Information on personal data processing

1. Personal data controller

The personal data controller is:

Premium Strategy, individual merchant (sole trader)

Registration No. 40002157575

Legal address: Dunduru iela 5, Salaspils, LV-2121, Latvia

Email for personal data enquiries: info@premiumstrategy.lv

Hereinafter referred to as we or Premium Strategy.

2. What personal data do we process?

If you submit the contact form on our website, we process the following information that you provide:

• your name;
• company name;
• role;
• the service or topic of interest;
• email address;
• telephone number, if provided;
• the content of your message;
• information about your consent to personal data processing for communication purposes;
• technical information required to receive the submission and operate the website securely.

Technical data may also be processed to operate the website, such as your IP address, device and browser information, the time of your visit and similar technical information.

Please do not include special-category personal data in the form, such as information about health, political opinions, religious beliefs or other sensitive information, unless it is objectively necessary to address your request.

3. Why do we process personal data?

We process personal data for the following purposes:

1. To receive and assess your enquiry

   We use the information provided in the form to understand your question, need or interest in Premium Strategy services.

2. To contact you

   We use your contact details to respond to your specific enquiry, arrange a conversation or provide further information.

3. To follow up on your request or possible cooperation

   We may contact you again where this relates to your submission or prior communication.

4. To prepare emails, draft documents and working materials

   We may process the information you provide to prepare responses, draft emails, draft documents, summaries, analyses or other working materials related to your request or possible cooperation.

5. To operate and secure the website

   We may process technical data to ensure the operation and security of the website and protect it against misuse.

6. To analyse website visits

   With your analytics consent, Google Analytics 4 is used to measure page visits and successful enquiries, as described in section 10.

7. To comply with legal obligations and protect rights

   In certain cases, personal data may be processed to comply with applicable legal obligations or protect the rights and legitimate interests of Premium Strategy.

4. What is the legal basis for processing personal data?

Personal data is processed on one or more of the following legal bases:

• your consent — when you submit the contact form and consent to data processing for communication purposes;
• steps taken before entering into a contract — where your enquiry relates to possible cooperation or receiving a service;
• Premium Strategy’s legitimate interests — to respond to your request, maintain communication, prepare working materials, protect the website and manage cooperation opportunities;
• compliance with a legal obligation — where processing is required by applicable law.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Where are enquiries received and stored?

Enquiries submitted through the website form are received and managed:

• in the Premium Strategy email account.

These tools are used to receive, manage and assess enquiries and communicate with the people who submitted them.

6. Use of AI tools

Premium Strategy may use artificial intelligence tools in its work processes to prepare responses to enquiries, draft emails, draft documents, summaries, analyses or other working materials more efficiently.

AI tools are used only as support tools. Final decisions concerning the content of communications and documents, recommendations and cooperation matters are made by Premium Strategy.

When using AI tools, we follow the data-minimisation principle and do not enter more personal data than is necessary for the specific task. Where possible, information is anonymised or pseudonymised.

Depending on the AI tool used, personal data may also be processed outside the European Union or European Economic Area. In such cases, appropriate data-protection mechanisms are applied, such as standard contractual clauses approved by the European Commission or other safeguards provided for by the General Data Protection Regulation.

AI tools are not used for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

7. Who may receive personal data?

We do not sell your personal data or provide it to third parties for their independent use.

Personal data may be accessible to the following persons or service providers where necessary for the purposes set out in this Policy:

• email service providers;
• Google services, including Google Analytics where you have consented to analytics;
• AI tool providers, where such tools are used to prepare enquiries, communications, draft documents, summaries or analyses;
• website maintenance, hosting or technical-support providers;
• legal, accounting or IT service providers, where necessary;
• national or local authorities where required by law.

Personal data is disclosed only to the extent necessary for the relevant purpose.

8. Can personal data be transferred outside the European Union or European Economic Area?

When Google services, Google Analytics or certain AI tools are used, personal data may also be processed outside the European Union or European Economic Area.

In such cases, we rely on the data-protection mechanisms applied by the relevant service provider, such as standard contractual clauses approved by the European Commission, an adequacy decision or other safeguards provided for by the General Data Protection Regulation.

9. How long do we retain personal data?

Data submitted through the contact form is retained for no longer than 12 months after the last communication, unless there is a specific reason to retain it for longer.

Longer retention may be necessary where:

• a business relationship is established;
• the data is required to perform a contract;
• the data is required to establish, exercise or defend legal claims;
• retention is required by applicable law.

Technical data and cookie data are retained in accordance with their purpose and the settings of the relevant service.

10. Cookies and Google Analytics

We use Google Analytics 4 (measurement ID G-GGC88MMLBB) only after you select Accept analytics. Before consent, and after rejection, the Google tag is not loaded and no Google Analytics requests, including cookieless signals, are sent. The website and contact form work without analytics consent.

With consent, we measure page views and successful contact-form submissions. We send only predefined page paths and titles. Query parameters, URL fragments, referring page addresses, names, email addresses, phone numbers and form contents are not passed to analytics. Google receives pseudonymous analytics identifiers and technical information required for the network connection. This is not anonymous processing.

The local storage entry ps_analytics_consent_v1 stores your choice until you change it or clear browser storage. With consent, the _ga and _ga_GGC88MMLBB cookies distinguish visits. This implementation configures them as session cookies, without a persistent expiry; browser session restoration can affect when the browser removes them.

Use Analytics preferences in the footer to change your choice. Selecting Reject withdraws consent, stops further analytics and deletes accessible analytics cookies for this website. Withdrawal does not delete data already sent to Google and does not affect the lawfulness of earlier processing.

Advertising storage, advertising personalisation and Google Signals are disabled in the website tag. Analytics data retention and account-level settings depend on the Google Analytics property configuration; no unverified retention period is stated here. Google is the analytics service provider, and processing may involve transfers outside the EU/EEA as described in section 8.

11. Is automated decision-making used?

We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

12. What are your rights?

You have the right to:

• receive information about the processing of your personal data;
• access your personal data;
• request correction of inaccurate personal data;
• request deletion of personal data;
• request restriction of personal data processing;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• in certain cases, receive your personal data in a structured, commonly used and machine-readable format;
• lodge a complaint with a supervisory authority.

To exercise your rights or ask questions about personal data processing, please contact us at:

info@premiumstrategy.lv

If you believe that your personal data is being processed contrary to applicable law, you have the right to lodge a complaint with the Data State Inspectorate of Latvia.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example, if the website’s functionality, service providers or applicable requirements change.

The current version of this Privacy Policy will always be available at PremiumStrategy.lv.