Privacy Policy

1. Who we are

SIA "Qadrats", registration number 40203493507, registered at Kugu street 28-5, Riga, LV-1048, Latvia, is the controller of the personal data described in this policy. You can reach us about any privacy matter at info@qadrats.com.

We process personal data in accordance with Regulation (EU) 2016/679 (the "GDPR") and the Latvian Personal Data Processing Law.

2. What we collect and why

Data	Purpose	Legal basis	Retention
Name, surname, email, phone, industry, message (enquiry form)	To answer your enquiry and prepare a proposal	Steps taken at your request prior to a contract (Art. 6(1)(b)) and your consent (Art. 6(1)(a))	24 months from last contact
IP address and basic request metadata	Spam prevention, rate limiting and security of the Website	Our legitimate interest in operating a secure service (Art. 6(1)(f))	90 days
Correspondence with us	Managing our relationship and keeping a record of what was agreed	Contract performance (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f))	Duration of the engagement + 5 years
Billing and accounting records	Complying with Latvian accounting and tax obligations	Legal obligation (Art. 6(1)(c))	5 years, per the Accounting Law
Consent records from our cookie tool	Demonstrating that consent was validly obtained	Legal obligation (Art. 6(1)(c))	12 months

We do not carry out automated decision-making producing legal effects, and we do not profile you. We do not knowingly collect data from children.

3. Providing your data

Providing the data in our enquiry form is voluntary, but it is necessary for us to reply to you. If you do not provide it, we cannot respond to your enquiry.

4. Cookies

We use strictly necessary cookies to make the Website work — for example, to remember which cookie categories you have accepted. These do not require your consent.

Any analytics, preference or marketing cookies are set only after you give consent through our consent banner. You can change or withdraw your choice at any time through the "Cookie settings" link in the footer. Where a cookie declaration is published on this page, it lists each cookie, its purpose and its lifetime.

5. Who we share data with

We share personal data only with processors acting on our documented instructions, each bound by a data processing agreement under Article 28 of the GDPR:

• our hosting and infrastructure provider;
• our email delivery provider, for enquiry notifications and confirmations;
• our consent management provider;
• our CRM and accounting providers, where an engagement follows.

We may also disclose data where required by law, or to establish, exercise or defend legal claims. We never sell personal data.

6. International transfers

We host and process data within the European Economic Area wherever possible. Where a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses together with supplementary measures where required. You may request a copy of the relevant safeguards by writing to info@qadrats.com.

7. Security

We apply technical and organisational measures appropriate to the risk, including TLS encryption in transit, encryption at rest, strong authentication and role-based access for administrative systems, least-privilege access rules, rate limiting, and regular review of these measures. Access to enquiry data is limited to named staff who need it in order to reply to you.

8. Your rights

Under the GDPR you have the right to:

• access your personal data and receive a copy of it;
• have inaccurate data corrected and incomplete data completed;
• have your data erased where the conditions of Article 17 are met;
• restrict processing in the cases set out in Article 18;
• object to processing based on our legitimate interests, on grounds relating to your particular situation;
• receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email info@qadrats.com. We reply within one month, and may extend that period by two further months for complex requests, telling you why. We may need to verify your identity first.

9. Complaints

If you believe we have processed your data unlawfully, we would like the chance to put it right — please contact us first. You also have the right to lodge a complaint with the Latvian supervisory authority:

Datu valsts inspekcija (Data State Inspectorate)
Elijas iela 17, Riga, LV-1050, Latvia
www.dvi.gov.lv · pasts@dvi.gov.lv

If you are resident in another EU country, you may complain to your local supervisory authority instead.

10. Changes to this policy

We may update this policy to reflect changes in our processing or in the law. The version published on this page is always the current one, and the date at the top shows when it last changed. Material changes will be brought to your attention where we have a way to reach you.

11. Contact

Questions about this policy or about how we handle your data: info@qadrats.com, or by post to SIA "Qadrats", Kugu street 28-5, Riga, LV-1048, Latvia.