Legal
Privacy Policy
Last updated: 25 July 2026
SIA TOCO MADERA ("we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Latvian data protection law. This policy explains how we process personal data collected through the website tocomadera.eu.
1. Data controller
The data controller responsible for personal data processed via this website is SIA TOCO MADERA, a company registered in Latvia. For any privacy-related enquiry, please contact us at info@tocomadera.eu.
2. Personal data we collect
Through the contact form and business enquiries we may collect:
- Full name and, where applicable, company name.
- Business email address and phone number.
- Requested product grade, volume and message content.
- Technical data (IP address, browser type, device, referring URL, timestamps).
3. Purposes and legal basis of processing
- Responding to enquiries and preparing commercial offers — legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR).
- Managing ongoing B2B relationships and order fulfilment — Art. 6(1)(b) GDPR.
- Complying with accounting, tax and other legal obligations — Art. 6(1)(c) GDPR.
- Website analytics, security and improvement of our services — legitimate interest (Art. 6(1)(f) GDPR).
4. Website analytics and cookies
Our website uses cookies and third-party analytics services (including Google Analytics and Microsoft Clarity) to understand how visitors interact with our pages and to improve site performance. Detailed information is available in our Cookie Policy.
5. Data sharing and international transfers
We do not sell personal data. We may share limited data with trusted service providers acting as processors on our behalf (email delivery, hosting, analytics). Where such providers are located outside the European Economic Area, transfers are protected by adequacy decisions or Standard Contractual Clauses.
6. Retention
Enquiry data is retained for as long as necessary to reply and, where a commercial relationship follows, for the period required by Latvian accounting and tax legislation. Analytics data is retained for the duration set by the respective analytics provider.
7. Your rights under the GDPR
Subject to the conditions of the GDPR, you have the right to access, rectify, erase or restrict processing of your personal data, to object to processing, and to data portability. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija).
8. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including encrypted connections (TLS), access controls and confidentiality obligations for our personnel.
9. Contact
For any privacy request, please write to info@tocomadera.eu. We aim to respond within one month of receiving the request.