This policy is a working GDPR template adapted for Latvia and B2B distribution. It must be reviewed and signed off by counsel before launch.
1. Who we are
SIA Catena Labs, registration number TBD — registration pending, with registered office at TBD — registered office, Riga, Latvia, is the data controller for personal data processed in connection with this website and our commercial relationships. Contact: info@catena.bio.
2. Personal data we process
We process the following categories of personal data, in each case in a business context:
- Contact details — name, business email, business telephone, role at your organisation.
- Account application data — institutional affiliation, intended-use information, business registration and VAT documentation.
- Order data — shipping address, purchase orders, invoices, payment references.
- Communications — emails and other messages you send to us.
- Technical data — IP address and minimal request metadata for security and basic site analytics.
3. Purposes and legal bases
We process personal data for the following purposes and on the following GDPR Article 6 bases:
- Account onboarding, KYC, and order fulfilment — performance of a contract or pre-contractual measures (Art. 6(1)(b)).
- Compliance with tax, accounting, and chemicals legislation — legal obligation (Art. 6(1)(c)).
- Customer relationship management and ordinary business communications — legitimate interest in operating our business (Art. 6(1)(f)).
- Site security and abuse prevention — legitimate interest (Art. 6(1)(f)).
4. Recipients
Personal data may be shared with our service providers acting as processors — email and hosting providers, payment intermediaries, accountants and auditors, and freight carriers — and with public authorities where required by law. We do not sell personal data and we do not share it for third-party marketing purposes.
5. International transfers
Where our service providers process personal data outside the EU/EEA, we rely on adequacy decisions where available and otherwise on Standard Contractual Clauses, with supplementary measures where appropriate.
6. Retention
Account, order, invoice, and KYC documentation is retained for the period required by Latvian tax, accounting, and chemicals legislation (typically five to ten years after the end of the relevant financial year). Other business correspondence is retained for as long as it is needed for the purposes set out above.
7. Your rights
Subject to GDPR conditions, you have the right to access, rectification, erasure, restriction, portability, and objection in relation to your personal data, and the right to lodge a complaint with the Latvian Data State Inspectorate (www.dvi.gov.lv). To exercise these rights, contact info@catena.bio.
8. Cookies
This site uses only essential cookies required for the site to function and a local-storage flag to remember that you have acknowledged this banner. We do not use marketing or third-party analytics cookies.