Privacy policy

DEVORTEX SIA is the controller of the personal data described here: a Latvian company, registration number 40203682204, legal address Rēznas iela 10B - 62, Rīga, LV-1019, Latvia.

For anything about your data, write to info@devortex.io or call +371 28385705.

This website, devortex.io, and the contact you have with us by email, phone, Telegram or WhatsApp, before and during our work together.

When we build or run a solution for a client, the data that solution handles belongs to the client. There we act as the client's processor, under a data processing agreement that is part of our written agreement, and the client's own privacy notice applies to the people whose data it is.

What you send us

Through the contact form: your name, email address and message, and your company and phone number if you add them. By email, phone or messenger: whatever you choose to share.

When you become a client

The names, roles and contact details of the people we work with, our agreement, and invoices and payment records.

Technical data

When you open a page, the server that hosts the site records your IP address, browser, the page requested and the time, in a short-lived log that keeps the site running and secure.

Please do not send sensitive data, such as health information, through the form. We do not need it to understand a problem.

This site sets no cookies and uses no analytics, advertising pixels or other tracking. Its fonts and images are served from our own server, so opening a page sends nothing to anyone else. That is why there is no cookie banner.

If we ever add something that needs your consent, we will ask for it first and update this policy.

Each use has a legal basis under Article 6 of the GDPR:

Replying to you and preparing an offer

Steps you ask us to take before a possible agreement (Article 6(1)(b)). When you write about something other than work, our legitimate interest in answering people who contact us (Article 6(1)(f)).

Doing the work we agreed

Performing our agreement with you (Article 6(1)(b)). When the agreement is with your company, our legitimate interest in working with its people (Article 6(1)(f)).

Invoicing and accounts

Our legal obligations under Latvian accounting and tax law (Article 6(1)(c)).

Keeping the site running and secure

Our legitimate interest in a working, secure website (Article 6(1)(f)).

Legal claims

Our legitimate interest in establishing or defending them (Article 6(1)(f)).

We send no newsletters or marketing emails, we do not sell or rent personal data, we do not use it to train AI models, and we make no decisions about you by automated means alone.

Only the services we need to run the company, each bound to protect it:

Hosting

The provider whose servers in the European Union host this website and process the contact form.

Email

Our email provider, based in Switzerland, a country the European Commission recognises as protecting personal data adequately.

Messaging

Messages from the contact form are delivered to us through a messaging service. It stores them in data centres in the European Union.

Messengers you choose

If you write to us on Telegram or WhatsApp, that service handles the conversation under its own privacy policy.

Specialists

When we bring in a specialist for a project, they see only what they need for it and are bound to confidentiality.

Authorities

Public authorities, such as the State Revenue Service, when the law requires it.

We keep personal data in the European Economic Area or in Switzerland. The one exception is the messaging service that delivers contact form messages: the company behind it is based outside the EEA and may reach the data it stores in the European Union from there. It has appointed a representative in the EU, as the GDPR requires.

If you would rather your message did not leave the EEA, email it to info@devortex.io instead.

Enquiries that do not lead to work

12 months after our last contact, then deleted.

Client records

For the length of the agreement, and after it for as long as claims under it can be brought under Latvian law.

Invoices and accounting records

For the periods set by Latvian accounting and tax law.

Server logs

Up to 30 days.

Data a client gives us for a project

Until the agreement ends or the client asks us to delete it. A client who leaves can take a copy of their data, and we delete the rest when they ask.

Data travels over encrypted connections, and only the people who need it for the work can see it. If a breach ever puts your data at risk, we will tell you and the supervisory authority as the law requires.

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct it if it is wrong or incomplete
• delete it
• restrict how we use it
• hand it to you or to another company in a machine-readable format
• stop using it, where we rely on our legitimate interest

Write to info@devortex.io. We reply within one month, free of charge, and may first ask you to confirm who you are.

If you believe we handle your data unlawfully, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, pasts@dvi.gov.lv, or to the data protection authority of the EU country where you live or work. We would be glad to hear from you first.

This site and our services are meant for businesses. We do not knowingly collect personal data from anyone under 16.

When we change this policy, we publish the new version here and change the date at the top. If a change affects data you have already given us, we tell you directly.