Privacy Policy

Last updated: 19 August 2025

1. Controller and contact details

Controller: KRASO Wood SIA
Reg. No.: 40203372699
VAT No.: LV40203372699
Registered address: Kleistu iela 18c-3, Riga, LV-1067, Latvia
Email: info@krasowood.com
Phone: +371 2611 5426

2. What data we process and sources

We process personal data you provide when placing an order or requesting a quote (name, contact details, project information) and data generated in the course of cooperation (invoices, delivery details, correspondence). The website also processes technical data (IP address, device and browser information, cookie settings).

3. Purposes and legal bases

Preparing offers and performing a contract (orders, delivery, warranty) – GDPR Article 6(1)(b).
Accounting and tax compliance – legal obligation (GDPR Article 6(1)(c) and Latvian law).
Communication regarding orders and enquiries – legitimate interests (GDPR Article 6(1)(f)).
Direct marketing (e.g., newsletters) – consent (GDPR Article 6(1)(a)). You can withdraw consent at any time.
Website security and service quality improvement – legitimate interests.

4. Cookies and similar technologies

Our website uses cookies and similar technologies. Necessary cookies are required for the site to function and are set without consent. Analytics and marketing cookies are set only with your consent, which you can give or withdraw via our Cookie Management Platform (CMP). The CMP link is available in the website footer under “Cookie settings”.

Legal basis: necessary cookies – legitimate interests; analytics and marketing cookies – consent.

Analytics: analytics services may be provided by Google LLC (Google Analytics 4). Analytics cookies are set only after you consent in the CMP.

Details for each cookie (name, purpose, duration) are available in the CMP under “Cookie settings”.

5. Recipients and processors

We may share personal data with the following categories of recipients on a need-to-know basis: hosting and IT maintenance providers, email and messaging services, accounting and payment services, delivery partners, analytics and marketing tools. Data processing agreements are concluded with processors as required by the GDPR.

6. Transfers outside the EU/EEA

In certain cases personal data may be transferred to service providers in the United States (for example, Google LLC). Transfers take place under the EU-US Data Privacy Framework if the provider is certified, or based on the European Commission’s Standard Contractual Clauses (SCCs) with additional safeguards.

7. Retention periods

Order and billing records: up to 10 years in line with accounting laws.
Communications and enquiries: up to 12 months after the matter is closed, unless a dispute arises or a longer retention period is required by law.
Web server logs: up to 30–365 days depending on security and audit needs.
Marketing consents: until consent is withdrawn or expires.

8. Your rights

request confirmation and access to your data;
request rectification or completion of inaccurate data;
request erasure where data are no longer needed or consent is withdrawn;
request restriction of processing in certain cases;
receive your data in a structured, commonly used and machine-readable format (data portability);
object to processing based on legitimate interests;
withdraw consent without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email info@krasowood.com or call +371 2611 5426. We may ask for additional information to verify your identity.

9. Complaints to the supervisory authority

If you believe your rights have been infringed, you can lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050; phone +371 67223131; email pasts@dvi.gov.lv. We encourage you to contact us first so we can resolve the issue more quickly.

10. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure or other unlawful processing. Access to data is limited to authorized personnel who need it to perform their duties.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will inform you on the website. The “Last updated” date at the top shows when this policy was most recently revised.