Privacy Policy

1. General provisions

1.1. This Privacy Policy describes how SIA “Mūsu Auto Valmiera”, Reg. No. 44103080466, legal address: Rīgas iela 86A, Valmiera, LV-4201 (hereinafter – “Data Controller”) collects, processes, and stores personal data obtained from its clients and website visitors (hereinafter – “Data Subject” or “You”) via www.musuautovalmiera.lv.

1.2. Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, such as collection, recording, storage, use, deletion, etc.

1.3. The Data Controller ensures that personal data is processed in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

2. Collection, processing, and storage of personal data

2.1. The Data Controller mainly collects personal data through:

• the website www.musuautovalmiera.lv,
• email (info-valmiera@mmg.lv),
• direct communication (including paper form),
• social networks,
• service applications (e.g., service bookings, test drives, etc.).

2.2. By using the website and communication tools, you agree to the terms of this Privacy Policy.

2.3. The Data Subject is responsible for the accuracy and truthfulness of the provided data. Providing false information is considered a violation of this Privacy Policy. Any changes to personal data must be reported immediately.

2.4. The Data Controller is not liable for losses resulting from providing false information.

3. Processing of customer personal data

3.1. The Data Controller may process the following personal data:

• Name and surname
• Contact information (phone, email)
• Vehicle information (e.g., registration number, make, VIN)
• Gift card purchase data
• Service usage data (service bookings, test drives, service history, etc.)
• Payment information
• Information from communication with customer support

3.2. The Data Controller has the right to verify data accuracy using public registers.

3.3. The legal basis for data processing is Article 6(1)(a), (b), (c), (f) of the GDPR.

3.4. Personal data is processed and stored:

• as long as necessary to provide the requested service;
• as required by applicable laws (e.g., Accounting Law);
• until consent is withdrawn, if there are no other legal grounds for processing.

3.5. The Data Controller has the right to share personal data with partners providing the service, such as:

• accountants,
• courier services,
• IT solution providers,
• payment processing provider Maksekeskus AS (makecommerce.lv).

Data may also be shared with government authorities in accordance with legal requirements.

3.6. The Data Controller implements organizational and technical measures to protect data from unauthorized access, destruction, or disclosure.