Effective from 27 August 2026.

1. Controller

The controller of your personal data is SIA “Depozīta Iepakojuma Operators”, registration number 44103146177, registered address Granīta iela 27, Acone, Salaspils pag., Salaspils nov., LV-2119.

For any questions about the processing of personal data, write to dio@dio.lv.

2. What data we process

• Newsletter subscription — e-mail address and the record of consent.
• Correspondence — the data you provide when contacting us (name, e-mail address, message content).
• Technical data — IP address, browser type, pages visited and time of visit. This data is recorded in server logs for security and operation of the website.
• Cookies — see section 7.

We do not process special categories of personal data, and we do not carry out automated decision-making or profiling that would produce legal effects for you.

3. Purposes and legal basis

Purpose	Legal basis
Sending news and informational messages	Your consent (GDPR Article 6(1)(a))
Responding to your enquiries	Legitimate interest in communicating with interested parties (GDPR Article 6(1)(f))
Website security, availability and troubleshooting	Legitimate interest in providing a secure service (GDPR Article 6(1)(f))
Website statistics and marketing	Your consent given in the cookie banner (GDPR Article 6(1)(a))
Displaying external content (YouTube videos)	Your consent given in the cookie banner (GDPR Article 6(1)(a))
The "Where to return?" interactive map	Legitimate interest in providing the site's core functionality (GDPR Article 6(1)(f))
Compliance with legal requirements	Legal obligation (GDPR Article 6(1)(c))

4. Retention periods

• Newsletter subscriber data — until consent is withdrawn.
• Correspondence — up to 2 years after the matter is resolved.
• Server logs — up to 12 months.
• Cookies — the retention period set for each cookie (see cookie settings).

Where legislation requires a longer retention period, we comply with it.

5. Recipients of data

We may share data only with processors that provide services to us, and only to the extent necessary for those services:

• our website hosting provider;
• Google Ireland Limited — website statistics (Google Analytics, Google Tag Manager), if you have consented to analytics cookies;
• Meta Platforms Ireland Limited — marketing measurement, if you have consented to marketing cookies;
• Google Ireland Limited (YouTube) — video playback, if you have consented to external content;
• kartes.lv — the interactive map in the "Where to return?" section (core functionality of this website);
• Google Ireland Limited (reCAPTCHA) — protecting forms against automated abuse, where enabled;
• public authorities in the cases provided for by law.

6. Transfers outside the EU/EEA

Some service providers may process data outside the European Union and the European Economic Area. In such cases the transfer is based on a European Commission adequacy decision or on standard contractual clauses.

7. Cookies

Cookies are small files stored on your device by the website. We use four categories:

• Strictly necessary — core functionality (session, selected language, security, storing your cookie preferences). They cannot be switched off and do not require consent.
• Analytics — Google Analytics 4 (_ga, _ga_*) for aggregated visit statistics.
• Marketing — Meta Pixel (_fbp), Google Ads (_gcl_au) for measuring advertising performance.
• External content — YouTube videos (VISITOR_INFO1_LIVE, YSC). Without consent a placeholder is shown instead; videos load from youtube-nocookie.com.

What runs without consent. The map embedded in "Where to return?" (kartes.lv) is core functionality of this website and loads immediately on the basis of legitimate interest (GDPR Article 6(1)(f)); loading it discloses your IP address to the map provider. Where form spam protection is enabled, Google reCAPTCHA is used (_GRECAPTCHA), which is necessary for form security.

Analytics and marketing cookies are loaded only after your consent. You can change or withdraw consent at any time: open cookie settings. Consent can also be removed by clearing your browser cookies.

8. Your rights

You have the right to:

• access your data and receive a copy of it;
• request rectification of inaccurate data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive your data in a structured format (data portability);
• withdraw consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to dio@dio.lv. We respond within one month.

If you believe your rights have been infringed, you may lodge a complaint with the Latvian Data State Inspectorate (Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv).

9. Changes to this policy

We may update this policy. The current version, with its effective date, is always available on this page.