Privacy Policy

1. CONTROLLER AND CONTACT The controller is SIA “EVRO TRANS”, registration No. 42403008086, VAT No. LV42403008086, legal address Rīgas iela 16D, Rēzekne, LV-4601, Latvia. Email: [email protected]. Telephone: +371 27 77 66 13. 2. DATA WE PROCESS We process the information you provide when you create an account, contact us, request compatibility advice, place an order or request a return: name, contact details, account credentials, billing and delivery addresses, company and VAT details, order contents, vehicle and part information, correspondence and return information. Payment providers process payment-card or banking data; EVRO TRANS normally receives transaction identifiers and payment status, not full card details. We also process technical data needed to operate and protect the service, including IP address, device/browser data, session and security logs, cookie-consent record, delivery-country/language preferences and, only with consent, analytics and advertising attribution data. 3. PURPOSES AND LEGAL BASES - Contract (GDPR Article 6(1)(b)): account, cart, compatibility request, checkout, payment, delivery, customer service, warranty and returns. - Legal obligation (Article 6(1)(c)): accounting, tax, product-safety, consumer-law and authority requests. - Legitimate interests (Article 6(1)(f)): service security, fraud prevention, troubleshooting, defending legal claims and aggregated business reporting. We balance these interests against your rights. - Consent (Article 6(1)(a)): optional analytics, advertising/marketing technologies and direct electronic marketing where consent is required. You may withdraw consent at any time without affecting earlier lawful processing. 4. RECIPIENTS Data is disclosed only as necessary to hosting and IT/monitoring providers; payment providers (including Stripe, Klix and banks); delivery and return carriers (including DPD, Omniva, Venipak, Unisend and UPS); email and communications providers; professional advisers and public authorities where required by law. With your consent, Google and Meta receive analytics or advertising data. Each recipient receives only the data needed for its task. 5. INTERNATIONAL TRANSFERS Some providers may process data outside the EEA or the United Kingdom. Where required, transfers rely on an adequacy decision, the EU Standard Contractual Clauses/UK International Data Transfer safeguards, and supplementary security measures. Contact us for information about the safeguard relevant to a particular transfer. 6. RETENTION We retain order, invoice, payment-status and accounting records for the period required by Latvian tax and accounting law. Account data is kept while the account is active and then only as needed for legal claims and mandatory records. Enquiries and support correspondence are normally kept for up to three years after closure unless a dispute or legal duty requires longer. Security logs are kept only for the operational period needed to investigate incidents. The cookie-consent choice is valid for 180 days; advertising attribution is kept for up to 90 days. Optional marketing data is processed until consent is withdrawn or the applicable retention period expires. Data is then deleted or anonymised. 7. YOUR RIGHTS Subject to the GDPR/UK GDPR and applicable limitations, you may request access, correction, deletion, restriction, portability and information about your data, and object to processing based on legitimate interests or direct marketing. You may withdraw consent at any time through “Cookie settings” and by contacting us. To protect you, we may verify identity before completing a request. We normally respond within one month. You may complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv), the supervisory authority where you live or work, or, in the United Kingdom, the Information Commissioner’s Office (www.ico.org.uk). 8. REQUIRED DATA AND AUTOMATED DECISIONS Fields marked as required at checkout are necessary to conclude and perform the purchase contract. Without them we cannot process the order. We do not make decisions producing legal or similarly significant effects solely by automated processing. 9. SECURITY AND CHANGES We use access controls, encrypted transport, backups, logging and service-provider controls appropriate to the risk. No internet service is completely risk-free. We update this notice when processing changes materially and show the revision date on this page.