This Privacy Policy (hereinafter — the Policy) describes how SIA “SUNNY HR SOLUTIONS” (hereinafter — we, our, data controller) processes personal data when visiting the website https://sunnyhr.lv, when contacting us via forms, or through any other means of data transmission.
We process personal data in accordance with:

• General Data Protection Regulation (EU) 2016/679 (GDPR)
• legislation of the Republic of Latvia
• other applicable legal acts

SIA “SUNNY HR SOLUTIONS”
Registration No.: 40103860927
Legal address: Ernesta Birznieka-Upīša iela 18-8, Riga, LV-1050, Latvia
Phone: +371 24 229 505
Website: https://sunnyhr.lv

A separate Data Protection Officer (DPO) has not been appointed. For any questions regarding data processing, you may contact us using the details above..

3.1. Data You Provide
Through website forms or when contacting us:

• first and last name
• phone number
• email
• message content
• any other information you voluntarily provide

When communicating via phone or email:

• contact details
• correspondence content (e.g., requests, vacancies, candidate data, etc.)

3.2. Automatically Collected Data
When visiting the website:

• IP address
• device and browser information
• date and time of visit
• pages viewed
• referral source

4.1. Processing of inquiries
Purpose: communication with you, provision of services
Legal basis: consent / contract / legitimate interest
4.2. Website operation
Purpose: ensuring functionality and security
Legal basis: legitimate interest
4.3. Analytics
Purpose: website improvement
Legal basis: consent
4.4. Legal obligations
Legal basis: compliance with legal requirements
4.5. Protection of rights
Legal basis: legitimate interest

5.1. What they are
Small files stored on your device.
5.2. Types of cookies

• essential
• analytical
• marketing (if used)

5.3. Google Analytics
May be used to analyze website traffic.
5.4. Management
You can manage cookies via the banner or browser settings.

We may share data with:

• Tilda (website platform)
• hosting providers
• Google (email, analytics)
• accountants and legal advisors

May occur (e.g., when using Google), provided that:

• standard contractual clauses (SCC) are in place
• other GDPR-compliant mechanisms are applied

You have the right to:

• access your data
• rectify data
• erase data
• restrict processing
• object to processing
• data portability
• withdraw consent

Complaints may be submitted to:
Data State Inspectorate
https://www.dvi.gov.lv

We do not knowingly collect data of persons under 16 years of age.

We implement:

• access control
• HTTPS
• system monitoring

The current version is always available at:
https://sunnyhr.lv

This Privacy Policy may be available in multiple languages for user convenience. Versions in other languages are provided for informational purposes only.

The legally binding and prevailing version is the Privacy Policy in the Latvian language. In case of any discrepancies or differences in interpretation, the Latvian version shall prevail.

Use of the website constitutes full and unconditional acceptance of the Privacy Policy in its Latvian version.

SIA “SUNNY HR SOLUTIONS”
Ernesta Birznieka-Upīša iela 18-8, Riga
Registration No.: 40103860927
Phone: +371 27 650 443
Website:: https://sunnyhr.lv

We may process the following categories of data:

• first and last name
• contact details (phone, email)
• information from CV:
• education
• work experience
• skills and qualifications
• cover letters and additional materials
• desired employment conditions (salary, schedule, etc.)
• any other information voluntarily provided by the candidate

In certain cases, candidates may provide special categories of data (e.g., photos or other sensitive information) — such data is processed only when a lawful basis exists.

Candidate personal data is processed for:

• recruitment and candidate evaluation
• communication regarding vacancies
• offering suitable job opportunities
• sharing data with potential employers (clients)
• maintaining an internal candidate database

We process candidate data based on:

• candidate consent (GDPR Art. 6(1)(a))
• necessity for entering into a contract or pre-contractual measures (GDPR Art. 6(1)(b))
• legitimate interest (GDPR Art. 6(1)(f)) — efficient recruitment

If a candidate applies for a specific vacancy or gives consent, their data may be shared with potential employers (our clients).

We only share data necessary for candidate evaluation.

• candidate data may be stored for up to 3 years from the last contact
• or until consent is withdrawn

After this period, data is deleted or anonymized.

Candidates have the right to:

• request access to their data
• correct data
• delete data
• restrict processing
• withdraw consent
• object to processing

Candidates may withdraw consent at any time by contacting us using the details provided in this policy.

After withdrawal, we cease processing unless another legal basis applies.

We do not use automated decision-making (including profiling) that produces legal effects concerning the candidate.