Skip to content
Properties
Legal services
LVENRU

Privacy policy

The Privacy Policy explains how the data controller processes your personal data when you use this website, browse property listings, and submit inquiries related to renting, purchasing, selling real estate, or general questions.

SIA “Yoko Nexus”

40203759317 · Rīga, Latgales iela 266 k-2-56, LV-1063

info@yokocity.lv · +371 29821409

19.10.2026

This Privacy Policy explains how the Data Controller processes personal data when you use this website, browse property listings, or submit enquiries regarding property rental, purchase, sale, or general matters.

1. PURPOSE

The purpose of this Privacy Policy is to provide individuals (data subjects) with information about the purposes, scope, protection, and retention periods of personal data processing, as well as their rights during the collection and processing of personal data and when such data is transferred to competent authorities or another data controller.

2. DATA CONTROLLER AND CONTACT INFORMATION

The Data Controller responsible for personal data processing is SIA “Yoko Nexus”, registration No. 40203759317, registered address: Latgales iela 266 k-2-56, Riga, LV-1063, Latvia.

For questions regarding personal data processing, please contact info@yokocity.lv or write to the Data Controller's registered address.

Requests concerning the exercise of data subject rights may be submitted in accordance with the procedure described in this Privacy Policy.

3. LEGAL BASIS FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA

  1. Personal data means any information relating to an identified or identifiable natural person. This Privacy Policy applies to the protection of privacy and personal data of individuals, including data subjects, service users, third parties involved in providing services, and visitors to the Data Controller's website. The legal grounds for processing personal data include:
  2. 3.1. Consent of the data subject – the individual has voluntarily given consent to the collection and processing of their personal data.
  3. 3.2. Contractual relationships – processing before or after entering into an agreement, including customer relationship management, contract preparation, conclusion and performance, related administrative processes, and cooperation with clients and public authorities.
  4. 3.3. Legitimate interests of the Data Controller, including:
  5. Provision of services and identification of data subjects.
  6. Business administration, accounting, record keeping, archiving, and internal operations.
  7. Promotion and development of the company's image.
  8. Handling complaints and providing customer support.
  9. Financial management, debt administration, and payment processing.
  10. Legal proceedings and protection of legitimate interests.
  11. 3.4. Legal obligations – compliance with applicable laws and regulations.
  12. 3.5. Sources of personal data:
  13. 3.5.1. Public databases.
  14. 3.5.2. Documents and information submitted by data subjects.
  15. 3.5.3. Information received from other controllers, processors, and subprocessors.
  16. 3.5.4. Documents of archival value stored in the Latvian State Archives.
  17. 3.5.5. Data obtained through the Data Controller's video and/or photographic equipment.
  18. 3.5.6. Data obtained through the Data Controller's computer network equipment.
  19. 3.5.7. Data collected when visiting or browsing the website yokocity.lv.
  20. 3.6. Personal data processing activities include:
  21. 3.6.1. Identifying data subjects.
  22. 3.6.2. Performing tasks delegated by public administration authorities.
  23. 3.6.3. Participating in legal proceedings.
  24. 3.6.4. Concluding business agreements and monitoring their performance.
  25. 3.6.5. Recruiting employees and establishing and maintaining employment relationships.
  26. 3.6.6. Providing information to and receiving information from state and municipal authorities and officials.

4. PURPOSES OF PERSONAL DATA PROCESSING

  1. The Data Controller processes personal data for the following purposes:
  2. 4.1. Provision of services:
  3. 4.1.1. Identification of data subjects.
  4. 4.1.2. Preparation and conclusion of agreements.
  5. 4.1.3. Provision of services and fulfilment of contractual obligations.
  6. 4.1.4. Promotion of service use.
  7. 4.1.5. Advertising, marketing, and distribution of services for commercial purposes.
  8. 4.1.6. Customer service and support.
  9. 4.1.7. Reviewing and processing complaints and objections.
  10. 4.1.8. Prevention of money laundering, terrorism financing, and proliferation financing.
  11. 4.1.9. Administration of payments and settlements.
  12. 4.1.10. Improvement of website functionality and performance.
  13. 4.2. Providing information to public authorities in cases and to the extent required by applicable laws and regulations.
  14. 4.3. Other specific purposes communicated to the data subject at the time the relevant personal data is provided.

5. SHARING AND DISCLOSURE OF PERSONAL DATA

  1. 5.1. To provide services and perform its duties, the Data Controller may share personal data within the European Union and the European Economic Area.
  2. 5.2. The Data Controller may transfer personal data to third countries outside the European Economic Area or international organisations, provided that appropriate data protection safeguards required by the General Data Protection Regulation (GDPR) are ensured.
  3. 5.3. Where required by applicable legislation, personal data may be disclosed to state and municipal authorities, law enforcement agencies, courts, and other competent institutions.
  4. 5.4. Personal data is disclosed only to the extent permitted or required by applicable legislation, including the GDPR and the Latvian Personal Data Processing Law.

6. PERSONAL DATA RETENTION PERIOD

  1. 6.1. The Data Controller stores and processes personal data for as long as at least one of the following conditions applies:
  2. 6.2. A contract concluded with the data subject remains in force.
  3. 6.3. The Data Controller or the data subject may exercise legitimate interests under applicable legislation, including submitting objections or initiating legal proceedings.
  4. 6.4. Either party has a legal obligation to retain the data.
  5. 6.5. The data subject's consent to the relevant processing remains valid, provided that no other lawful basis for processing exists. Once none of these conditions applies, the personal data will be deleted.

7. COOKIE PROCESSING

  1. 7.1. We use a self-hosted Umami analytics system without analytics cookies to collect statistics on visits to our public website. Form fields, visits to CRM pages, URL query parameters, and personal data contained in page titles or referrer URLs are not transmitted to the analytics system. The legal basis for processing and the data retention period are yet to be confirmed by the responsible person.
  2. 7.2. We use a cookie only for our employee login system, which is not accessible to website visitors. This cookie is strictly necessary to maintain the authentication session. .

8. PERSONAL DATA PROTECTION

  1. 8.1. The Data Controller protects personal data against unauthorised access, accidental loss, disclosure, or destruction.
  2. To ensure appropriate protection, the Data Controller uses modern technological and organisational security measures, taking into account existing privacy risks and security requirements. These may include firewalls, intrusion detection and analysis software, SSL encryption, and anonymisation.
  3. 8.2. The Data Controller carefully evaluates processors and subprocessors acting on its behalf to ensure that appropriate security measures are implemented and that personal data is processed in accordance with the Data Controller's instructions and applicable data protection legislation.
  4. 8.3. Processors and subprocessors are not authorised to process personal data for their own purposes.
  5. 8.4. The Data Controller does not accept responsibility for unauthorised access to or loss of personal data resulting from circumstances beyond its control, including actions or negligence attributable to the data subject.

9. RIGHTS OF DATA SUBJECTS

  1. In accordance with applicable legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), data subjects have the following rights:
  2. 9.1. Right to information
  3. The right to receive clear, transparent, and understandable information about the processing of their personal data.
  4. 9.2. Right of access
  5. The right to request confirmation of whether their personal data is being processed and to obtain information about the personal data held by the Data Controller.
  6. 9.3. Right to rectification
  7. The right to request correction of inaccurate or incomplete personal data.
  8. 9.4. Right to object
  9. The right to object to the processing of personal data based on the Data Controller's legitimate interests, except where processing is required by applicable legislation.
  10. 9.5. Right to erasure
  11. The right to request deletion of personal data under certain circumstances, except where legal obligations require its retention.
  12. 9.6. Right to restriction of processing
  13. The right to request restrictions on the processing of personal data under certain circumstances, except where the scope of processing is prescribed by law.
  14. 9.7. Right to data portability - The right to receive personal data or transfer it to another data controller where the data has been provided on the basis of consent or a contract and processing is carried out by automated means. This right does not apply where processing is necessary for performing a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
  15. 9.8. Right to lodge a complaint - If a data subject is dissatisfied with the Data Controller's response or believes that their personal data is being processed in violation of applicable legislation, they may submit a complaint to the Latvian Data State Inspectorate (Datu valsts inspekcija).

10. OTHER PROVISIONS

  1. 10.1. To exercise the rights described above, the data subject must submit a written request to the Data Controller.
  2. 10.2. In case of any questions or uncertainties, the data subject may contact the data controller at Latgales iela 266 k-2-56, Riga, LV-1063, Latvia, or by email at info@yokocity.lv.
  3. 10.3. If a data subject is dissatisfied with the response received, they have the right to lodge a complaint with the Latvian Data State Inspectorate: https://www.dvi.gov.lv/.
  4. 10.4. The Data Controller reserves the right to periodically amend, update, or supplement this Privacy Policy. Data subjects will be informed of any changes by publishing the current version of the Privacy Policy on the Data Controller's website: https://www.yokocity.lv

This page describes how we process your personal data when you use our website or submit an enquiry. Personal data processing is governed by Regulation (EU) 2016/679 (General Data Protection Regulation) and the Latvian Personal Data Processing Law.