Sonders Bureau SIA, registration number 40203165252 (hereinafter referred to as “the Controller” or “Sonders Bureau”), processes personal data provided by users of the website www.sonders.lv (hereinafter referred to as “the User” or “the Website User”).
We take the protection of your privacy and personal data very seriously. We process your data in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation – “GDPR”), as well as other applicable laws of the Republic of Latvia in the field of data protection and privacy.
This Privacy Policy explains how we collect, process, use, and protect your personal data when you visit or interact with our website, contact us by phone, email, or in any other way. It applies regardless of the form or medium in which you provide your data.
We reserve the right to update this Privacy Policy from time to time. We encourage you to review this page periodically to stay informed about any changes.

1. Identity and Contact Details of the Controller

Controller: Sonders Bureau SIA Registration number: 40203165252 Address: Duntes iela 17, Riga, LV-1005, Latvia
Website: www.sonders.lv
Email: info@sonders.lv
Phone: +37167076377

2. Purposes and Legal Basis for Processing Personal Data

When you contact us by telephone, through the website’s contact forms, by email, or by any other means, we collect and process your personal data for the following purposes:

• To identify you as a client or potential client;
• To prepare, conclude, and perform legal service contracts;
• To provide legal consultation and other services;
• To handle customer inquiries, requests, and complaints;
• To improve client relations and service quality;
• To manage invoicing, payments, and accounting;
• To maintain and develop our website;
• For internal business planning, analytics, and record-keeping;
• To comply with legal obligations and respond to requests from public authorities.

The legal grounds for processing your data are primarily:

• The performance or conclusion of a contract with you;
• Compliance with legal obligations that apply to us;
• Our legitimate interests (for example, to verify your identity, ensure service quality, or analyse website performance);
• Your consent, where applicable.

3. Categories of Personal Data Processed

We may process the following categories of personal data:

• Name and surname;
• Personal identification number (if provided);
• Email address and/or postal address;
• Telephone number;
• IP address;
• Content of messages, inquiries, or documents you send to us;
• Any other information you voluntarily provide.

4. Categories of Recipients of Personal Data

Your personal data is accessible only to those employees of Sonders Bureau who need it to perform their professional duties.
We may engage trusted external service providers (data processors) for specific tasks such as website hosting, IT support, or accounting. These providers are contractually obliged to process your data only according to our instructions and under our strict supervision. They may not use your data for their own purposes.

5. Categories of Data Subjects

This Privacy Policy applies to:

• Current, former, and prospective clients of Sonders Bureau;
• Any other individuals who contact us or interact with our website.

6. Transfer of Data Outside Latvia

We do not plan to transfer your personal data outside Latvia, the European Union, or the European Economic Area, nor to any international organisation.
However, our website may use services provided by third parties (such as Google Analytics, Google Maps, or social media plugins). These providers may transfer data outside the EU/EEA. We cannot fully control or guarantee their data transfers. For more information, please refer to the privacy policies of the respective third parties.

7. Duration of Data Storage

We retain your personal data only for as long as it is necessary for the purposes for which it was collected or as required by law.
Once the original purpose no longer applies and there is no legal obligation to keep the data, we will delete or anonymise it. In general, we delete personal data no later than three months after the need for retention ends, unless longer storage is required for accounting, legal disputes, or other statutory obligations.

8. Your Rights as a Data Subject

You have the right to:

• Request access to your personal data;
• Request rectification of inaccurate or incomplete data;
• Request deletion of your data (where applicable);
• Request restriction of processing;
• Object to the processing of your data;
• Receive your data in a structured, commonly used, and machine-readable format (data portability), where technically feasible.

To exercise any of these rights, please submit a written request to us in person (at our office with proof of identity), by post, or by email signed with a secure electronic signature. We will verify your identity and respond within one month in accordance with the law.
In certain cases (e.g., national security, public order, or ongoing legal proceedings), your rights may be restricted by law.

9. Third-Party Websites and Cookies

Our website may use third-party cookies or similar technologies with your consent to provide a better user experience. These cookies are governed by the privacy policies of the respective third parties. We are not responsible for the privacy practices of external service providers.

10. Right to Lodge a Complaint

If you believe that we have not processed your personal data lawfully, you have the right to lodge a complaint with the supervisory authority:
Data State Inspectorate (Valsts datu inspekcija) Address: Blaumaņa iela 11/13, Riga, LV-1011 Email: info@dvi.gov.lv

11. Changes to the Privacy Policy

We may update or supplement this Privacy Policy from time to time to better reflect our data processing practices. We recommend that you review this page occasionally to stay informed about how we protect your personal information on our website.