Effective from 23 July 2026

This Privacy Policy explains how SIA “Firma L4” processes personal data when you visit www.l4.lv, contact us, or apply for employment. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable laws.

1. Data controller

SIA “Firma L4”
Registration No. 40003236001
Registered address: Jelgavas iela 90, Riga, LV–1004, Latvia
Telephone: +371 67500180
Email: firmaL4@L4.lv

Questions about personal data processing and requests to exercise data subject rights may be sent to the email or postal address above.

2. What data we process and why

2.1. Communications and enquiries

If you contact us by email, telephone, or another method, we may process your name, contact details, the organisation you represent, the content of the communication, and other information you provide. We use this information to respond to your enquiry, prepare an offer, take steps before entering into a contract, manage our cooperation, and protect our legal interests.

Depending on the circumstances, the legal basis is Article 6(1)(b) GDPR (steps before entering into a contract or performance of a contract), Article 6(1)(c) (compliance with a legal obligation), or Article 6(1)(f) (our legitimate interests in maintaining communications, documenting business activities, and protecting legal claims).

2.2. Recruitment

If you send a CV and application to vakances@l4.lv, we process your identification and contact details, education, professional experience, qualifications, application content, information provided during interviews, and other data you choose to include. We use the data to assess your suitability, communicate with you, and prepare an employment contract.

The legal basis is Article 6(1)(b) GDPR (steps before entering into an employment contract) and Article 6(1)(f) (our legitimate interest in conducting recruitment and defending possible legal claims). If we wish to retain your application for future vacancies beyond the needs of the particular recruitment process, we will request your consent, which you may withdraw at any time.

Please do not include special categories of personal data or other information that is not necessary for recruitment.

2.3. Website operation and security

When you visit the website, our server and security solutions may automatically record your IP address, request time, requested URL, browser and device information, referring address, and error or security-event information. We use this information to operate the website, prevent misuse, diagnose faults, and protect our information systems. The legal basis is Article 6(1)(f) GDPR — our legitimate interest in maintaining a secure and functional website.

2.4. Website analytics

With your consent, the website may use Google Analytics, managed on the website through the ExactMetrics plugin. This helps us understand website usage and improve our content. Depending on the configuration, this may involve processing truncated or other online identifiers, device and browser data, approximate location, pages visited, and website interactions. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time through the website’s cookie settings.

3. Cookies

The website uses cookies and similar technologies. Strictly necessary cookies are used without consent because the website or a function requested by the user cannot operate correctly without them. Analytics and other optional cookies are used only after you have given consent.

• pll_language — a first-party functional Polylang cookie that stores the selected website language and ensures the multilingual website functions correctly. Standard retention period: one year. It is not used for advertising, analytics, or profiling.
• Complianz cookies — store your cookie choices and consent status so that the website can respect your preferences.
• Google Analytics cookies — if you consent, these are used for website traffic statistics.

You can change your choices by opening “Cookie consent” at the bottom of the page. You may also manage cookies through your browser settings; blocking necessary cookies may affect website functionality.

4. Recipients and processors

Personal data are accessible only to employees who need them for their duties. Where necessary, we may disclose data to:

• hosting, IT maintenance, cybersecurity, email, and other technical service providers;
• Google Analytics and related analytics service providers, if you have consented;
• recruitment, legal, audit, or other professional advisers where necessary;
• public authorities, courts, or law-enforcement bodies where disclosure is required by law or necessary to protect legal claims.

Service providers may process personal data only in accordance with our instructions, their contract, and applicable data protection requirements.

5. Transfers outside the European Economic Area

Some technology providers may process data outside the European Economic Area. In such cases, transfers are based on an applicable European Commission adequacy decision, Standard Contractual Clauses, or another safeguard permitted by the GDPR. You may contact us to request information about the safeguards used in a particular case.

6. Retention periods

We retain personal data only for as long as necessary for the relevant purpose:

• communications and cooperation records — until the enquiry or contractual relationship has ended and thereafter for as long as needed to comply with legal obligations and protect potential claims;
• recruitment data — until the relevant recruitment process is completed and for a reasonable period thereafter to protect legal interests; for future vacancies, longer retention is based on your consent;
• server and security logs — for as long as needed to detect, investigate, and prevent security incidents;
• analytics data and cookies — according to the relevant tool configuration, the stated cookie lifetime, or until consent is withdrawn.

A longer period may apply where required by law, where a dispute is ongoing, or where information is needed to establish, exercise, or defend legal claims. When the retention period ends, we delete or anonymise the data.

7. Your rights

Subject to the conditions of the GDPR, you have the right to:

• receive information and access your personal data;
• request correction of inaccurate data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive your data in a structured, commonly used, machine-readable format where the right to data portability applies;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with the Data State Inspectorate of Latvia.

To exercise your rights, email firmaL4@L4.lv. To protect personal data, we may request information to verify your identity. We will respond within the period required by the GDPR.

Data State Inspectorate of Latvia
Elijas iela 17, Riga, LV–1050, Latvia
Email: pasts@dvi.gov.lv
Website: www.dvi.gov.lv

8. Automated decision-making

We do not make decisions that produce legal or similarly significant effects for you based solely on automated processing of personal data.

9. Changes to this Policy

We may update this Policy if the website, our processing activities, or legal requirements change. The current version is always available on this page.