Privacy policy
How SIA “KLA Agency” collects, uses and protects personal data.
General provisions
The purpose of the Privacy Policy of SIA “KLA Agency” (hereinafter — the Company) is to give you information about the purposes of collecting personal data, the scope of the data collected, processing periods, data protection, and about your rights and obligations.
When processing personal data, the Company complies with the laws of the Republic of Latvia, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, GDPR), and other legal acts in the field of privacy and personal data processing.
This Policy applies to all persons whose personal data is processed by the Company.
Types of data
We may process the following categories of data.
Personal information
- First name, last name
- Email address
- Phone number
- Address
- Date of birth
Technical data
- IP address
- Browser and operating system type
- Device type
- Pages you visit on our website
- Cookie data
Behavioural data
- Information about page visits
- Browsing and click history
- Complaints and feedback about our services
Payment data (where applicable)
- Payment card information
- Invoice information
- Payment history
Marketing data
- Consents to receive newsletters
- Communication channel preferences
- History of interaction with newsletters
Purposes of processing
We process personal data for the following purposes.
Providing services
- Designing and arranging the itinerary
- Booking flights, hotels and transfers
- Arranging documents and insurance
- Support during the journey
Performance of the contract and obligations
- Concluding and performing the travel services contract
- Issuing invoices and processing payments
- Keeping accounting records
Legal obligations
- Complying with the requirements of the law of the Republic of Latvia and the EU
- Providing information to public authorities upon lawful request
Improving services and communication
- Responding to your enquiries
- Analysing website performance and service quality
- Informing you about routes and offers — with your consent
Legal basis
Personal data is processed on one of the following grounds.
Grounds for processing
- Performance of the contract concluded with you
- Compliance with the Company's legal obligations
- Your consent — for example, to receive newsletters
- The Company's legitimate interests, where they do not override your rights and freedoms
Sharing of data
To provide our services we may share data with partners and suppliers involved in arranging your journey: tour operators, airlines, hotels, insurance and visa centres, payment providers.
Data is shared only to the extent necessary to provide the specific service. We do not sell personal data to third parties.
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards in accordance with GDPR requirements.
Retention period
Personal data is kept no longer than necessary to achieve the purposes of processing or than required by law.
Data related to the performance of the contract and accounting is kept for the periods set by the laws of the Republic of Latvia. Data processed on the basis of consent is kept until consent is withdrawn.
Your rights
In relation to your personal data you have the following rights.
Rights of the data subject
- Receive information about the processing of your data
- Access your data and obtain a copy of it
- Request rectification of inaccurate or incomplete data
- Request erasure of data where there is no legal ground to keep it
- Request restriction of processing
- Object to processing based on legitimate interests
- Receive your data in a machine-readable format (data portability)
- Withdraw a previously given consent at any time
- Lodge a complaint with the State Data Inspectorate (Datu valsts inspekcija)
Cookies
The website uses cookies to make it work, to remember your chosen language and to analyse how pages are used.
You can disable or delete cookies in your browser settings. Disabling certain cookies may affect how the website works.
Data security
The Company applies technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.
Access to data is granted only to employees and partners who need it to perform their duties, and only to the extent necessary.
Changes to the policy
The Company is entitled to make changes to this Privacy Policy. The current version is always available on our website.
Contact information
For any question about the processing of personal data, write to us — we reply within a reasonable time.
Reg. number: 40203625644
Čiekurkalna 4. šķērslīnija 17-100, Rīga, LV-1026, Latvia, Riga
+371 257 317 67
info@kla-agency.com