Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Illuminator Latvia SIA (registration No. 40203380111, VAT No. LV40203380111), registered office at Draudzības iela 6-30, Kalnciems, LV-3016, Latvia, trading as Windows Latvia. For any data protection enquiries, contact us at [email protected] or +371 27 063 302, Monday to Friday 8:00-18:00.

We have not appointed a Data Protection Officer as we are a small company below the thresholds set by GDPR Article 37. All data protection matters are handled directly by company management at the contact address above.

2. What Personal Data We Collect

We collect and process the following categories of personal data:

• Contact information: name, email, phone number, postal address, provided through our contact and quote request forms.
• Project details: window dimensions, property type, preferred materials, and technical specifications you share for quotation purposes.
• Communication records: content of emails, messages, and phone conversations related to your enquiry or order.
• Technical data: IP address, browser type, operating system, pages visited, collected automatically through cookies and server logs.
• Cookie data: information collected via cookies as described in our Cookie Policy.

3. Purposes and Legal Bases for Processing

We process your data for the following purposes under Article 6 of the GDPR:

• Responding to enquiries and providing quotations: performance of pre-contractual measures (Art. 6(1)(b)).
• Fulfilling orders including manufacturing, delivery, and installation: performance of contract (Art. 6(1)(b)).
• Sending product information: legitimate interest (Art. 6(1)(f)). You may opt out at any time.
• Improving our website: legitimate interest (Art. 6(1)(f)).
• Tax and accounting compliance: legal obligation (Art. 6(1)(c)).
• Analytics and performance monitoring: consent (Art. 6(1)(a)), obtained via cookie consent banner.

4. How We Store and Protect Your Data

Your data is stored on secure servers located within the European Union. We implement SSL/TLS encryption, access controls, regular security audits, and the principle of data minimisation. Only authorised personnel have access to personal data, and we review our security measures on an ongoing basis.

5. Retention Periods

We keep personal data only for as long as necessary for the purposes described above. Specific retention periods are:

• Contact form submissions with no further response: 12 months.
• Quote requests that do not result in a contract: 3 years.
• Quote requests that result in a contract: 10 years after project completion.
• Customer invoices and accounting records: 10 years (Latvian Accounting Law requirement).
• Email correspondence with prospective customers: 2 years.
• Email correspondence with contracted customers: 10 years after project completion.

Once the applicable retention period expires, we delete or anonymise the data securely.

6. Third-Party Service Providers

We may share limited personal data with the following categories of processors, all of whom are contractually bound by GDPR-compliant Data Processing Agreements:

• Website hosting: servers located in the European Union.
• Cloudflare, Inc. (United States) for content delivery and security protection. Cloudflare processes data in its European data centres where possible. International transfers are governed by the EU Standard Contractual Clauses (SCC) approved by the European Commission.
• Google Analytics for anonymised website usage statistics (subject to your cookie consent).
• Email and communication tools used to respond to your enquiries.
• Logistics providers within the EU for delivering window orders to your address.

We do not sell or rent personal data to any third party, and we do not share it for independent marketing purposes.

7. International Data Transfers

Most personal data is processed within the European Economic Area (EEA). Where processing involves service providers outside the EEA (for example Cloudflare, Inc., headquartered in the United States), we ensure an adequate level of protection through the European Commission's Standard Contractual Clauses and additional technical safeguards such as encryption.

8. Photographs of Completed Projects

Photographs of installed windows and completed projects displayed on our Projects pages are published with the client's consent given during the construction contract. If you wish to have your project removed from our website, please contact us at [email protected] and we will remove the content promptly.

9. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Article 22 of the GDPR. All quotations, order confirmations, and customer communications are reviewed by a human member of our team.

10. Your Rights Under the GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure, also known as the right to be forgotten (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time without affecting prior lawful processing (Art. 7(3))

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12(3) of the GDPR.

11. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, DVI), Elijas iela 17, Riga, LV-1050, Latvia. Website: www.dvi.gov.lv. You may also contact a supervisory authority in your EU country of residence.

12. Changes to This Privacy Policy

We may update this policy to reflect changes in our processing practices, services, or applicable law. Material changes will be announced on this page with an updated revision date. We encourage you to review this page regularly.

13. Contact Us

For questions about this Privacy Policy or your personal data, contact us:

• Email: [email protected]
• Phone: +371 27 063 302 (Monday to Friday 8:00-18:00)
• Address: Draudzības iela 6-30, Kalnciems, LV-3016, Latvia

You may also reach us through our contact page.