Privacy policy

This Privacy Policy explains how SIA “Atlas Aerospace” (“Atlas”, “we”, “us”) processes personal data when you visit www.atlasuas.com, contact us, apply for a job or otherwise interact with us online. It is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Personal Data Processing Law of the Republic of Latvia.

How we process the data of our customers, partners and their representatives in the course of business is described in our Personal Data Processing Policy. How we use cookies is described in our Cookie Policy.

1. Who is the controller

The controller of your personal data is SIA “Atlas Aerospace”, registration No. 40103911104, legal address Ulbrokas iela 19A, Rīga, LV-1021, Latvia.

For any question about your personal data or to exercise your rights, contact us at info@atlasdynamics.eu, by phone +371 661 000 46, or by post to the address above, marked “Data protection”.

2. What data we process, why, and on what legal basis

Visiting our website

When you visit the website, technical data is processed automatically: IP address, browser and device type, operating system, pages visited, date and time of the visit and the referring page. We use it to deliver the website, keep it secure and fix errors. Based on your IP address we determine your country to show you the correct regional version of the site. Legal basis: our legitimate interest in operating a secure and working website (Article 6(1)(f) GDPR).

Website analytics

With your consent only, we use Google Analytics to understand how visitors use the website (pages viewed, time on site, approximate location, device information). Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings. Details are in our Cookie Policy.

Contact, demo and support requests

When you fill in a form or write to us, we process your name, company, position, e-mail, phone number, country, the product you are interested in and the content of your message. We use it to answer you, arrange demonstrations, prepare offers and provide support. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).

Job applications

When you apply for a position, we process the information in your application, CV and cover letter, and notes from interviews. We use it to assess your application and communicate with you. Legal basis: steps taken at your request before entering into an employment contract (Article 6(1)(b) GDPR). We keep your application for future vacancies only with your consent (Article 6(1)(a) GDPR).

News and marketing communication

We send news about our products and events to business contacts who have agreed to receive them, or to existing customers about similar products as permitted by the Latvian Law on Information Society Services. Legal basis: consent (Article 6(1)(a) GDPR) or our legitimate interest (Article 6(1)(f) GDPR). You can unsubscribe at any time using the link in each message or by contacting us.

Events, trade shows and business contacts

When you give us your business card or meet us at an event, we process your name, company, position and contact details to follow up on the conversation. Legal basis: our legitimate interest in developing business relationships (Article 6(1)(f) GDPR).

Export control and sanctions compliance

Our products may be subject to export control and international sanctions rules. Before delivering products, we may process data about customer representatives and end users (name, position, company, country, and where required, identity document details) to perform end-user checks and sanctions screening. Legal basis: compliance with our legal obligations (Article 6(1)(c) GDPR).

Our social media pages

We maintain pages on LinkedIn, YouTube and other platforms. When you interact with them, the platform operator processes your data under its own privacy policy. For page statistics, we and the platform operator may act as joint controllers. Legal basis: our legitimate interest in communicating with our audience (Article 6(1)(f) GDPR).

3. Who receives your data

We do not sell your personal data. We share it only when necessary, with:

companies of the XTEND group, of which Atlas is a part, where needed to answer your request or deliver products and services;
service providers that process data on our behalf under a data processing agreement: website hosting and forms (Webflow), analytics (Google), e-mail and office software, IT support, and the regional redirect service;
distributors and partners in your region, where your request concerns their territory;
legal, tax and audit advisers bound by confidentiality;
public authorities, courts and law enforcement, where required by law;
a buyer or successor in the event of a merger, acquisition or reorganisation, subject to the same protection.

4. Transfers outside the EU/EEA

We process personal data mainly within the European Union and the European Economic Area. Some of our service providers (for example Google and Webflow) or group companies are located outside the EU/EEA. In such cases we transfer data only where the European Commission has recognised an adequate level of protection (including the EU–U.S. Data Privacy Framework for certified US companies), or on the basis of the European Commission’s Standard Contractual Clauses with additional safeguards where needed. You can request more information about these safeguards by contacting us.

5. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected for, or as long as the law requires:

Data

Retention period

Contact, demo and support requests

Up to 3 years after our last communication, unless a contract follows.

Contract and invoicing data

For the term of the contract and afterwards as required by Latvian accounting, tax and civil law (generally up to 10 years).

Job applications

Until the end of the recruitment and 6 months afterwards; up to 12 months if you agree that we keep it for future vacancies.

Marketing contacts

Until you unsubscribe or withdraw your consent.

Export control records

For the period required by applicable export control and sanctions laws.

Analytics and cookies

As stated in the Cookie Policy.

6. Your rights

Under the GDPR you have the right to:

access your personal data and receive a copy of it;
have inaccurate data corrected;
have your data erased, where there is no longer a legal basis to keep it;
restrict processing while a question about your data is being resolved;
object to processing based on our legitimate interests, and object at any time to direct marketing;
receive the data you provided to us in a machine-readable format and have it transferred to another controller (data portability);
withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise your rights, contact us using the details in section 1. We may ask you to confirm your identity. We will reply within one month; where a request is complex, this may be extended by two further months, and we will inform you of this.

If you believe your rights have been infringed, you can lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv) or with the supervisory authority of your EU country of residence. We encourage you to contact us first so we can resolve the matter.

7. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

8. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including encrypted connections (HTTPS), access controls, and confidentiality obligations for our staff and service providers.

9. Children

Our website and products are intended for professional users. We do not knowingly collect personal data from children under 16.

10. Links to other websites

Our website contains links to other websites, such as our social media pages and partner sites. We are not responsible for their content or privacy practices. Please read the privacy policy of each website you visit.

11. Changes to this policy

We review this policy at least once a year and update it when our processing or the law changes. The date of the latest update is shown at the top of this page. Where changes are significant, we will inform you in an appropriate way.