Privacy notice
1. Controller
Dracarys SIA, Lāčplēša iela 20A - 6, Riga, LV-1011, Latvia, Reg. No. 40203701011, e-mail info@dracarys-group.eu, is the controller within the meaning of Article 4(7) GDPR. The company is not obliged to appoint a data protection officer (Article 37 GDPR). Requests concerning data protection may be addressed to the controller at the above address or e-mail.
2. Overview
This website is a static information page. It does not use cookies, does not set tracking or analytics tools, does not embed social-media plug-ins and does not load fonts or scripts from third-party servers. All fonts and scripts are served from our own hosting. Personal data is processed only in two situations: technically, when you access the website (server log files), and when you contact us.
3. Access to the website – server log files
When you visit this website, the web server of our hosting provider automatically processes data transmitted by your browser: the IP address of the requesting device, date and time of the request, the page or file requested, the HTTP status code and volume of data transferred, the referring URL, and the browser type, version and operating system (user agent).
Purpose and legal basis. Processing is necessary to deliver the website to your device, to ensure the stability and security of the system and to detect and defend against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the secure and functional provision of the website. The processing is technically indispensable; there is therefore no possibility to object without ceasing to use the website.
Storage period. Log files are retained by the hosting provider for a maximum of 30 days and then deleted or anonymised, unless a specific security incident requires longer retention as evidence.
Recipient. The website is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Geneva, Switzerland, acting as our processor under a data processing agreement pursuant to Article 28 GDPR. Servers are located in Switzerland. Switzerland is recognised by the European Commission as providing an adequate level of data protection (Commission Decision 2000/518/EC, confirmed 2024), so the transfer is permitted under Article 45 GDPR.
4. Contact by e-mail, telephone or contact form
If you contact us, we process the data you provide – name, company, e-mail address, telephone number, country or market, and the content of your message – in order to handle your enquiry and any follow-up questions.
Contact form. When you submit the form, the data you entered is transmitted over an encrypted connection to our web server and forwarded from there by e-mail to our mailbox info@dracarys-group.eu. The data is not stored on the web server beyond this forwarding. Your IP address and the time of submission are included in the e-mail to allow us to trace misuse. The consent box documents that you have read this notice before sending.
Legal basis. Where your enquiry aims at concluding or performing a contract with us (for example a co-investment, acquisition or advisory mandate), Article 6(1)(b) GDPR applies. In all other cases the legal basis is Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries addressed to us. If you have given consent, Article 6(1)(a) GDPR applies; consent may be withdrawn at any time with future effect.
Storage period. We delete enquiry data once the matter is finally dealt with and no further retention is required. Correspondence that is relevant to a contract or under commercial and tax law is retained for the statutory period – in Latvia generally five years after the end of the financial year concerned (Accounting Law, Grāmatvedības likums; Law on Taxes and Duties, likums “Par nodokļiem un nodevām”).
Recipients. E-mail is hosted by Infomaniak Network SA, Switzerland (see section 3). Within the company only staff who handle your enquiry have access. We do not pass data to third parties unless this is necessary to perform a contract with you (for example notaries, lawyers, architects or banks involved in a transaction), we are legally obliged to do so, or you have consented.
5. Prospective investors and business partners
If a business relationship develops, we process further data required for the transaction – identification documents and beneficial ownership information, proof of origin of funds, correspondence and contract documents. This processing is based on Article 6(1)(b) GDPR (contract) and Article 6(1)(c) GDPR in conjunction with the Latvian Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing (Noziedzīgi iegūtu līdzekļu legalizācijas un terorisma un proliferācijas finansēšanas novēršanas likums), which obliges us to identify and verify contracting parties in real estate transactions. Such data is retained for five years after the end of the business relationship as required by that law. You will receive separate, specific information at the start of any business relationship.
6. No automated decision-making, no profiling
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
7. Transfers to third countries
Apart from hosting in Switzerland (adequate country, Article 45 GDPR), we do not transfer personal data to countries outside the European Economic Area. Should this become necessary in an individual case, we will ensure appropriate safeguards under Articles 44 to 49 GDPR and inform you accordingly.
8. Your rights
Under the GDPR you have the following rights vis-à-vis the controller:
- Access (Article 15): to obtain confirmation whether we process your data and, if so, a copy of it and the related information.
- Rectification (Article 16): to have inaccurate data corrected and incomplete data completed.
- Erasure (Article 17): to have your data deleted where one of the grounds set out there applies and no statutory retention obligation stands in the way.
- Restriction of processing (Article 18).
- Data portability (Article 20): to receive data you provided to us in a structured, commonly used, machine-readable format.
- Objection (Article 21): to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will then cease processing unless we can demonstrate compelling legitimate grounds.
- Withdrawal of consent (Article 7(3)): at any time, with effect for the future.
To exercise these rights, please contact us at info@dracarys-group.eu or by post at the address in section 1. We will respond within one month (Article 12(3) GDPR).
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Article 77 GDPR). The supervisory authority responsible for Dracarys SIA is the Data State Inspectorate of the Republic of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia, www.dvi.gov.lv, e-mail pasts@dvi.gov.lv.
10. Security
This website is delivered exclusively over an encrypted connection (TLS/HTTPS). We apply appropriate technical and organisational measures pursuant to Article 32 GDPR to protect your data against loss, misuse and unauthorised access.
11. Changes to this notice
We will update this privacy notice whenever changes to the website or to the legal framework make this necessary. The current version is always available at this address.