Effective from: 29 October 2026
Information about the controller:
SIA "TAUPI"
Registration number: 41203029207
Legal address: Jūrmala, Vārnukroga ceļš 15, LV-2010, Latvia
E-mail address: info@sauleskolektors.lv
Website: www.sauleskolektors.lv
1. General provisions
This Personal Data Protection Policy (hereinafter – the Policy) describes how SIA "TAUPI" (hereinafter – the Controller) processes the personal data of visitors to its website and of other persons whose data may come into the Controller's possession in the course of its commercial activities.
The purpose of this Policy is to provide a clear and general overview of the personal data processing activities carried out by the Controller, the purposes, the legal bases and the rights of data subjects. Additional information on personal data processing may also be provided in other documents (for example, service agreements, terms of service provision and cookie usage rules).
The Controller undertakes to ensure the protection and security of personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, or GDPR) and other applicable legislation.
2. Purposes and categories of personal data processing
The Controller processes personal data only for specified, explicit and legitimate purposes, for example:
- to process orders, applications or requests;
- to provide goods or services;
- to communicate with customers and answer questions;
- to fulfil obligations set out in legislation;
- to protect the security of the website and services;
- where appropriate consent has been given — to send marketing notifications or to carry out other purposes specified in the consent.
Depending on the services used, the following categories of personal data may be processed: address, contact details, order data, communication history.
3. Legal basis for personal data processing
Personal data is processed on the basis of one or more of the legal bases set out in the GDPR:
- the data subject's consent;
- processing necessary for the conclusion or performance of a contract;
- compliance with a legal obligation;
- the legitimate interests of the Controller or a third party, where these do not override the interests or fundamental rights and freedoms of the data subject;
- for the operation of the energy calculator (Article 6(1)(b) or (f) of the GDPR);
- for responding to a contact form request and for further communication (Article 6(1)(b) or (f) of the GDPR).
4. Recipients of personal data
Personal data may be transferred to service providers that help ensure the operation of the website, order processing, payments, delivery, maintenance of information technology or other necessary processes. Data may also be disclosed to state or municipal authorities where required by legislation.
The Controller does not transfer personal data to other persons without a legal basis.
5. Transfer of personal data outside the European Economic Area
Personal data may be transferred outside the European Economic Area only where an applicable legal basis exists and the requirements set out in the GDPR are met, for example, on the basis of a European Commission adequacy decision or by using appropriate data protection safeguards.
6. Retention period of personal data
Personal data is retained only for as long as necessary to achieve the purpose of its processing, or for as long as required by legislation. After that, the data is deleted or anonymised, except where its further retention is necessary for the handling of legal claims or the fulfilment of other legal obligations.
The specific retention periods depend on the category of data and the purpose of processing.
7. Rights of the data subject
In accordance with applicable data protection legislation, a person may have the following rights:
- to receive information about the processing of their personal data;
- to access their personal data;
- to request the rectification of inaccurate data;
- in certain cases, to request the erasure of personal data;
- in certain cases, to restrict the processing of personal data;
- to object to the processing of personal data, where permitted by applicable law;
- to receive their data in a structured, commonly used and machine-readable format, where data portability rights apply;
- to withdraw consent, where data processing is based on consent. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal;
- to lodge a complaint with a supervisory authority.
To exercise your rights or to ask questions about the processing of personal data, please contact the Controller: info@sauleskolektors.lv
8. Lodging a complaint
If you have any questions, comments or complaints regarding the processing of your personal data, we invite you to first contact us by sending a written request to the e-mail address info@sauleskolektors.lv .
If you believe that the processing of personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. In Latvia, this is the Data State Inspectorate (Datu valsts inspekcija). Information is available on the website of the Data State Inspectorate
9. Security of personal data
The Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. However, data transmission over the internet and electronic data storage cannot be guaranteed to be completely secure.
10. Changes to the Policy
The Controller may periodically update this privacy policy without prior notice in order to reflect changes in services, data processing procedures or legislation. The current version is published on the website and takes effect from the moment of its publication.