Privacy Policy

This Privacy Policy informs and explains how the Association “Riga Independent Theater” (hereinafter – Riga Independent Theater) processes personal data on the websites www.rigasteatris.lv and www.veikals. rigasteatris.lv (hereinafter referred to as the “Website”) and complies with the requirements of the General Data Protection Regulation No. 2016/679 (hereinafter referred to as the “GDPR”). Data controller for personal data processing on the Website: Association “Riga Independent Theater,” reg. No. 40008267099, legal address: Riga, Tērbatas iela 28, LV-1011. Contact information: phone: +371 6730 4215, email address: info@rigasteatris.lv. Riga Independent Theater has assessed the necessity of each personal data processing operation. Therefore, we hereby inform you of the purposes and legal bases for our processing of personal data. The purpose of processing describes why your personal data is necessary in the first place, while the legal basis for processing indicates which of the legal grounds recognized by the GDPR serves as the basis for the collection, use, or storage of your personal data. The Riga Independent Theater processes personal data regarding customers—theater attendees and online store shoppers—in accordance with the following. 1. Processing of Personal Data for Online Store Customers 1.1. Before paying for the selected items, you must provide your full name, delivery address, phone number, and email address for the purposes of order processing and delivery. In an additional field, you may optionally specify your preferred delivery times or dates when you will be away, as well as any special access requirements for the location where you are located. All of this personal data will be processed for the purpose of confirming your purchase and delivering the invoice, as well as fulfilling the purchase agreement (GDPR Article 6(1)(b)). When making a purchase, the system will automatically record the visitor’s IP address and order number; after payment is processed, it will also record the payment method and the financial institution to ensure the operation of the online store (GDPR Article 6(1)(f)). 1.2. If you exercise your right of withdrawal in accordance with the terms of the Riga Independent Theater distance contract, you must complete the Withdrawal Form, which must include all required personal data: first name, last name, address, product name, date of purchase, date of receipt of the goods, proof of purchase, and your signature. This personal data will be processed for the purpose of reviewing your right of withdrawal (GDPR Article 6(1)(b)), and to approve or reject it. 2. Processing of Personal Data of Theater Customers and Performance Attendees The Riga Independent Theater processes personal data when you: 2.1. You purchase tickets to performances. In this case, your data as a purchaser (personal data) may be processed in the www.bilesuparadize.lv system in order to notify you of possible changes to the performance schedule. (GDPR Article 6(1)(b)). Similarly, the personal data on personalized tickets will be used, together with a digital certificate (confirming vaccination or recovery from COVID-19), as well as an identity document, to verify the ticket holder’s identity before the performance, ensuring compliance with epidemiological requirements (GDPR Article 6(1)(c) and (e)); 2.2. When purchasing a season ticket, you provide your personal data (first name, last name, year of birth) for the performance of the contract (GDPR Article 6(1)(b)); 2.3. When attending a performance (particularly in the front rows of the auditorium or at premieres), in certain cases your image or a video clip of you may be recorded to preserve historically significant moments for the Riga Independent Theater or to publish them (for example, on the Riga Independent Theater’s website or social media). (GDPR Article 6(1)(f)). 2.4. Video surveillance is conducted at the Riga Independent Theater (entrance doors, lobby, auditorium) are subject to video surveillance to monitor compliance with the theater’s internal rules and to prevent criminal offenses (GDPR Article 6(1)(f)). If the Riga Independent Theater has authorized the presence of the press on its premises, the respective media outlet is responsible for such video or photographic recordings. In connection with the COVID-19 pandemic, the Riga Independent Theater may have an additional obligation to process personal data in accordance with the requirements of applicable laws and regulations. 3. Processing of Personal Data in Communication with the Riga Independent Theater The Riga Independent Theater processes personal data when you: 3.1. provide your contact information via a social media account to resolve an issue related to the availability of Riga Independent Theater’s services. The processing of personal data is based on consent (GDPR Article 6(1)(a)); 3.2. visit the website www.rigasteatris.lv, where you have the option to consent to receiving news from Riga Independent Theater. The processing of personal data is based on consent (GDPR Article 6(1)(a)). 3.3. If you use the website’s contact form, your name, email address, and message will be used to review your inquiry and provide a response on the basis of consent (GDPR Article 6(1)(a)). 3.4. The personal data of individuals who have had a legal relationship with the Riga Independent Theater is processed and stored for the periods specified in applicable laws and regulations. 3.5. Riga Independent Theater may process your personal data to comply with GDPR requirements if you have submitted a request regarding the processing of your data or wish to exercise any of the data subject rights provided for by the GDPR. Personal data processed: first name, last name, address, email address, and, in the case of an electronic submission, also the personal identification number. Legal basis for processing: compliance with a legal obligation (GDPR Article 6(1)(c) and (f)). 4. Categories of Recipients of Personal Data 4.1. The Riga Independent Theater does not grant access to its database to unauthorized persons and protects the personal information you have submitted. Personal data may be transferred to other parties only to: 4.1.1. ensure the functioning of the service purchase process and the collection of personal data for this purpose; 4.1.2. provide mobile and email marketing services (sending text messages and emails to anyone who has consented to such data processing regarding news from the Riga Independent Theater); 4.1.3. The user’s personal data is transferred via the website, for example, to a payment card processing company or a bank; 4.1.4. To delivery companies for the purpose of delivering goods purchased from the online store; 4.1.5. Riga Independent Theater is obligated to transfer data to government agencies upon receipt of a request from such an agency in cases specified by law. 5. Retention Periods for Personal Data 5.1. Personal data is retained in accordance with the defined purposes of personal data processing and the legal bases for personal data processing for as long as the Riga Independent Theater exists, provided that at least one of the following criteria is met: 5.1.1. there is a legal obligation to retain the data for a specified period in accordance with applicable laws and regulations; 5.1.2. it is necessary to pursue its legitimate interests; 5.1.3. it is necessary to fulfill contractual obligations; 5.1.4. the data subject has given valid consent to the processing of the relevant personal data. 5.2. Personal data on the website www.veikals.rigasteatris.lv will be stored for two years following the last purchase. The retention period for video recordings shall not exceed 6. Data Subject Rights, Their Exercise, and Limitations 6.1. You have the right to request access to your personal data from the Riga Independent Theater, to have your personal data corrected, to withdraw your consent to the processing of personal data, to request the erasure of personal data or the restriction of processing, as well as the right to object to the processing of personal data. 6.2. To obtain information about personal data or its processing, or to exercise other rights, the data subject, either in person or through an authorized representative, must submit one of the following: 6.2.1. a written and hand-signed request addressed to the Riga Independent Theater; 6.2.2. a submission signed with a secure electronic signature, addressed to the Riga Independent Theater and sent to the email address: info@rigasteatris.lv. In order for the Riga Independent Theater to send a substantive response to your email address, the application signed with a secure electronic signature must include the email address to which you wish to receive the response. 6.3. If you have given your consent to receive newsletters, you may withdraw your consent in the manner specified in each commercial communication. 6.4. Limitations on the Data Subject’s Rights. 6.4. Until the end of the service for which the Buyer has purchased a ticket or subscription, personal data regarding the Buyer’s purchase will not be deleted for the following purposes: 6.4.1. in cases of fraud, to refund the purchase amount; 6.4.2. to refund the amount paid for a season ticket or ticket if the performance or event does not take place. 6.5. Riga Independent Theater does not guarantee the right to data portability due to the nature of its services. 6.6. Contact Riga Independent Theater’s data protection specialist at: igors@rigasteatris.lv. 6.7. The data subject has the right to file a complaint with the supervisory authority. If you have any questions regarding the processing of personal data, you should contact Riga Independent Theater by emailing info@rigasteatris.lv. If you are not satisfied with the response you receive, you have the right to file a complaint with the State Data Inspectorate: 17 Elijas Street, Riga, LV-1050. 7. Changes to the Privacy Policy The Privacy Policy may be updated periodically and changes may be made to it. Any changes to the Privacy Policy will be posted on the website: www.rigasteatris.lv.