Privacy Policy

Privacy Policy

for personal-data processing on site-building.com and related services

Revision dated 16.09.2026

1. Controller and scope

1.1. This Privacy Policy explains how MEDIA IEU, SIA processes personal data when individuals use site-building.com, contact the company, order website development, additional services, promotion or advertising, make payments or receive technical support.

1.2. Controller: MEDIA IEU, SIA, registration number 40203268669, Andreja Pormaļa iela 15, Jēkabpils, LV-5201, Latvia. Data-protection contact: info@site-building.com.

1.3. Personal data is processed under Regulation (EU) 2016/679 (GDPR), Latvian law and other applicable rules. This Policy applies together with the Public Agreement and Cookie Policy.

2. Whose data we process

2.1. We may process data of website visitors, prospective customers, customers, customer representatives and contacts, suppliers and other persons whose data is required for communication or performance of an order.

2.2. Where a person acts for a legal entity, we may process their name, role, contact details and information about representative authority. Our services are not specifically directed at children.

3. Categories of personal data

3.1. Depending on the circumstances, data may include name, surname, email, telephone number and communication channel; company details, registration number, VAT number and address; order, tariff, technical specification, materials and correspondence; payment status, amount, currency and transaction identifier; IP address, browser and device data, error and security logs; cookie and analytics data; and credentials supplied by the customer for the website, hosting, domain, APIs, CRM, analytics or advertising systems.

3.2. Full payment-card details are normally processed directly by the payment provider rather than by our website.

3.3. Identity or authority documents are requested only where reasonably necessary for fraud prevention, domain or access management, payment risk, legal compliance or third-party provider requirements.

4. Sources of data

4.1. Most data is obtained directly from the individual through forms, the technical specification, email, WhatsApp, the payment process or other communications.

4.2. Technical data may be collected automatically from the browser, device, server infrastructure and security tools. Certain information may also be received from payment providers, domain registrars, hosting and other technical suppliers and, where reasonably necessary for company verification, from public registers.

5. Purposes and legal bases

5.1. Pre-contractual steps and contract performance: enquiries, orders, invoices, technical specifications, development, delivery, support and administration. Legal basis: Article 6(1)(b) GDPR.

5.2. Legal obligations: accounting, tax, document-retention and cooperation with competent authorities. Legal basis: Article 6(1)(c) GDPR.

5.3. Legitimate interests: security, fraud prevention, incident investigation, service quality, protection of legal claims and reasonable business administration. Legal basis: Article 6(1)(f) GDPR, balanced against the individual's rights and interests.

5.4. Consent: optional analytics, marketing technologies and commercial communications. Legal basis: Article 6(1)(a) GDPR.

6. Whether data must be provided

6.1. Where certain data is objectively required to place an order, issue an invoice, register a domain, connect an external service or perform technical work, that data is necessary for the relevant service.

6.2. Consent to optional analytics or marketing is not a condition of receiving the core service.

7. Recipients and processors

7.1. Data is accessed only by authorised personnel and contracted specialists to the extent necessary for their tasks.

7.2. Data may be disclosed to hosting and cloud providers, domain registrars, payment providers, email and communication services, accounting providers, security and anti-spam tools, analytics and advertising platforms and other technical suppliers.

7.3. Data may be disclosed to public authorities, courts or law-enforcement bodies where required by law or necessary to protect legal claims. Each recipient receives only the data necessary for the relevant function.

8. International transfers

8.1. Where possible, we use providers in the European Economic Area. Where a technical service involves processing outside the EEA, an applicable transfer mechanism is used.

8.2. Where no European Commission adequacy decision applies, the European Commission Standard Contractual Clauses and, where required, supplementary safeguards may be used.

9. Retention periods

9.1. Data is not retained longer than necessary for its purpose unless a longer period is required by law or justified for protection of legal claims.

9.2. Contract, payment and accounting data is retained for periods required by applicable accounting and tax rules. Project materials and correspondence may be kept for a reasonable period for warranty matters, technical history, repeat orders and legal claims.

9.3. Technical logs are retained for a limited period. Credentials and passwords no longer required for active support are deleted, returned or deactivated within a reasonable period unless another lawful basis applies.

10. Cookies and similar technologies

10.1. The website may use cookies, localStorage, pixels, tags and similar technologies. Strictly necessary technologies are used for operation of the website and expressly requested functions.

10.2. Optional analytics and marketing technologies are used only where the required consent has been obtained. Details are provided in the separate Cookie Policy.

11. Marketing communications

11.1. Commercial communications are sent only where an applicable legal basis exists. Where the basis is consent, it may be withdrawn at any time.

11.2. Technical, contractual and payment notifications required for delivery of a service are not marketing communications.

12. Automated decisions

12.1. MEDIA IEU, SIA does not use solely automated decisions producing legal or similarly significant effects for an individual without separate notice and an appropriate legal basis.

12.2. Security, anti-fraud or advertising tools may use automated technical signals but are not by themselves intended to make such a final decision.

13. Data-subject rights

13.1. Individuals may request access to their data, correction of inaccurate data and, where applicable, erasure, restriction, portability and objection to processing based on legitimate interests.

13.2. Consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.

13.3. Requests: info@site-building.com. To protect data, we may reasonably request additional information to verify identity.

13.4. We respond within GDPR time limits, generally within one month from receipt unless a GDPR extension applies.

14. Complaints

14.1. Privacy concerns may be sent to MEDIA IEU, SIA at info@site-building.com.

14.2. A complaint may also be lodged with the Latvian Data State Inspectorate:
Datu valsts inspekcija
Elijas iela 17, Rīga, LV-1050, Latvia
Email: pasts@dvi.gov.lv
Phone: +371 67223131

14.3. Where provided by law, an individual may also contact the competent supervisory authority of another EU Member State.

15. Data security

15.1. We use reasonable technical and organisational measures such as access controls, secure connections, updates, event logs, backups and other safeguards appropriate to the risk.

15.2. No internet system can guarantee absolute security. If a personal-data breach occurs, we assess it and, where required by the GDPR, notify the supervisory authority and/or affected individuals.

16. Changes to the Policy

16.1. The Policy may be updated when services, functionality, suppliers, technology or law changes. The current version is published with its revision date.

16.2. Where new processing requires consent, consent is requested before that processing begins.

17. Contacts and language versions

17.1. Personal-data contact: info@site-building.com.

17.2. MEDIA IEU, SIA
Registration number: 40203268669
Andreja Pormaļa iela 15, Jēkabpils, LV-5201, Latvia
Email: info@site-building.com
WhatsApp: +371 25 594 318

17.3. The Latvian-language version is the legally primary and controlling version. Other language versions are provided for convenience and information.

MEDIA IEU, SIA