CADRIVA
ENLV

Legal

Privacy Policy

Last updated: 12 September 2026

This policy explains how personal data is handled when you visit this website, send an enquiry through the contact form, or communicate with us by email about CADRIVA services.

CADRIVA is a business-to-business service offering. We work with companies and with the people who represent them.

1. Who is responsible for your personal data

SIA Asteres is the provider of CADRIVA services and the controller of the personal data described in this policy.

  • Controller: SIA Asteres (trading as CADRIVA)
  • Registration number: 44103137920
  • Address: Gaismas iela 19 k-10 - 15, Ķekava, Ķekavas nov., LV-2123, Latvia
  • Contact for privacy matters: kkrumkalna@gmail.com

2. What personal data we process

We process the data you choose to provide, together with a limited amount of technical information that accompanies an enquiry.

  • Contact form data: your name, company, work email address, company size, the topics you select, and the details you write in the message field.
  • Language of the enquiry (English or Latvian), so that we reply in the language you used.
  • First-party enquiry attribution: the path of the page recorded with your enquiry — the landing page saved earlier in your visit if a campaign record exists for that visit, otherwise the page you were on when the enquiry was prepared — together with the hostname of the website that referred you (not the full referring address) and campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) where these are present.
  • Anti-abuse information generated by our own system: a one-way hash derived from your email address and message, used to detect a duplicate submission, and a count of recent submissions from the same email address, used to limit repeated sending.
  • The outcome of the emails triggered by your enquiry (for example whether the notification and acknowledgement were sent, skipped or failed, and any technical error text).
  • Email correspondence: anything you include when you write to us directly, and our replies.

3. Why we process it and on what lawful basis

We rely on the following lawful bases under the General Data Protection Regulation (GDPR).

  • Responding to enquiries and business correspondence — legitimate interests (Article 6(1)(f)). Our interest is to answer business enquiries and to communicate with the representatives of companies interested in our services. Where your enquiry relates to a possible engagement and you would personally be the contracting party (for example a sole trader contracting in their own name), we process the data to take steps at your request prior to entering into a contract (Article 6(1)(b)).
  • Managing an ongoing business relationship and delivering agreed work — legitimate interests (Article 6(1)(f)) in maintaining contact with client representatives; or performance of a contract (Article 6(1)(b)) where you are personally the contracting party.
  • Understanding how enquiries reach us — legitimate interests (Article 6(1)(f)). The attribution data described above tells us which page and which campaign or referring website an enquiry came from, so that we can judge which of our own pages and outreach efforts are useful. This is a business-analysis purpose, not a security measure, and we do not use it to build a profile of you or to target advertising.
  • Preventing duplicate and abusive submissions and keeping the website and our systems secure — legitimate interests (Article 6(1)(f)) in protecting our systems against spam and misuse.
  • Complying with legal obligations (Article 6(1)(c)) where applicable, for example accounting and tax record-keeping obligations relating to invoiced services, and responding to lawful requests from competent authorities.

4. What is required and what happens if you do not provide it

The contact form requires four fields: your name, your company, a working email address and your company size. Without a valid email address we cannot reply at all.

The topic selections and the message details are optional. Giving them is up to you; if you leave them out, our answer will necessarily be more general.

Attribution data is not something you fill in. The page path recorded with an enquiry is present in the ordinary case; the referring website hostname and campaign parameters are present only when your visit actually carries them.

5. Cookies, browser storage and website analytics

This website does not use Google Analytics, Google Tag Manager, the Meta Pixel, the LinkedIn Insight Tag, or any other external marketing or analytics system, and it does not run a newsletter.

We do not set advertising or cross-site tracking cookies.

When the address you arrive with contains campaign parameters, the attribution values described in section 2 are stored in your browser's session storage under the key "cadriva-attribution", so that the information is still available if you submit the form after browsing several pages. Session storage is cleared by your browser when you close the tab, and you can clear it at any time through your browser settings. If you never arrive with campaign parameters, nothing is stored in your browser by this mechanism.

The website also uses a small internal event layer in the page itself to note interactions such as starting or submitting the contact form and clicking a call-to-action. These events contain no data you typed into the form and are not sent to any external analytics provider.

6. Who receives your personal data

We do not sell personal data and we do not share it for advertising purposes. Data may be accessible to the following categories of recipients:

  • Authorised personnel of SIA Asteres who handle enquiries and client work.
  • Our website hosting provider, which operates the servers that deliver the website and receive form submissions.
  • Our database provider, which stores submitted enquiries.
  • Our transactional email provider, which delivers the notification to us and the acknowledgement to you.
  • Professional advisers and competent authorities, where we are legally required or legally entitled to disclose information.

7. Storage location and international transfers

Our hosting, database and email delivery services are provided by third-party technology providers, which may process data outside Latvia. Processing outside Latvia but within the European Economic Area (EEA) is not an international transfer under the GDPR and needs no additional transfer safeguard. Processing outside the EEA is an international transfer and requires a transfer mechanism such as an adequacy decision or standard contractual clauses.

We are not in a position to state in this policy, for every provider, whether data is processed inside or outside the EEA, nor to confirm the specific transfer mechanism applied where processing takes place outside it. We therefore do not claim that all data is stored exclusively within the European Union or the EEA, and we do not claim that transfer safeguards have been verified for each provider. We are working to establish and document this.

If you need confirmation of where a specific category of data is stored, or of the transfer mechanism applied to it, please write to kkrumkalna@gmail.com and we will provide the information available to us.

8. How long we keep it

We do not keep personal data for a fixed period regardless of context. We apply the following criteria:

  • Enquiries that do not lead to an engagement are kept only as long as they remain relevant for the business conversation they belong to, and are deleted when that is no longer the case.
  • Correspondence and records relating to an engagement are kept for the duration of the relationship and afterwards for as long as needed to deal with questions, obligations or disputes arising from it.
  • Records that must be kept to satisfy accounting, tax or other legal obligations are kept for the period required by the applicable law.
  • Anti-abuse information is kept only as long as it serves its protective purpose.

9. Your rights

Subject to the conditions in the GDPR, you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Have inaccurate data corrected and incomplete data completed.
  • Have data erased where the grounds for erasure apply.
  • Restrict processing in the circumstances set out in the GDPR.
  • Receive data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller, where the right to portability applies (that is, where processing is based on consent or on a contract and carried out by automated means).
  • Object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests.
  • Withdraw consent at any time where we rely on consent for a specific processing activity; withdrawal does not affect the lawfulness of processing carried out before it.

10. How to exercise your rights, and how to complain

Write to kkrumkalna@gmail.com with your request. We may need to ask for information to confirm who you are before we act on a request.

You also have the right to lodge a complaint directly with the Latvian supervisory authority, Datu valsts inspekcija, without contacting us first.

11. Security

Enquiry data is transmitted over an encrypted connection and stored in a database that is not publicly readable. Access is limited to authorised personnel and to the service providers described above. No system can be guaranteed to be completely secure, and we ask you not to send sensitive personal data through the contact form.

12. Changes to this policy

We may update this policy as our services or systems change. The date at the top of the page shows when it was last revised. Material changes will be reflected on this page.

Book a Discovery Call