Privacy Policy
Effective from 1 September 2026
SIA “Univer” (the “Company”) is the controller of the data you provide. We operate the website www.uniflow.lv (the “Website”), through which we provide our users (“you”, “your”) with information about our services (the “Services”).
This Privacy Policy describes how we collect, use and process your data when you use our Website. By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.
When processing your data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), and other applicable data protection legislation.
Please note that this Privacy Policy applies only to the Website. The Website may contain links to other websites that we do not operate or control. Links available on the Website do not mean that we endorse or have reviewed third-party websites.
I. Information about us (data controller)
SIA “Univer”
Registration No. 40203430709
Address: Elizabetes iela 31-8, Riga, Latvia
Email: [email protected]
II. Information about the Data Protection Officer
No Data Protection Officer has been appointed.
III. What information do we collect?
We collect and use the information described below.
1. Personal Data
If you use our Website, we may collect certain personally identifiable information about you (“Personal Data”), where you voluntarily provide such information, for example, when using our services, contacting us, asking questions, etc. At the time Personal Data is collected, we provide a link to this Privacy Policy.
2. Website Usage Information
We may also collect information that your browser sends whenever you visit or access the Website using a mobile device (“Usage Information”). Usage Information may include information such as IP addresses, the browser and device used, the webpage you visited before visiting our websites, and identifiers associated with your devices.
If you access the Website using a mobile device, Usage Information may include information such as the type of mobile device you use, the unique identifier of the mobile device, the IP address of the mobile device, the mobile operating system, the mobile internet browser used, unique device identifiers and other diagnostic data.
Please note that information collected passively through various technologies currently cannot be used to specifically identify you. The Website may use this information and combine it with other information, for example, to determine the total number of Website visitors, the number of visitors to each page, the domain names of Website visitors’ internet service providers, and how our users use and interact with the Services.
3. Tracking Cookies
We use cookies and other similar tracking technologies to track activity on the Website and retain certain information. For more information, please see our Cookie Policy.
4. Video Surveillance
Purposes of video surveillance:
- ensuring the safety of persons;
- protection of property;
- prevention and investigation of criminal offences and administrative violations;
- protection of the Controller’s legitimate interests.
Legal basis
Article 6(1)(f) GDPR – the Controller’s legitimate interests.
Video surveillance is carried out in this territory and in common areas.
For more information, please see our Video Surveillance Policy.
IV. Personal data collected and processed, purposes and legal basis of processing, and retention periods
| Purpose of processing | Data collected and processed | Legal basis for processing | Retention period |
|---|---|---|---|
| For the purpose of room reservation and conclusion of a contract | First name and middle name Surname Date of birth Address Email address Telephone number Identity document (number; date of issue; issuing country) Personal identification number Nationality Purpose of stay Accommodation start and end dates Room of stay Parking Student type (“Erasmus”/exchange student; full-time student, etc.) Signature |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR). | Ten (10) years after the date of performance of the contract |
| For processing invoices and other payments in compliance with accounting requirements | First name and middle name Surname Credit card (number, expiry date, security code (CVV)) Bank account No. |
Processing is necessary for compliance with a legal obligation to which the controller is subject (Article 6(1)(c) GDPR), i.e. to comply with legal obligations (issuing or retaining invoices and other accounting documents, etc.). | Ten (10) years after the date of performance of the contract |
| To communicate through the Website, for example, to respond to a data subject’s request | First name and middle name Surname Email address |
Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR). | One (1) year from the last correspondence with the data subject |
We use Personal Data for various purposes specified in this Privacy Policy. If you provide Personal Data for a specific reason, we may use it in connection with the reason for which it was provided. For example, if you contact us by email, we will use the Personal Data you provide to answer your question or resolve your issue. In addition, if you provide Personal Data in order to gain access to the Services, we will use it to provide you with access to the Services and to monitor how you use them. We and our subsidiaries and affiliated companies (“Affiliates”) may also use your Personal Data and other non-personally identifiable information collected through the Website to improve the content and functionality of the Website, better understand our users and improve the Services. We and our Affiliates may use this information to communicate with you about the Services.
V. Is the provision of Personal Data mandatory?
Please note: in order to use our services, you must provide us with the Personal Data specified above.
VI. Where do we obtain your Personal Data from?
We receive the data directly from you, namely when you provide your Personal Data through the Website.
VII. Data Transfers
Information you provide to us, including Personal Data, may be transferred to and stored on computers located outside your state, province, country or other governmental jurisdiction where data protection laws may differ from those applicable in your jurisdiction. By voluntarily providing us with your Personal Data, you agree that we will use it in accordance with this Privacy Policy.
Please note that we will not disclose your Personal Data to others without your permission, except where necessary for the purposes set out below.
VIII. Other persons working on our behalf (service providers)
We may use certain trusted third parties (for example, customer support, IT and accounting service providers). These third parties may access data only to perform tasks on our behalf in accordance with this Privacy Policy, and we are responsible for ensuring that they use your data in accordance with our instructions.
IX. Affiliates
We may also share your Personal Data with our Affiliates for purposes consistent with this Privacy Policy.
X. Business Transfer
As our business develops, we may sell or purchase businesses or assets. In the event of a sale, merger, reorganisation, dissolution or similar event, Personal Data may form part of the transferred assets.
XI. Law and Order
We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with the law; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse involving us or our users; or (d) protect our property rights.
We will not transfer your Personal Data to third countries or international organisations, i.e. outside the European Union, unless required by law or a court decision or where necessary to achieve any of the purposes set out in this Policy.
VIII. Rights of the Data Subject
With regard to the submission of your Personal Data on our Website, under the GDPR you have the following rights:
- the right to be informed about data processing;
- the right of access;
- the right to rectification;
- the right to erasure (the “right to be forgotten”);
- the right to data portability;
- the right to restriction of processing;
- the right to object to the use of data.
Please note that you have the right to lodge a complaint with the data protection authority:
In Latvia:
Data State Inspectorate
Address: Elijas iela 17, Riga, LV-1050, Latvia
Email: [email protected]
You also have the right to withdraw your consent to the processing of Personal Data at any time (if you have given such consent). You may withdraw your consent at any time by writing to [email protected] or by sending a notice to the following address: Elizabetes iela 31-8, Riga, Latvia. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise the above rights, you must submit a written request in a manner that allows you to be identified, i.e. by verifying your identity. We do not process requests where the applicant cannot be identified.
XII. Amendments
We may update our Privacy Policy from time to time. We will inform you of changes by publishing the new Privacy Policy on this page.
We recommend that you periodically review this Privacy Policy to familiarise yourself with any changes. This Privacy Policy was last updated on the date indicated above. If you continue to use the Website after changes or amendments to the Privacy Policy, you will be deemed to have accepted the terms of the revised Policy.