Privacy policy

1. General information

This Privacy Policy provides comprehensive information on how SIA “ZAB Precinieks” (hereinafter – ZAB) as a personal data controller organizes and processes personal data of individuals. ZAB strictly adheres to the principles set out in the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation or GDPR), as well as the laws of the Republic of Latvia.

This Privacy Policy applies to the processing of personal data within the framework of ZAB's legal services, including communication with clients, potential clients, cooperation partners, candidates for recruitment, as well as ZAB's activities on social networks (e.g., LinkedIn, Facebook).

2. Confidentiality and data protection principles

ZAB has implemented appropriate technical and organizational measures to ensure the security, confidentiality, integrity, and availability of personal data.

Attorney-client privilege

ZAB strictly adheres to attorney-client privilege in its activities. According to Section 67 of the Advocacy Law, a sworn attorney is obliged not to disclose the client's secret both during and after the handling of the case or release from the task. This obligation applies in full to ZAB employees, trainees, and other persons involved in the provision of legal services.

ZAB's commitments

ZAB commits to:

process personal data only for a specific, lawful purpose;
process only the amount of personal data necessary to achieve the purpose;
process personal data only as long as there is a legal and legitimate basis for processing;
ensure the security of personal data storage;
review data subject requests for data correction, processing restriction, or deletion;
review complaints about personal data processing.

3. Purposes and legal bases for personal data processing

ZAB processes personal data based on the following legal grounds:

a) Data subject's consent, if there is no other legal basis for processing.

b) Conclusion and performance of a contract:

providing pre-contractual consultations, reviewing case materials at the request of the data subject;
conclusion and performance of a legal assistance contract.

c) Fulfillment of legal obligations, including:

compliance with the requirements of the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing;
client identification and investigation.

d) Protection of vital or public interests:

protection of the vital interests of the client or another person;
performance of tasks in the public interest.

e) ZAB's legitimate interests, including:

ensuring the quality of legal services;
protection of ZAB's financial interests;
dissemination of information about services and events;
maintaining business relationships;
improving customer service;
analysis of website usage;
recruitment.

If data processing is based on consent, the data subject has the right to withdraw it at any time. If data processing is determined by regulatory acts, withdrawal of consent may limit the provision of legal services.

4. Categories of personal data

Personal data is any information about an identified or identifiable natural person.

ZAB processes the following categories of personal data:

Client identification and contact information: name, surname, personal code or date of birth, address, email address, phone number, copy of passport or ID card, organization, position.
Case and task data: information about case circumstances, documents, and evidence.
Financial and billing data: bank account number, payment information, tax data.
Communication data: email correspondence, call and meeting times and durations.
Other data: any information provided or obtained in the course of providing legal services.

5. Data processed within the framework of AML/CFT

In accordance with the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing, ZAB may process:

identification data;
information about beneficial owners;
information from sanctions and terrorism lists.

6. Special categories of personal data

In certain cases, ZAB may process data on criminal convictions in the field of criminal law, based on Section 34 of the Personal Data Processing Law.

7. Acquisition of personal data

Personal data is acquired when:

You use ZAB's legal services;
You contact ZAB via the website, email, or other communication channels.

8. Transfer of personal data to third parties

Personal data is transferred only to the extent specified in regulatory acts, including:

authorized persons;
state and municipal institutions;
auditors, accountants;
Data State Inspectorate;
other law enforcement agencies.

9. Personal data retention periods

Personal data is stored in accordance with regulatory acts, including:

AML/CFT data – 8 to 10 years;
transaction and billing data – up to 10 years;
marketing data – up to 10 years;
security data – up to 1 month;
cookie data – according to the cookie policy.

10. Place of personal data processing

Personal data is processed within the European Union. In certain cases, data transfer outside the EU is possible, in compliance with GDPR requirements.

11. Data subject rights

The data subject has the right to information, access, rectification, deletion, processing restriction, data portability, and objections.

12. Access to information

Requests can be submitted in person, electronically, or in writing.

13. Controller contact information

SIA “ZAB Precinieks” Reg. No.: 50203345921 Address: Brīvības iela 105-3, Rīga, LV-1010 Phone: +371 66119844 Email:

14. Submission of complaints

Complaints can be submitted to ZAB or the Data State Inspectorate.

15. Changes to the Privacy Policy

ZAB reserves the right to make changes to the Privacy Policy. The current version is available on the website.