This Privacy Policy explains how DBL Avocats SIA ("we", "us", "our") collects, uses and protects personal data when you use our website dbl-avocats.org or otherwise engage with our legal services. It is provided under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
1. Controller
The data controller is DBL Avocats SIA, Elizabetes iela 45-12, Rīga, LV-1010, Latvia.
Privacy contact: privacy@dbl-avocats.org.
2. Categories of personal data
Depending on your interaction with us, we may process:
- Identity and contact data (name, email, phone, company)
- Correspondence and the contents of your enquiry
- Career applicant data (CV, education, work history, references)
- Technical data (IP address, browser, device, referrer) via server logs
- Cookie and analytics data, where you consent – see our Cookie Policy
3. Purposes and legal bases
- Responding to enquiries – pre-contract / Art. 6(1)(b) GDPR
- Providing legal services to clients – performance of contract / Art. 6(1)(b)
- Compliance with legal obligations (AML, tax, professional rules) – Art. 6(1)(c)
- Career processing – pre-contract / Art. 6(1)(b) and your consent / Art. 6(1)(a)
- Website operation, security, fraud prevention – legitimate interests / Art. 6(1)(f)
- Optional analytics and marketing cookies – your consent / Art. 6(1)(a)
4. Recipients
We share personal data only when necessary and on a lawful basis: with professional advisers, auditors, banks, regulators, IT service providers acting as processors under written agreements, and where required by law. We do not sell personal data.
5. International transfers
Where data is transferred outside the EU/EEA, we rely on appropriate safeguards under Chapter V GDPR – typically European Commission adequacy decisions or Standard Contractual Clauses.
6. Retention
We retain personal data only as long as necessary for the purposes above, then delete or anonymise it. Specific retention periods may be imposed by professional, tax or AML legislation (typically 5–10 years for client engagement records).
7. Your rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15)
- Rectification (Art. 16) and erasure (Art. 17)
- Restriction (Art. 18) and objection (Art. 21)
- Data portability (Art. 20)
- Withdraw consent at any time, without affecting prior lawful processing
- Lodge a complaint with a supervisory authority
In Latvia the supervisory authority is Datu valsts inspekcija (Data State Inspectorate), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv.
8. Security
We apply appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and confidentiality obligations binding all staff and processors.
9. Children
Our services are not directed at children under 16. We do not knowingly collect data from minors.
10. Updates
We may update this Policy from time to time. The "Last updated" date at the top reflects the current version.
11. Contact
Questions or requests: privacy@dbl-avocats.org.