- JSC “AB CITY” highly values the right to privacy and the protection of personal data of its partners, clients, employees, and any other data subjects. Data protection requirements are considered an integral part of the business process and are incorporated into daily operations to ensure the safeguarding of personal data.
- This Privacy Policy provides transparent information on the purposes for which JSC “AB CITY” collects and processes personal data, the principles of data processing, and the rights of data subjects regarding the protection of their personal data.
- Personal data processing is carried out in accordance with the applicable laws of the Republic of Latvia, as well as in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the Regulation.

We aim to provide a service where you’re in control, and respecting your privacy is one of our top priorities. We're always working to improve, so if you notice anything that doesn't align with your expectations around privacy, let us know. Our privacy team at dpo@repharm.lv is here to listen and take action.
Privacy policy JSC "AB City"
1. General provisions
2. Data controller and contact information
- The data controller is JSC “AB CITY”,
registration number 40203174414,
legal address: Grēdu iela 4A, Rīga, LV-1019,
email: abcity@abcity.lv. - For any questions, concerns, or suggestions regarding this Privacy Policy or personal data processing, please contact the Data Protection Officer by email: dpo@repharm.lv.
- The data controller is JSC “AB CITY”,
3. Scope of personal data
- JSC “AB CITY” mainly processes the following categories of personal data:
- corporate information about representatives of cooperation partners – name, surname, position, company, contact details, and information about the partner’s company and, where applicable, its products or services;
- data provided in the “Contacts – get in touch with us” section of the website – name, email, phone number, and the message provided. Additionally, responses to the message and any supplementary information provided in the correspondence;
- employee data processed in accordance with the Labour Law and applicable regulatory requirements.
- JSC “AB CITY” mainly processes the following categories of personal data:
4. Legal basis for processing personal data
- Personal data of data subjects is processed:
- in the legitimate interests of JSC “AB CITY” or third parties;
- based on the data subject’s consent;
- for the conclusion of a contract or to take steps prior to concluding a contract;
- in accordance with other legal bases provided for in Article 6(1) of the General Data Protection Regulation.
- The legitimate interests of JSC “AB CITY” include:
- conducting business activities;
- retaining applications, submissions, emails, and other recorded information from data subjects for review and response;
- establishing and fulfilling employment relationships;
- protecting lawful interests in court, other state institutions, and when receiving legal assistance.
- Personal data of data subjects is processed:
5. Processing, protection, and storage of personal data
- Personal data is processed only for the purposes originally intended and to the extent initially determined.
- Processing is carried out using modern technological capabilities, taking into account existing privacy risks and the reasonably available organisational, financial, and technical resources. These measures ensure an appropriate level of information security, preventing unauthorized access to personal data.
- Personal data is stored only for as long as necessary to achieve the purposes set out in this Privacy Policy, unless longer retention is required or permitted by applicable law. The following criteria are used to determine retention periods:
- as long as there is a legal basis for data processing;
- as long as JSC “AB CITY” or the data subject can exercise their legitimate interests as provided for by external regulations (e.g., claim handling, rights protection, dispute resolution, etc.).
- Retention periods specified by law, such as:
- five to ten years to comply with accounting legislation;
- ten years under the Civil Law;
- three years under the Commercial Law;
- five years under the Personal Data Processing Law;
- other terms as required, including those set out in the Civil Procedure Law and the Administrative Procedure Law for filing claims.
- No profiling or automated decision-making is carried out that would produce legal or other significant effects on the data subject.
6. Recipients of personal data
- Personal data is not disclosed to third parties without a legal basis, except (while complying with data protection requirements):
- to state authorities delegated by law, such as the State Social Insurance Agency, State Revenue Service, State Police, etc.;
- in cases provided for by law to protect the legitimate interests of JSC “AB CITY”;
- where data transfer is necessary to ensure the legitimate interests of JSC “AB CITY” or third parties.
- Personal data is not transferred or processed outside the EU or EEA
- Personal data is not disclosed to third parties without a legal basis, except (while complying with data protection requirements):
7. Rights and obligations of data subjects
- The data subject has the right to receive information as provided by law regarding the processing of their data, request correction of data, or object to the processing of personal data.
- A request to exercise these rights may be submitted in writing in person (with proof of identity) or electronically (signed with a secure electronic signature). Before doing so, we encourage contacting the Data Protection Officer: dpo@repharm.lv.
- When processing such requests, JSC “AB CITY” will verify the identity of the data subject, assess the request, and fulfil it in accordance with the law.
- JSC “AB CITY” ensures compliance with data processing and protection requirements in line with applicable legislation. In case of complaints, JSC “AB CITY” will take all necessary steps to resolve the matter; if unsuccessful, the data subject has the right to contact the data protection supervisory authority — Datu valsts inspekcija.
8. Final provisions
- Applications and information requests from data subjects are reviewed free of charge. Review may be refused or subject to a reasonable fee if the requests are manifestly unfounded or excessive, or in other cases provided for by law.
- The data subject is responsible for familiarising themselves with this Privacy Policy, as well as informing any person connected with them whose interests may be affected by the personal data processing described herein.
- This Privacy Policy is publicly available on the JSC “AB CITY” website at www.abcity.lv.