Privacy Policy

1. General Provisions

This privacy policy determines how SIA "SANART", Reg. No. 44103043748 (hereinafter – Company, we), processes personal data of natural persons in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and applicable laws of the Republic of Latvia.

The Company undertakes to ensure the security and confidentiality of personal data.

2. Controller

The controller of personal data is:

3. Types of Personal Data

The Company may process the following personal data:

• Name, surname
• Contact information (phone number, email address)
• Company name and requisites (if the client is a legal entity)
• Payment and billing information
• Content of communication (emails, phone conversations)
• Technical data (IP address, cookie data – if applicable)

4. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

• Conclusion and execution of contracts
• Customer service and communication
• Provision of accounting and financial records
• Compliance with regulatory requirements
• Ensuring the Company's legitimate interests (e.g., handling claims)

5. Legal Basis for Personal Data Processing

The Company processes personal data based on:

• Consent of the data subject
• Conclusion or execution of a contract
• Compliance with legal obligations
• Legitimate interests of the Company, respecting the fundamental rights of the data subject

6. Retention Period of Personal Data

Personal data is stored only as long as necessary to achieve the specific purpose, or as required by law (e.g., accounting documents – up to 10 years).

7. Transfer of Personal Data to Third Parties

The Company may transfer personal data to:

• State and municipal institutions in cases provided for by law
• Service providers (e.g., accounting, IT service providers) based on concluded data processing agreements

Personal data is not transferred outside the European Union unless necessary and an appropriate level of protection is ensured.

8. Security of Personal Data

The Company implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

9. Rights of the Data Subject

The data subject has the right to:

• Request access to their personal data
• Request correction or deletion of data
• Restrict data processing
• Object to data processing
• Request data portability
• Withdraw consent (if processing is based on consent)
• Submit a complaint to the Data State Inspectorate

10. Cookies

If cookies are used on the Company's website, they are used to ensure the functionality of the site and improve the user experience. Detailed information may be provided in a separate cookie policy.

11. Amendments to the Privacy Policy

The Company reserves the right to amend this privacy policy at any time. The current version is always available on the Company's website or upon request.

12. Contact Information for Questions Regarding Personal Data Processing

In case of questions regarding personal data processing, please contact: