Our Privacy Policy provides detailed information on how we collect, use, store, and transfer your personal data. It covers the types of data we collect, purposes of processing, legal basis, storage duration, data recipients, our obligations, your rights, and how to exercise them.
The Privacy Policy is regularly updated to reflect necessary changes. Please visit the App or Website for the latest version. We will notify you of significant changes and publish the updated version on the App and Website.
Unexplained terms capitalized within this Privacy Policy shall be interpreted in accordance with the definitions provided in the Terms of Services.
“their”), who are providing their personal data to utilize the Company's services;
We may process your personal data according to the following legal basis:
We ensure that your personal data is processed in accordance with applicable data protection laws and regulations. We only process the personal data that is necessary and relevant for the specified purposes. Additionally, we implement appropriate security measures to protect your personal data from unauthorized access, loss, or alteration.
If you have any questions or concerns regarding the processing of your personal data, please feel free to contact us, via email: info@allockate.com for further information and clarification.
To provide our services, we collect certain personal data from individuals. The types of personal data we collect and purposes for processing may include:
We only collect the necessary personal data that is relevant and essential to fulfil the purposes for which it is collected.
We use the Smart ID as an authorization method, which involves collecting specific identification data. This includes your full name, surname, Latvian Republic Personal Identification Number (for individuals within Latvia), and identification data for foreigners if Smart ID is used in these countries. These details are obtained securely through the Smart ID system and are used to verify your identity and authenticate your access to our services. For more information about Smart ID and its features, please visit the following link: https://www.smart-id.com/
We utilize Dokobit as a reliable gateway to identify and authenticate individuals who have Smart ID. For more information about Dokobit and its features, please visit the following link: https://www.dokobit.com/compliance/privacy-policy
For payment processing purposes, we integrate with Stripe, a trusted payment service provider. When you make a payment, we receive data from Stripe, which include the Individuals name, surname, and a unique payer ID. This information helps us process payments and track transaction details. For more information about Stripe and its features, please visit the following link: https://stripe.com/en-lv/privacy
Your personal data is stored on servers located in Latvia. We will retain your personal information only for as long as it is necessary to provide our services to you. Once your data is no longer required for its intended purpose, we will promptly delete them from our systems, unless they should be retained longer as described below in this Privacy Policy.
Please note that in certain cases, we may be legally or regulatory obligated to retain certain data, even if it is no longer necessary for the provision of our services. We will ensure that any data retention follows applicable laws and regulations governing the storage and processing of personal data.
We have established specific retention periods for different categories of personal data based on the purpose for which the data was collected and any legal or regulatory requirements. Our retention periods are as follows:
We do not keep personal data linked to incomplete registrations or unused App accounts or Website accounts. However, as a Company, we have access to browser-related records
containing IP addresses. This data is stored for 7 days and is then securely and irreversibly erased.
Once you start using our App or Website, we will retain your personal data for as long as you continue using the App or the Website and your consent is valid. This allows us to provide ongoing support, ensure the proper functioning of our services, and maintain accurate records of your App or Website usage. We may retain your data even after you stop using the App or Website for a certain period to ensure evidence in case of any disputes with you (legitimate interests). The length of such a period will cover the limitation period specified by applicable laws, which may be up to 10 years.
If a person decides to withdraw their consent for receiving marketing emails, we will promptly delete their data associated with such communication. This means that their email address and any related information will be securely removed from our marketing lists, ensuring that no further marketing emails will be sent to them. We prioritise the privacy and control of Individuals data and will fully honour their withdrawal of consent for marketing communications.
As per this Privacy Policy and applicable law within the EU/EEA, you have the following rights:
We do not engage in any form of automated decision-making or profiling.
To exercise your rights of access, rectification, erasure, and objection, please contact us. Kindly note that we may ask you to verify your identity before responding to such requests. We will make our best efforts to respond to your requests as promptly as possible.
Additionally, if you are in the EEA, you have the right to lodge a complaint with the Data Protection Authority regarding our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EU/EEA.
We maintain the right to decline fulfilling your request under the following circumstances:
If the request is not formulated in a clear and comprehensible manner, making it difficult for us to understand the specific information or action you are seeking;
If we are unable to verify your identity, which is necessary to ensure the security and confidentiality of personal data;
If we have already provided a response to a previous request of the same nature, as we aim to avoid duplicative efforts and ensure efficient handling of inquiries;
If the requested information is disproportionately large or exceeds a reasonable volume, making it impractical or burdensome to provide within the given circumstances;
If the request lacks justification or relevance to our company, meaning it does not align with our data processing activities or there is insufficient explanation as to why the request should be fulfilled;
If there are legal provisions that restrict or prohibit us from providing the requested information, or if we have a legal obligation to retain specific data about you, preventing us from fulfilling the request.
We prioritise the protection and security of your data and have implemented various safeguards to ensure its confidentiality, integrity, and availability. These safeguards are designed to protect your data from unauthorised access, loss, alteration, or disclosure. Below we have described some of the measures we have in place.
We employ robust technical measures to safeguard your data. This includes utilising encryption techniques to protect data during transmission and storage. We implement firewalls, secure network configurations, and intrusion detection systems to prevent unauthorised access. Regular security audits and vulnerability assessments are conducted to identify and address potential vulnerabilities.
We have implemented strict policies, procedures, and access controls to ensure that only authorised personnel have access to your data. Our employees undergo regular training on data protection practices and are bound by confidentiality obligations.
We adhere to the principle of data minimization, ensuring that we only collect, process, and retain the minimum amount of personal data necessary to fulfil the intended purpose. We regularly review our data retention practices ensuring that data is not kept for longer than necessary.
When engaging third-party service providers, we ensure that they meet stringent data protection standards. We carefully select and assess our partners to ensure they have appropriate security measures in place to protect your data.
In the event of transferring data outside of your jurisdiction, we take measures to ensure that appropriate safeguards are in place. This may include utilising data transfer agreements, standard agreement clauses, or relying on recognized data protection mechanisms.
We diligently comply with applicable data protection laws and regulations. We stay updated on legal requirements and adapt our practices accordingly to ensure ongoing compliance.
We may transfer your personal data to third parties or service providers as described below, both within and outside of Latvia, if we choose to use the services of such third parties for the purposes of providing our services to you. These transfers may occur when it is necessary to fulfil our agreement obligations or when we have a legitimate interest in doing so.
Although we cooperate with such trusted third-party providers as Smart ID, Dokobit and Stripe, we do not transfer any of your data to them. These trusted partners receive your data directly from you and handle the data in accordance with their own privacy policies and industry best practices to maintain the confidentiality and security of the information shared. Individuals can learn more about it following the links specified in chapters 4.2., 4.3., 4.4. of this Privacy Policy.
When transferring personal data outside of Latvia, we will ensure that appropriate safeguards are in place to protect the privacy and security of your personal information. This may include implementing data transfer agreements or relying on recognized data protection mechanisms such as standard contractual clauses or binding corporate rules.
In the event of damages caused by you or your actions, we may transfer your personal data to our partner involved in the dispute resolution process. This transfer is necessary to facilitate the assessment and resolution of the dispute, including requesting compensation for the damages incurred. The partner will handle your personal data in accordance with applicable privacy laws and regulations.
We will only transfer your personal data to countries or organisations that provide an adequate level of data protection, or we will obtain your explicit consent before such transfers occur. We strive to ensure that your personal data is handled and protected in accordance with applicable data protection laws.
Please note that in exceptional circumstances, we may be required to disclose your personal data to comply with legal obligations or respond to lawful requests from public authorities.
Our App and Website may utilise cookies and similar technologies to enhance your browsing experience and provide personalised services. By using our App or Website, you consent to the use of these technologies as described in this statement.
Cookies are small text files that are placed on your device when you visit our App or Website. They help us analyse Individuals behaviour, remember their preferences, and provide a more customised experience. We use both session cookies (which are erased when you close the App or Website) and persistent cookies (which remain on your device for a set period) to improve functionality and understand how Individuals interact with our App and Website.
Essential cookies – these cookies ensure the proper functioning of the website by providing its core features. The App and Website won't function correctly without these cookies. | ||||
Cookie | Domain | Type | Description | Duration |
allockate_session | allockate.com | HTTP Cookie | This cookie is necessary for the login function on the website. | session |
XSRF-TOKEN | allockate.com | HTTP Cookie | Ensures your browsing-security by preventing cross-site request forgery. This cookie is essential for the security of the website and Individuals. | session |
cookie_consent | allockate.com | HTTP Cookie | Stores the Individuals cookie consent state for the current domain. | 1 year |
If you have any concerns about how we use your personal data, you can lodge a complaint with us by contacting us via email: info@allockate.com .
If you believe that we have processed your data inappropriately, you have the right to file a complaint with the data protection supervisory authority regarding the processing of your personal data by our organisation. The relevant authority: Data State Inspectorate, address: Elijas iela 17, Riga, LV-1050. Contacting via e-mail: pasts@dvi.gov.lv or by phone: 67223131
We take all complaints seriously and will cooperate fully with the supervisory authority to resolve any issues related to the processing of your personal data.