DATA PROTECTION

Privacy Policy

Our commitment to protecting your personal data in compliance with the General Data Protection Regulation (GDPR).

business 1. Identity of the Controller and Contact Details

The data controller for personal data processing on this website (https://www.nstsolutions.eu) is SIA "NST solutions":

We ensure the protection and privacy of your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and applicable laws of the Republic of Latvia.

database 2. Data Collected and Sources

We may process the following personal data about you:

  • Contact and Inquiry Data: Name, surname, email address, phone number, company name, as well as any other information you provide when filling out forms on our website (such as "Get an Offer").
  • Communication Data: Email correspondence and message content when you communicate with us electronically.
  • Technical and Access Data: IP address, browser type and version, operating system, visit date and time, visited pages, and visit duration.
  • Data Sources: Data is collected directly from you when you visit our website, complete request forms, or contact us.

gavel 3. Purposes and Legal Bases for Data Processing

a) Communication and Commercial Offer Preparation:

Purpose: To respond to your inquiries, process price requests, and provide customer support.

Legal Basis: GDPR Article 6(1)(b) (taking steps at the request of the data subject prior to entering into a contract) and Article 6(1)(f) (our legitimate interest in effective customer communication).

b) Service Provision and Contract Performance:

Purpose: Contract conclusion, execution, and maintaining commercial cooperation.

Legal Basis: GDPR Article 6(1)(b) (contract performance).

c) Website Functionality and Security:

Purpose: Ensuring technical operation, troubleshooting, and guaranteeing cybersecurity.

Legal Basis: GDPR Article 6(1)(f) (legitimate interest to ensure secure and stable website operation).

d) Analytics and Service Improvement:

Purpose: Analyzing website visit statistics and improving user experience.

Legal Basis: GDPR Article 6(1)(a) (your explicit consent).

schedule 4. Data Retention Period

We store your personal data only as long as necessary to fulfill the purposes of processing or as required by law:

  • Inquiries and Correspondence: Up to 3 years from the last contact (or until commercial cooperation ends) to ensure auditability and service continuity.
  • Contracts and Accounting Data: Retained for periods mandated by the Law on Accounting of the Republic of Latvia (typically 5 to 10 years).
  • Analytical and Technical Data: Retained according to cookie expiry terms or until consent withdrawal.

After expiry of the retention period, your data is securely deleted or anonymized.

share 5. Data Transfers to Third Parties and Outside EU/EEA

We do not sell or transfer your personal data to third parties without a lawful basis. Data may be transferred to:

  • Service Providers (Processors): IT maintenance, hosting providers, email and server infrastructure providers, and analytics tool maintainers (e.g. Google LLC).
  • State and Law Enforcement Authorities: Only in cases and procedures prescribed by law.

Transfers outside the EU/EEA: When US-based service providers are used (e.g. Google Analytics), data may be transferred to the US under the EU-US Data Privacy Framework or Standard Contractual Clauses (SCC).

cookie 6. Use of Cookies

Our website uses cookies (small text files stored on your device):

  • Strictly Necessary / Functional Cookies: Essential for core website operations, navigation, and security. Set automatically.
  • Analytical Cookies: Help us measure visitor volume and traffic sources to improve performance (via Google Analytics).

Managing Cookies: You can change or withdraw cookie consent at any time in your browser settings by deleting or blocking cookies.

verified_user 7. Data Subject Rights (Your Rights)

Under GDPR, you hold the following rights regarding your personal data:

1. Right of Access Request information on what data we process and receive a copy.
2. Right to Rectification Request correction of inaccurate or incomplete data.
3. Right to Erasure ("Right to be Forgotten") Request deletion of data where legitimate grounds exist.
4. Right to Restriction Request restriction of processing under specified conditions.
5. Right to Object Object to processing based on our legitimate interests.
6. Right to Data Portability Receive your data in a structured, commonly used, machine-readable format.

Consent Withdrawal: Where processing is based on consent, you may withdraw it anytime by contacting us: info@nstsolutions.eu.

Complaints: If you believe your data protection rights have been violated, you have the right to contact us or lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija) (Elijas Street 17, RÄ«ga, LV-1050, www.dvi.gov.lv, email: pasts@dvi.gov.lv).

lock 8. Security Measures

We implement appropriate technical and organizational measures (such as SSL/TLS encryption, firewalls, and strict access controls) to safeguard your personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access.

update 9. Changes to this Policy

We reserve the right to update this Privacy Policy at any time by publishing the current version on the website. Last updated: July 2026.