Privacy Policy

General Principles of Personal Data Processing of Natural Persons by SIA ANG LC

Terms and Definitions

1. Personal Data Controller means any person who processes personal data and/or any person on whose behalf personal data is processed.
1.1. The Main Controller is SIA ANG LC, registration No. 52103077201, address: Ganību Street 197/205, Liepāja, LV-3407, Latvia.
1.2. The Authorized Controller – persons authorized by the Main Controller to process personal data. The Authorized Controller is an internal employee of SIA ANG LC.
2. Data Subject means any natural or legal person who has provided their personal data to the Main Controller, and whose data is processed by the Main Controller in accordance with the General Principles of Personal Data Processing.
3. Personal Data – data about the Data Subject submitted/provided to the Controller via the website, email, or phone. These data include first name, surname, phone number, email address, postal address, passport number, date of birth, gender, and other data that allow identification of the individual.
4. Processing of Personal Data – any activity performed with personal data, including collection, recording, organization, storage, modification, disclosure, access, review, retrieval, use, transfer, sharing, merging, restriction, deletion, or destruction of personal data, or any of the above-mentioned actions, regardless of the method or tools used.
5. Third Party means any natural or legal person, except the Data Subject, the Main Controller, the Authorized Controller, or a person processing personal data on behalf of the Main or Authorized Controller.

Purposes and Principles of Personal Data Processing

6. The Personal Data Controller processes personal data for general customer relationship management and for the provision, sale, promotion, and administration of products and services.
7. The Personal Data Controller may not transfer, rent, or disclose personal data to third parties for their use (except in cases provided for in these General Principles of Personal Data Processing).
8. In processing personal data, the Personal Data Controller must comply with the principles set out in the Personal Data Protection Law and the EU General Data Protection Regulation (GDPR).

Consent of the Data Subject

9. Personal data are processed on the basis of the Data Subject’s consent in accordance with Section 7(1) of the Personal Data Protection Law and Article 6(1) of the EU GDPR.
10. The Data Subject must provide consent to the Controller for processing their personal data in accordance with these principles and purposes. To give consent, the Data Subject must fill out the relevant paper forms or online forms on the Controller’s website angschool.lv, or provide data via email or phone.
11. Providing consent is a necessary precondition for cooperation with the Data Subject; lack of consent means that the Main Controller cannot provide the requested service.
12. The Data Subject may withdraw consent at any time by notifying the Controller at [email protected] or unsubscribing from electronic communications sent by the Controller. Withdrawal of consent does not affect the lawfulness of data processing carried out before withdrawal.

Data Protection and Responsibility

13. The Personal Data Controller ensures the protection of personal data through organizational, physical, and IT security measures. The Controller confirms that all necessary measures for the protection of personal data are implemented, and that data processing is limited to what is necessary for the intended purpose.
14. If the Data Subject has consented to the processing of data in relation to a requested service, personal data shall be stored until the Data Subject withdraws their consent.
15. The Controller allows access to personal data only to employees who are authorized to process personal data, and only to the extent necessary to achieve the purposes of data processing.
16. The Controller is responsible for compliance with the requirements of the Personal Data Protection Law and the EU GDPR after its entry into force.

Protection of the Data Subject’s Rights

17. The Data Subject has the right to access their personal data held by the Controller and to receive additional information about the processing of their personal data.
18. The Data Subject has the right to request, at any time, the restriction of processing or disclosure of their personal data, or the deletion, correction, or blocking of data, provided that such rights are in accordance with the Personal Data Protection Law or other applicable legislation.
19. If the Data Subject believes that the Controller has violated their rights during data processing or requests deletion of their data, they may submit a complaint to the Controller at [email protected]. The Data Subject also has the right to contact the Data State Inspectorate or court at any time for the protection of their rights.

Last updated: 01.10.2025