Privacy Policy – FinDoor.lv
This Privacy Policy explains how SIA FinDoor obtains, uses, stores and protects personal data, as well as what rights you have in relation to the processing of your personal data.
1. Data controller
The controller of personal data processing is:
SIA FinDoor
Reg. No.: 40203665473
Legal address: Lakstīgalu iela 22, Bauska, Bauska Municipality, LV-3901
E-mail: [email protected]
Phone: +371 26262005
2. What personal data do we process?
2.1. Data when placing an order
Depending on the order, we may process:
- first and last name;
- e-mail address;
- phone number;
- delivery or site address;
- order and invoice information;
- specification of the ordered goods, e.g., size, color, opening direction, glazing, fittings and other configuration;
- information about delivery and order fulfillment;
- payment status;
- order history.
FinDoor does not receive or store full payment card details if payment processing is carried out by a bank or another payment service provider.
2.2. Data when contacting us
If you contact FinDoor by e-mail, contact form, phone, WhatsApp or another communication channel, we may process:
- Your contact information;
- the content of the message;
- order information;
- photos, videos or other files that you send us yourself;
- other information provided during communication.
2.3. Automatically obtained data
When visiting the FinDoor.lv website, depending on cookie settings, the following may be processed:
- IP address;
- device and browser information;
- visit time;
- pages viewed;
- clicks and interaction with the website;
- session and other technical data;
- cookie and similar technology data.
More information is available in the FinDoor Cookie Policy.
2.4. Social media and messaging platform data
If you contact us using Facebook, Instagram, TikTok, WhatsApp or other platforms, FinDoor may receive information that the specific platform provides to the company account, for example:
- profile name;
- message content;
- attached files;
- other information that you send yourself.
The operation of these platforms and the processing of personal data carried out by them is governed by the privacy policies of the respective service providers.
2.5. Necessity of providing data
Some of the personal data referred to in section 2.1, such as name, contact information, delivery or site address and order specification, are necessary so that FinDoor can prepare an offer, conclude and perform a contract, organize the manufacture and delivery of goods, and provide warranty and after-sales services.
If this data is not provided, depending on the specific situation, FinDoor may not be able to:
- prepare an accurate price offer;
- contact you regarding order details;
- conclude or perform a contract;
- manufacture and deliver the ordered goods;
- prepare invoices and other necessary transaction documents;
- review warranty, complaint or after-sales matters.
Data that is not necessary for concluding or performing the contract is provided voluntarily.
Consent to receive direct marketing is voluntary. Not giving consent or withdrawing it does not affect the possibility to receive an offer, purchase goods or use FinDoor services.
3. Purposes and legal basis for processing personal data
3.1. Conclusion and performance of a contract
We process data in order to:
- prepare an offer;
- process an order;
- provide the necessary information for production;
- organize delivery;
- prepare invoices and other transaction documents;
- communicate regarding order fulfillment;
- ensure warranty, complaint and after-sales processes;
- ensure the exercise of the right of withdrawal, if applicable to the specific purchase.
Legal basis: conclusion and performance of a contract or actions at the data subject’s request prior to entering into a contract.
3.2. Compliance with legal obligations
We also process personal data in order to comply with obligations set out in laws and regulations, for example:
- accounting and tax requirements;
- document retention obligations;
- providing information to public authorities in cases prescribed by law.
Legal basis: compliance with a legal obligation.
3.3. FinDoor’s legitimate interests
In certain cases, we process data based on FinDoor’s legitimate interests, for example:
- ensuring the quality of customer service;
- retaining evidence of communications and transactions;
- defending claims and resolving disputes;
- preventing fraud and abuse;
- ensuring the security of the website and the company’s operations;
- improving internal business operations.
In such cases, we assess to ensure that FinDoor’s interests do not unjustifiably restrict your rights and freedoms.
3.4. Consent
If processing is based on your consent, it may be used, for example, for:
- receiving news and commercial communications;
- use of analytics cookies;
- use of marketing cookies and advertising technologies;
- providing personalized advertising.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4. To whom may personal data be disclosed?
4.1. Service providers and cooperation partners
Personal data may be disclosed only to the extent necessary for the performance of a specific service or order.
Data recipients may include:
- KASKI Latvia and cooperation partners related to order fulfillment, to the extent necessary for the manufacture and fulfillment of a specific order;
- delivery and logistics service providers;
- installation or measurement service providers, if involved in fulfilling a specific order;
- banks and payment service providers;
- accounting service providers;
- IT, hosting and website maintenance service providers;
- e-mail and communication service providers;
- analytics and advertising service providers, such as Google, Meta, TikTok and Microsoft, if the relevant processing is permitted;
- communication platform service providers, e.g., WhatsApp/Meta, if you choose to contact us in this way.
4.2. Public authorities
Personal data may be disclosed to state or municipal authorities, courts, law enforcement authorities or other persons only if such an obligation arises from laws and regulations.
4.3. Data processing outside the European Union or the EEA
Some technology and online service providers used by FinDoor may process personal data outside the European Union or the European Economic Area.
In such cases, data transfers are carried out using the applicable GDPR safeguards provided by the respective service provider.
5. How long do we store personal data?
Personal data is not stored longer than necessary to achieve the specific purpose of processing.
The retention period may depend on:
- document retention periods set out in laws and regulations;
- performance of the contract;
- warranty and complaint handling;
- limitation periods for potential claims;
- protection of FinDoor’s legitimate interests;
- the validity of your consent.
For example:
- accounting and transaction documents are stored for the period prescribed by laws and regulations;
- order and production information is stored as long as necessary for order fulfillment, resolving warranty and complaint matters, and protecting potential claims;
- customer communications are stored as long as necessary for administering the specific matter or transaction and for protecting FinDoor’s legal interests;
- marketing data is stored until consent is withdrawn or until the relevant processing is no longer necessary;
- cookie retention periods are indicated in the FinDoor Cookie Policy.
6. Personal data security
FinDoor uses reasonable technical and organizational security measures to protect personal data against:
- unauthorized access;
- disclosure;
- loss;
- alteration;
- destruction.
Such measures may include:
- encrypted data transmission;
- access control;
- password and account protection;
- restricting access only to persons who need the data to perform their job duties;
- software and system security updates.
No data transmission or storage system can guarantee absolute security, but FinDoor takes proportionate measures to reduce risks.
7. Cookies and similar technologies
The following may be used on the FinDoor website:
- necessary cookies;
- functional cookies;
- analytics cookies;
- marketing cookies.
Analytics and marketing cookies are used only if you have given the relevant consent, except in cases where the specific technology does not require consent under laws and regulations.
Services such as the following may be used on the FinDoor website:
- Google Analytics;
- Microsoft Clarity;
- Meta Pixel;
- TikTok Pixel;
- Google Ads advertising and conversion measurement technologies.
You can change or withdraw your consent using the cookie settings available on the FinDoor website.
More information: https://www.findoor.lv/sikdatnes/
8. Your rights under the GDPR
In certain cases, you have the right to:
- receive information about the processing of your personal data;
- access your personal data;
- request correction of inaccurate data;
- request erasure of personal data;
- request restriction of processing;
- object to the processing of personal data;
- receive your data in a structured and machine-readable format;
- exercise the right to data portability;
- withdraw previously given consent.
If personal data is used for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to direct marketing.
To exercise your rights, write to [email protected].
FinDoor will respond to the request without undue delay and no later than within one month of receiving it. If the request is complex or a large number of requests is received, this period may be extended by a further two months in cases provided for by laws and regulations, informing you within one month.
9. Automated decision-making and profiling
FinDoor does not carry out automated decision-making that would produce legal effects for you or similarly significantly affect you.
With your consent, marketing technologies may be used to build advertising audiences, for measurement and to display personalized advertising.
10. Personal data of minors
FinDoor services are not specifically intended for minors.
If we determine that personal data has been obtained in violation of regulatory requirements, we will take the necessary actions to delete it or remedy the situation otherwise.
11. Contact information and complaints
If you believe that FinDoor’s processing of personal data violates your rights, you may first contact us:
You also have the right to submit a complaint to the Data State Inspectorate:
Data State Inspectorate
Elijas iela 17, Riga, LV-1050
E-mail:
[email protected]
Website:
https://www.dvi.gov.lv/
12. Changes to the Privacy Policy
FinDoor may periodically update this Privacy Policy, for example, if the following changes:
- personal data processing processes;
- service providers used;
- website functionality;
- requirements of laws and regulations.
The current version of the Privacy Policy is always available on the FinDoor.lv website.
Policy last updated: 09.09.2026