Data protections
Privacy policy
PRIVACY POLICY
Last updated: October 6, 2026
This Privacy Policy (hereinafter – the Privacy Policy) sets out how SIA KRAG projekti, registration No. 40203397404, registered address: Minsteres iela 20, Baltezers, Garkalnes pag., Ropažu nov., Latvia (hereinafter – KRAG projekti, Company, we), processes personal data when using the website krag.lv (hereinafter – the Website), as well as when receiving and processing requests submitted through the Website.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, as well as other applicable laws and regulations of the Republic of Latvia and the European Union concerning personal data protection.
1. Data Controller
The controller of personal data processing is:
SIA KRAG projekti
Registration No.: 40203397404
Registered address: Minsteres iela 20, Baltezers, Garkalnes pag., Ropažu nov., Latvia
Phone: +371 22308884
Email: info@krag.lv
Questions regarding the processing of personal data or the exercise of your data protection rights may be sent to info@krag.lv or by post to the registered address indicated above.
2. What Personal Data Is Processed
Depending on how you use the Website or communicate with us, we may process the following categories of personal data:
first and last name;
company name;
email address;
telephone number;
project/site address;
content of your request or message;
information contained in files uploaded by you;
information about the service requested;
technical data concerning your use of the Website, such as IP address, browser type, device type, and visit information, insofar as such information is collected through technical and analytical cookies.
Please do not submit sensitive personal data or other data that is not necessary for processing your request.
3. Purposes and Legal Bases for Processing Personal Data
3.1. Communication and Preparation of Quotations
If you use the Website’s contact or quotation request form, we process the personal data you provide in order to:
receive and process your request;
communicate with you;
clarify the required service;
prepare a quotation;
where necessary, arrange a site inspection, measurement, or other activity related to your request.
The legal basis for such processing is the necessity to take steps at the request of the data subject prior to entering into a contract or, where applicable, the performance of a contract in accordance with Article 6(1)(b) of the Regulation.
The Website’s quotation request form requests your name, company, email, telephone number, project address, comments, and, optionally, files related to the project so that the Company can prepare an appropriate quotation.
3.2. Entering Into and Performing Contracts
If a contract is entered into with you or with the company you represent, personal data may be processed in order to:
prepare and administer the contract;
provide the agreed services;
communicate regarding project execution;
prepare invoices and other accounting documents;
fulfil obligations arising from the contract.
The legal basis for such processing is Article 6(1)(b) of the Regulation and, where applicable, Article 6(1)(c).
3.3. Compliance With Legal Requirements
Personal data may be processed to fulfil legal obligations applicable to the Company, including accounting, tax, legal document retention, and other regulatory requirements.
The legal basis for such processing is Article 6(1)(c) of the Regulation.
3.4. Protection of the Company’s Legitimate Interests
Personal data may be processed to protect and pursue the Company’s legitimate interests, including:
protecting the Company’s rights and legal interests;
preventing fraudulent or abusive activities;
ensuring the security of the Website and information systems;
demonstrating the existence and content of communications and transactions;
preparing and defending legal claims.
The legal basis for such processing is Article 6(1)(f) of the Regulation.
Before processing personal data on the basis of legitimate interests, we assess whether our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
3.5. Website Operation and Statistics
We may use technical data and, where you have provided the necessary consent, analytical cookies in order to:
ensure the operation of the Website;
improve the functionality and usability of the Website;
analyse Website visits and user behaviour;
identify technical problems.
The use of analytical, statistical, and marketing cookies is carried out in accordance with your choices in the cookie consent tool where consent is required for the relevant cookies.
4. Sources of Personal Data
We primarily receive personal data directly from you, for example when you:
complete a contact or quotation request form;
send us an email;
contact us by telephone;
enter into a contract with the Company;
provide documents or other materials related to a project.
In certain cases, personal data may also be obtained from the company you represent or from publicly available sources where necessary for the provision of a particular service or execution of a transaction.
5. Recipients of Personal Data
To ensure the operation of the Website and the provision of the Company’s services, personal data may, where necessary, be transferred to the following categories of recipients:
Website hosting and technical maintenance service providers;
email and communication service providers;
IT and software service providers;
accounting and legal service providers;
courier, transport, or other service providers where necessary for the performance of a specific contract;
state and municipal authorities where required by law;
law enforcement authorities, courts, or other competent institutions where provided for or required by law.
We do not transfer personal data to third parties unless there is a legal basis for doing so.
6. Transfer of Personal Data Outside the European Economic Area
If the use of a particular service provider involves the transfer of personal data outside the European Economic Area, such transfer will only take place where there is an appropriate legal basis and safeguards in accordance with the Regulation, such as a European Commission adequacy decision or appropriate safeguards provided for under Article 46 of the Regulation.
7. Retention Periods for Personal Data
We retain personal data only for as long as necessary for the relevant processing purpose or for as long as required by applicable laws and regulations.
For example:
quotation request and communication data are retained for as long as necessary to process the request and conduct further communication, as well as to protect against potential legal claims;
contract-related data are retained for the duration of the contractual relationship and for the retention periods required by applicable laws and regulations;
accounting and tax documents are retained for the periods required by applicable laws and regulations;
cookie data are retained in accordance with the lifetime of the relevant cookie and your choices.
When personal data is no longer necessary and there is no other legal basis for retaining it, the data is deleted or anonymised.
8. Data Subject Rights
Under applicable personal data protection laws and regulations, you have the right to:
receive information about whether we process your personal data;
request access to your personal data;
request the correction of inaccurate or incomplete personal data;
under certain circumstances, request the deletion of your personal data;
under certain circumstances, request the restriction of processing of your personal data;
under certain circumstances, object to the processing of your personal data;
where processing is based on consent, withdraw your consent at any time;
where applicable, receive your personal data in a structured, commonly used, and machine-readable format and request its transfer to another controller;
not be subject to a decision based solely on automated processing, including profiling, where the Regulation provides for such a right in the relevant circumstances.
The exercise of these rights is not absolute, and in certain circumstances the Company may have the right or obligation to continue processing personal data, for example to comply with legal requirements or protect its legal interests.
To exercise your rights, please send a request to:
Email: info@krag.lv
Address: SIA KRAG projekti, Minsteres iela 20, Baltezers, Garkalnes pag., Ropažu nov., Latvia
To protect personal data against unauthorised disclosure, we may carry out the necessary identity verification before fulfilling a request.
9. Right to Lodge a Complaint With the Data State Inspectorate
If you believe that the processing of your personal data does not comply with applicable personal data protection laws and regulations, you have the right to lodge a complaint with the supervisory authority.
The supervisory authority for personal data protection in Latvia is:
Data State Inspectorate
Elijas iela 17, Riga, LV-1050
Website: www.dvi.gov.lv
Before lodging a complaint with the Data State Inspectorate, we encourage you, where possible, to contact us first so that we can assess and resolve the matter.
10. Personal Data Security
We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Security measures are selected taking into account the nature, scope, context, and purposes of the processing, as well as the risks to the rights and freedoms of natural persons.
11. Cookies
The Website uses cookies and similar technologies.
Cookies are small text files that are stored on your device when you visit the Website.
Cookies may be used for the following purposes:
11.1. Necessary Cookies
These cookies are necessary for the technical operation, security, and basic functionality of the Website.
User consent is generally not required for such cookies where they are used solely to provide the requested service and are not intended to track the user.
11.2. Analytical Cookies
Analytical cookies help us understand how visitors use the Website, for example which pages are visited and how users navigate through the Website.
Such cookies are only used where you have provided the relevant consent.
11.3. Marketing and Third-Party Cookies
If the Website uses marketing, advertising, social media, or other third-party technologies, they may be used to analyse Website usage, measure advertising effectiveness, or provide personalised content.
Such cookies are activated only with your consent where applicable laws and regulations require such consent.
12. Changing Cookie Preferences
You can change or withdraw your consent to the use of non-essential cookies using the cookie settings available on the Website.
You can also delete or block cookies through your browser settings. However, blocking certain cookies may affect the operation of the Website or the availability of certain functions.
13. External Websites and Third-Party Services
The Website may contain links to third-party websites, social networks, or other external resources.
KRAG projekti does not control the privacy practices of these third-party websites and is not responsible for their processing of personal data. When visiting an external website, we recommend reviewing the privacy and cookie policies of the relevant website.
14. Children’s Personal Data
The Website and the Company’s services are not specifically intended for children.
We do not knowingly collect children’s personal data unless such processing is necessary and there is an appropriate legal basis for doing so.
If you believe that a child has provided us with personal data without an appropriate legal basis, please contact us immediately.
15. Automated Decision-Making and Profiling
KRAG projekti does not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, except where you have been properly informed of such processing and there is an appropriate legal basis for carrying it out.
16. Changes to the Privacy Policy
We may periodically update this Privacy Policy to reflect changes in applicable laws and regulations, the operation of the Website, technologies used, or personal data processing practices.
The current version of the Privacy Policy will always be available on the Website.
Where significant changes are made, we will provide additional information where required.
17. Contact Information
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
SIA KRAG projekti
Registration No.: 40203397404
Minsteres iela 20, Baltezers, Garkalnes pag., Ropažu nov., Latvia
Phone: +371 22308884
Email: info@krag.lv
Last updated: October 6, 2026.
