Privacy Policy

01

Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data-protection provisions is:

If you have questions about the processing of personal data, contact us at the email above.

02

General information on data processing

As a matter of principle, we process personal data of our users only insofar as this is necessary to provide a functioning website, respond to enquiries and deliver our consulting services. We do not sell personal data.

Data deletion and storage period

Personal data is deleted or anonymised as soon as the purpose of storage no longer applies, unless a longer retention period is required or permitted by law (for example accounting or dispute-related records).

03

Personal data we may collect

When you contact us or use certain features of the website, we may ask for personally identifiable information. Typical categories include:

You are not required to provide personal data to browse public pages. If you choose not to share contact details, we may be unable to respond to an enquiry.

04

Provision of the website and log data

Description and scope

Each time our website is accessed, our systems (or our hosting provider) may automatically collect technical data from the accessing device. This may include:

• Browser type and version
• Operating system
• IP address
• Date and time of access
• Pages visited and referring URL

Purpose

Temporary storage of technical data is necessary to deliver the website securely, ensure stability and diagnose technical issues. We do not use this data to build a marketing profile of you.

Storage

Session-related data is kept only as long as needed for the purpose above. Server logs, where retained, are kept for a limited period for security and operations, then deleted or anonymised.

05

Contact form and email contact

Description and scope

If you send us an enquiry via the contact form or by email, the data you provide (including contact details and the content of your message) is stored and processed so that we can handle your request.

Purpose

To follow up on service enquiries, communicate about a potential engagement and keep a record of correspondence where needed for legitimate business reasons.

06

Use of cookies

Cookies are small text files stored on your device. We may use cookies or similar technologies where needed for the website to function, to remember preferences, or — if enabled — to understand aggregated site usage.

You can control or block cookies in your browser settings. Blocking some cookies may affect how certain parts of the site work. If we introduce additional tracking tools, we will update this Policy and, where required, ask for consent.

07

Legal basis for processing

Where the GDPR applies, processing is based on one or more of the following:

Consent

Art. 6 (1) (a) GDPR — where you have given clear consent for a specific purpose.

Contract / pre-contract

Art. 6 (1) (b) GDPR — to respond to your request or perform an agreement.

Legal obligation

Art. 6 (1) (c) GDPR — where we must process data to comply with the law.

Legitimate interests

Art. 6 (1) (f) GDPR — e.g. running a secure website and responding to business enquiries, where not overridden by your rights.

08

Disclosure to service providers

We may share limited data with trusted providers who help us operate the website or communications (for example hosting or email), under appropriate confidentiality and data-protection arrangements, and only as needed for those services.

We may also disclose personal data where we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation or lawful request
• Protect and defend the rights or property of SIA Corentis
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of individuals or the public

09

Transfer of data

Your information may be processed or stored on servers outside Latvia or the European Economic Area, where data-protection laws may differ. Where we transfer personal data internationally, we take steps intended to ensure an appropriate level of protection, consistent with applicable law (including GDPR transfer mechanisms where required).

10

Security of data

We use commercially reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11

Rights of the data subject

If personal data is processed about you, you are a data subject under the GDPR and may be entitled to the following rights:

In Latvia, complaints may be lodged with the Data State Inspectorate. To exercise your rights, contact us using the details below. We may need to verify your identity before responding.

12

Status / update

We adapt this Privacy Policy when functionalities or legal requirements change. We recommend reviewing this page from time to time. The “Last updated” date at the bottom will be revised when changes are posted.