The Policy
This policy establishes the guidelines for processing and protecting personal data handled by Exalit in accordance with applicable data protection laws and regulations.
<b>Scope</b><br> This policy applies to all employees, contractors, and third parties who have access to personal data controlled or processed by Exalit.
<b>Data Protection Principles </b> <br> Exalit commits to the following principles to ensure the protection of data: <br> <b> • Lawfulness, Fairness, and Transparency:</b> Personal data shall be processed lawfully, fairly, and transparently. <br> <b> • Purpose Limitation:</b> Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. <br> <b> • Data Minimization: </b> Only data that is necessary for the purposes of processing is collected and maintained. <br> <b> • Accuracy:</b> Every reasonable step must be taken to ensure that personal data is accurate and, where necessary, kept up to date. <br> <b> • Storage Limitation:</b> Personal data is kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed. <br> <b> • Integrity and Confidentiality: </b> Data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage using appropriate technical or organizational measures.
<b> Data retention period and rights </b> <br> • The storage period corresponds to the validity of the certificate issued or within the timeframe to perform the obligations of the service contract. Also, period may be extended on the basis of legal enactments, as for, the Commercial law, law on accounting, etc.<br> • In accordance with the legal enactments, clients may free of charge, upon written request to Exalit access, rectify, transmit, erase or restrict personal data processing, if only it does not conflict with legal enactments stipulated by Latvian and International laws.
<b> Personal data receiver/s can be: </b> <br> • Law enforcement agencies, <br> • Maritime Administrations, <br> • Exalit personal data processors, <br> • Potential/actual employer, <br> • Project Management Organization, <br> • Project Owner.