PRIVACY POLICY
Our Privacy Policy provides detailed information on how we collect, use, store and transfer your personal data. It covers the purposes and legal basis for data processing, the types of data collected, the duration of storage, the recipients of the data, our obligations, your rights and the procedure for exercising them. If after reading this Privacy Policy you need more information or have any questions, please contact us: dvktimber.lv
DATA CONTROLLER AND CONTACT INFORMATION
SIA DVK solutions, registration number: 40203024022, legal address: Duntes iela 28 – 206, Riga, LV-1005, (hereinafter referred to as “we”, “our” or “company”) is the personal data controller.
When processing personal data, we comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, commonly known as the General Data Protection Regulation (GDPR). In addition, we comply with other applicable personal data protection legislation and the instructions set out in this privacy policy.
For questions about the protection of personal data in our company, as well as to submit complaints or requests, please contact us: karlis@dvksolutions.lv
The Privacy Policy is regularly updated to reflect the necessary changes.
LEGAL BASIS FOR PROCESSING PERSONAL DATA
We may process your personal data in accordance with the following legal bases:
| Description | Regulatory act | |
| Consent | We will process your personal data if you have explicitly given your consent for one or more specific purposes. Your consent will be obtained before any processing is carried out, and you have the right to withdraw your consent at any time. | GDPR Article 6(1)(a) |
| Conclusion and performance of a contract | We may need to process your personal data if it is necessary for the conclusion and performance of a contract between the data subject and the company. This includes the performance of our contractual obligations and any necessary steps prior to entering into a contract. | GDPR Article 6(1)(b) |
| Legitimate interests | In some cases, we may process your personal data based on our legitimate interests, provided that such processing does not conflict with your rights and interests. This may include the pursuit of legitimate business interests, such as improving our services, protecting our rights or performing necessary internal administrative tasks. | GDPR Article 6(1)(f) |
We ensure that your personal data is processed in accordance with applicable data protection laws and regulations. We only process personal data that is necessary and relevant for the stated purposes. In addition, we implement appropriate security measures to protect your personal data against unauthorized access, loss or alteration.
PERSONAL DATA WE COLLECT
In order to provide our services, we collect certain personal data from buyers who are natural persons and legal entities:
If the buyer is a natural person, we may process the following data
| Basic data | Name, surname |
| Identification data | Personal identification number, date of birth, country of residence |
| Contact information | Email, telephone, address |
| Authentication data | Username, password |
If the buyer is a legal person, we may process the following data
| Basic data about the company and representative | Name, surname and company name, basis of representation |
| Identification data | Personal identification number, date of birth, country of residence, registration number |
| Contact information | Email, telephone, address |
| Authentication data | Username, password |
We collect only the necessary personal data that is relevant and essential to fulfill the purposes for which it is collected.
DATA SOURCES FROM WHICH WE COLLECT DATA
We collect information from a variety of sources to provide and improve our services. Information sources may include:
| Directly from you | Information that you provide directly when interacting with our platform, such as by registering as a party to a contract, information collected when you contact us as a business or when you seek support, including customer service interactions, feedback and requests. |
| Data processing in the e-store | Information that is generated when you use our services, including transaction data, logs and other related data. Information that is obtained through automated technologies, including cookies and similar tracking tools, when you access and browse our website or use our services. |
| Received from third parties | Information obtained from third-party sources, where permitted by law, such as third-party services, publicly available sources or social media platforms. |
DATA STORAGE AND PERIODS
We retain your personal data for as long as necessary to fulfill the purposes set out in this Privacy Policy. The specific retention periods may vary depending on the nature of the data and the purposes for which it was collected. When the data is no longer necessary for their intended purpose, we will take steps to securely and permanently delete them.
We have set specific retention periods for different categories of personal data based on the purpose for which the data was collected, as well as any legal or regulatory requirements.
Our retention periods are as follows:
| Description | Retention period |
| We do not retain personal data related to incomplete registrations. However, as a company, we have access to browser-related records containing IP addresses. | This data is retained for 7 days and then securely and permanently deleted. |
| Once you start using our services, we retain your personal data for as long as you continue to use the services and your consent is valid. This allows us to provide ongoing support, ensure the proper functioning of the services, and maintain accurate records of your use of the services. We may retain your data for a period of time after you have ceased using the services to provide evidence in any disputes with you (legitimate interests). | The length of such period will correspond to the statutory limitation period, which may be up to 10 years. |
| If an individual decides to withdraw their consent to receive marketing emails, we will immediately delete their data related to such communication. This means that their email address and any related information will be securely removed from our marketing lists, ensuring that they will not be sent marketing emails in the future. We value individuals’ privacy and control over their data and will fully respect their withdrawal of consent in relation to marketing communications. | After the withdrawal of consent, we do not retain any data that would allow us to send further marketing emails. |
DATA SUBJECT RIGHTS
We process your data, providing you with the opportunity to ask questions about the nature and scope of our processing. In some cases, you may request a reduction in the scope of processing, in accordance with applicable regulatory acts.
Your rights include the following, in accordance with applicable regulatory acts:
| Rights | Description |
| Access to your personal data | You have the right to request access to, update or delete the information we hold about you. Where possible, you can directly access, update or request deletion of your personal data through your account settings. If you need assistance with these steps, please contact us. This allows you to obtain a copy of the personal data we hold about you. |
| Rectify your personal data | If the personal data we hold about you is incomplete or inaccurate, you have the right to request its rectification or to have it corrected yourself on the website. |
| Object to processing | You have the right to object to the processing of your personal data where we base the processing on legitimate interest as a legal basis and there is something specific to your situation that makes you object to the processing. You also have the right to object to the processing of your personal data for direct marketing purposes. |
| Right to be forgotten or erased | If there is no valid reason for us to continue processing your personal data, you may request its deletion or removal. |
| Transfer your personal data | Upon your request, we will provide your personal data in a structured, commonly used, machine-readable format to you or to a third party of your choice. Please note that this right only applies to automated information that you initially provided to us with your consent to use it, or where we used the information to perform a contract with you. |
| Withdraw your consent | You have the right to withdraw your consent to our use of your personal data. However, please note that withdrawing your consent may limit your access to certain features of the service we provide. |
To exercise your rights of access, rectification, erasure and objection, please contact us at: karlis@dvksolutions.lv. Please note that we may ask you to verify your identity before responding to such requests. We will do our best to respond to your requests as soon as possible.
In addition, if you are located in the European Economic Area (EEA), you have the right to lodge a complaint with a Data Protection Authority regarding our collection and use of your personal data. For more information, please contact your local data protection authority in the EU/EEA.
| We have the right not to comply with your request: |
| If it is not clearly formulated; |
| If we cannot identify you; |
| If we have already responded to such a request; |
| If the amount of information requested is disproportionate; |
| If the request is unfounded; |
| If regulatory acts require us not to provide you with such information or to appropriately retain certain of your data. |
THIRD-PARTY SERVICES WE USE
We use third-party services to improve and support our platform. By using our services, you agree that your data may be processed. These services are subject to their privacy policies. While we choose reputable service providers, we recommend that you review their policies to fully understand how they work. We do not control the policies of these services, but we prioritize privacy and security in our choices.
We use third-party services, such as:
| Service provider name | Purpose | Privacy Policy |
| Google Sign-In | Allows buyers to register and log in (authenticate) using a Google account. Data sent: email address. | https://policies.google.com/privacy?hl=en-US |
| Montonio | Payments for integration; transfers are made using the API. Data sent: email, product name, amount. | https://www.montonio.com/legal/privacy-policy |
| Google Analytics | Records any interaction with the web application, allows you to analyze key statistics such as user acquisition, engagement, bounce rate, etc. Data sent: approximate geographical location, device information, browser information, general user information, operating system, URLs (visited, where they came from, where they came from), event data (button clicks, video views, file downloads) | https://support.google.com/analytics/answer/7318509?hl=en |
SECURITY MEASURES FOR DATA PROTECTION
We are committed to protecting your data using strong and constantly evolving security measures. Our commitment is focused on protecting your information from unauthorized access, accidental loss, disclosure or destruction.
To achieve this, we use modern technology and adhere to strict technical and organizational requirements designed to strengthen the security of your data.
| Access control and confidentiality | To protect your data, we have developed strict policies, procedures and access controls to ensure that only authorized personnel have access. Our team regularly trains in data protection practices and is bound by strict confidentiality obligations. |
| Data minimization and retention | In accordance with the principle of data minimization, we collect, process and retain only the personal data that is minimally necessary for the intended purpose. We regularly review our data retention practices to ensure that data is not retained for longer than is necessary. |
| Third-party service providers | We adhere to strict data protection standards when working with third-party service providers. Our selection process includes a thorough assessment to ensure that our partners have implemented appropriate security measures to guarantee the protection of your data. |
| International data transfers | If data is transferred outside your jurisdiction, we take steps to ensure that appropriate security measures are in place. This may include the use of data transfer agreements, standard contractual clauses or by referring to recognized data protection mechanisms. |
| Compliance with data protection laws | We carefully comply with applicable data protection laws and regulations. In keeping with legal requirements, we adapt our practices to ensure continued compliance and the highest level of data protection. |
These measures collectively reflect our unwavering commitment to maintaining the confidentiality, security and lawful processing of your data.
TRANSFER OF YOUR DATA
By using our services, you acknowledge and agree that your personal data may be transferred to, stored and processed in locations where we or our service providers operate. We ensure that any such transfer of personal data is carried out in accordance with applicable data protection laws. In addition, we take steps to protect your privacy and security, in accordance with our Privacy Policy.
CONTACTING US AND THE DATA INSPECTION AGENCY
If you have any questions about how we use your personal data, you can file a complaint by contacting us by email: karlis@dvksolutions.lv
If you believe that we have improperly processed your data, you have the right to file a complaint with the data protection supervisory authority regarding the personal data processing activities carried out by our organization. Relevant authority: State Data Inspectorate, address: Elijas iela 17, Riga, LV-1050, Latvia. Contact by email: pasts@dvi.gov.lv or by phone: +371 67223131.
We take all complaints into account and fully cooperate with the supervisory authority to resolve any issues related to the processing of your personal data.
Contact us:
SIA DVK solutions
Address: Duntes iela 28 – 206, Riga, LV-1005
Phone number: +371 22403161
E-mail address: karlis@dvksolutions.lv
Last updated: September 10, 2025.
English 
Latvian