In short: we use your details to answer your enquiry, to provide our services and to meet our legal duties. We don't sell personal data, and this website doesn't use tracking or advertising cookies.
1. Who we are
The controller of your personal data is:
- Company
- TOROS SIA
- Registration No.
- 40203601294
- VAT No.
- LV40203601294
- Registered address
- Lidoņu iela 12–4, Rīga, LV-1055, Latvia
- elinaaolo177@outlook.com
- Phone
- +371 20536102
In this policy, "we" and "us" mean TOROS SIA. For any question about your data, write to the email above.
2. What this policy covers
This policy explains how we process personal data when you visit this website, contact us, or work with us as a client or a client's representative. It is written in line with the EU General Data Protection Regulation (GDPR) and the Personal Data Processing Law of the Republic of Latvia.
3. Data we process
When you contact us
Your name, company, email address, phone number and the content of your message. The contact form on this website does not send or store anything itself: it opens your own email app with the message ready, and the data reaches us only when you send that email.
When you become a client
Names, roles and business contact details of your contact persons, invoicing details, contract documents and our correspondence.
When we manage your ad accounts
To run campaigns we may access data inside your advertising accounts, such as campaign statistics or customer lists you upload for audience targeting. For this data you are the controller and we act as your processor, following your instructions and a data processing agreement.
When you visit the website
Our hosting provider records standard technical data — IP address, browser type, the page requested and the time — to deliver the site and keep it secure. Fonts are loaded from Google Fonts, so your browser sends your IP address to Google when the page loads. We also keep one setting in your browser's storage to remember that you closed the cookie note; see the Cookies Policy.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry and preparing an offer | Steps taken at your request before a contract, Art. 6(1)(b); our legitimate interest in answering business enquiries, Art. 6(1)(f) |
| Providing our services and managing the contract | Performance of a contract, Art. 6(1)(b) |
| Invoicing, accounting and tax reporting | Legal obligation, Art. 6(1)(c) |
| Running and securing the website | Legitimate interest, Art. 6(1)(f) |
| Establishing or defending legal claims | Legitimate interest, Art. 6(1)(f) |
We don't send marketing emails without your consent, and we don't make decisions about you based solely on automated processing.
5. How long we keep data
- Enquiries that don't lead to a contract: up to 12 months after our last contact.
- Contract data and correspondence: for the duration of the contract and afterwards for as long as needed to protect our legal interests within the applicable limitation periods.
- Accounting documents: for the period required by the Accounting Law of the Republic of Latvia.
- Data in your ad accounts: only while we manage them; access ends when the contract ends.
6. Who receives data
We share personal data only when needed, with:
- service providers that support our work, such as website hosting, email (Microsoft Outlook), accounting and IT services;
- advertising platforms such as Meta, Google, TikTok and LinkedIn, when we run campaigns on your instructions;
- banks, auditors, legal advisers and public authorities, where required by law.
Service providers process data only on our instructions and under contracts that protect it. We do not sell personal data.
7. Transfers outside the EEA
Some providers, including Google, Microsoft and Meta, may process data outside the European Economic Area, for example in the United States. In those cases transfers rely on an adequacy decision of the European Commission, such as the EU–U.S. Data Privacy Framework, or on the Commission's Standard Contractual Clauses.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data erased, where there is no reason for us to keep it;
- restrict processing in certain situations;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, where processing is based on consent.
To use any of these rights, email elinaaolo177@outlook.com. We reply within one month and may ask you to confirm your identity first.
9. Complaints
If you think we handle your data unlawfully, please tell us first so we can fix it. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv, or with the data protection authority in your EU country.
10. Security
We protect personal data with appropriate technical and organisational measures, such as access controls, secure passwords and encrypted connections, and we limit access to people who need it for their work.
11. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. Significant changes will be highlighted on this page.