PRIVACY POLICY
Effective from: 5 May 2026
Platform: CityFiks
Website: www.cityfiks.lv
Manager: SIA CityFiks
Registration No: 40103952403
Registered address: Riga, Kastrānes Street 2–22, LV-1039
Email address for contact regarding the processing of personal data: [email protected]
1. Purpose of the Privacy Policy
This Privacy Policy explains how SIA CityFiks processes personal data when a person visits the website www.cityfiks.lv, uses the CityFiks mobile app, contacts CityFiks, creates or uses a user account, submits a contractor application, or otherwise uses the services offered by CityFiks.
This Privacy Policy applies in full to both visitors and users of the website www.cityfiks.lv and to users of the CityFiks mobile app (available on the Google Play Store and the Apple App Store). If user accounts, the online ordering system, or other digital services are used on the platform, this document governs the processing of data collected through these features.
The purpose of this policy is to provide clear and understandable information regarding the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, or GDPR) and the laws and regulations of the Republic of Latvia.
CityFiks is committed to processing personal data in a fair, lawful, and transparent manner, and only to the extent necessary to achieve a specific purpose.
2. Data Controller
The data controller is:
CityFiks, Ltd.
Registration No: 40103952403
Registered address:
2–22 Kastrānes Street, Riga, LV-1039, Latvia
Email address for contact regarding the processing of personal data: [email protected]
If you have any questions about the processing of personal data or wish to exercise your rights as a data subject, please contact us at the email address provided above.
CityFiks is a digital platform designed to connect service requesters with suitable service providers.
The platform allows potential service providers to apply to partner with CityFiks, while enabling customers to find suitable service providers in the future.
Currently, CityFiks primarily provides:
- accepting applications from potential service providers;
- evaluation of applications;
- communication with potential partners;
- technical maintenance and development of the platform.
If CityFiks expands its functionality in the future—for example, by introducing user accounts, an online ordering system, or other services—the Privacy Policy will be updated accordingly.
The Need to Provide Personal Data
Providing personal data when submitting an application or initiating a partnership is necessary so that CityFiks can evaluate the application, contact the individual, and, if applicable, enter into or fulfill a contract. If the required data is not provided, CityFiks may not be able to evaluate the application, respond to the request, or begin a business relationship. Data required for accounting records is processed to fulfill obligations set forth in regulatory acts.
3. What personal data do we process?
CityFiks processes only the personal data necessary for the provision of services, the evaluation of cooperation, communication, or the fulfillment of obligations set forth in regulatory acts.
Category of personal data | Data Examples | Purpose of Processing | Legal Basis |
Identification Information | First name, last name, company name, registration number (if applicable) | Application Review, Initiation of Cooperation, and Contract Performance | Article 6(1 )(b) of the GDPR (for the performance of a contract) |
Contact Information | Email address, phone number, city, or region | Communication, providing information, organizing cooperation | Article 6(1 )(b) (Performance of a contract) and (f) (Legitimate interests) of the GDPR. |
Professional Information | Type of service, area of expertise, experience, service area, qualifications, certifications, portfolio (if provided) | Candidate Evaluation and Initiation of Collaboration | Article 6(1 )(b) of the GDPR (for the performance of a contract) |
Application Information | Information provided on the contractor’s application form | Review of Applications and Communication Regarding Collaboration | Article 6(1 )(b) of the GDPR (for the performance of a contract) |
Contact Information | Email correspondence, messages, and other information provided during communication | Providing responses, reviewing requests, and resolving potential disputes | Article 6(1 )(b) (Performance of a contract) and (f) (Legitimate interests) of the GDPR. |
Technical Specifications | IP address, browser type, device type, system log files, cookie information | Website Operations, Security, and Technical Maintenance | Article 6(1 )(f) of the GDPR (Legitimate Interests). |
Accounting Data | Information contained in payment and accounting documents | Compliance with Legal Obligations | Article 6(1 )(c) of the GDPR (legal obligation). |
Mobile Devices and User Data | Device-specific identifiers (Device ID, IDFV/IDFA), operating system type and version, app performance analytics, crash logs. | Ensuring the stability and security of the app, fixing technical issues, and improving usability. | Article 6(1)(f) of the GDPR (Legitimate Interests). |
Geolocation data | The device’s location coordinates (only with the user’s explicit permission in the device settings). | To connect service requesters with the nearest available service providers and optimize service delivery. | Article 6(1)(a) of the GDPR (User consent) or (b) (Performance of a contract). |
Authentication credentials | Information from third-party accounts (such as Apple ID, Google Account) if the user chooses quick registration. | Verifying user identity and ensuring faster registration and login. | Article 6(1)(b) of the GDPR (Performance of a contract/measures taken prior to entering into a contract). |
CityFiks does not request and does not intend to process special categories of personal data, such as data regarding health, religious or political beliefs, biometric data, or other data referred to in Article 9 of the GDPR. Please do not include such information in your applications or communications. If a person submits such data on their own initiative and it is not necessary for processing a specific request, CityFiks will not use it and will, to the extent possible, delete or anonymize it. Such data will be processed only if an applicable exception under Article 9 of the GDPR exists.
CityFiks does not engage in automated decision-making or profiling within the meaning of Article 22 of the GDPR. If such processing of personal data is implemented in the future, the Privacy Policy will be updated accordingly, and individuals will be informed in accordance with the procedures set forth in applicable laws and regulations.
If the processing of personal data is based on CityFiks’ legitimate interests, those interests are:
- to ensure the secure and uninterrupted operation of the website;
- prevent abuse, fraud, and security incidents;
- to retain evidence of communications and applications in the event of a potential claim or dispute;
- ensure effective communication with potential clients and business partners;
- Develop and maintain the functionality of the CityFiks platform, in accordance with the principle of data minimization.
4. Recipients of Personal Data
CityFiks ensures that personal data is accessed only by those individuals or organizations that need it to achieve a specific processing purpose.
Depending on the situation, personal data may be disclosed to the following categories of recipients:
Recipient Category | Purpose of the Transfer of Personal Data |
CityFiks employees and authorized representatives | Application Review, Customer Service, and Service Delivery |
IT and hosting service providers | Ensuring the Operation of Websites and Information Systems |
Accounting or legal service providers | Compliance with obligations set forth in laws and regulations and the receipt of legal services |
Customers | If it is necessary for the organization of the service and the person has been approved as the service provider |
State and Local Government Agencies | Compliance with obligations set forth in laws and regulations or compliance with lawful requests from competent authorities |
CityFiks does not sell, rent, or disclose personal data to third parties for marketing or advertising purposes.
If third-party service providers are engaged to process personal data, CityFiks ensures that they process personal data only in accordance with a written agreement and comply with the requirements set forth in the GDPR.
5. Retention Periods for Personal Data
CityFiks retains personal data only for as long as necessary to achieve the relevant processing purpose or to fulfill the obligations set forth in applicable laws and regulations.
Category of personal data | Shelf life |
Contractor Application Information | Until the evaluation of the application is completed, or up to 24 months after receipt of the application, if cooperation is not initiated |
Contact Information | Until the request has been processed, and no longer than 24 months after the last communication, unless a longer retention period is necessary for the assertion, exercise, or defense of legal claims. |
Contract and Accounting Data | During the term of the agreement and until the expiration of the statute of limitations for claims. In accordance with the time limits set forth in accounting and tax regulations. |
Technical Safety Data and System Logs | Up to 6 months, unless a longer retention period is necessary for the investigation of a specific security incident. |
Upon expiration of the retention period, personal data is securely deleted, anonymized, or destroyed, unless laws and regulations require it to be retained for a longer period.
If you have registered a user account on the CityFiks platform (on the website or in the mobile app), you have the right to request the complete and irreversible deletion of your account and all associated personal data at any time.
Deleting an Account
To delete your user profile and data, go to the Profile section—> Edit Profile. Select “Delete Profile” and confirm the deletion of your data.
Upon receiving a request to delete an account, CityFiks will completely and permanently delete or anonymize all of your profile data, history, saved settings, and applications from all active servers and databases no later than 30 days.
Note: Data whose retention is required by applicable laws and regulations of the Republic of Latvia (for example, data on financial transactions carried out for accounting purposes) is not deleted before the end of the mandatory retention period specified by law; however, it is isolated and not used for any other purposes.
6. Transfer of Personal Data Outside the European Economic Area
CityFiks processes personal data primarily within the European Union or the European Economic Area.
The use of certain third-party services, such as Google Maps, may involve the transfer of personal data or access to data outside the European Economic Area. In such cases, CityFiks evaluates the applicable transfer mechanism, including adequacy decisions adopted by the European Commission, standard contractual clauses, or other safeguards provided for in Chapter V of the GDPR, to the extent that they apply to the specific service.
7. Third-Party Services
CityFiks uses certain third-party services to provide the technical functionality, analytics, map display, and security of its mobile app and website. These service providers may have access to technical data or device identifiers and operate in accordance with their own privacy policies:
Service | Purpose |
Google Play Services: | Required for the app’s basic functionality, security checks, and updates on Android devices. (Privacy Policy: google.com) |
Apple App Store Services: | Required for the app to function, to process purchases and subscriptions, and for authentication on iOS devices. (Privacy Policy: apple.com) |
WPML | Multilingual functionality |
Complianz | Cookie Consent Management |
Google Maps API | It is used to display map features and determine the locations where services are provided. (Privacy Policy: google.com) |
Google Maps content on the website is not loaded automatically until the user chooses to do so. If the user chooses to activate the map, Google may receive and process technical data, such as the IP address and device and browser information. CityFiks uses Google Maps to provide users with map functionality but does not control Google’s subsequent processing of personal data.
CityFiks does not store or affect the operation of these third-party systems. Users have the right to restrict this data collection by changing the privacy settings in their mobile device’s operating system (iOS or Android).
8. Your Rights
Under the GDPR, you have the right to:
Rights | Description |
Access to Data | Get information about what personal data CityFiks processes about you. |
Data Correction | Request the correction of inaccurate or incomplete personal data. |
Data Deletion | Request the deletion of personal data in the cases provided for by law. |
Restrictions on Processing | Request that the processing of personal data be restricted, if provided for by the GDPR. |
Submission of Objections | Objects to the processing of personal data based on CityFiks’ legitimate interests. |
Data Portability | Receive your personal data in a structured format or request that it be transferred to another controller, if this is technically feasible and applicable. |
Withdrawal of Consent | Withdraw consent at any time if the processing of personal data is based on consent. |
Filing a Complaint | File a complaint with the State Data Inspectorate if you believe that your personal data is being processed in violation of the law. State Data Inspectorate 17 Elijas Street, Riga, LV-1050 Website: www.dvi.gov.lv Email: [email protected] |
To exercise your rights, please contact CityFiks by emailing [email protected].
9. Personal Data Security
CityFiks implements appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
Depending on the nature of the personal data processing, security measures such as the following are applied:
- access rights control;
- secure data transmission (HTTPS/TLS);
- regular software updates;
- creating backup copies;
- system monitoring and security incident prevention.
CityFiks regularly assesses whether the security measures in place are appropriate for the nature of the personal data being processed and the associated risks.
10. Cookies
CityFiks uses only cookies and similar technologies that are necessary for the website’s operation, functionality, and to save user preferences.
Detailed information about the cookies used, their retention periods, and users’ options for managing cookie settings is available in the CityFiks Cookie Policy.
11. Changes to the Privacy Policy
CityFiks reserves the right to periodically review and update this Privacy Policy to ensure its compliance with applicable laws and regulations, technological developments, and changes to the services provided.
The current version of the Privacy Policy is always available on the website www.cityfiks.lv.
If the changes will have a significant impact on the processing of personal data or the rights of data subjects, CityFiks will provide notice of them in accordance with the requirements of applicable laws and regulations.
If you have any questions about this Privacy Policy or would like to exercise your rights regarding the processing of your personal data, please contact us.
CityFiks responds to requests related to the processing of personal data without undue delay and, unless otherwise provided by law, no later than one month from the date of receipt of the request.
