1. Personal Data Controller
The personal data controller is:
SIA POWERSET
Registration No. 40203653281
VAT Registration No. LV40203653281
Registered address: Kūdras iela 7-4, Rīga, LV-1083
E-mail: [email protected]
Website: power-set.eu
(hereinafter – POWERSET).
This Policy describes how POWERSET processes personal data in connection with use of the POWERSET website, enquiries, offers, orders, sale of goods, provision of services, after-sales support, warranty matters, communications and marketing.
Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation; hereinafter – GDPR), the Personal Data Processing Law and other applicable laws and regulations.
2. Categories of Data Subjects Whose Data May Be Processed
POWERSET may process data relating to: 1) website visitors; 2) prospective clients and clients; 3) representatives and contact persons of legal entities; 4) representatives of suppliers and cooperation partners; 5) persons who communicate with POWERSET by e-mail, telephone, social media, advertising platforms or through POWERSET contact forms; 6) persons who have consented to receive commercial communications or to other personal data processing related to marketing.
3. Personal Data Processed
Depending on the specific circumstances, POWERSET may process: 1) first name and surname; 2) the name of the company or organisation represented by the person and the person’s position; 3) e-mail address; 4) telephone number; 5) delivery, site or service address; 6) information provided in an enquiry, order or correspondence; 7) offer, order, contract, delivery and invoice information; 8) information on payment execution; 9) information on purchased goods and received services; 10) warranty, service, diagnostics and complaint information; 11) IP address, device, operating system and browser technical information; 12) website usage information; 13) cookies and other online identifiers; 14) advertising campaign, advertising interaction and conversion information where the relevant processing is permitted; 15) information voluntarily provided to POWERSET by the person on social media or through advertising platform lead/contact forms.
POWERSET does not process personal data to a greater extent than necessary for the relevant purpose of processing.
4. Sources of Personal Data
Personal data may be obtained: 1) directly from the person; 2) from the company or organisation represented by the person; 3) through the POWERSET website; 4) from social media or advertising platforms actually used by POWERSET where the person has contacted POWERSET, submitted an enquiry or taken another action on those platforms; 5) from a POWERSET cooperation partner where transfer of the data is necessary for the performance of a specific order or service and an appropriate legal basis applies.
5. Purposes and Legal Bases of Personal Data Processing
5.1. Handling Enquiries and Preparing Offers
POWERSET processes personal data in order to: 1) receive and review an enquiry; 2) communicate with the person; 3) determine the required goods or services; 4) prepare a technical or commercial offer; 5) carry out other steps prior to entering into a contract.
Where a natural person submits an enquiry on their own behalf, the legal basis is Article 6(1)(b) GDPR.
Where data of a representative or contact person of a legal entity are processed, the legal basis is POWERSET’s legitimate interest in communicating with representatives of clients or cooperation partners and conducting business pursuant to Article 6(1)(f) GDPR.
5.2. Performance of Orders and Contracts
Data are processed in order to: 1) prepare and administer an order; 2) deliver goods; 3) perform installation, configuration, diagnostics or other services; 4) issue and administer invoices; 5) communicate regarding performance of the transaction; 6) provide after-sales support.
The legal basis is Article 6(1)(b) GDPR or, in relation to representatives of legal entities, Article 6(1)(f) GDPR.
5.3. Compliance with Accounting, Tax and Other Legal Obligations
POWERSET processes and retains personal data where necessary to comply with accounting, tax and other obligations imposed by law.
The legal basis is Article 6(1)(c) GDPR.
5.4. Warranty, Service, Diagnostics and Complaint Handling
Personal data may be processed in order to: 1) identify the relevant order and product; 2) perform diagnostics; 3) organise repair, replacement or other service; 4) handle complaints and claims; 5) establish, exercise or defend the legal interests of POWERSET or another person.
Depending on the specific circumstances, the legal basis is Article 6(1)(b), (c) or (f) GDPR.
5.5. Website Operation and Security
POWERSET may process technical website information in order to: 1) ensure operation of the website; 2) ensure information systems security; 3) identify technical errors; 4) prevent malicious use of the website or information systems.
The legal basis is POWERSET’s legitimate interest in ensuring the operation and security of its website and information systems pursuant to Article 6(1)(f) GDPR.
6. Necessity of Providing Data
6.1. Providing personal data when submitting a general enquiry is voluntary; however, without the necessary contact information POWERSET may be unable to respond to the enquiry.
6.2. Personal data required for conclusion of a contract, performance of an order, delivery, invoicing or compliance with a legal obligation are necessary for the relevant transaction.
6.3. If data required for the relevant transaction are not provided, POWERSET may be unable to conclude or perform the relevant contract.
6.4. Consent to receive marketing communications or to the use of non-essential cookies is not a condition for submitting an enquiry or purchasing goods or services.
7. Commercial Communications
7.1. POWERSET may send information about goods, services, news, promotions, events and other commercial communications to persons who have given the required consent.
7.2. Consent to receive commercial communications is voluntary.
7.3. Consent may be withdrawn at any time by using the unsubscribe option indicated in the relevant communication or by writing to [email protected].
7.4. Where POWERSET has obtained a client’s e-mail address in the context of a commercial transaction, POWERSET may use it to offer its own similar goods or services in the cases permitted by the Information Society Services Law, provided that the client was given, at the time the data were collected and in each subsequent communication, a clear opportunity to object free of charge to further communications.
8. Advertising and Marketing Platforms
8.1. To promote its business activities, POWERSET may use Google, YouTube, Meta platforms Facebook and Instagram, LinkedIn, TikTok, Microsoft and other digital platforms where the relevant service or technology is actually activated in POWERSET’s marketing processes.
8.2. Depending on the solutions actually used, POWERSET may use: 1) measurement of advertising campaign effectiveness; 2) conversion tracking; 3) creation of advertising audiences; 4) retargeting; 5) advertising optimisation; 6) social media and advertising platform contact or lead forms.
8.3. Where the operation of a particular solution requires the use of cookies or similar technologies for which user consent is required under applicable law, the relevant solution is not activated before such consent has been obtained.
8.4. Current information on the cookies actually used on the POWERSET website, their providers, purposes and duration is provided in the cookie settings panel.
9. Cookies
9.1. The POWERSET website may use: 1) strictly necessary cookies; 2) functional cookies; 3) analytics cookies; 4) advertising and marketing cookies.
9.2. Strictly necessary cookies may be used to ensure website operation, security and functions explicitly requested by the user.
9.3. Analytics, advertising and other non-essential cookies requiring consent are not activated before the user has given consent.
9.4. The cookie preference panel provides the user with the option to: 1) accept non-essential cookies; 2) reject non-essential cookies; 3) select individual cookie categories; 4) subsequently change a previously made choice.
10. Automated Decision-Making
10.1. POWERSET does not carry out individual decision-making based solely on automated processing of personal data that produces legal effects concerning a person or similarly significantly affects that person.
10.2. Advertising platforms used by POWERSET may perform automated audience segmentation, advertising optimisation or advertising personalisation in accordance with the operation of the relevant platform; however, POWERSET does not use such processing for individual decision-making concerning clients within the meaning of Article 22 GDPR.
11. Recipients of Personal Data
POWERSET may disclose personal data, to the extent necessary, to: 1) POWERSET employees and authorised persons; 2) providers of IT, hosting, website, e-mail, data storage and other technology services; 3) accounting service providers; 4) banks and payment service providers; 5) carriers and logistics service providers; 6) manufacturers, distributors and service partners of goods where necessary for performance of a particular order or for service or warranty matters; 7) installation contractors and other service providers engaged by POWERSET; 8) social media, advertising and analytics platforms actually used by POWERSET, in accordance with the relevant processing and the person’s choices; 9) lawyers, auditors, insurers, debt recovery service providers and other professional advisers where necessary to protect POWERSET’s rights or legal interests; 10) state and municipal authorities where disclosure is required by applicable law.
Depending on the specific processing, the relevant recipient may act as POWERSET’s processor, an independent controller or a joint controller.
12. Transfers of Personal Data Outside the European Economic Area
12.1. Certain IT, social media, analytics or advertising service providers used by POWERSET may process personal data outside the European Economic Area.
12.2. Where personal data are transferred outside the European Economic Area, POWERSET uses a lawful transfer mechanism provided for in Chapter V GDPR, for example: 1) a European Commission adequacy decision concerning the relevant country or data recipient; or 2) appropriate safeguards provided for in Article 46 GDPR.
12.3. A person may request information on the mechanism applicable to a specific transfer by writing to [email protected].
13. Personal Data Retention Period
13.1. POWERSET retains personal data only for as long as necessary to achieve the relevant purpose of processing or to comply with applicable legal obligations.
13.2. Retention periods are determined taking into account: 1) the time required to handle an enquiry and subsequent communication; 2) the period required to perform a contract or order; 3) warranty and after-sales service periods; 4) accounting, tax and other document retention periods prescribed by law; 5) applicable limitation periods; 6) the need to establish, exercise or defend legal claims; 7) the validity of the person’s consent; 8) the duration of the relevant cookies or other technologies.
13.3. Direct marketing data are used until consent is withdrawn, an objection is received or the relevant marketing purpose ceases.
13.4. Information about a marketing opt-out may also be retained after the opt-out has been received, to the minimum extent necessary to ensure that POWERSET respects the person’s choice not to receive the relevant communications in the future.
14. Rights of Individuals
Subject to the GDPR and the circumstances of the specific processing, a person has the right to: 1) receive information about the processing of their personal data; 2) access their personal data; 3) request rectification of inaccurate personal data; 4) request erasure of personal data; 5) request restriction of personal data processing; 6) receive and transmit personal data where the right to data portability applies; 7) object to processing based on POWERSET’s legitimate interests; 8) withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where personal data are processed for direct marketing purposes, the person has the right to object to such processing at any time.
A request to exercise rights shall be sent to:
15. Personal Data Security
15.1. POWERSET implements technical and organisational measures appropriate to the risks of personal data processing in order to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
15.2. Access to personal data is granted only to persons who require it for the performance of their work, contract or service.
16. Complaints
16.1. For questions concerning personal data processing, a person may contact POWERSET at:
16.2. A person has the right to lodge a complaint with the supervisory authority:
Data State Inspectorate
Elijas iela 17, Rīga, LV-1050
E-mail: [email protected]
17. Amendments to the Privacy Policy
17.1. POWERSET may update this Policy if POWERSET’s data processing operations, service providers, technologies or applicable legal requirements change.
17.2. The current version of the Policy is published on power-set.eu together with its version date.