Controller
Controller of personal data: Mēbeļu Tīrīšana Rīga (mebelutirisanariga.lv).
If you have questions about data processing or wish to exercise your rights, get in touch using the form on the contact page.
What data we process
- In the request form: name, phone number, address, the chosen service, when the service is needed, and the description you write (for example the furniture, fabric, stain, smell).
- Photos you add to the form: usually the furniture, a stain or a care label. They may also show the room and objects, and the photo file may contain technical data, such as the time it was taken.
- Technical data: IP address, browser and device information and the time of the request, processed by the hosting provider to keep the site running and secure.
- Cookies and browser storage, as described on the cookies page.
Please do not give data in the form that is not needed to assess the job, especially health or other sensitive data. Before sending a photo, make sure it does not show people, documents, screens or anything else you do not wish to show.
Why and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Answering the request, getting in touch, giving a price and agreeing the job | Form data and photos | Steps taken at your request before entering into a contract, GDPR Article 6(1)(b) |
| Carrying out the job | Form data, address, photos | Performance of a contract, GDPR Article 6(1)(b) |
| Meeting accounting and tax requirements | Transaction data | Legal obligation, GDPR Article 6(1)(c) |
| Keeping records of requests, resolving disputes, site security | Form and technical data, photos | Legitimate interests, GDPR Article 6(1)(f) |
| Visit statistics, if used | Cookie data | Consent, GDPR Article 6(1)(a) |
Who we pass data to
- The specialist who carries out the job you requested. They receive only the data and photos needed to fulfil the request.
- Processors we use to run the site and handle requests: providers of site hosting, form processing and automation, data and image storage and messaging services. They process the data only on our instructions and in accordance with GDPR Article 28.
- Public authorities, only where the law requires it.
We do not sell or publish your data and photos, and we do not pass them to third parties for marketing purposes.
Data transfers outside the European Economic Area
Some service providers may process data outside the European Economic Area. In such cases, the transfer takes place only with the safeguards provided for in Chapter V of the GDPR, for example on the basis of a European Commission adequacy decision or standard contractual clauses.
How long we keep data
- Photos added to a request are deleted from our storage automatically 14 days after upload. Requests that did not lead to a job are kept for no longer than 24 months after the last contact, and then deleted.
- Data connected with a completed job is kept for as long as accounting and tax law requires, or until the limitation period for possible claims ends.
- Technical data is kept for as long as needed for site security.
You can ask for data and photos to be deleted earlier, unless the law requires them to be kept.
Your rights
- to access your data and receive a copy of it;
- to correct inaccurate data;
- to ask for data to be deleted;
- to ask for processing to be restricted;
- to object to processing based on legitimate interests;
- to receive your data in a portable format;
- to withdraw consent at any time, if processing is based on it.
We respond to a request without undue delay and within one month at the latest, as the GDPR requires. If you believe your data is being processed incorrectly, we ask you to contact us first; you also have the right to lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).
Whether you have to give data
Giving data is voluntary, but without a phone number or other contact details we cannot answer the request. Photos are optional. We do not carry out automated decision-making or profiling that would have legal effects for you.
Changes
We may update this policy if the services we use or the law change. The current version is always available on this page. Version: 07.11.2026
Sources
- General Data Protection Regulation (EU) 2016/679: legal basis (Art. 6), processors (Art. 28), data subject rights (Arts. 15–22), reply within one month (Art. 12(3)), transfers to third countries (Chapter V). checked 30 October 2026
- Data State Inspectorate - supervisory authority for complaints checked 30 October 2026