Galleria Riga cares about the privacy of its visitors, tenants, partners and employees.
This privacy policy explains how and for what purposes personal data are processed in the premises and on the website of Galleria Riga www.galleriariga.lv, in compliance with the General Data Protection Regulation (EU) 2016/679 and the Law on the Processing of Personal Data.
The Galleria Riga shopping centre and the website galleriariga.lv are managed by SIA “Patollo” (reg. No. 40003413049, 9-10 Blaumaņa Street, Riga, LV-1011), which acts as the personal data controller.
Personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 and other applicable legal acts.
For questions about data protection: galleriariga@galleriariga.lv
Galleria Riga processes personal data only for specifically defined purposes and in accordance with applicable legislation. Data processing takes place on the basis of the General Data Protection Regulation (EU) 2016/679 and the Law on the Processing of Personal Data.
Video surveillance is carried out on the premises of Galleria Riga with the aim of ensuring the safety of persons and property, as well as preventing and investigating possible violations.
Video surveillance is carried out on the basis of the legitimate interests of the controller (Article 6(1)(f) of the Regulation).
The recordings are stored for a maximum of 30 days, except in cases where they are needed longer for the protection of legitimate interests or for the investigation.
The data may be transferred to law enforcement authorities or security service providers.
Galleria Riga parking fees and usage accounting are provided by SIA "Mobilly", which acts as a personal data controller in connection with the provision of this service.
Galleria Riga itself does not collect or process personal data of parking users.
You can find out more about data processing related to parking usage in Mobilly's privacy policy: https://mobilly.lv/en/documents/privacy-policy/
Bicycle parking spaces are available on the territory of Galleria Riga for the convenience and safety of visitors.
Bicycle parking areas may be located within the field of view of video surveillance to prevent theft and ensure the protection of property.
Video surveillance in these areas is carried out on the basis of the legitimate interests of the controller (Article 6 (1) (f) of the Regulation).
The recordings are stored for a maximum of 30 days and are only accessible to authorized persons or the security service.
When visiting the website www.galleriariga.lv, technical data necessary for its operation and security is processed (e.g. IP address, browser type, date and time of visit).
The website uses cookies to ensure its functioning, improve user experience and analyze visit statistics.
Some cookies are necessary for the operation of the page, others are loaded only with the user's consent, for example, Google Analytics visit statistics. More information is available in the Cookie Policy section.
When using the contact form, the data provided is processed (e.g. name, e-mail, message content), and they are used only to provide an answer to the question submitted.
Personal data is processed based on:
user consent (cookies and contact form);
the legitimate interests of the controller (maintenance and security of the website).
Galleria Riga does not disclose personal data of website users to third parties, except in cases where this is required by regulatory enactments.
Personal data are retained only for as long as necessary to achieve the relevant purpose and in accordance with the requirements of applicable regulations.
Video surveillance recordings are stored for up to 30 days, after which they are automatically deleted, except in cases where a recording is necessary for the investigation of a security incident or for the protection of legal interests.
Website cookies are stored according to their type and purpose — session cookies until the browser is closed, and persistent cookies until the end of their validity period or until the user deletes them or withdraws consent.
The data submitted via the contact form are stored only for as long as necessary to provide a response to the received inquiry, and are then deleted.
Personal data may be transferred or made available only to the extent necessary to achieve the specific purpose and in accordance with regulatory requirements.
Data processing may involve:
IT and website maintenance service providers, who provide technical access to systems, but do not process data for their own purposes.
Security service providers who ensure the operation of the video surveillance system and the security of the center.
State and law enforcement institutions, where the transfer of data is provided for by regulatory acts (for example, to the police for investigative purposes).
All service providers that process personal data on behalf of Galleria Riga do so only in accordance with the controller's instructions and comply with data protection requirements.
Visitors and website users have the following rights:
To receive information about how and for what purposes personal data is processed.
To receive confirmation whether personal data are being processed, and to receive an explanation of the manner of processing.
Revoke consent to the use of cookies at any time.
Submit a complaint to the Data State Inspectorate (www.dvi.gov.lv), if it is considered that data processing violates privacy rights.
Personal data submitted using the contact form is used only to provide a response to the received question, and is deleted as soon as it is no longer necessary.
Galleria Riga ensures the protection of personal data by using appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, disclosure, unauthorized access, or other unlawful processing of the data.
Access to personal data is restricted only to those persons who need it for the performance of their direct job duties, and only in accordance with the established security levels.
All partners who process personal data on behalf of Galleria Riga have been assessed and have committed to comply with data protection requirements in accordance with applicable legislation and the contracts concluded.
Galleria Riga reserves the right at any time to change or supplement this privacy policy in order to ensure compliance with current legislation and with the actual personal data processing practices.
If significant changes are made, the updated version will be published on the website www.galleriariga.lv.
The latest version of the policy is effective from the moment it is published on the website.
For questions about the processing of personal data or the privacy policy, please contact the personal data controller —
SIA "Patollo", which manages the Galleria Riga shopping center.
SIA "Patollo"
Registration No. 40003413049
Address: 10-9 Blaumaņa Street , Riga, LV–1011
E-mail: galleriariga@galleriariga.lv