Privacy Policy

General Information

SIA "AN RIEPU CENTRS" (hereinafter - the Controller) takes the security of your data very seriously and has developed a policy and data protection framework that includes technical and organizational measures to safeguard your privacy. The Controller's main purpose in processing your data is to provide goods and services. This privacy policy explains our data processing practices and your choices regarding how your data is collected and used. The privacy policy concerning your personal data is based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, commonly known as the General Data Protection Regulation (GDPR), as well as other relevant and applicable legislation.

Data Controller

Sabiedrība ar ierobežotu atbildību "AN RIEPU CENTRS" Registration number: 40103340413 Legal address: Dzirkaļu iela 44, Rīga Email: anriepas@anriepas.lv Phone: 67-38-50-58

What Data We Process

The Controller collects personal information about you if you choose to provide it to us, for example, by placing an order, filling in a contact form, or booking a service appointment. We process the following personal data: • Contact information - first name, last name, email address, phone number, delivery address; • Business data - company name, registration number, VAT number (for legal entities); • Order data - information about purchased goods and services, payment information; • Service request data - information about the vehicle, wheels, tires, requested service, as well as photos you upload and AI-generated visualizations if you use this feature. When you visit our website, we may use cookies and similar technologies to automatically collect certain types of information that may contain your personal data: • Information about your device and browser (IP address, browser type and version, pages visited, session duration); • Information from cookies; • Google Analytics and other similar technologies. Collecting this information allows us to improve your online experience, the usability and efficiency of our website, and to evaluate the results of our marketing activities. Your personal data will not be used for other purposes unless the Controller has obtained your permission or unless required or permitted by law.

Legal Basis for Processing

The Controller processes your personal data in accordance with applicable law and only when there is a legal basis for processing, which may vary depending on the purposes of processing. We may rely on the following legal bases: • Performance of a contract - processing your personal data is necessary to fulfill our contractual obligations, for example, to process and fulfill your order or provide a service; • Legal obligation - your data is processed on the basis of legal obligations imposed on us by applicable law, such as accounting and tax compliance; • Legitimate interests - your data is processed on the basis of the Controller's legitimate interests, always ensuring that such processing does not override your rights and freedoms, for example, to develop and improve our business; • Your consent - in certain cases we will request your explicit consent to process some of your personal data, and we will process it in this manner only if you agree.

Purpose of Processing

The Controller collects and processes your data for the following purposes: • Order processing and fulfillment, goods delivery; • Providing service appointments and maintenance; • Processing photos with AI to prepare a wheel painting visualization, initial offer, or consultation; • Responding to your requests and providing information; • Communicating with you about order or service status; • Invoice preparation and accounting compliance; • Collecting anonymous statistics about website usage and improving user experience; • Carrying out direct marketing and providing customer support; • Compliance with legal requirements.

Data Retention

The Controller will store and process your data for as long as one of the legal bases for processing personal data applies. Once the legal basis for processing has ended, the Controller will delete your data. • Contact form and service inquiries - up to 2 years from the last communication; • Uploaded photos and AI visualizations - up to 2 years from the last communication or for a shorter period if the request has been completed and the data is no longer needed; • Order and transaction data - 5 years after completion of the transaction (in accordance with accounting requirements); • Analytics data - up to 26 months.

Data Sharing with Third Parties

To provide its services, the Controller cooperates with third parties with whom personal information may be shared to deliver those services. Third-party service providers receive only the minimum amount of personal information necessary to perform the requested services. Your personal data may be shared with: • Delivery partners (Venipak) - to ensure order delivery; • IT, data storage, hosting, and AI service providers - for website and system maintenance and preparing visualizations; • Accounting and legal service providers; • Government authorities - when required by law or when information is requested by public authorities. The Controller ensures that only service providers who comply with the same data protection obligations and privacy rules as required by applicable law are engaged.

Your Rights

Under the GDPR, you have the following rights: • Right of access - request information about what data we store about you; • Right to rectification - request correction of inaccurate or incomplete data; • Right to erasure - request deletion of your data if there is no legal basis for further processing; • Right to restriction - request restriction of data processing in certain circumstances; • Right to data portability - receive your data in a structured, machine-readable format; • Right to object - object to data processing based on legitimate interests. To exercise your rights, please contact us by email. The Controller will review each request and respond to you within 30 days. To verify your identity, we may request additional information from you before providing the requested information. If you believe your rights have been violated, you have the right to file a complaint with the Data State Inspectorate (www.dvi.gov.lv).

Cookies

Our website uses cookies: • Essential cookies - ensure proper website functionality, such as shopping cart and language selection. These cookies are always active; • Functional cookies - save your preferences and settings to improve usability; • Analytical cookies - help us understand how visitors use the website so we can improve it. You can manage cookie settings in your browser, but blocking certain cookies may affect website functionality.

Data Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (SSL/TLS), access control mechanisms, and regular security audits.

Changes to the Privacy Policy

The Controller reserves the right to periodically update or revise this privacy policy in accordance with applicable law. These updates are necessary to reflect any changes in our privacy practices. In case of changes, the updated version will be published on this page with the indicated last update date. We encourage you to review the privacy policy regularly to stay informed about how your personal data is processed.

Contact Information

If you have any questions or concerns about our privacy policy or wish to exercise your rights, please contact us: Email: anriepas@anriepas.lv Phone: 67-38-50-58 We will endeavor to respond to your request within 30 days. If, after contacting us, you believe that the matter regarding the processing of your data has not been resolved, you have the right to file a complaint with the Data State Inspectorate (Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv).

Last updated: June 18, 2026