PRIVACY STATEMENT OF RIX TECHNOLOGIES AS
This Privacy statement aims to inform you about the personal data processed by RIX Technologies AS (registration number: 40003548427), the purposes and legal grounds for such processing, the duration of data retention, the measures taken to protect your data, and your rights in relation to our processing activities.
This statement applies to personal data obtained both directly from you and from third parties.
Unless the collection of your personal data is required to fulfill our legal obligations, we assume that providing such data is voluntary. If you choose not to provide your personal data, there will be no negative consequences. However, please note that in certain cases, the inability to obtain your personal data may prevent us from offering some of our services.
To ensure compliance with applicable data protection regulations, we continuously monitor our personal data processing activities. Accordingly, we reserve the right to amend this Privacy statement at any time to reflect any changes in our data processing practices. While we will make reasonable efforts to inform you of any updates, the most current version of this Privacy statement will always be available on our website.
Who is processing your personal data and who can receive your personal data?
Your personal data is processed by RIX Technologies AS, registration number: 40003548427, which is considered the personal data controller within the meaning of the General Data Protection Regulation and whose contact details are as follows:
registered address: Elizabetes street 15-4, Riga, LV-1010, Latvia;
e-mail: info@rixtech.lv.
In certain cases, we may engage a third party to process your personal data on our behalf. Please note that we will only share your personal data with third parties, if:
we have entered into a contract with the recipient of your personal data and are confident that they can ensure adequate protection during processing,
we are legally required to transfer your personal data or if another valid legal basis justifies the transfer.
We may transfer your personal data to the following categories of recipients of personal data:
To personal data processors who provide essential services to support our daily operations or organize special events. This includes, but is not limited to, IT service providers and our subcontractors assisting us with specific projects, postal and courier services, photographers, recruitment agencies, event organizers, and other relevant service providers.
In these cases:
the processor receives only the personal data necessary to perform a specific task or provide a particular service (e.g., a photographer will process only the photos of individuals participating in our events);
the processor handles your personal data solely in accordance with our instructions, does not use it for any other purposes, and does not share it with third parties without our prior consent.
To other recipients of personal data, including financial auditors, legal and financial advisors, insurers, government and municipal authorities, and courts, to ensure compliance with our legal obligations, respond to lawful requests, or protect our legitimate interests.
All recipients of personal data are located and all personal data is processed only within the EU/EEA and is not transferred outside the EU/EEA.
What we do to protect your personal data?
We are committed to ensuring the security of your personal data and processing it in full compliance with applicable legal requirements and industry best practices.
To prevent unauthorized access and processing, we implement a range of technological and organizational safeguards designed to provide robust protection for the personal data we handle. These measures include physical access controls, restricted access to IT systems through authentication, data encryption, and comprehensive IT system security protocols.
Our commitment to data security is further demonstrated by our ISO 9001:2015 certification, which reflects the effectiveness and high standards of our management practices. This certification underscores our dedication to handling personal data with the utmost quality and protection.
What personal data do we process, under what circumstances, and for what purposes?
We may process personal data belonging to the following categories of data subjects:
1) our employees and their family members,
2) prospective job candidates,
3) contact persons of our clients and business partners, as well as other individuals whose personal data we may access in the course of providing our services,
4) contact persons and representatives of potential clients and business partners,
5) visitors to our office,
6) visitors of our website.
Based on the nature of our activities, we may process the following categories of personal data:
1) contact information – e.g., name, surname, email address, phone number, etc.
2) professional information – e.g., current job position, previous work experience, professional skills, and job-related qualifications,
3) personal information – e.g., personal identification number, date of birth, appearance, hobbies, and any other details included in your CV or documents submitted to us,
4) appearance – e.g., photographs from events we organize and video recordings from security cameras within our office premises,
5) other personal data – any additional personal data that may become available to us in the course of providing our services, such as name, surname, personal identification number, and address.
We process your personal data only when we have a valid legal basis for doing so:
Your consent – when you have explicitly provided your consent, either in writing or through your actions (for example, by agreeing to receive information about our services or events). In such cases, we will only process the personal data you have specifically consented to.
Our legitimate interests – we may process your personal data to offer you the widest range of services and tailored experiences possible. In some cases, we are also entitled to defend our legitimate interests, such as responding to claims related to the quality of our services. In these cases, we will only process the personal data necessary to protect those interests.
Legal obligation – in certain situations, legal provisions require us to process personal data, such as submitting reports to tax authorities or verifying beneficial owners and board members of our partners against sanction lists. In these cases, we will process only the personal data strictly required to comply with these legal obligations.
To conclude or execute a contract – when you plan to cooperate with us, you enter into a contract with us, which requires us to collect your personal data. This includes using your personal data to fulfill our contractual obligations, such as providing services or paying compensation to subcontractors (individuals).
When processing personal data based on our legitimate interests, we conduct an assessment to ensure that our interests do not unduly infringe upon your rights and freedoms.
We may use your personal data for the purposes outlined in this Privacy statement, as well as for any additional purposes communicated to you at the time of data collection.
For more details on the legal bases and purposes for processing your personal data, please refer to the following sections of this Privacy statement.
Our employees and subcontractors
|
|
| |
|
|
| |
Personal data required for subcontract (e.g. name, surname, personal identification number, bank account, etc.). | To conclude and implement a contract. | For conclusion and execution of subcontract. | |
|
|
| |
|
|
| |
Personal data collected from video surveillance footage (limited to visual appearance). | Legitimate interests. | Prevention and detection of criminal offenses to protect our property, as well as the safety of individuals (employees, visitors) and their belongings. | |
Photographs (including those of employees' relatives). | Legitimate interests. | Photographic documentation of employee team-building events or other company events, as well as marketing activities on social media platforms. | |
Information required for sanctions list checks, including name, surname, personal identification number, or date of birth. | Legal obligation. | To comply with the legal obligation to check sanctions lists. |
|
Prospective employee candidates
|
|
|
|
|
|
Personal data available from public sources (e.g. professional description in LinkedIn). | Legitimate interests. | Establishing potential employment relationships and attracting top talent to support the company's operations. This applies in cases where the company has not formally advertised a vacancy but is considering the recruitment of a specific type of specialist without a formal competition. |
Visitors to our office
|
|
|
|
|
|
Contact persons and other representatives of our clients and business partners
|
|
|
|
|
|
Contact information (e.g. name, surname, e-mail, telephone, etc.). | Legitimate interests. | Facilitating communication necessary for the negotiation or execution of a contract, when the contractual partner is a legal entity. |
|
|
|
Information required for checking sanctions lists (name, surname, personal identification number or date of birth). | Legal obligation. | To comply with the legal obligation to check sanctions lists. |
Personal data processed in the course of our services
|
|
|
|
|
|
Contact persons and other representatives of potential clients and business partners
Personal data | Legal basis | Purpose of processing |
Contact information (e.g. name, surname, e-mail, position, telephone). | Legitimate interests. | Promoting our company and the products we offer and organizing other marketing activities. Maintaining customer relationships and maintaining a customer relationship management (CRM) database, and recording our marketing activities. |
Visitors of our website
We use cookies on our website to enhance functionality and performance. These cookies are essential for ensuring the website operates effectively, and without them, certain features may not function properly.
Cookies are categorized as follows:
1) Strictly necessary cookies – these cookies are essential for the core functionality of the website, such as managing user logins and account settings. The website cannot function properly without these cookies.
2) Performance cookies – these cookies, such as analytics cookies, help us understand how visitors interact with our website. They do not collect personally identifiable information and are used solely for improving website performance.
3) Targeting cookies – these cookies track visitors across various websites, including content partners and advertising platforms. They are used to build an interest profile of visitors and to display relevant advertisements on other websites.
4) Functionality cookies – these cookies store preferences and settings such as language, time zone, and other customized content.
Cookie | Legal basis | Retention period | Purpose of processing |
VISITOR_PRIVACY_METADATA | Legitimate interests | 6 months | The strictly necessary cookie is used to store a visitor's consent and privacy preferences when interacting with our website. It records the visitor's agreement to the privacy policy and various settings, ensuring that their preferences are maintained in subsequent sessions. |
YSC |
| Session | Targeting cookie set by Youtube to track video views. |
VISITOR_INFO1_LIVE |
| 6 months | Targeting cookie set by Youtube to track visitors' choices for Youtube videos embedded in our website; the cookie can also determine whether the website visitor is using the new or old version of the Youtube interface. |
pll_language |
| 1 day | Functionality cookie used to store the visitor's language preference. |
If you do not want cookies to be used on your device, you can manage them by indicating your preference in the cookie banner “Accept all/Reject all/Save and close”. Please note that your choice may affect the functionality of the website and you may not have access to all the features offered by our website.
If you wish to change your cookie preference later, you can do so by clicking on the “cookie” icon ( ) in the bottom right corner of our website. Even if you do not do this, we will ask you again about your cookie preference after 30 days.
How long do we retain your personal data?
We process your personal data only for as long as we have a valid legal basis to do so or as long as other applicable conditions exist. The retention periods for your personal data may be influenced by the following circumstances:
Legitimate interests: if the legal basis for processing your personal data is our legitimate interests, we will retain the data for as long as those interests remain valid. For example, if law enforcement is investigating a criminal offense that occurred on our premises, we will retain video recordings until the investigation concludes. Similarly, if we are involved in legal proceedings, we will retain the necessary personal data for the duration of the case.
Legal obligations: certain legal obligations may require us to retain personal data for specific periods. For example, regulations related to sanctions management may mandate the retention of verification records for a set period, and accounting laws may require us to retain certain personal data for up to five years after the termination of a business relationship.
Consent: as long as your consent for processing personal data is valid, we will retain it unless another legal basis for processing exists. For instance, if you withdraw your consent, but we have a legitimate interest in retaining your personal data for the purpose of pursuing a legal claim, we may continue to process it for that reason.
Please note that when one legal basis for processing your personal data expires, another may arise. For example, after the termination of your employment (where the legal basis was the performance of a contract), we are required by law to retain certain personal data in compliance with accounting regulations.
Once the conditions for processing your personal data no longer apply, it will be permanently deleted or destroyed.
What are your rights?
To ensure the proper processing of your personal data, you have several rights that you can exercise in relation to your data. To exercise these rights, please contact us using the contact information provided in this Privacy statement.
Access to your personal data
You have the right to request information about the personal data we process relating to you.
Right to correct your personal data
If you believe that the personal data we process about you is not accurate, complete or relevant, you have the right to request that your personal data be updated or corrected.
Right to withdraw your consent
If we process your personal data based on your consent, you have the right to withdraw your consent at any time.
To withdraw your consent for receiving electronic communications such as our newsletters, you can follow the unsubscribe instructions provided in the email, or you can contact us directly.
Right to object or restrict processing of your personal data
If we process your personal data based on our legitimate interests, you have the right to object to such processing.
Upon receiving your objection, we will cease processing or restrict the processing of your personal data, unless we can demonstrate compelling legitimate interests that override your rights or unless the processing is necessary for the establishment, exercise, or defense of legal claims.
If you believe that your personal data is inaccurate or that our processing of it is unlawful, you may request the restriction of its processing.
Please note that if the processing of your personal data is restricted, we may not be able to provide you with all available services or benefits.
Right to request deletion of your personal data
If you believe that we no longer need your personal data for the purposes for which it was collected, or you have withdrawn your consent and in other circumstances, you may request the deletion of your personal data.
Please note that we will only be able to delete your personal data in cases where we are not obliged to retain your personal data for specific purposes prescribed by law, or where we have no other legal basis to process your personal data.
Right to request the portability of your personal data
You have the right to receive the personal data you have provided, which is processed based on your consent or the performance of a contract, in writing or in one of the most commonly used electronic formats. If technically feasible, we may also transfer your personal data to another service provider at your request.
The right to lodge complaints about our processing of personal data
If you believe that our processing of your personal data violates your rights, you can file a complaint with us at any time. We will review your complaint and provide a response within the time limits set by law.
You also have the right to file a complaint with the State Data Inspectorate.
This Privacy statement was last reviewed and amended in March 2025.
