Effective from 18 October 2026
This policy explains what personal data we process when you contact us, request a quote or order 3D printing, 3D scanning, reverse engineering or 3D modelling services, why we process it and what your rights are.
1. Controller
SIA “Leymz” Reg. No. 40203705367 Registered address: Enerģētiķu iela 3-108, Salaspils, Salaspils nov., LV-2121 Workshop: Lubānas iela 78, Riga Email: info@leymz.lv Phone: +371 26849055
If you have any questions about how we process personal data, please write to info@leymz.lv.
2. What data we process
Request form and communication. Your name, contact details (phone, email, WhatsApp or Instagram username), company name, task description, attached files (3D models, drawings, photos) and a link to files. We receive the same data if you write to us by email, on WhatsApp or Instagram, or call us.
Order fulfilment and payments. Order details, delivery address or parcel locker, billing details and payment information. For companies, also the contact person’s name and position.
Objects we scan. If an object we scan shows personal data (for example, an inscription or a face), we process that data only to fulfil the order.
Technical data. When you visit the website, the server automatically logs your IP address, browser type, the page visited and the time of the visit. This data is needed for the website to work and to keep it secure.
Visit statistics. If you consent to statistics cookies, we use Google Analytics 4 to understand how visitors use the website: the pages visited, how long a visit lasts, the type of device and browser, approximate location (country, city) and where you came to the website from. Google Analytics does not store or log full IP addresses. If you do not consent, this data is not collected. See our Cookie Policy for details.
3. Why we process data and on what legal basis
| Purpose | Legal basis under Article 6(1) of the General Data Protection Regulation (GDPR) |
|---|---|
| Replying to your request and preparing a quote | (b) steps taken at your request before entering into a contract |
| Fulfilling the order: scanning, modelling, printing and handing over the part | (b) performance of a contract |
| Issuing invoices and keeping accounts | (c) legal obligation (accounting and tax legislation) |
| Communicating with a company’s contact person | (f) legitimate interests: cooperation with the company |
| Keeping the website running and secure, preventing fraud and spam | (f) legitimate interests |
| Defending our rights in the event of a dispute | (f) legitimate interests |
| Compiling website visit statistics with Google Analytics | (a) your consent (given in the cookie notice) |
| Publishing photos of your order in our portfolio or on Instagram | (a) your consent |
We process the data from the request form to prepare a quote at your request (point (b)), so separate consent is not required. If you do not provide the data needed to handle your request or fulfil your order, we will not be able to prepare a quote or complete the order.
4. Your files and confidentiality
We use the files, drawings and scans you send us only to handle your request and fulfil your order, and do not use them for any other purpose. We do not sell them or show them to other customers or third parties. They may be stored only with the service providers listed in section 5 (for example, on our email service provider’s servers), who process them on our behalf. On request, we sign a non-disclosure agreement (NDA). We publish photos of finished parts only with your consent.
5. Who we share data with
We share data only with service providers who help us run our business, and only to the extent necessary:
- our website hosting provider (Hostinger, UAB, Lithuania, EU);
- our email and document service provider (Google Ireland Limited, Ireland, EU, Google Workspace service): through it we receive request form messages and attached files, as well as emails;
- our statistics service provider (Google Ireland Limited, Google Analytics), only if you have consented to statistics cookies;
- delivery companies (for example, Omniva, DPD or Latvijas Pasts) if we ship the part: your name, phone number and delivery address or parcel locker;
- banks and payment service providers, to process payments;
- public authorities where required by law.
If you choose to contact us via WhatsApp or Instagram, your messages are also processed by the provider of these platforms, Meta Platforms Ireland Limited, under its own terms. For the statistics on visits to our Instagram profile (Page Insights), we are joint controllers with Meta Platforms Ireland Limited; Meta bears primary responsibility for this processing.
Our website contains a link to our TikTok profile. Please use email, phone, WhatsApp or Instagram to contact us. If you do write to us on TikTok, your messages are also processed by TikTok Technology Limited under its own terms.
6. Transfers outside the EU
Hostinger stores data in the European Union. Google (Google Workspace, Google Analytics, Google Maps), as well as WhatsApp and Instagram, may transfer data to the United States. In that case, the transfer is based on the European Commission’s decision on the EU-U.S. Data Privacy Framework, under which these companies are certified, or on standard contractual clauses adopted by the European Commission. The Google Maps map on our website loads only when you choose to open it.
7. How long we keep data
- Requests that do not lead to an order: 12 months after our last contact.
- Order correspondence, files, 3D models and scans: for as long as we work with you and for 3 years after your last order is completed. This allows us to reproduce the part, handle claims and defend our rights. At your request, we will delete the files earlier unless we are required to keep them.
- Invoices and accounting records: for the period laid down in the Accounting Law (Grāmatvedības likums) (supporting documents, as a rule, 5 years).
- Google Analytics statistics: 14 months.
- Technical server logs: in line with our hosting provider’s terms, up to 30 days.
- Consent to publish photos: until you withdraw it.
When the retention period ends, we delete or anonymise the data.
8. Your rights
You have the right to:
- obtain information about what data of yours we process, and a copy of it;
- have inaccurate data corrected;
- request erasure of your data, for example if it is no longer needed or if you withdraw your consent, except where its retention is required by law or necessary to defend our rights;
- request restriction of processing, or object to processing based on legitimate interests;
- receive the data you have provided to us in a machine-readable format (data portability);
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise these rights, write to info@leymz.lv. We will reply without undue delay and in any case within one month. To protect your data, we may ask you to verify your identity.
If you believe we are processing your data unlawfully, you can lodge a complaint with Datu valsts inspekcija (the Data State Inspectorate of Latvia; Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv). We would appreciate it if you contacted us first so that we can try to resolve the matter.
9. Automated decision-making
We do not make decisions based solely on automated processing and do not carry out profiling.
10. Data security
The website uses an encrypted connection (HTTPS). Only those of the company’s employees and board members who need access to your data and files to fulfil your order or keep the accounts have it. We keep our own accounts and do not pass data to an external accountant.
11. Changes to this policy
We may update this policy if our business or the law changes. The current version is always available on this page, and its effective date is shown at the top.