Privacy Policy
Effective October 16, 2026
1. Controller
The controller of personal data is SIA “SPA SERVISA CENTRS, ” registration No. 40103777941, legal address: Ulbrokas iela 34C, Riga, LV-1021 (hereinafter referred to as “SPA Servisa centrs,” “we”).
Contact information for data protection matters: email birojs@spa-serviss.lv, phone +371 26149144.
2. What personal data do we process?
- Order details: first name, last name, email address, phone number, shipping and billing addresses, items ordered, order total, and order history.
- Legal entity details: company name, registration number, VAT ID number, registered address, bank account information, as well as the contact person’s first name, last name, and contact information.
- Contact information: the information you provide in a contact form, via email, or over the phone.
- Withdrawal and Claim Information: the information you provide when withdrawing from the contract or filing a claim, including your bank account number for a refund.
- Technical data and cookies: IP address, browser type, time of visit, and cookies in accordance with our Cookie Policy.
3. Purposes of Processing and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Order processing, invoice preparation, and delivery of goods | Conclusion and Performance of a Contract (Article 6(1)(b) of the GDPR) |
| Accounting and Compliance with Tax Obligations | Compliance with legal obligations (Article 6(1)(c) of the GDPR) |
| Answers to questions, consultations, preparation of estimates | Processing prior to entering into a contract, based on your request and our legitimate interests (Article 6(1)(b) and (f) of the GDPR) |
| Handling of Cancellations, Claims, and Warranty Issues | Compliance with legal obligations (Article 6(1)(c) of the GDPR) |
| Website Operations and Security | Legitimate interests (Article 6(1)(f) of the GDPR) |
| Statistics and Marketing Cookies | Your consent (Article 6(1)(a) of the GDPR) |
4. Data Recipients
We disclose your data only to the extent necessary for the purposes mentioned above:
- delivery service providers (courier and parcel locker companies) – for the delivery of goods;
- to our bank —for receiving and making payments;
- to an accounting service provider —for accounting purposes;
- IT service providers (website hosting, email services) – to ensure the operation of the website and communication;
- to government agencies —if required by law.
All data processors are bound by contract and may process data only in accordance with our instructions.
5. Transfer of Data Outside the EU/EEA
Some IT service providers (such as email or analytics services) may process data outside the European Economic Area. In such cases, data protection is ensured by a European Commission decision on the adequacy of the level of protection (e.g., the EU-U.S. Privacy Shield) or by standard contractual clauses approved by the European Commission.
6. Data Retention Period
- Order and accounting data: the time limits specified in regulatory acts.
- Data on refusals and claims: until they are reviewed and the statute of limitations expires.
- Contact information: until the issue is resolved, but no longer than 1 year, unless a contract has been signed.
- Data processed with consent: until consent is withdrawn.
After the retention period expires, the data is deleted or anonymized.
7. Your Rights
You have the right to:
- access your personal data;
- request that data be corrected if it is inaccurate;
- request the erasure of data if it is no longer necessary or if its processing is unlawful;
- request a restriction on processing;
- object to processing based on legitimate interests;
- receive your data in a structured format (data portability);
- withdraw your consent at any time, without affecting the lawfulness of the processing carried out up to that point.
You can send your request to birojs@spa-serviss.lv. We will respond within one month. To protect your data, we may ask you to verify your identity.
8. Complaints
If you believe that the processing of your data violates your rights, please contact us first. You also have the right to file a complaint with the State Data Inspectorate (www.dvi.gov.lv).
9. Cookies
Our website uses cookies. Essential cookies ensure the proper functioning of the website and the shopping cart. Statistical and marketing cookies are used only with your consent, which you can change at any time by clicking the “Cookie Settings” link. Detailed information is available in our Cookie Policy.
10. Data Security
We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction, including encrypted connections (SSL) and access restrictions.
11. Changes to the Privacy Policy
We may update this privacy policy. The current version is always available on this page, and the effective date is indicated at the top of the page.