This Privacy Policy explains how the limited liability company “Forestpage” (hereinafter – the Controller) processes information and personal data on the website mezalapa.lv (hereinafter – the Website), as well as informs data subjects about their rights in accordance with the General Data Protection Regulation No. 2016/679 (hereinafter – the Regulation).

1. Information about the Controller:

1.1. Controller’s contact details: limited liability company “Forestpage” (registration number: 40203660809, registered address: Olivu 13-13, Riga, Latvia, LV-1004, email address: info@mezalapa.lv).

1.2. The Controller complies with the requirements of the Regulation in Latvia.

2. Purposes, Categories, and Legal Bases of Personal Data Processing

2.1. The Website provides classified listing services that may be used by registered users in accordance with the mezalapa.lv Terms of Use.

2.2. Personal data may be processed in accordance with specific purposes, legal bases, and categories as detailed in the annex to this policy or in the Website’s data processing overview.

2.3. The Controller may request additional information for the identification of individuals and companies where required for compliance with applicable laws and regulations, including the control of circulation of hazardous goods, ensuring financial compliance, and the prevention of illegal activities.

2.4. Data may also be processed for the purposes of legal protection or the protection of legitimate interests.

No.

Purposes and Processes of Personal Data Processing

Processed Personal Data of a Registered User

Legal Basis for Processing (GDPR Provision)

1.

Creation of a registered user profile.

Name, surname, email address, phone number

Consent of the data subject

(Article 6(1)(a) of the Regulation)

2.

Technical provision of registered user profile creation

Registered user IP address, registration date and time, user ID number

Legitimate interest (Article 6(1)(f) of the Regulation)

3.

Provision of listing placement services and sending reminders about listing expiration

Name, surname, additional email address, phone number; creation and publication of listing content, contact information included in the listing, and attached photo gallery; account balance

Performance of a contract

(Article 6(1)(b) of the Regulation)

4.

Verification of economic operator status

Second part of personal identification number, registration number, taxpayer address, VAT registration number

Compliance with a legal obligation

(Article 6(1)(c) of the Regulation)

5.

Execution of payment processing

Received payment, payment number, payment amount, user name and surname, user ID; payer’s name, surname, personal identification number

Performance of a contract

(Article 6(1)(b) of the Regulation)

6.

Communication between portal users and listing publishers

Name, message content addressed to the registered user

Consent of the data subject, legitimate interest

(Article 6(1)(a) and (f) of the Regulation)

7.

Response communication between listing publishers and portal users

Name, message text, attached images

8.

Determination of the registered user’s country of residence for VAT purposes and tax compliance

User’s country of residence

Legitimate interest

(Article 6(1)(f) of the Regulation)

9.

Administration of the registered user account (access provision; access recovery in case of forgotten password or lost email access)

If necessary – additional email address, mobile phone number, Skype contact (if provided), device and IP settings, user ID, login date and time

Legitimate interest

(Article 6(1)(f) of the Regulation)

10.

Ensuring communication, reviewing reports of improper conduct, contacting users after receiving emails

Name, mobile phone number, email address, additional email address

11.

Reminder to the user about saved listings (upon request) or forwarding listings

Email address

Consent of the data subject

(Article 6(1)(a) of the Regulation)

12.

Handling consumer and user complaints and claims

Name, surname, email address, mobile phone number

Compliance with a legal obligation, legitimate interest

(Article 6(1)(c) and (f) of the Regulation)

13.

Compliance with Regulation requirements (handling data subject requests)

Name, surname, phone number, email address, personal data included in the request

Compliance with a legal obligation

(Article 6(1)(c) of the Regulation)

14.

Ensuring compliance with order and law on the website (preventing misinformation, public insults, incitement to disorder or hate crimes, and discrimination based on gender, race, ethnicity, age, disability, religion, political views, origin, property or family status, sexual orientation, or other grounds)

Registered user data: name, surname, mobile phone number, email address, additional email address

Public interest, legitimate interest

(Article 6(1)(e) and (f) of the Regulation)

15.

Ensuring lawful circulation of goods (verification of licensed goods trading and required permits in specific employment sectors)

Registered user data: name, surname, mobile phone number, email address, additional email address

Legitimate interest

(Article 6(1)(f) of the Regulation)

16.

Verification of representation rights in case of payment refunds

Authorization data, name, surname, position

Legitimate interest

(Article 6(1)(f) of the Regulation)

3. Transparency and Data Transfer to Third Parties

3.1. Personal data may be transferred to third parties only in the following cases:

3.1.1. To payment processors, to the extent necessary for processing payments or issuing refunds;

3.1.2. To public authorities in accordance with applicable laws (for example, tax authorities, police, courts);

4. Storage of Personal Data

4.1. Personal data is stored for as long as necessary to achieve the specific purpose of processing or as long as a legal basis for its storage exists, such as consent, performance of a contract, or a legal obligation. Access to data is restricted and granted only to authorized persons.

5. Rights of the Data Subject

5.1. You have the right to request information about the processing of your personal data, to rectify, erase, or restrict processing, to object to processing, and to withdraw your consent. In certain cases, erasure or restriction of processing may not be carried out if it is not permitted under applicable laws or legitimate interests.

6. Changes to the Privacy Policy

6.1. The Controller has the right to amend this Privacy Policy at any time. The latest version will always be available on the website mezalapa.lv.