Privacy Policy

1. Data controller

The controller of personal data processed through this website is Sun Metal SIA, registration No. 40203791797, registered address: Mazā Smilšu 8, Rīga, LV-1050, Latvia. You may contact us regarding data protection matters using the contact form on this website or by post at the registered address.

2. Personal data we process

When you submit an inquiry through the contact form, we process the data you provide: full name, company name, email address, country, subject and message content, together with the date and time of submission and your consent confirmation.

When you browse the website, technical data necessary for its operation (such as IP address and browser information) may be processed by our hosting provider in server logs.

3. Purposes and legal bases

Responding to your inquiry and taking steps prior to entering into a contract — Article 6(1)(b) GDPR, and your consent — Article 6(1)(a) GDPR.

Ensuring the security and operation of the website — our legitimate interest, Article 6(1)(f) GDPR.

Complying with legal obligations, for example accounting or tax requirements where an inquiry leads to a commercial relationship — Article 6(1)(c) GDPR.

4. Recipients

Personal data may be disclosed to service providers acting as processors on our behalf, such as website hosting and database providers, under data processing agreements. We do not sell personal data. Data may be disclosed to public authorities where required by law.

5. International transfers

Where processors are located outside the European Economic Area, transfers are carried out on the basis of an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Retention

Inquiries are retained for up to 24 months after the last communication, unless a longer period is required to establish or defend legal claims or under applicable law. Server logs are retained for a limited period in accordance with the hosting provider's practices.

7. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and restricted access to stored inquiries.

9. Changes

We may update this Privacy Policy from time to time. The current version is always available on this page.