Privacy policy
Who processes the data
gaussworkshop, SIA, reg. No. 40203601542, VAT No. LV40203601542, Rīga, Krustpils iela 54c, LV-1057. Email: info@gaussworkshop.com · Phone: +371 26996247.
This policy follows Regulation (EU) 2016/679 (the General Data Protection Regulation) and the laws of the Republic of Latvia.
What data we collect
To place an order: first name, surname, email, phone, delivery address or parcel machine, and the contents and total of the order. For companies also the company name, registration number and VAT number for the invoice.
In the design tool: the files you upload and the text of your artwork.
In the contact form: name, email, phone and the text of the message, so that we can reply.
In the withdrawal form: name, email, order number and the list of items.
For the site to work: IP address and the cookies needed for the cart and the language choice. With your consent, also a cookie that remembers where you came from (a search engine, a social network or a link), so that we know what brings buyers in. That data stays in our shop. You can change your consent at any time through the “Cookie settings” link at the bottom of the page.
We do not buy or collect data you have not given us. We do not profile you and we make no automated decisions.
Why we need it
| Purpose | Legal basis |
|---|---|
| Fulfilling the order: production, delivery, correspondence about the order | performance of the contract (Article 6(1)(b) GDPR) |
| Accounting, invoices, withdrawal notices | legal obligation (Article 6(1)(c)) |
| Answering a question from the contact form | our legitimate interest in replying; for questions about an order, steps before concluding a contract |
| Cart and language cookies | the shop does not work without them |
| The cookie that remembers the source of the visit | consent (Article 6(1)(a)), which you can withdraw at any time |
Who we share it with
- Maksekeskus AS (Estonia) — to process payments. It is our authorised processor: we pass it the personal data needed to make the payment.
- The carrier (Omniva, DPD, Venipak, Unisend) — to deliver the order.
- Our hosting provider — to run the site.
- Our accounting service — where bookkeeping requires it.
We do not sell data and we do not pass it on for advertising. We do not transfer data outside the European Economic Area. We disclose data to state and law enforcement authorities only where the law requires it.
How long we keep it
- Order data and withdrawal notices — five years, as the accounting rules require.
- Artwork — for as long as it may be needed for a claim or a repeat order; we will delete it earlier at your request.
- Messages from the contact form — for as long as they are needed to settle the matter.
- Cookies: language choice — one year, consent — 180 days, the source of the visit — until the end of the visit (30 minutes).
When the period ends we delete or anonymise the data.
Your rights
You may ask for access to your data, for it to be corrected, erased or its processing restricted, receive it in a machine-readable form, object to processing based on a legitimate interest, and withdraw your cookie consent at any time.
Write to info@gaussworkshop.com — we reply within a month. If the reply does not satisfy you, you can turn to the State Data Inspectorate (dvi.gov.lv).
Data security
The site runs over an encrypted connection (HTTPS). Only staff who need it for their work have access to order data. Artwork files are stored on our server under randomly generated names and are not published on the site.
Changes to this policy
We may refine this policy. The current version is always on this page; we announce material changes on the site. Edition: October 2026.