1. Introduction
SIA "CODART", reg. no. 40103285944, address: Kalna iela 58, Rīga, LV-1003 (hereinafter referred to as the "Controller"), processes personal data obtained from the data subject – the website user (hereinafter referred to as the "User") on the internet website www.codeart.lv (hereinafter referred to as the "Website").
The Controller cares for the User's privacy and the protection of personal data, and complies with the User's right to the lawfulness of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and other applicable laws and regulations in the field of privacy and data processing.
This Privacy Policy applies to the processing of personal data regardless of the form in which the User provides personal data (on the Website, via email, or by telephone).
2. Controller's Identity and Contact Information
The Controller is SIA "CODART", reg. no. 40103285944, address: Kalna iela 58, Rīga, LV-1003. Website: www.codeart.lv, email: info@codeart.lv, phone: +371 26303796.
3. Contact Information of the Data Protection Officer
Email: deniss@codeart.lv, phone: +371 26303796.
4. Purposes of Processing and Legal Basis
If the User submits their data to the Controller using the Website's contact form, email, or telephone, the Controller processes this information for the preparation and conclusion of a service agreement, customer service, and communication.
The legal basis for this processing is Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract).
To improve the operation of the Website and analyze visitor behavior, the Controller uses Google Analytics and Microsoft Clarity tools. These tools process data (including IP addresses and browser information) for Website analytics purposes. The legal basis for this processing is the User's consent (Article 6(1)(a) of the GDPR).
5. Categories of Personal Data
- Communication data: name, surname, company name, email address, telephone number, content of the message.
- Analytics data: IP address, device information, browser type, data on Website usage (visited pages, time spent, clicks).
6. Categories of Personal Data Recipients
Data is disclosed to the Controller's employees for the performance of their direct duties.
To ensure Website analytics, the Controller uses external service providers – Google LLC (Google Analytics) and Microsoft Corporation (Microsoft Clarity), who act as data processors and adhere to strict data protection standards.
7. Categories of Data Subjects
Categories of data subjects – current, former, and potential clients of the Controller, as well as visitors to the Website.
8. Transfer of Data Outside Latvia
Contact form and communication data are not transferred outside the European Union (EU) or the European Economic Area (EEA).
Website analytics data (Google Analytics, Microsoft Clarity) may be transferred for processing to the USA. Such data transfer takes place in accordance with appropriate security guarantees, such as the Standard Contractual Clauses (SCC) approved by the European Commission and the EU-US Data Privacy Framework.
9. Data Retention Period
Communication data is deleted no later than three months after the original communication purpose no longer applies (or no contract is concluded), unless the law requires the data to be retained for a longer period (e.g., for accounting purposes or litigation). Data collected by analytics tools is stored in accordance with the privacy policies and established deletion periods of the respective third parties (Google, Microsoft).
10. Data Subject's Access to Personal Data
The User has the right to request information about the processing of their data, request data rectification, erasure, or restriction of processing. The request can be submitted in writing to the Controller's legal address or electronically, signed with a secure electronic signature, to the email info@codeart.lv. The Controller shall provide a response within the timeframe specified by regulatory enactments, within one month.
11. Right to Lodge a Complaint with a Supervisory Authority
The data subject has the right to lodge a complaint with the Data State Inspectorate, address: Elijas iela 17, Rīga, LV-1050; email: pasts@dvi.gov.lv.