PRIVACY POLICY

Last updated: 21 August 2025

Brette Haus SIA (“Brette Haus”, “we”, “us”, or “our”) is committed to protecting your personal data and ensuring transparency in how we process it. This Privacy Policy describes how we collect, use, share, and protect personal data in accordance with the General Data Protection Regulation (GDPR) and the Latvian Personal Data Processing Law.

1. Data Controller

• Entity: Brette Haus SIA
• Reg. No.: 40203200613
• Address: Rīga, Merķeļa iela 6 - 6, LV-1050, Latvia
• Data Protection Officer / Contact: Anastasia Tevs
• Email: we@secretwall.agency

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Name, email, phone number, and other contact details
• Information submitted via forms (client inquiries, job applications, partnership requests)
• Business and contractual information for providing services
• Technical and usage data (through cookies and analytics tools)

We do not knowingly collect personal data from children under 13 years of age.

3. Purposes and Legal Bases

We process your personal data for the following purposes:

• Provision of services (architectural and related services): Performance of a contract
• Marketing communications: Consent
• Analytics and website improvement: Legitimate interest
• KYC, bookkeeping, and other compliance matters: Legal obligation

Where we rely on consent, you may withdraw it at any time.

4. Data Sharing and Transfers

We only share your personal data with trusted subcontractors and service providers when necessary to provide our services.

All personal data is stored and processed within the European Union/EEA. We do not transfer personal data outside the EU/EEA.

5. Data Retention

We retain your personal data for as long as we have a contractual relationship with you, or until you withdraw consent, unless longer retention is required by law.

Please note that your erasure request may be refused in the following cases:

• There is an ongoing matter with you
• You have an open order
• You have not settled outstanding debts
• You have misused our services within the last four years
• The data is required for purchase-related bookkeeping purposes

6. Security

We apply industry-standard technical and organizational measures to protect your personal data, including secure servers, encryption, access restrictions, and regular monitoring.

7. Cookies and Tracking

Our website uses cookies and similar technologies managed via CookieScript. These are used for:

• Improving site performance and analytics
• Enabling website functionality
• Supporting marketing (with your consent)

You can manage or withdraw your cookie consent at any time via the cookie banner.

8. Your Rights

You have the following rights under GDPR:

• Access: Obtain a copy of your data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to exceptions in Section 5)
• Restriction: Limit how we use your data
• Objection: Object to processing based on legitimate interest or direct marketing
• Portability: Receive your data in a structured, commonly used format where processing is automated and based on consent or contract
• Withdraw consent: At any time for processing based on consent

To exercise your rights, contact us at we@secrtwall.agency.

9. Supervisory Authority and Dispute Resolution

If you believe your data protection rights have been violated, you may contact the Latvian supervisory authority:

Datu valsts inspekcija (Data State Inspectorate)

• Website: www.dvi.gov.lv
• Email: info@dvi.gov.lv
• Phone: +371 6722 3131

You may also submit a complaint to the Consumer Dispute Resolution Commission of the Republic of Latvia or through the EU Online Dispute Resolution platform at https://ec.europa.eu/consumers/odr.

10. Updates

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. The latest version will always be available on our website.