Data processing and privacy policy
The last changes to this document were made on March 1, 2025.
This document provides information about the personal data processing of two business operators providing legal services – Jekaterina Tumule and Liliana Garkalne – in the course of offering their services, and the types of data they may process. If you require more detailed information or if you have any questions after reviewing this Privacy Policy, please feel free to contact us!
1. Identity and contact information of the data controller and/or the representative of the data controller:
Your Data Controller is the lawyer with whom you are communicating.
Jekaterina Tumule
Phone number for contact regarding data processing matters: +371 206 706 18
Email for contact regarding data processing matters: tumulej@gmail.com
or
Liliana Sauša
Phone number for contact regarding data processing matters: : +371 206 715 60
Email for contact regarding data processing matters: lilianasausha@gmail.com
2. Types of collected personal data, how we obtain your personal data, and why we have them?
2.1. The data is processed for the provision of legal services.
Within the scope of data processing, we may process the following personal data of yours:
Personal identifiers and contact information (e.g., name, surname, personal identification number, address, phone number, and email address);
Financial data (payment information, invoices);
Legal data (involvement in litigation, contracts, powers of attorney, claims, etc.);
Other information necessary for the provision of legal services.
2.2. In accordance with the General Data Protection Regulation, we will process your data based on the following legal grounds:
(A)Your provided consent. You can withdraw your consent at any time. This can be done by writing to the specific data controller (see point 1).
(B) There is a contractual relationship between us.
2.3. The legal basis for processing special categories of data:
(A) Your provided consent. You can withdraw your consent at any time. This can be done by writing to the specific data controller (see point 1).
(B) The processing is necessary for the protection of your vital interests.
2.4. Recipients of the data or categories of recipients:
Personal data may be transferred to:
A) to state and law enforcement authorities in cases specified by regulatory requirements;
B) to judicial institutions within the framework of legal proceedings.
2.5. Retention period. We will retain your personal data for the following period.
In the case of contracts and legal documents – at least 10 years after the end of the collaboration;
Invoices and other financial documents – at least 5 years;
In other cases – for as long as the service is being provided.
3. Your data protection rights.
You have the following rights regarding data protection:
The right to access your data —When exercising your right to access your data, you need to specify a particular time period and the data you wish to obtain from us. You have the right to request information about what data we hold about you, why we process it, how we obtained it, to whom it has been transferred, how long it will be stored, and to receive a copy of your data. The request can be processed more quickly if the time period is as short as possible, and if the request for information about your data is formulated in as much detail as possible. It will help us provide a response if we know the purpose for which you wish to access the data.
The right to rectification of data - If you need to correct or update your personal data held by us, you must clearly specify which data need to be corrected and what the correct information is. If the data was not obtained from you, please provide a justification for why the information to be corrected is considered inaccurate, to facilitate a faster and more accurate assessment of the correction.
The right to erasure of data — In order for us to erase your data, you must specify which personal data needs to be deleted and provide a justification for the request. Please note that in all cases, it may not be possible to delete the data.
The right to restrict processing — If you have concerns about whether we are processing your data correctly, you can request us to restrict the processing of specific data. The request for data processing restriction must include the reason why you believe the processing should be restricted.
The right to object to processing — In certain cases, you may have the right to object to processing based on your individual circumstances. In such a request, it is important to specify your individual circumstances that justify your objection to the processing.
The right to data portability — If you want us to collect and transfer your personal data held by us to another controller or send it to you, it is important to specify which data you wish to transfer.
Please contact us via email at one of the data controllers mentioned in point 1 if you wish to submit a request to exercise your rights.
We will review your request without undue delay and provide a response regarding the fulfillment or non-fulfillment of the request no later than one month from the date of receipt. If the fulfillment of the request takes us longer, we have the right to extend the processing time by an additional two months, but in any case, you will be informed about this within one month.
We have the right not to fulfill your request:
If it is not clearly formulated;
If we are unable to identify you;
If we have already responded to such a request;
If the volume of the requested information is excessive;
If the request is unjustified (not applicable to our company, no explanation is provided as to why the request should be fulfilled);
If it is stipulated by regulatory acts that we are not authorized to provide such information to you or we are required to retain certain of your data.
4. Submitting a complaint
If you have any concerns about how we use your personal data, you can submit a complaint to one of the data controllers mentioned in point 1.
If you believe that we have processed your data improperly, you have the right to submit a complaint to the data protection supervisory authority regarding our organization's data processing:
Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050
pasts@dvi.gov.lv
https://www.dvi.gov.lv/lv
67223131