top of page

Privacy policy

Last amended on 3 August 2026 
 

1. General Provisions
1.1. SIA "MC TURAIDA PROPERTY", registration No. 40103548902 (hereinafter – the Company), within the scope of its activities provides real estate management, accommodation services and related services, as well as the sale of real estate.
1.2. The purpose of this Privacy Policy is to provide a natural person with information on how the Company obtains, processes and protects personal data, as well as on the purposes, scope and storage periods of personal data processing.
1.3. When processing personal data, the Company complies with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter – GDPR), the Personal Data Processing Law, as well as other applicable legal acts of the Republic of Latvia in the field of privacy and personal data processing.
1.4. This Privacy Policy applies to every natural person whose personal data is processed by the Company, regardless of the method by which the personal data is obtained, including cases where personal data is submitted to the Company through the Company's website, e-mail, telephone, in person or through other communication channels.
1.5. The Company ensures the protection of personal data and particularly careful processing thereof. The protection of personal data and privacy of natural persons is of significant importance to the Company. Ensuring privacy protection is an important element in promoting compliance with the Company's values.
1.6. This Privacy Policy applies to ensuring privacy and personal data protection in relation to:
1.6.1. natural persons – clients (including prospective, former and existing clients), prospective employees, as well as third parties who, in connection with the provision of services to a natural person, provide or receive any information (hereinafter – clients);
1.6.2. visitors to the Company's customer service premises and other premises, including persons in respect of whom video surveillance is carried out;
1.6.3. visitors to the websites maintained by the Company.
1.7. Information about the cookies used by the Company, their types, purposes of use, storage periods, as well as the legal basis for the use of cookies is available in the Company's Cookie Policy, published on the Company's website: https://www.turaidaskvartals.lv/cookie-policy. 
 

2. Controller and Contact Information
2.1. The controller of personal data processing is SIA "MC TURAIDA PROPERTY", registration No. 40103548902, registered address: Turaidas iela 19, Jūrmala, LV-2015.
2.2. For matters related to personal data processing, you may contact the Company by e-mail at info@jurmalahome.com or by telephone at +371 29373829. 
 

3. Purposes of Personal Data Processing, Legal Basis and Categories of Personal Data
3.1. The Company processes personal data for the following purposes:
3.1.1. To ensure the identification of the client, communication with the client or their authorised representative, the preparation, conclusion and performance of apartment and flat rental and sale transactions, the administration of payments, the examination of applications and requests related to the performance of the transaction, as well as proving the fact of the conclusion of the transaction.
Legal basis: Article 6(1)(b) of the GDPR – conclusion and performance of a contract.
Categories of personal data: Within the scope of this purpose, the following personal data may be processed: first name, surname, personal identity number or other personal identification number, first name, surname and identification data of the authorised representative, contact information (telephone number, e-mail address), declared residential address (for the conclusion of a rental/lease agreement), bank account details, contract number, contract date, in the case of a sale transaction – purchase agreement details, including the agreement number and date, as well as the date of acquisition of ownership, information about the services provided, payment information (invoice number, date, amount, payment date, amount of debt), information regarding debt recovery or collection, as well as other data necessary for ensuring the respective transaction.
Storage period: Personal data are stored throughout the validity period of the contract or legal obligation and, after its termination, for up to 5 years in relation to accounting documents, up to 10 years for the protection of civil law claims, or longer if required by applicable legal acts. 
 

3.1.2. To examine complaints, claims and disputes, protect the Controller's legitimate interests, as well as ensure evidence in possible court proceedings or dispute resolution procedures.
Legal basis: Article 6(1)(f) of the GDPR – the Controller's legitimate interests.
Legitimate interest: To ensure the examination of complaints, claims and disputes, protect its rights and legitimate interests, and provide evidence in possible court proceedings and dispute resolution procedures.
Categories of personal data: Within the scope of this purpose, identification data, contact information, communication and correspondence data, information contained in applications, complaints and claims, transaction and payment data, as well as other information and documents necessary for examining complaints, claims or disputes, protecting the Controller's legitimate interests and ensuring evidence in possible court proceedings or dispute resolution procedures may be processed.
Storage period: Personal data are stored until the complaint, claim or dispute has been finally resolved. 

3.1.3. To ensure the recruitment process and the Company's legitimate interests insofar as they relate to personnel recruitment.
Legal basis: Article 6(1)(b) of the GDPR – taking steps at the request of the data subject prior to entering into an employment relationship; Article 6(1)(f) of the GDPR – the Company's legitimate interests; as well as Article 6(1)(a) of the GDPR where the candidate has given consent to the storage of their personal data for future recruitment opportunities.
Legitimate interest: To ensure the recruitment process and protect the Company's rights in the event of possible disputes.
Categories of personal data: First name, surname, contact information, information regarding work experience, education, professional qualifications, skills and competences, as well as other information provided by the candidate insofar as it is necessary for the relevant purpose.
Storage period: Personal data are stored until completion of the recruitment process and thereafter for no longer than 6 months in order to protect the Company's legitimate interests in the event of possible claims or disputes. If the candidate has given consent to the storage of personal data for future recruitment opportunities, the personal data shall be stored for the period specified in the consent or until the consent is withdrawn. 


3.1.4. To ensure, by means of video surveillance, the security of the Company's premises and the persons present therein, to prevent or detect criminal offences and other unlawful activities within the Company's premises, and to protect the property and legitimate interests of the Company and third parties.
Legal basis: Article 6(1)(f) of the GDPR – the Controller's legitimate interests in ensuring the security of persons and property, preventing and investigating unlawful activities, and protecting its own rights and legitimate interests as well as those of third parties.
Categories of personal data: Within the scope of this purpose, the following personal data may be processed: the person's image recorded by the video surveillance system, as well as data regarding the person's location, movement and time of presence within the relevant video surveillance area.
Storage period: Personal data are stored for no longer than 30 days, or, in individual cases, for a longer period insofar as this is necessary for the protection of the Company's legitimate interests (for example, in the event of dispute or violation investigations). 

3.1.5. To ensure vehicle access control within the Company's territory, including the registration of vehicle entry.
Legal basis: Article 6(1)(f) of the GDPR – the Controller's legitimate interests in ensuring the security of the Company's territory, property and persons, controlling access to the Company's territory, and, where necessary, protecting its rights and legitimate interests.
Categories of personal data: Within the scope of this purpose, the following personal data may be processed: vehicle registration number, vehicle image (photograph), vehicle make, as well as information regarding the time of entry and exit.
Storage period: Personal data are stored for no longer than 30 days, or, in individual cases, for a longer period insofar as this is necessary for the protection of the Company's legitimate interests (for example, in the event of dispute or violation investigations). 
 

3.1.6. To send the client informational notices, news, special offers, information about the services provided by the Company, and other information not directly related to the performance of the concluded contract.
Legal basis: Article 6(1)(a) of the GDPR – the data subject's consent.
Where personal data are processed on the basis of the client's consent, the client has the right to withdraw such consent at any time by sending a withdrawal request to the e-mail address specified in this Policy. Withdrawal of consent shall not affect the lawfulness of processing carried out before the withdrawal.
Categories of personal data: Within the scope of this purpose, the client's identification data, contact information, communication data, information regarding the service, as well as other information necessary for achieving the relevant purpose may be processed.
Storage period: Until the consent is withdrawn. 

3.2. Profiling of Personal Data and Automated Decision-Making
The Company does not carry out profiling of personal data or automated individual decision-making within the meaning of Article 22 of the GDPR. 
 

4. Sources of Personal Data
4.1. The Company primarily obtains personal data directly from the data subject, including:
•    when concluding or performing a contract; 
•    when submitting applications, requests, claims or complaints; 
•    when communicating with the Company electronically, by telephone or in person; 
•    when providing personal data through the Company's website or other communication channels. 
4.2. In certain cases, the Company may obtain personal data from persons authorised by the data subject, cooperation partners, debt recovery service providers, state and municipal authorities, public registers, as well as other persons, insofar as this is necessary for achieving the relevant purpose of personal data processing and is legally justified.
4.3. Within the framework of video surveillance and vehicle access control, personal data are obtained from the video surveillance systems and access control systems located within the Company's territory. 
 

5. Storage Periods of Personal Data
5.1. Personal data are processed and stored only for as long as necessary to achieve the specific purpose of personal data processing, to comply with the requirements of the applicable legal acts, or to protect the Company's legitimate interests.
The storage periods for personal data are determined according to the specific purpose of personal data processing and are specified under the relevant personal data processing purposes in Section 3 of this Privacy Policy. 
 

6. Protection of Personal Data and Security Measures
6.1. The Company protects clients' personal data by using the capabilities of modern technologies and taking into account the privacy risks associated with personal data processing, as well as the organisational, technical and financial resources reasonably available to the Company.
6.2. For the protection of personal data, the Company applies appropriate security measures, including:
6.2.1. the use of firewalls;
6.2.2. encryption of data during transmission;
6.2.3. intrusion prevention and detection solutions;
6.2.4. other security measures appropriate to the current level of technological development. 
 

7. Transfer of Personal Data and Recipients
7.1. The Company transfers personal data to third parties only where there is a legal basis for doing so, including for the performance of a contract, compliance with legal obligations or the protection of the Company's legitimate interests.
7.2. Personal data may be transferred to companies within the Company's group insofar as this is necessary for group management, risk management, financial and human resources control, accounting, legal and other administrative functions.
The transfer of personal data is carried out only where an appropriate legal basis exists and in compliance with the requirements of the applicable legal acts.
7.3. Personal data may be transferred to:
•    the Company's cooperation partners and service providers who perform functions related to property management and other services; 
•    IT service providers; 
•    debt recovery service providers. 
These persons process personal data on behalf of the Company and in accordance with the applicable legal acts.
7.4. Personal data may be transferred to state and municipal authorities in cases provided for by legal acts, as well as for the protection of the Company's legitimate interests, for example, when bringing claims before a court or other authorities.
7.5. Personal data may also be transferred to third parties with the consent of the data subject.
7.6. Personal data are accessible only to those employees of the Company who require such access for the performance of their job duties. 
 

8. Information on the Transfer of Personal Data to a Third Country or an International Organisation
8.1. The Company does not transfer personal data outside the European Union or the European Economic Area.
If, in individual cases, it is necessary to transfer personal data outside the European Union or the European Economic Area, the Company shall ensure that such transfer is carried out in accordance with the requirements of the applicable legal acts and that appropriate additional safeguards for the protection of personal data are applied in accordance with the GDPR. 

9. Rights of the Data Subject
9.1. The data subject has the right to receive information about the processing of their personal data by the Company.
9.2. The data subject has the right to access their personal data (including the right to receive information about the personal data held by the Company, the purposes of processing, the sources from which the personal data were obtained, the recipients of the personal data, the storage periods, as well as, in cases provided for by applicable legal acts, to receive a copy of the personal data).
9.3. The data subject has the right to request the rectification of inaccurate or incomplete personal data.
9.4. The data subject has the right to request the restriction of processing.
9.5. The data subject has the right to object to the processing of personal data based on the legitimate interests of the Controller or a third party, where there are grounds relating to the data subject's particular situation.
9.6. The data subject has the right to data portability where the processing is based on consent or a contract and is carried out by automated means.
9.7. Where the processing is based on consent, the data subject has the right to withdraw their consent at any time by writing to the Company's e-mail address: info@jurmalahome.com.
9.8. The data subject has the right to request the erasure of personal data where:
•    the personal data are no longer necessary for the purposes for which they were processed; 
•    the processing was based on consent and that consent has been withdrawn; 
•    the personal data are being processed unlawfully. 
9.9. Please contact us by e-mail at info@jurmalahome.com or by sending a written request by post to the registered address: Turaidas iela 19, Jūrmala, LV-2015, if you wish to submit a request for the exercise of your rights.
For identification purposes, the Company accepts requests submitted electronically and signed with a secure electronic signature, or submitted in paper form bearing the handwritten signature of the data subject.
9.10. The Company shall respond to the client's request within one month from the date of its receipt.
Where necessary, taking into account the complexity or volume of the request, this period may be extended by no more than two additional months, informing the data subject accordingly.
9.11. If the data subject considers that their personal data are being processed in violation of the applicable legal acts, they have the right to lodge a complaint with the supervisory authority – the Data State Inspectorate, Elijas iela 17, Riga, LV-1050, e-mail: pasts@dvi.gov.lv, telephone: +371 67223131, www.dvi.gov.lv. 
 

10. Final Provisions
10.1. The Company may update this Privacy Policy from time to time.
10.2. The current version of the Privacy Policy is available upon request from the Company.

bottom of page