Privacy Policy

Controller

Personal data controller: Septiķis Rīga (septikisriga.lv).

For questions about data processing and to exercise your rights, contact us using the form on the contact page.

What data we process

In the request form: name, phone number, address, the service you chose, the preferred time and the description you write (for example, the system type, volume, access).
Technical data: IP address, browser and device information and the time of the request, which the hosting provider processes to keep the website running and secure.
Cookies, as described on the cookies page.

Please do not enter data in the form that is not needed to assess the work, especially health data or other sensitive data.

Why and on what basis

Purpose	Data	Legal basis
To respond to your request, contact you, give a price and agree on the work	Form data	Steps taken at your request before entering into a contract, GDPR Article 6(1)(b)
To send a confirmation message that your request has been received to the phone number you gave	Name, phone number	GDPR Article 6(1)(b)
To carry out the work and prepare the work documents	Form data, address, scope of work	Performance of a contract, GDPR Article 6(1)(b)
To meet accounting and tax requirements	Transaction data	Legal obligation, GDPR Article 6(1)(c)
Keeping records of requests, resolving disputes, website security	Form data and technical data	Legitimate interests, GDPR Article 6(1)(f)
Visitor statistics, if they are used	Cookie data	Consent, GDPR Article 6(1)(a)

Who we share data with

Service providers (partners who carry out the work you requested). They receive only the data needed to fulfil the request.
Processors we use to run the website and handle requests: providers of website hosting, form handling and automation, data storage and messaging services. They process the data only on our instructions and in accordance with Article 28 of the GDPR.
Public authorities, only where the law requires it.

We do not sell your data or pass it to third parties for marketing purposes.

Transfers outside the European Economic Area

Some service providers may process data outside the European Economic Area. In such cases, data is transferred only with the safeguards provided for in Chapter V of the GDPR, for example on the basis of a European Commission adequacy decision or standard contractual clauses.

How long we keep data

Requests that did not lead to any work are kept for no longer than 24 months after the last contact and are then deleted.
Data related to completed work is kept for as long as accounting and tax laws require, or until the limitation period for possible claims expires.
Technical data is kept for as long as needed for website security.

You can ask for your data to be deleted sooner if the law does not require us to keep it.

Your rights

to access your data and receive a copy of it;
to have inaccurate data corrected;
to ask for your data to be deleted;
to ask for processing to be restricted;
to object to processing based on legitimate interests;
to receive your data in a portable format;
to withdraw your consent at any time, if processing is based on consent.

We respond to requests without undue delay and within one month at the latest, as the GDPR requires. If you believe your data is being processed incorrectly, please contact us first; you also have the right to lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

Do you have to provide your data

Providing your data is voluntary, but without a phone number or other contact details we cannot respond to your request. We do not carry out automated decision-making or profiling that would have legal effects for you.

Changes

We may update this policy if the services we use or the law change. The current version is always available on this page. Version: 30 October 2026.