Privacy policy

1. Data controller

The controller of your personal data is "HEXA" SIA, registration No. 40103221904, registered office: Ikšķiles iela 4, Ogre, Ogres novads, LV-5001, Latvia ("HEXA", "we").

For any questions about data processing you can reach us at info@hexa.lv or +371 2963 1891.

2. What personal data we process

We only process data you provide to us or that arises from your use of the site:

• Inquiry form data: name and surname, company (if provided), email address, phone number (if provided), inquiry category and content (selected model, power, quantity, delivery region, project description).
• Technical data stored with the inquiry for security purposes: IP address, browser identifier (user agent) and the selected site language.
• Cookie consent data: your choices per cookie category, the time of consent, IP address and a randomly generated consent identifier.

3. Purposes and legal bases

• Responding to your inquiry and preparing a quotation: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Site security and abuse prevention (e.g. spam filtering): our legitimate interests (Art. 6(1)(f) GDPR).
• Analytics and marketing cookies, including the Google map on the contact page: only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
• Keeping a record of cookie consent: our legal obligation to be able to demonstrate consent (Art. 7(1) GDPR).

4. Retention periods

• Inquiry form data: up to 2 years after the last contact, unless the cooperation results in a contract (in which case statutory accounting and contract retention periods apply).
• Cookie consent records: 3 years from the last saved choice.
• Technical server logs: up to 90 days.

5. Recipients

We do not sell or share your data with third parties for marketing. Access is limited to:

• Our IT infrastructure and hosting providers, acting under data processing agreements.
• Google Ireland Ltd.: only when the Google Maps embed is loaded with your consent or after your click (Google may process data under its own privacy policy).
• Public authorities: only where required by law.

6. Transfers outside the EU/EEA

Our data is stored within the European Union. If you load the Google Maps embed, Google may transfer data outside the EEA; Google bases such transfers on European Commission adequacy decisions (EU–US Data Privacy Framework) or standard contractual clauses.

7. Cookies

The site uses the following cookies:

• Session cookie and XSRF security cookie (necessary): keep the site working and protect against forged requests; last for the session.
• cookie_consent_token (necessary): remembers your cookie choice so you are not asked repeatedly; stored for 180 days and contains only a random identifier.
• Analytics cookies: not currently used; if introduced, they will only activate with your consent.
• Marketing cookies: Google Maps cookies set by Google, loaded only with your consent or after you click the map load button.

8. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy;
• have inaccurate data corrected;
• request erasure ("right to be forgotten");
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time (this does not affect processing before the withdrawal): you can change your cookie choice via "Cookie settings" in the site footer.

9. Complaints

If you believe your data is processed unlawfully, please contact us first (info@hexa.lv). You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv).

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and we will announce material changes on the site.