Privacy policy

Who we are

The data controller is Eltracore, the company named in the footer of this website (legal name, registration number and address). Eltracore is established in the European Union (Latvia), so no separate EU representative under Article 27 GDPR is required, and the nature of our processing — handling business enquiries — does not require us to appoint a Data Protection Officer.

What we collect and why

When you send a request for quotation we collect the details you enter — company name, country, VAT number, contact name, work email, phone, the products and quantities you ask about, your message, and any file you attach. We use this only to prepare and follow up your quote and to fulfil any resulting order.

We do not run analytics or load third-party scripts until you consent (see the Cookie policy).

Legal basis

We process enquiry data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR) and, where relevant, on the basis of our legitimate interest in responding to and following up business enquiries (Article 6(1)(f) GDPR).

Retention

We keep enquiry data for 24 months after our last contact with you and then delete it. Invoices and accounting records are kept for 5 years, as required by Latvian accounting law.

Sharing

We do not sell your data. This website is hosted on our own server in the EU. We share your data only with service providers who help us operate, under data-processing agreements: our CRM provider (Bitrix24, EU data region), which stores your enquiry so our sales team can respond, and our email provider (Google Workspace).

Your enquiry and CRM data are held in the EU. Email handled through Google may involve processing outside the EEA, safeguarded by the European Commission's Standard Contractual Clauses.

Your rights

You may request access, correction, deletion, restriction or portability of your data, and object to processing. To exercise these rights, contact us using the details in the footer. You may also complain to a supervisory authority — in Latvia this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).