Privacy Policy

1. Data Controller

1.1. The controller of your personal data, determining the purposes for acquiring, processing, and storing personal data, is SIA “Etepek,” registration No. 40103766755, legal address: Kārļa iela 3, Valmiera, Valmieras novads, LV-4201, Latvia, email: info@etepek.com.

1.2. We adhere to the data processing principles established by law and confirm that personal data is processed in compliance with applicable legislation.

2. Collection, Processing, and Storage of Personal Data

2.1. Personal data refers to any information about an identified or identifiable natural person. Processing includes any operation related to personal data, such as acquisition, recording, modification, use, viewing, deletion, or destruction.

2.2. We collect, process, and store personal information through our website, email, or other communication methods.

2.3. We acquire your personal data directly from you when you:

  • Apply for a consultation;
  • Request our services or information;
  • Register to receive educational information (e.g., newsletters);
  • Provide feedback, questions, or complaints.

2.4. We request only the personal data necessary to provide you with services, deliver requested materials, or respond to your inquiries.

2.5. You are responsible for ensuring that the personal data you provide is accurate and up-to-date. Providing false information may be considered a violation of our privacy policy.

2.6. Providing your personal data is voluntary. However, if you refuse to provide the necessary data, we will not be able to deliver the requested services.

3. Legal Basis for Personal Data Processing

3.1. Your personal data is processed based on:

  • Your consent (GDPR Article 6(1)(a));
  • Contractual performance (GDPR Article 6(1)(b));
  • Compliance with legal obligations (GDPR Article 6(1)(c));
  • Legitimate interests (GDPR Article 6(1)(f)).

3.2. Our legitimate interests include ensuring service quality, development, and the protection of legal interests.

4. Categories of Personal Data and Retention Period

Categories of data:

  • Identification data: name, surname.
  • Contact details: phone, email, address.
  • Information regarding service requests or feedback.

Retention period:

  • Data is retained as long as necessary for the respective purpose or as required by law.

5. Data Subject Rights

Under GDPR, you have the following rights:

  • Request information about the data being processed.
  • Request the correction of inaccurate or incomplete personal data.
  • Request the deletion of data, provided it does not contravene legal obligations.
  • Withdraw consent for data processing.
  • File a complaint with the Data State Inspectorate regarding unjustified data processing.

Requests can be submitted via email to info@etepek.com.

6. Security Measures

We implement technical and organizational measures to ensure the security of personal data:

  • Encrypt data transmission.
  • Restrict access to data to authorized personnel only.
  • Regularly review security procedures.

7. Final Provisions

This privacy policy may be amended. Changes take effect upon publication on the website www.etepek.com. Please check the policy periodically to stay informed about updates.