Who is responsible
SIA “Laboratorija AUCTORITAS” (registration No. LV40003631987) is the controller of the personal data described in this policy. Write or call us with any question about your data, or to use any of your rights.
- Controller
- SIA “Laboratorija AUCTORITAS”, Reg. No. LV40003631987
- Address
- Čiekurkalna 1. līnija 11, Riga, LV-1026, Latvia
- [email protected]
- Phone
- +371 26 418 855
What we collect and why
When you write to us
When you send the quote form, you give us your name, your email address, your phone number if you choose to add it, and your message. We also note the language of the page you sent it from. The same applies when you write to [email protected] or call us.
We use these details only to answer your request and to continue the conversation it starts, such as preparing a price quote or arranging samples. We do not use them for newsletters or advertising, and we do not sell them.
We need your name, email and message to reply; without them we cannot answer. The phone number is optional.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). If you write on behalf of a company, our legitimate interest in answering enquiries about our services (Article 6(1)(f) GDPR).
When you visit the website
While you browse, the website keeps a short-lived session so that the quote form works and is protected. The session stores your IP address, your browser’s identification string and a security token on our server, and is deleted once it expires, 120 minutes after your last page view.
The server that hosts the website may also keep technical logs of requests (IP address, time, page requested, browser) for security and troubleshooting. They are kept only as long as that purpose requires.
Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
If you allow analytics
If you allow it in the cookie notice, Google Analytics records which pages you view and for how long, how you reached the website, your device, browser, screen size and language, and an approximate location (country and city) derived from your IP address. Google Analytics does not store the IP address itself. It sets the cookies listed below to recognise repeat visits.
Google Analytics also records how you use the website: what you search for in the method finder, which buttons and links you use (such as the contact buttons, the phone number or another language), which methods you pick for a price request, and whether a quote request was sent. What you write in the form is never recorded: your name, email, phone number and message are not sent to Google. Anything in a search that looks like an email address or a phone number is removed before it is sent.
We look at this data only as statistics, to see which pages are read and to improve the website. Google’s advertising features and Google signals are switched off, and we do not combine the data with anything you send us.
Until you allow it, Google Analytics is not loaded at all and nothing is sent to Google. You can withdraw your consent at any time under “Cookie settings” at the bottom of every page; this does not affect what was collected before.
Legal basis: your consent (Article 6(1)(a) GDPR).
When you order testing
If your enquiry leads to an order, we process the details needed to carry out the contract, issue test reports and invoices, and keep accounting records as the law requires (Article 6(1)(b) and (c) GDPR).
We make no automated decisions about you and do no profiling.
Who receives your data
Only the laboratory staff who handle your request read it. We share data only with service providers who work for us, and only as far as their work requires:
- the company that hosts this website and its database;
- the email service provider that delivers the form to our mailbox and holds our email;
- Google Ireland Limited, which provides Google Analytics, only if you allow analytics;
- IT specialists who maintain the website, when maintenance requires it.
They process the data on our instructions under data processing agreements (Article 28 GDPR). We disclose data to public authorities, such as courts or the police, only when the law requires it.
Where your data is kept
Your data is stored and processed in the European Union or the European Economic Area. Should a provider ever need to process it outside the EU/EEA, we would allow it only with the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses.
If you allow analytics, Google may also process the analytics data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has found to give adequate protection (Article 45 GDPR).
We protect it with encrypted connections (HTTPS), with access limited to the people who need it, and with a form that is protected against forgery and automated spam.
How long we keep it
- Quote requests and other enquiries: up to 3 years after our last contact, so that we can answer follow-up questions and repeat requests; then they are deleted.
- If the enquiry leads to an order: contracts, test reports and accounting documents for the periods Latvian law requires.
- Session data and cookies: until 120 minutes after your last page view.
- Google Analytics data: up to months, then deleted by Google. Its cookies expire after 2 years, or are deleted when you decline analytics.
- Server logs: only as long as security and troubleshooting require.
Your rights
You may ask us at any time to:
- tell you whether we hold data about you and give you a copy (access);
- correct data that is wrong or incomplete (rectification);
- delete your data (erasure), unless the law requires us to keep it;
- limit how we use it while a question about it is being settled (restriction);
- give you the data you sent us in a common machine-readable format (portability);
- stop using it on the basis of our legitimate interest (objection).
You can withdraw your consent to analytics at any time, without giving a reason, under “Cookie settings” at the bottom of every page.
Write to [email protected] or call +371 26 418 855. We answer within one month and free of charge. We may ask you to confirm your identity before we disclose or change any data.
Complaints
If you believe we handle your data unlawfully, please tell us first so that we can put it right. You also have the right to complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, or to the data protection authority of the EU country where you live or work.
Changes to this policy
We update this policy when the website or the way we handle data changes. The date at the top shows when it last changed.
The policy is published in every language of this website. If the language versions differ, the Latvian version prevails.