Privacy Policy for Mavimax SIA
The purpose of this Privacy Policy is to provide natural persons with information on the purpose, scope, protection, retention period and rights of the data subject during the collection and processing of personal data.
Personal Data Controller
The personal data controller is Mavimax SIA (hereinafter Mavimax), registration No. 40203039136, Elektriki 3 - 8, Krustkalni, Kekava parish, Kekava county, Latvia, LV-2111.
Phone: +371 28379007
Email: contact@mavimax.com
Questions regarding personal data processing may be submitted via the above email or by contacting Mavimax at its registered office.
General Terms and Conditions
- This Privacy Policy describes in general terms how Mavimax processes and protects personal data. More detailed information may be included in contracts, internal regulations, and specific notices.
- Mavimax ensures the confidentiality of personal data in accordance with applicable laws and has implemented appropriate technical and organizational measures to protect personal data from unauthorized access, unlawful processing, disclosure, accidental loss, alteration or destruction.
- Mavimax may engage data processors. In such cases, Mavimax ensures that processors act only under documented instructions, comply with applicable regulations, and apply appropriate security measures.
- The Mavimax website may use cookies to enhance user experience. Users may configure their browsers to notify or block cookies. Blocking cookies does not prevent website use but may limit certain functions. The website may also contain links to third-party websites with their own data protection rules, for which Mavimax is not responsible.
- For specific types of data processing (including cookies or other services), additional rules may apply. The data subject will be informed when providing such data.
Categories of Personal Data
Mavimax may collect personal data from the data subject or, where permitted, from external sources such as registers or public databases. Typical categories include:
- Identification data: name, surname, personal identification code, date of birth
- Contact data: address, telephone number, email address
- Professional data: education, job title, employer
- Data obtained or created during the performance of legal duties
Purpose and Legal Grounds for Processing Personal Data
Mavimax processes personal data for the following purposes:
- establishing and maintaining contractual relationships (including employment relationships)
- internal document circulation
- identification of customers, communication of updates, customer surveys
- maintenance and improvement of the Mavimax website
- protection of legitimate interests of Mavimax and/or its customers
- compliance with legal obligations
- business planning and analytics, including statistics, accounting, risk management and data quality assurance
- ensuring information, system and operational security
- any other specific purposes disclosed at the time data is provided
Legal grounds for processing:
- performance and conclusion of contracts
- compliance with legal obligations
- consent of the data subject
- legitimate interests of Mavimax
- protection of vital interests of the data subject or others
Legitimate interests of Mavimax may include:
- conducting commercial activities
- verifying identity before contract conclusion
- enforcing contractual obligations
- maintaining applications and submissions
- defending legal interests in court or state institutions
- marketing of goods and services
- ensuring corporate responsibility and public engagement
- maintaining and improving website functionality
- developing goods and services
- corporate governance, finance, analytics and planning
- mitigating operational and financial risks
Security Measures
Mavimax protects personal data using modern technologies and resources, including:
- encrypted data transmission (SSL)
- firewalls
- intrusion detection and protection systems
- other measures aligned with industry standards
Recipients of Personal Data
Data may be transferred to third parties:
- under contracts to fulfil agreed obligations
- with explicit consent of the data subject
- to authorities as required by law
- to protect the legitimate interests of Mavimax, such as in legal disputes
Geographical Area of Processing
- Personal data is primarily processed within the European Union.
- In certain cases, data may be transferred to third countries. Such transfers occur only after informing the data subject of potential risks and obtaining consent, unless another lawful basis applies.
- Mavimax ensures protection levels equivalent to GDPR (Regulation (EU) 2016/679) when transferring data outside the EU.
Storage Period
Personal data is stored only for as long as necessary for the processing purpose. Retention periods depend on contractual obligations, legitimate interests, legal requirements or valid consent.
Mavimax stores personal data while at least one of the following conditions applies:
- it is required for exercising legitimate interests
- a legal obligation to retain the data exists
- consent for processing remains valid and no other legal basis overrides
- the data is necessary for the original purpose
When none of these conditions apply, data is deleted or destroyed. Audit records are stored for at least one year or as required by law.
Rights of the Data Subject
Data subjects have the right to:
- receive information about the processing of their personal data
- request access to, correction, deletion or restriction of their personal data
- object to processing based on legitimate interests
- transfer their personal data
- withdraw consent at any time (without affecting prior lawful processing)
- submit a complaint to the Data State Inspectorate of Latvia (www.dvi.gov.lv)
Changes to the Privacy Policy
Mavimax reserves the right to modify this Privacy Policy at any time. Updates will be published in the Privacy Policy section of the Mavimax website.