Legal information
Privacy Policy
How SIA “Biroja Tehnikas Eksperts” processes personal data on the bte.lv website, in the online shop and in the customer account. Effective from 30 September 2026.
1. Controller
1.1. The controller of personal data is SIA “Biroja Tehnikas Eksperts”, registration No. 50103235771, registered office: Mūkusalas iela 31, Riga, LV-1004, Latvia (“BTE”).
1.2. For questions about the processing of personal data, contact us by e-mail at info@bte.lv, by phone on +371 67600655 or by letter to the registered office.
1.3. This policy applies to personal data that we process on the website bte.lv (the “Website”), in its online shop and customer account, and when receiving requests and communicating with customers. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) and the laws of the Republic of Latvia.
2. What data we process
2.1. Order data. When placing an order you provide your name, e-mail address, phone number and address. If you buy on behalf of a company, you also provide the company name, registration and VAT number and registered address. We also process the contents of the order, the chosen delivery method (branch, parcel locker or delivery address), the payment method, the payment status and any notes you add to the order.
2.2. Customer account data. E-mail address and password (stored in encrypted form only), order and invoice history, the prices applicable to the customer, rented equipment and its service history, service requests and the wishlist.
2.3. Request data. In the request forms — for equipment repair, toner cartridge refilling, equipment rental and general enquiries — you provide your name, phone number, e-mail, address and the text of your message; in a rental request, also the chosen equipment and the desired rental period.
2.4. Communication data. The content of e-mails, calls and other communication when you contact us by e-mail or phone.
2.5. Job applicant data. If you respond to a vacancy, we process your CV and the information provided in your application.
2.6. Technical data. The Website’s server logs record the IP address, time of visit, page requested and browser type. The Website also uses necessary cookies — see section 6.
2.7. BTE does not receive or store payment card details or online banking credentials — these are processed by the payment service provider.
2.8. The data requested in the order and request forms is necessary for us to fulfil the order or respond to the request. Without it, we cannot accept the order or request.
3. Purposes and legal bases
3.1. Conclusion and performance of a contract (Article 6(1)(b) GDPR): accepting, charging for and delivering orders, issuing invoices, maintaining the customer account, handling service, refill and rental requests, fulfilling warranty obligations and communicating about the order.
3.2. Compliance with a legal obligation (Article 6(1)(c)): accounting and tax records, retention of transaction documents, handling of consumer claims and withdrawals, and responding to lawful requests from public authorities.
3.3. Legitimate interests (Article 6(1)(f)): answering questions and enquiries, communicating with the contact persons of corporate customers, Website security and fraud prevention, debt recovery, and protecting our legal interests in the event of a dispute.
3.4. Consent (Article 6(1)(a)): sending commercial communications where you have agreed to this, and keeping a job applicant’s data for future recruitment. Consent can be withdrawn at any time by writing to info@bte.lv; withdrawal does not affect the lawfulness of processing carried out before it.
3.5. We may send existing customers information about similar goods and services in accordance with the Law on Information Society Services of Latvia. You can opt out of such communications at any time.
3.6. We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you.
4. Who receives the data
4.1. We disclose personal data only to the extent necessary for the purposes set out in section 3:
Payment processing — the payment institution Maksekeskus AS (Estonia), if you choose to pay online.
Delivery — SIA “Omniva”, if you choose delivery to a parcel locker, or another courier company, such as SIA “DPD Latvija”, if you choose its delivery service. The carrier receives the recipient’s name, phone number, e-mail and the delivery location.
Maintenance of information systems — companies that develop, maintain and host the Website and our customer relationship management (CRM) system, including the hosting provider DigitalOcean. These companies process data only on our behalf and under a contract.
Professional service providers — providers of accounting, audit, legal and debt recovery services, where necessary.
Public authorities — in the cases laid down by law, for example the State Revenue Service.
4.2. We store data within the European Union and the European Economic Area. If a service provider processes data outside it, we apply the safeguards provided for in the GDPR to the transfer — a European Commission adequacy decision or standard contractual clauses.
4.3. We do not sell personal data or pass it to third parties for their marketing purposes.
5. How long we keep data
5.1. We keep data for as long as necessary for the purpose for which it was collected, or for as long as required by law:
Order, invoice and payment data — five years after the transaction, in accordance with the Accounting Law of Latvia.
Contract and warranty data — for the term of the contract and thereafter for as long as claims may arise from it.
Customer account data — for as long as the account is active. After the account is closed, we delete the data that we are not required by law to keep.
Requests and correspondence — up to two years after the last contact, where the request did not lead to a contract.
Job applicant data — until the end of the recruitment process and no longer than six months after it; longer only with your consent.
Server logs — up to 12 months.
5.2. When the retention period ends, we delete the data or make it non-identifiable.
6. Cookies
6.1. The Website uses only the cookies that are necessary for it to work. No analytics, advertising or third-party tracking cookies are used on the Website, so consent to cookies is not requested.
6.2. The following cookies are used on the Website:
Session cookie — allows the Website to remember your cart, wishlist, chosen price display (with or without VAT) and the fact that you are signed in to the customer account. It is deleted approximately two hours after your last action on the Website.
Security cookie (XSRF-TOKEN) — protects the Website’s forms against forged requests. It has the same lifetime as the session cookie.
“Remember me” cookie — stored only if you tick “Remember me” when signing in to the customer account, and deleted when you sign out.
6.3. You can delete or block cookies in your browser settings, but the cart, checkout and customer account will not work without them.
6.4. The Website contains links to our social media profiles. These are ordinary links: social network cookies are used only after you have opened the network concerned, and are subject to that network’s privacy terms.
7. Your rights
7.1. You have the right to:
obtain confirmation of whether and which of your data we process, and receive a copy of it;
request rectification of inaccurate data or completion of incomplete data;
request erasure of data where there is no longer a legal basis for processing it;
request restriction of processing;
object to processing based on our legitimate interests and to the use of your data for commercial communications;
receive your data in a structured, machine-readable format or have it transmitted to another controller, where processing is based on a contract or consent;
withdraw consent at any time.
7.2. To exercise these rights, write to info@bte.lv or to our registered office. To make sure we disclose data to the right person, we may ask you to confirm your identity. We reply within one month; in complex cases we may extend this period and will inform you accordingly.
7.3. If you believe your data is being processed improperly, please contact us first. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Elijas iela 17, Riga, LV-1050, pasts@dvi.gov.lv, www.dvi.gov.lv).
8. Data security
8.1. We protect data by technical and organisational measures: Website traffic is encrypted (HTTPS), passwords are stored in encrypted form, and customer data is accessible only to those employees and service providers who need it to perform their duties.
8.2. If a personal data breach occurs that is likely to result in a high risk to your rights, we will inform you in accordance with the GDPR.
9. Changes to this policy
9.1. We may amend this policy if our data processing or legal requirements change. The current version is always published on this page, together with the date from which it applies.