Privacy policy of the portal www.visitventspils.com
1. General provisions
1.1. This privacy policy provides information about how the portal www.visitventspils.com (hereinafter referred to as the Portal) collects and processes data of Portal users – natural persons, and also provides information about the rights of data subjects.
1.2. The purpose of the Portal is to inform Portal users about tourism attractions, accommodation, catering establishments, current events, events, publish news and official information about tourism and its activities on issues related to Ventspils, Ventspils region, Kurzeme, as well as provide all Portal users with the opportunity to earn local non-monetary money - Ventus.
1.3. The processing and protection of personal data of portal users is carried out in accordance with the General Data Protection Regulation (hereinafter – the Regulation), the Law on the Processing of Personal Data and other applicable legal acts in the field of privacy, data processing and protection.
2. Who is the personal data controller and what are their contact details?
2.1. The controller of personal data is the Ventspils City Municipality Institution “Ventspils City Council Administration”, address: Jūras Street 36, Ventspils, LV-3601, telephone: 63601100, e-mail: [email protected].
2.2. The operation of the Portal is coordinated and organized by the Tourism Information Centre (hereinafter referred to as TIC) of the Ventspils City Municipality, therefore you can receive information about the processing of your personal data on the Portal by writing to the following e-mail address: [email protected] or by calling +371 29232226.
3. What is the contact information of the personal data protection officer?
Contact information of the personal data protection officer: [email protected]Using this contact information, you can obtain information or submit a complaint regarding the processing of personal data on the Portal.
4. What are the purposes of processing personal data?
The portal mainly processes personal data for the following purposes:
- For registering a Portal user on the Portal, after the user has completed the registration form and received access;
- For the administration of ventilators, including their dispensing;
- Illustrative for artistic purposes, publicity and marketing;
- For sending informative notifications to the registered Portal users' e-mail addresses;
- Verify identities and prevent unlawful use of Portal user profiles, as well as ensure a secure Portal environment;
- For the use of cookies on the Portal.
5. What is the legal basis for processing personal data?
The legal basis for the processing of personal data for the purposes of personal data processing specified in paragraph 4 of this privacy policy is:
- Article 6, paragraph 1, subparagraph a) of the Regulation, namely, the data subject (Portal user) has given consent to the processing of his or her personal data for one or more purposes;
- Article 6, paragraph 1, subparagraph e) of the Regulation – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority lawfully vested in the controller, namely to promote the development of tourism and economic activity in the Ventspils City Municipality.
6. What personal data is processed?
The portal, in order to implement the personal data processing purposes set out in Section 4 of this privacy policy, processes the following personal data:
- Identification data (for example, first name, last name, age group);
- Contact information (e.g. residential address, phone number, email address, social media accounts);
- The language chosen by the Portal user for using the Portal;
- The amount of Vents earned by the portal user;
- Games played by the portal user to earn Vents;
- Photographs;
- Cookies: mandatory (necessary for the operation and functionality of the Portal. Cookies of this category ensure the normal operation of the Portal. Without these cookies, the operation of the Portal is not possible, respectively, they are always usedoptional (cookies that are not necessary for the stable operation of the Portal, such as data about the Portal user's geographical location, browser type and version, visit time, page views and site navigation. Your consent is required for these functions to work.Additional information about the cookies used on the Portal can be found in the Portal's Cookie Policy;
- Any other personal data that the Portal user has provided on his/her own initiative.
7. Who are the recipients of personal data?
7.1. The recipients of personal data processed on the Portal are:
- Portal administrator, including TIC employees;
- Employees of the Olympic Center “Ventspils” hotel, handing out earned Ventus;
- Any Portal user (can view photos of identifiable individuals);
- Ventspils City Municipal Institution “Ventspils Digital Center” (ensures technical maintenance of the Portal's operations and stores Portal user data);
- Portal maintainer.
7.2. At the same time, the Portal Administrator may transfer the personal data of Portal users to other persons to whom the Portal Administrator has the right or obligation to transfer them in accordance with regulatory enactments or upon receipt of the Portal user's clear and unambiguous consent to the transfer of their personal data.
7.3. When transferring personal data, the Portal Administrator ensures the procedures for processing and protecting personal data specified in regulatory enactments.
8. How long is personal data stored?
8.1. The data of users registered on the Portal is stored until the Portal user deletes their account or until the consent given for the relevant processing of their personal data is valid, unless there is another lawful basis for data processing.
8.2. After the end of the storage period, personal data will be permanently deleted, unless there is an obligation to store them in accordance with regulatory enactments.
9. What are the rights of the data subject?
9.1. The data subject has the right to contact the personal data controller and request information about the processing of his or her personal data, as well as request correction, deletion, restriction of processing of personal data or object to the processing of his or her personal data.
9.2. The data subject may submit a request to exercise his/her rights in the following manner:
- In written form in person at the TIC premises (Dārzu iela 6, Ventspils, LV-3601), presenting an identity document (for example, a passport or ID card), as the data subject is obliged to identify himself/herself;
- By electronic mail, signing it with a secure electronic signature and sending it to: [email protected] or email: [email protected].
- Using postal mail.
9.3. Upon receiving a request from a data subject to exercise his or her rights in accordance with Articles 15–22 of the Regulation, the Portal Administrator shall assess whether the request contained in the request is satisfactory or whether there are any exceptions specified in the Regulation and other regulatory enactments when the data subject's request is not satisfactory.
9.4. Where the legal basis for the processing of personal data is the consent of the data subject, the data subject has the right to withdraw consent to the processing of his or her personal data, but this does not affect the lawfulness of processing operations carried out while the consent was valid. Withdrawing consent cannot stop the processing of personal data carried out on the basis of other legal bases set out in the Regulation.
9.5. The data subject has the right to file a complaint regarding the unlawful processing of his or her personal data to the Portal Administrator or the State Data Inspectorate.