Privacy policy

Last updated: 12 October 2026. This is a translation; the Latvian version prevails.

This privacy policy explains how the website drosamaja.lv processes your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and the laws of the Republic of Latvia.

1. Identity and contact details of the controller

• Controller: sole trader Ingus Grišāns (brand “Droša Māja”)
• Address: Zemgales iela 7, Jēkabpils, Latvia
• E-mail: info@drosamaja.lv
• Phone: +371 26973834

2. What data we process and why

• Communication. When you call or e-mail us, we receive your name, phone number, e-mail address and the content of your message. We use them to answer your question and prepare an offer. Legal basis: your request and steps prior to entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to requests (point (f)).
• Provision of services. If we conclude a contract for the installation and maintenance of a video surveillance or alarm system, we process the property address, contact details and data needed to carry out the work. Legal basis: performance of a contract (point (b)) and compliance with legal obligations, including accounting requirements (point (c)).
• Website visit statistics. With your consent we use Google Analytics to analyse visits anonymously and improve the website. Legal basis: consent (point (a)), which you can withdraw at any time.
• Technical data. Server logs briefly record your IP address and browser data for the security and operation of the website. Legal basis: legitimate interest (point (f)).

3. Cookies

For information about cookies, see our Cookie policy. You can change your choice at any time using the cookie settings on the website.

4. Who we share data with

Data may be shared only with those needed to provide our services: the web hosting and e-mail service provider, Google (Google Analytics, if you have consented to statistics cookies) and public authorities where required by law. We do not sell your data. If data is transferred outside the EU/EEA (for example, to Google), this is done on the basis of the mechanisms provided for in Chapter V of the GDPR.

5. How long we keep data

• Communication messages: 12 months after the last contact.
• Contract and billing data: 5 years or longer if required by law.
• Google Analytics data: up to 14 months.

6. Your rights

You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time. To exercise these rights, write to info@drosamaja.lv. If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).

7. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.