Privacy Policy
How IT D300 Service SIA collects, uses and protects personal data — and the rights you have over it under the General Data Protection Regulation.
1. Who we are
This Privacy Policy applies to this website and to enquiries sent to us through it. The data controller is:
- IT D300 Service SIA, a limited liability company registered in the Commercial Register of the Republic of Latvia
- Registration number 40203771659, registered on 19 August 2026
- Registered address: Raiņa iela 9B - 17, Rēzekne, LV-4601, Latvia
- Email: hello@itd300.lv · Phone: +371 XX XXX XXX
We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR. Data protection enquiries are handled directly by the board.
2. What data we collect
2.1 Data you give us
When you submit the contact form or email us, we receive:
- Your name
- Your email address
- Your phone number and company name, if you choose to provide them
- The service and budget range you select
- The content of your project description and any later correspondence
2.2 Data collected automatically
- Server logs. Our hosting provider records the IP address, date and time, requested page, referrer and browser user-agent string for each request. These logs exist for security and troubleshooting.
- Local storage. The site stores two small preference values in your browser: your animation preference and your cookie-notice choice. These never leave your device and are described in the Cookies Policy.
2.3 Data we do not collect
We do not run analytics, advertising, remarketing or social media tracking on this website. We do not build visitor profiles, and we do not buy or sell personal data.
3. Why we use it, and on what legal basis
- To answer your enquiry and prepare a quote — Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract.
- To perform a contract once a project is agreed, including project communication, delivery and handover — Article 6(1)(b) GDPR.
- To issue and keep accounting records, including invoices — Article 6(1)(c) GDPR, compliance with a legal obligation under Latvian accounting and tax law.
- To keep the website secure and operational, using server logs — Article 6(1)(f) GDPR, our legitimate interest in preventing abuse and diagnosing faults.
- To publish a client reference naming you or your company — Article 6(1)(a) GDPR, consent. We ask first, and you may withdraw consent at any time.
4. How long we keep it
- Enquiries that do not become projects: up to 12 months from the last message, then deleted.
- Project correspondence: for the duration of the project and up to 24 months afterwards, so we can answer follow-up questions about work we delivered.
- Accounting documents (invoices and related records): retained for the period required by Latvian law, which is currently 5 years, and up to 10 years where the law requires it for specific document types.
- Server logs: typically up to 6 months, depending on the hosting provider's configuration.
When a retention period ends, data is deleted or irreversibly anonymised.
5. Who we share it with
We do not sell, rent or trade personal data. We share it only where it is necessary to operate:
- Hosting and email providers, acting as processors under a data processing agreement, who store the website and our mailbox.
- Our accountant and, where applicable, the State Revenue Service (VID), for invoices and statutory reporting.
- Our bank, AS «SEB banka», for processing payments.
- Public authorities, where we are legally obliged to disclose information.
Processors act only on our documented instructions and may not use your data for their own purposes.
6. International transfers
We aim to keep data within the European Economic Area. Where a provider processes data outside the EEA — for example if you ask us to deploy your project on a non-EEA cloud region — the transfer is covered by an adequacy decision of the European Commission or by Standard Contractual Clauses, and we will tell you which applies.
This website loads fonts from Google Fonts. When a page loads, your browser requests the font files directly from Google servers, which means your IP address is processed by Google in the course of delivering those files. See the Cookies Policy for details and for how to avoid it.
7. Security
- All traffic to this website is encrypted with HTTPS/TLS.
- Form submissions are validated on the server and stored with restricted access.
- Access to mailboxes and hosting accounts is limited to people who need it, and protected with strong, unique credentials and two-factor authentication where the provider supports it.
- Data at rest is protected by the security measures of our hosting and email providers.
No system is perfectly secure. If a personal data breach is likely to result in a high risk to your rights and freedoms, we will notify you and the Data State Inspectorate as required by Articles 33 and 34 of the GDPR.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy of it.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, where we no longer have a lawful reason to keep it.
- Restriction of processing while a dispute about accuracy or lawfulness is resolved.
- Data portability — to receive data you provided in a structured, commonly used, machine-readable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time, where processing is based on consent. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these, email hello@itd300.lv. We respond within one month, as required by Article 12(3) of the GDPR. We may ask you to confirm your identity before disclosing data.
9. Children
Our services are directed at businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy when our services, providers or legal obligations change. The current version is always published on this page with the date it was last updated shown at the top. Material changes affecting existing clients will be communicated directly.
11. Contact
For any question about this policy or about how we handle your data:
- IT D300 Service SIA, Reg. No. 40203771659
- Raiņa iela 9B - 17, Rēzekne, LV-4601, Latvia
- Email: hello@itd300.lv
- Phone: +371 XX XXX XXX
Document 05 · Privacy Policy · Version 1.0 · Effective 23 August 2026
Related: Cookies Policy · Terms of Service