Privacy Policy

Last updated: 2026-08-11 · ← Back to Goldinken

1. Data controller

SIA Goldinken, reg. no. 40203736668, Riga, Latvia, e-mail [email protected].

2. What we process and why

• Order data (name, company, VAT number, address, phone, e-mail, order contents) — to perform the contract (GDPR Art. 6(1)(b)) and to meet accounting/tax obligations (Art. 6(1)(c); invoices are retained as required by Latvian accounting law).
• VAT number validation — business customers' VAT numbers are verified in the European Commission VIES system; the validation result is stored as legally required evidence for 0% VAT.
• Delivery data — shared with carriers (via the Swotzy shipping platform) solely to deliver your order.
• Payment data — processed by EveryPay; Goldinken never sees full card numbers.
• Portal account — login e-mail and order history, to provide the customer portal.
• Analytics — aggregated usage statistics, only with your cookie consent.

3. Retention

Accounting documents — as required by law (currently 5 years); order and artwork files — for the duration of the customer relationship, so repeat orders can reuse approved artwork; you may request deletion of your portal profile at any time (order records are anonymised, not deleted, where law requires retention).

4. Your rights

You have the right to access, rectify, erase, restrict, port and object (GDPR Art. 15–21), and to complain to the Latvian Data State Inspectorate (dvi.gov.lv) or your local supervisory authority. Requests: [email protected].

5. Processors and transfers

Hosting in the EU (Hetzner). Processors: EveryPay (payments), Paytraq (accounting), Swotzy and carriers (delivery), e-mail service providers. Data is not transferred outside the EU/EEA except where a carrier delivers to a non-EU destination country at your request.

Terms · Privacy · Delivery · Returns · Cookies · Data Processing · Company