Privacy Policy

1. Who We Are

The data controller responsible for your personal data is:

2. Data We Collect

We collect personal data only when you actively provide it or when it arises through your use of our website:

• Contact and inquiry data — name, email address, phone number, professional role and sector, when you submit a contact, pilot or booking form
• Usage data — IP address, browser type, operating system, pages visited, timestamps, automatically collected via server logs
• Communication data — the content of messages you send to us

We do not collect special-category data (GDPR Art. 9) and do not knowingly process data relating to children.

3. Purposes and Legal Bases

We process your data for the following purposes:

• Responding to inquiries and managing pilot programme registrations — on the basis of pre-contractual measures and our legitimate interest in communicating with prospective professional partners (GDPR Art. 6(1)(b) and (f))
• Operating and improving our website — on the basis of our legitimate interest in maintaining and developing our online services (GDPR Art. 6(1)(f))
• Sending marketing communications, where you have opted in — on the basis of your consent (GDPR Art. 6(1)(a))
• Complying with legal obligations such as tax and accounting records — on the basis of legal obligation (GDPR Art. 6(1)(c))

4. Retention Periods

We retain personal data only for as long as necessary:

• Inquiry and communication data: up to 3 years from the date of your last contact
• Contract and accounting data: up to 10 years in accordance with the Latvian Accounting Law (Grāmatvedības likums)
• Consent-based data (e.g. marketing): until you withdraw your consent

5. Disclosure of Data

We do not sell your personal data. We may share data with:

• Service providers acting as processors — website hosting, email delivery, CRM — each bound by a data processing agreement
• Authorities and courts, when legally required or permitted

All processors are contractually obligated to process data only on our instructions and in accordance with the GDPR.

6. International Transfers

Our primary processing takes place within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate safeguards are in place — either an European Commission adequacy decision or Standard Contractual Clauses (SCCs).

7. Cookies and Tracking

This website uses cookies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

8. Your Rights

Under the GDPR you have the right to:

• Access (Art. 15) — obtain a copy of the personal data we hold about you
• Rectification (Art. 16) — have inaccurate data corrected or incomplete data completed
• Erasure (Art. 17) — request deletion of your data where no legitimate ground for retention exists
• Restriction of processing (Art. 18) — limit how we process your data in certain circumstances
• Data portability (Art. 20) — receive your data in a structured, machine-readable format
• Objection (Art. 21) — object to processing based on legitimate interests or for direct marketing
• Withdraw consent (Art. 7(3)) — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please email us at hello@nordoravital.com. We will respond within one calendar month (extendable by a further two months in complex cases, with notice).

9. Right to Lodge a Complaint

If you believe we have not handled your data lawfully, you may lodge a complaint with the Latvian supervisory authority:

You also have the right to contact the supervisory authority in your country of habitual residence or place of work.

10. Children

Our services are directed exclusively at professionals. This website is not intended for individuals under 16 years of age, and we do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. The current version is always available at this URL. Where required by law, we will notify you of significant changes.

12. Contact

For any questions about this Privacy Policy or our data practices, please contact us at: hello@nordoravital.com