of the General Data Protection Regulation, you have the right to access your personal data that we hold about you, to request its rectification, erasure, restriction of processing, to object to the processing of your data, as well as the right to data portability in the cases and in the manner specified in the General Data Protection Regulation. However, you do not have the right to request the correction or completion of video recordings, as this would be considered falsification or distortion of information. We reserve the right not to provide you with a copy of your personal data, including personal data obtained during video surveillance, in cases where such provision would affect other data subjects and there would be no technical possibility to provide a copy of the personal data without infringing the rights of other data subjects, as well as in cases where such provision would require excessive time, staff or financial resources due to its volume or complexity.

We respect your right to access and control your personal data, therefore, in the event of receiving your request, we will respond to it within the time limits set by regulatory enactments (usually no later than one month, unless there is a special request that requires longer time to prepare a response), and if possible, we will correct or delete your personal data accordingly.

The current version of the document is valid from 01.01.2026