1. Introduction
This Privacy Policy describes how Sersor SIA (“Sersor”, “we”, “us”, or “our”), a company registered in Latvia under registration number LV40203672032, collects, uses, stores, and protects personal data when you visit our website at sersor.com or submit an inquiry through our contact forms.
We are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), the UK GDPR as retained in UK law, and other applicable data protection legislation.
2. Data Controller
The data controller responsible for your personal data is:
Sersor SIA
Registration number: LV40203672032
Registered address: Sunishi, Ropazu novads, Latvia
Commercial address: Riga, Latvia
Email: info@sersor.com
We have not appointed a Data Protection Officer (DPO), as we are not required to do so under Article 37 of the GDPR given the nature and scale of our data processing activities.
3. Personal Data We Collect
We collect personal data only when you voluntarily submit it through our website contact or inquiry forms. The data we collect may include:
- First name and last name
- Company name
- Email address
- Phone number
- Your message and any other information you choose to provide
- Additional fields specific to the service you are enquiring about
- Your consent preferences – whether you have agreed to our Privacy Policy and whether you have opted in to marketing communications
We do not collect any special categories of personal data, and our services are not directed at children under the age of 16.
4. How We Use Your Personal Data
We process your personal data for the following purposes:
- Responding to your inquiry – to contact you in response to a form submission and provide the information or services you have requested.
- Managing our business relationship – to maintain records of communications and services provided, including for invoicing and accounting purposes.
- Marketing communications – if you have explicitly opted in by ticking the marketing consent checkbox on our contact form, we may send you occasional product updates, news, and service offers from Sersor. You may withdraw this consent at any time by contacting us at info@sersor.com or by using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Legal compliance – to fulfil our obligations under applicable Latvian and EU law, including accounting and record-keeping requirements.
5. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 of the GDPR:
- Legitimate interests (Article 6(1)(f)) – when you submit a contact or inquiry form, we have a legitimate interest in responding to your request and potentially entering into a business relationship with you.
- Consent (Article 6(1)(a)) – where you have explicitly opted in to receive marketing communications from us. You may withdraw this consent at any time.
- Legal obligation (Article 6(1)(c)) – for accounting and record-keeping purposes as required under Latvian law.
- Performance of a contract (Article 6(1)(b)) – where processing is necessary to perform a contract to which you are party, or to take steps at your request prior to entering into a contract.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
- Inquiry and contact data – retained for up to 10 years from the date of last contact or the end of our business relationship, in accordance with Latvian accounting legislation which requires retention of business records for a minimum of 10 years.
- Marketing consent records – retained for as long as you remain on our marketing list, plus a reasonable period thereafter to demonstrate compliance with your original consent.
- Inactive inquiries – where no business relationship develops, we may retain your data for a reasonable period to allow for follow-up, after which it will be deleted.
You may request earlier deletion of your personal data at any time (see Section 9).
7. Third Parties and Data Transfers
We share your personal data only with trusted third-party service providers who process it on our behalf:
- Cloudflare, Inc. (United States) – provides website hosting, content delivery, security (including Turnstile bot protection), and web analytics. Cloudflare processes data under EU Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.
- Microsoft Corporation (United States) – provides email services (Microsoft 365) and cloud document storage (OneDrive). Microsoft processes data under EU Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.
- EspoCRM (self-hosted in Latvia) – we use EspoCRM to manage business leads and customer records. Data stored in EspoCRM remains within our control and is not shared with the EspoCRM vendor.
Transfers of personal data to the United States are carried out under Standard Contractual Clauses as provided for under Article 46 of the GDPR. You may request a copy of the applicable safeguards by contacting us at info@sersor.com.
We do not sell your personal data to any third party, and we do not share it for marketing purposes.
8. Website Analytics and Cookies
We use Cloudflare Web Analytics, a privacy-preserving analytics solution that does not use cookies and does not collect personally identifiable information. No consent is required for this service.
We use Cloudflare Turnstile on our contact forms to protect against automated spam. Turnstile may set a strictly necessary session cookie to verify that you are a human user. This cookie does not track you across websites.
We do not use any other cookies, tracking pixels, or similar technologies on our website. For full details, please see our Cookie Policy.
9. Your Rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access – you may request a copy of the personal data we hold about you.
- Right to rectification – you may request correction of inaccurate or incomplete data.
- Right to erasure – you may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction – you may request that we restrict processing in certain circumstances.
- Right to data portability – you may request your data in a structured, machine-readable format.
- Right to object – you may object to processing based on legitimate interests.
- Right to withdraw consent – where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint – you have the right to complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or, if you are in the UK, the Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, please contact us at info@sersor.com. We will respond within 30 days.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction, including encrypted communications (HTTPS) and access controls. However, no method of internet transmission is completely secure.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on this page with the date it was last updated.
12. Contact
Sersor SIA
Email: info@sersor.com
Website: sersor.com/contact
