Data controller
This Privacy Policy explains how SIA Quantelis Group («Quantelis Group», «we», «us», or «our») processes personal data in connection with our website and our business communications.
We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Latvian data protection legislation.
1. Scope
This policy applies to:
- Visitors to our website
- Prospective and existing clients who contact us via email, phone, or the contact form
- Business contacts who communicate with us in a professional capacity
It does not apply to third-party websites linked from our pages. We encourage you to review the privacy policies of any external sites you visit.
2. Personal data we collect
Contact form and direct inquiries
- Name and company name (if provided)
- Email address
- Message content (if provided)
- Consent record when you accept our Privacy Policy
Technical and usage data
- IP address, browser type, device type, and operating system
- Date and time of access, pages viewed, and referring URL
- Server and security logs necessary to operate and protect the website
We do not intentionally collect special categories of personal data (such as health data) through this website. Please do not submit sensitive information via the contact form unless necessary and with your explicit consent.
3. Purposes and legal bases
We process personal data for the following purposes:
- Responding to inquiries — to evaluate your request and communicate with you about our consulting services. Legal basis: consent (when given via the form) and legitimate interest in handling business communications (Art. 6(1)(a) and (f) GDPR).
- Providing services — if you become a client, to perform our contract and manage the business relationship. Legal basis: contract performance and legitimate interest (Art. 6(1)(b) and (f) GDPR).
- Website security and operation — to maintain, secure, and improve our website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Legal compliance — to meet accounting, tax, and regulatory obligations under Latvian and EU law. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Data retention
We retain personal data only for as long as necessary for the purposes described above:
- Contact form submissions: up to 24 months after the last meaningful communication, unless a business relationship continues.
- Client and contract data: for the duration of the contract and as required by Latvian accounting and tax law (generally 5 years for financial records, and up to 10 years where applicable).
- Server logs: typically up to 90 days, unless needed for security investigations.
When retention periods expire, data is deleted or anonymised unless further storage is required by law.
5. Recipients and international transfers
We do not sell your personal data. We may share data with:
- Hosting and infrastructure providers that operate under data processing agreements
- Email and communication tools used to respond to inquiries
- Professional advisers (e.g. accountants, lawyers) where necessary
- Public authorities when required by law
Where processors are located outside the European Economic Area, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, as required by GDPR.
6. Cookies and similar technologies
Our website is designed to minimise non-essential tracking. For details on cookies we use, please see our Cookie Policy. If analytics or marketing cookies are introduced in the future, this policy will be updated and, where required, consent will be obtained before non-essential cookies are placed.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, secure hosting, and secure communication channels where practicable.
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Your rights under GDPR
If you are located in the EU/EEA, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure («right to be forgotten») in certain circumstances
- Restrict or object to processing in certain circumstances
- Data portability where processing is based on consent or contract and carried out by automated means
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority
To exercise your rights, contact us at siaquantelisgr@gmail.com. We will respond within one month, as required by GDPR.
9. Changes to this policy
We may update this Privacy Policy from time to time. The «Last updated» date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.
10. Contact
For privacy-related questions or requests, contact:
SIA Quantelis Group
Čiekurkalna 1. šķērslīnija 6B – 20, Rīga, LV-1026, Latvia
Email: siaquantelisgr@gmail.com
Phone: +371 29 757 120
You may also use our contact form.