Privacy Policy

Who processes your data

The data controller is SIA "Karlo Projekti", reg. No. 43603035175, Grīvas iela 6, Mārupe, Mārupes nov., LV-2167, Latvia. For questions about your data write to [email protected] or call +371 22 888 444.

What data we collect

Only what you provide yourself in the contact form or the machinery request cart:

• name
• phone number
• email address (if you provide one)
• the text of your message or comment
• the list of requested items and the approximate total
• The website has no user accounts, no online payments and no profiling - we do not collect passwords or payment data at all.
• The cart is stored only in your browser (localStorage) and is not sent to us until you submit the request yourself.

Why and on what legal basis

We use the data for one purpose - to answer your request and agree on a service or a machinery purchase. The legal basis is:

• steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b));
• our legitimate interest in answering enquiries we receive (Art. 6(1)(f));
• compliance with accounting obligations if a transaction takes place (Art. 6(1)(c)).
• We do not use the data for marketing, we do not show personalised advertising and we do not add you to advertising lists.

Cookies

The website uses only technically necessary cookies and browser local storage required for the page to work (chosen language, cart contents, cookie notice choice). There are no analytics, advertising or tracking cookies - no Google Analytics and no advertising pixels.

Who may receive the data

The enquiry email arrives in our mailbox. Beyond that the data is received only by:

• the website maintainer and email delivery providers, acting as data processors on our behalf and only on our instructions;
• our accounting service provider, if a transaction takes place;
• public authorities, where required by law.
• We do not sell the data and do not pass it to marketing partners.

How long we keep it

We keep correspondence for as long as needed to handle the request and any follow-up, and no longer than 12 months after the last contact. If a transaction takes place, accounting documents are kept for the period required by law. If you would like the data deleted sooner, just write to us.

Third-party websites

The website may contain links to other websites (for example maps or social networks). We are not responsible for their privacy practices - please review the terms of the site in question.

Children's data

The services are not intended for children. We do not knowingly collect personal data from persons under 16.

Data security

Data is transmitted over an encrypted connection (HTTPS), and access to enquiries is limited to staff who need it for their work. No one can guarantee complete security, but we will notify you of a personal data breach that poses a risk to your rights in accordance with GDPR Art. 33 and 34.

Your rights

You have the right to:

• access your data, correct it or request its deletion;
• restrict processing and object to processing based on legitimate interests;
• receive your data in a portable format;
• lodge a complaint with the Data State Inspectorate (Blaumaņa iela 11/13-11, Riga, LV-1011, dvi.gov.lv). To exercise these rights, simply write to [email protected].

Transfers outside the EEA

Enquiries are processed within the European Economic Area. If any processor is located outside the EEA, the transfer is made only with the safeguards provided in GDPR Art. 46, such as the European Commission Standard Contractual Clauses.

Contacting us

If you have questions or wish to exercise your rights, please contact us: