Privacy Policy
Updated: 16 September 2026
Controller
The controller of personal data is SIA „ATTA print1“, registration No. 40103663033, legal address Kandavas iela 29A, Riga, LV-1083, e-mail [info@attaprint.lv](mailto:info@attaprint.lv), phone +371 25776699 (hereinafter – Atta Print). For questions about personal data, please write to this e-mail with the subject line „Personal data“.
What data we process
- Request forms (contact form, product request in the catalogue, quote confirmation): first name, surname, company, e-mail address, phone number, message text, selected products and quantities, confirmation time.
- Submitted files: logos, artwork and print files that you upload in a form or send by e-mail. We check files technically (format, resolution) solely for the purposes of your order.
- Correspondence by e-mail, phone or WhatsApp: the content of correspondence and attachments. E-mail at info@attaprint.lv is handled by Google (Gmail), and correspondence related to a specific request is also saved in our order system.
- Details for invoicing: company name, registration and VAT number, address.
- Activity on the website via our link: if you open the website from a link in our e-mail or quote, the link contains a marker for your request, and for 30 days we can see which catalogue pages you viewed and which products you added to the request.
- Technical data: IP address and browser information recorded by the hosting service for security and operational purposes.
- Browser storage: products added to a request, your cookie choice and the request marker are stored in your browser (localStorage).
Why and on what basis
| Purpose | Data | Legal basis (GDPR Article 6(1)) |
|---|---|---|
| Preparing a quote and responding to a request | Contact information, message, products, files | b) steps prior to entering into a contract |
| Order fulfilment, invoicing and accounting | Contact information, company details, order data | b) performance of a contract and c) legal obligation |
| Processing requests in one place (activity on the website via our link) | Pages viewed, products added | f) legitimate interests – so that your additions reach the same request |
| Drafting responses with AI assistance | Request text, correspondence, products | f) legitimate interests – faster response; drafts are always reviewed by an employee |
| Website security and prevention of abusive requests | IP address, technical data | f) legitimate interests |
| Visit statistics (our own, cookie-free) | Page viewed, device type, country, referring site; the visitor key is a daily-changing hash with no IP address stored | f) legitimate interest – to understand which pages are visited |
| Visit statistics (Google Analytics) | Anonymised usage data | a) consent given in the cookie banner |
We do not use data for automated decision-making that produces legal effects, and we do not share data with third parties for marketing purposes.
How long we keep data
We retain requests, correspondence and files for up to 3 years after the last contact, so that an order can be repeated or supplemented. Accounting documents (invoices) are kept for the period required by law (5 years). Activity records from our links are kept for 12 months, and technical logs for no more than 12 months. At your request, we will delete requests and files earlier, unless we have a legal obligation to retain them.
Processors and data recipients
| Service | Who | Where |
|---|---|---|
| Website and system hosting | Vercel Inc. | EU and USA (standard contractual clauses) |
| Database and file storage | Supabase Inc. | EU (Stockholm) |
| E-mail and calendar | Google Ireland Ltd. | EU / USA (Google data processing terms) |
| AI assistant for response drafts | Anthropic PBC | USA (standard contractual clauses); data is not used for model training |
| Visit statistics (consent-based only) | Google Analytics | EU / USA |
| Product delivery and production | Promotional products and printing partners, couriers | EU – only data necessary for order fulfilment |
| Accounting | Accounting service provider | Latvia |
Data processing agreements are in place with our processors. Data transfers outside the EU take place on the basis of the European Commission's standard contractual clauses or an adequacy decision.
Cookies and browser storage
On your first visit, we offer you a choice. Necessary (no consent required): request content, your cookie choice, request marker from our link – these are needed for the website to function and for your request to be processed in one place. Statistics (consent-based only): Google Analytics with anonymised IP address. You can change your choice at any time by clicking „Cookie settings“ in the page footer, or by clearing website data in your browser.
| Name | Type | Purpose | Retention |
|---|---|---|---|
| ap_request | browser storage | products added to a request | until sent or deleted |
| ap_consent | browser storage | your cookie choice | 12 months |
| ap_job | browser storage | request marker from our link | 30 days |
| _ga, _ga_* | cookie (Google) | visit statistics, consent-based only | up to 2 years |
Your rights
You have the right to request access to your data, correct or delete it, restrict processing, object to processing based on legitimate interests, withdraw consent, and receive your data in a portable format. Please send requests to [info@attaprint.lv](mailto:info@attaprint.lv); we respond within one month. If you believe your rights have been violated, you may contact the Data State Inspectorate (www.dvi.gov.lv, Elijas iela 17, Riga).
Security
We store data in systems with access control, encrypted connections (HTTPS) and limited employee access. Client files are accessible only via a unique link known to you and our staff.
Changes
We may update this policy by publishing a new version on this page. Material changes will be indicated with an updated date at the top of the page.