Skip to main content
Current Revision: March 2026

Privacy Policy

This Privacy Policy sets out how SIA NEVO (Registration No. 40203215939) collects, processes, and protects personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR).

1. Data Controller & Contact Information#

The controller of your personal data is:

  • Legal Entity: SIA NEVO
  • Registration Number: 40203215939
  • Registered Address: Riga, Latvia
  • Contact Email: nevo@nevo.lv
  • Phone: +371 283 5555 0

2. Personal Data We Collect#

We only process data voluntarily provided by clients, prospects, and site visitors:

  • Identity Data: Full name, company name, job title.
  • Contact Data: Corporate email address, direct phone number.
  • Technical Project Data: Architectural requirements, stack specifications, system logs.
  • Digital Infrastructure Telemetry: Anonymized IP addresses, browser user agent, session timestamps, and functional cookies.

3. Lawful Basis & Purposes of Processing#

  1. Pre-contractual Scoping & Architecture Blueprints (GDPR Art. 6(1)(b)): Scoping technical roadmaps, calculating investment estimates, providing architectural consultations.
  2. Contractual Service Delivery (GDPR Art. 6(1)(b)): Custom engineering, ERP bi-directional integrations, 24/7 on-call SLA support.
  3. Legal Compliance (GDPR Art. 6(1)(c)): Financial reporting and compliance with EU/Latvian tax legislation.
  4. Legitimate Interests (GDPR Art. 6(1)(f)): Infrastructure security, DDoS mitigation, preventing abuse, and defending legal claims.

4. Data Retention Periods#

  • Project inquiry and scoping communications are retained for 2 years from last contact unless a formal engagement ensues.
  • Contractual, financial, and billing records are stored for 5 years pursuant to the statutory requirements of the Republic of Latvia.
  • Sensitive production access credentials (SSH, API keys) are purged within 14 days following engagement termination.

5. Third-Party Disclosures & Data Sovereignty#

SIA NEVO never sells or monetizes client data. Data is exclusively shared with:

  • Tier-1 EU-based cloud providers (Frankfurt, Stockholm) maintaining strict ISO 27001 and SOC 2 Type II certifications.
  • Regulatory or law enforcement bodies only when strictly mandated by EU law.

6. Your Rights Under GDPR#

As an EU data subject, you possess the right to:

  • Access and obtain a portable copy of your personal data.
  • Rectify inaccurate data or request erasure ("right to be forgotten").
  • Restrict or object to data processing.
  • Lodge a formal complaint with the Data State Inspectorate of Latvia (DVI) if you believe your rights have been infringed.

For privacy inquiries, contact our Data Governance Officer at nevo@nevo.lv.