Data Processing

Last updated: 2026-08-11 · ← Back to Goldinken

Purpose

This page summarises how SIA Goldinken (reg. no. 40203736668, VAT no. LV40203736668) processes personal data as a controller under the GDPR (Regulation (EU) 2016/679). It complements the Privacy Policy.

Legal bases

• Contract (Art. 6(1)(b)) — processing orders, artwork, delivery and the customer portal.
• Legal obligation (Art. 6(1)(c)) — accounting and tax records, including invoices and VAT-number validation evidence.
• Consent (Art. 6(1)(a)) — analytics cookies; withdrawable at any time.
• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention and service improvement.

Processors

We use processors under Art. 28 data-processing agreements: EveryPay (payments), Paytraq (accounting/invoicing), Swotzy and carriers (delivery), our hosting provider (Hetzner, EU) and e-mail providers. Business customers’ VAT numbers are validated in the European Commission VIES system.

International transfers

Data is stored in the EU/EEA. It is transferred outside the EU only where a carrier delivers to a non-EU destination at your request; in that case appropriate safeguards apply.

Retention & your rights

Accounting documents are kept as required by law; order and artwork files for the duration of the customer relationship. You may exercise your rights (access, rectification, erasure, restriction, portability, objection) or complain to a supervisory authority — details in the Privacy Policy. Requests: [email protected].

Terms · Privacy · Delivery · Returns · Cookies · Data Processing · Company