Privacy Policy

We care about your privacy, therefore the purpose of this privacy policy is to provide you with information regarding the purposes of personal data processing, the legal basis, the duration of personal data storage, data subject rights, and other matters.

Controller and its contact information

RockBridge Legal ZAB SIA

Registration number: 40203411144

Registered address: Roberta Hirša iela 1, Riga, Latvia, LV-1045

E-mail: [email protected]

Website: https://rockbridge.legal/

RockBridge Legal ZAB SIA (hereinafter – RockBridge Legal), which maintains the website https://rockbridge.legal/ (hereinafter – Website), informs that regarding the processing of your personal data, RockBridge Legal is considered a personal data controller within the meaning of the General Data Protection Regulation.

Scope of the Privacy Policy

This privacy policy is applicable in cases where:

· You visit our Website;

· you use our services;

· you cooperate with us in another way, for example, by participating in events or conferences organized by us;

· you wish to join the RockBridge Legal team;

· you visit the RockBridge Legal office located in a property where the owner or their authorized person performs video surveillance on the property’s territory;

· you visit the RockBridge Legal office where video surveillance is performed within the premises.

Most of our clients are legal entities. According to Recital 14 of the General Data Protection Regulation, this regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person. Also, in cases where the data of a self-employed person is related to commercial activity, it may in certain cases be considered as data of a legal entity. Consequently, this privacy policy does not apply to the RockBridge Legal client base to the extent that the requirements of the General Data Protection Regulation are not applicable.

Applicable legislation

RockBridge Legal is a sworn advocates’ office, therefore it is subject to the following legislation:

· Law on the Bar of the Republic of Latvia;

· General Data Protection Regulation;

· Personal Data Processing Law, etc.

Personal data is any information relating to an identified or identifiable natural person, including Website visitors, RockBridge Legal clients who are natural persons, candidates applying for a job vacancy, etc.

In certain cases, situations may arise where RockBridge Legal needs to process your personal data, for example:

PURPOSE	CATEGORIES OF PERSONAL DATA	LEGAL BASIS
Ensuring communication: collection and processing of questions, suggestions, and other submitted information to prepare responses and ensure communication with the addressee/submitter. Communication may take place via e-mail, mail, telephone, or in person (depending on the way you contact RockBridge Legal).	Name, surname, contact information, other personal information included in the question, suggestion, etc.	Consent of the data subject – the person submits the said information to RockBridge Legal through their active action.
Provision of legal services: for the provision of legal assistance and to fulfill contractual relations with the client, including to: · perform conflict of interest research; · perform client due diligence (within the framework of Know Your Client and sanctions checks); · provide legal services; · administer payments and issue invoices; · fulfill its legal obligations.	Client identification data and contact information: e.g., name, surname, personal identity code, address, telephone, e-mail, etc.; Client due diligence information: information about the ultimate beneficial owner and politically exposed persons, information about conflicts of interest; Information related to the client’s case: e.g., information about the client’s problems, transactions, business activities, authorizations, litigation, etc. Billing information: transaction amount, bank details, etc.	Legal assistance agreement and our legal obligations arising from applicable legislation (e.g., Law on the Bar of the Republic of Latvia, Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing, Law on Sanctions, Law on Accounting). Regarding payments, also our legitimate interest to administer payments and recover debts in a timely manner.
Organization of records: accounting and storage of documentation, outgoing and incoming correspondence, agreements, etc.	Documentation, correspondence, agreements containing personal data.	Depending on the type of documentation, it may be stored to exercise our legitimate interests, for example, to defend interests in court, or to comply with the requirements of regulatory enactments.
Seminars and other events: various types of events organized or supported by RockBridge Legal. If events are photographed or recorded, you will be informed additionally.	Personal data may vary, e.g., name, surname, contact information, photographs, and video recordings from the event.	Legitimate interest – informing the public about RockBridge Legal’s activities and promoting RockBridge Legal’s recognition.
Posts about current events: for marketing and public information purposes, posts may be prepared about events, seminars, and activities organized or sponsored by RockBridge Legal. Posts are published on the RockBridge Legal Website and/or social networks, such as LinkedIn.	Posts prepared by RockBridge Legal may include photographs, video recordings, names, surnames, etc., of event participants and/or visitors.	Legitimate interest – informing the public about RockBridge Legal’s activities and promoting RockBridge Legal’s recognition. If you wish for us to delete a published image/post in which you are visible, please contact us.
Personnel selection: for the organization and provision of the personnel selection process, establishment of employment legal relations, etc.	Name, surname, experience, education, as well as other information included in the CV and motivation letter.	In the selection process, consent of the data subject – the person submits the said information to RockBridge Legal through their active action. References from former employers are collected based on consent. In employment relations according to the employment contract and the requirements of regulatory framework (e.g., Employment Contract).

We process your personal data only for the purpose for which they were originally obtained.

Data sources

You as the data subject. RockBridge Legal obtains your personal data directly from you as data subjects, for example, by receiving and reviewing submitted questions or client case materials;

In the data processing process. Personal data is created as a result of the data processing process, for example, the amount of the fee for work;

Received from third parties. In certain cases, we may receive your personal data from third parties. For example, regarding candidates – references from former employers; regarding a client upon their instructions – personal data may be requested from authorities, etc.

Public and private registers. In certain cases, we may obtain data from public registers and databases, for example, the Register of Enterprises, the Population Register, etc.

Recipients of personal data

Your personal data is safe and is not transferred to other persons in an inappropriate manner.

Personal data may be transferred in the following cases:

· when providing legal services to clients, we may be obliged to transfer personal data to third parties, for example, within the framework of litigation or upon the client’s instructions;

· in certain cases, we may be obliged to transfer data to state authorities if so determined by regulatory enactments (for example, to the State Revenue Service);

· in case of payment delay or failure to fulfill obligations, we may transfer your personal data to licensed debt collection companies to perform debt recovery measures.

· to cooperation partners. We may need to provide information and your personal data to our cooperation partners (for example, IT service providers, security service providers, recruitment companies regarding candidates). We carefully check all service providers who process your personal data on our behalf and upon our assignment. We evaluate whether cooperation partners (personal data processors) apply appropriate security measures so that the processing of your personal data takes place according to our assignments, instructions, and the requirements of the regulatory framework. These companies are not entitled to use your personal data for any other purposes.

Place of data processing

Your personal data is processed within the European Economic Area.

In exceptional cases, it may be necessary to transfer client data to third countries if it is necessary for the fulfillment of the task provided by the client (for example, to law firms in third countries).

Personal data storage periods

Generally, personal data is stored until:

· the achievement of the specified processing purpose;

· to the extent that the regulatory framework determines the obligation to process and/or store such data;

· for the fulfillment of contractual obligations, if relevant;

· if the processing takes place based on consent, personal data is processed as long as the provided consent is valid and has not been withdrawn.

Information about the client (including the legal assistance agreement) and the payments made is stored for 10 years after the date of provision of assistance.

Regarding the processing of candidates’ personal data, CVs and other submitted documentation are stored for 6 months. With the candidate’s consent – up to one year.

A longer period of personal data storage is permissible in individual cases to protect the legitimate interests of RockBridge Legal, for example, in the case of litigation.

When this period has ended, RockBridge Legal will securely delete your personal data or make it inaccessible (archiving), or unidentifiable so that it can no longer be linked to you.

Security requirements

RockBridge Legal ensures, constantly reviews, and improves protection measures to protect your personal data from unauthorized access, accidental loss, disclosure, or destruction. To implement this, RockBridge Legal applies modern technologies, technical and organizational requirements, including the use of firewalls, antivirus programs, and encryption.

Access to personal data is provided only to those employees and representatives who need it to perform their professional duties.

Additionally, the processing of clients’ personal data is also subject to the Law on the Bar of the Republic of Latvia, which, among other things, sets strict confidentiality requirements.

In the event of a security incident involving your personal data, if it creates a potentially high risk to your rights and freedoms, we will immediately notify you, if possible, or the information will be published on our Website, or in another possible way.

Data subject rights

The regulatory framework in the field of data protection grants you several rights to influence the processing of your personal data. To exercise these rights, please submit to RockBridge Legal:

· a written application by mail or in person at the RockBridge Legal premises (you must bring a passport or ID card);

· or by sending an application signed with a secure electronic signature and time stamp to [email protected]

After receiving the application, RockBridge Legal will identify you, i.e., verify that you are the same person you claim to be, and provide you with a response within one month. If necessary, the said period can be extended for another two months, taking into account the complexity and number of requests. RockBridge Legal will inform you of any such extension and the reasons for the delay within a month of receiving the request.

Access to personal data: You have the right to request confirmation from RockBridge Legal as to whether it processes your personal data, and in such cases, request a copy of the personal data being processed. RockBridge Legal provides this information free of charge. If requests are manifestly unfounded or excessive, in particular because of their repetitive character, RockBridge Legal may either:

· charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested;

· or refuse to act on the request.

Rectification of personal data: If the data at our disposal has changed or you see that the information we process about you is inaccurate or incorrect, you have the right to request that this information be changed, clarified, or corrected.

Withdrawal of consent: To the extent that RockBridge Legal processes your personal data based on your consent, you have the right to withdraw your consent to the processing of personal data at any time. In such a case, RockBridge Legal will stop processing your personal data for the purpose for which you provided your consent. Please note that the withdrawal of consent will not give you the right to dispute the lawfulness of the data processing performed by RockBridge Legal until the withdrawal of consent.

Erasure: Under certain circumstances, you have the right to ask RockBridge Legal to delete your personal data. However, please note that data erasure is not possible in cases where data processing arises from the regulatory framework.

Restriction of processing and objections to data processing: Under certain circumstances, you have the right to ask RockBridge Legal to restrict the processing of your personal data. However, please note that restriction of processing is not possible in cases where data processing arises from the regulatory framework.

Data portability: Under certain circumstances, you have the right to receive or transfer your personal data to another data controller. This right includes only the data you have provided to RockBridge Legal based on your consent or a contract.

Right to be informed about a personal data breach: You have the right to receive information, and RockBridge Legal will inform you if a personal data breach could create a high risk to your rights and freedoms.

Right to apply to a court or the Data State Inspectorate: We highly value your privacy and invite you to contact us in case of questions and uncertainties; however, if you believe that your personal data is being processed in an inappropriate manner, you have the right to apply to a court or the Data State Inspectorate:

E-mail	[email protected]
Telephone	+371 67223131
Address	Elijas iela 17, Riga, LV-1050

Additional information about data subject rights is available in the General Data Protection Regulation, which can be found online: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

Changes

RockBridge Legal has the right to make additions to the privacy policy by publishing its current version on its Website. In case of significant changes, we will also inform you in other ways.

The privacy policy was last updated on May 20, 2025

Version 1.0.

Controller and its contact information

Scope of the Privacy Policy

Applicable legislation

ADDRESS

PHONE

E-MAIL

Controller and its contact information

Scope of the Privacy Policy

Applicable legislation

Elementor

Usage

Sharing data

Statistics (anonymous)

Name

Expiration

Function

WordPress

Usage

Sharing data

Functional

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Google Analytics

Usage

Sharing data

Statistics

Name

Expiration

Function

Name

Expiration

Function

Google Fonts

Usage

Sharing data

Purpose pending investigation

Name

Expiration

Function

YouTube

Usage

Sharing data

Purpose pending investigation

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Miscellaneous

Usage

Sharing data

Purpose pending investigation

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration

Function

Name

Expiration