Privacy Policy

Who is responsible (controller)

The data controller is Conway Container Solutions SIA, registration no. 40203131241, legal address: Antonijas iela 17A-5, LV-1010, Riga, Latvia. E-mail: sales@cway.lv, phone: +371 62005550. Write to this e-mail with any question about your data.

What we do with your data

• Your inquiries (forms, price requests, chat). Data: name, phone, e-mail, company and registration number (if you give them), delivery address, container type and quantity, your message, language and the page you wrote from. Purpose: to answer you, prepare an offer and, if you wish, conclude a contract. Legal basis: steps at your request before a contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering business inquiries (Art. 6(1)(f)). Kept: while we handle the inquiry and any contract that follows; after that only as long as the law requires (for example accounting rules) or to protect legal claims.
• AI chat assistant. What you type in the chat is sent to our AI service provider (Anthropic) to write the reply. You are talking to an AI, not a person; answers can be wrong, and the AI takes no decisions about you. If you give your name and a phone number or e-mail, the assistant saves a short summary as an inquiry (see above). We do not keep the chat text itself; the provider keeps it for a limited time under its terms and, under its commercial terms, does not use it to train its models. Please do not type sensitive data (health, ID numbers, bank cards). Legal basis: Art. 6(1)(b) and (f).
• Running and securing the website. Technical data such as your IP address and browser type are processed by our hosting provider, and briefly in the server's memory, to limit abuse (rate limiting) and to keep the site available and safe. Legal basis: our legitimate interest (Art. 6(1)(f)). Kept: short term, as set by the hosting provider's server logs.
• Record of your cookie choice. When you use the cookie banner we keep an anonymous receipt: a random number, date and time, your choices, the banner version and the language. It contains no IP address and no browser details. Purpose: to be able to prove that consent was given or refused (GDPR Art. 7(1)). Legal basis: our legal obligation and legitimate interest in demonstrating compliance (Art. 6(1)(c) and (f)). Kept: 36 months.
• Aggregate internal reports. We compile daily totals from inquiries and cookie choices already saved, to review our work and compliance internally. Reports contain no names, contact details, IP addresses, browser identifiers or individual browsing journeys. We add no tracking on your device for this purpose. The basis for aggregating the underlying records is our legitimate interest in reviewing inquiry handling and the consent mechanism (GDPR Art. 6(1)(f)).
• Statistics (only with your consent). Tools: Google Analytics, Microsoft Clarity. They measure how the site is used: pages viewed, time on page, device and browser, approximate location (country, city), how you reached us and whether you sent an inquiry (counted without your contact details). Microsoft Clarity also records clicks, scrolling and the course of your visit; text you type in forms and in the chat is masked. If a technical error occurs on a page, the site sends a short anonymous report to Conway's own system (error text, page address without parameters, public image or script address, image variant, device and browser type, browser window dimensions, report receipt time and website version). No cookies, personal identifiers or form text are sent; reports are kept for no more than 30 days. Legal basis: your consent (Art. 6(1)(a); Section 7.1 of the Latvian Information Society Services Law). Kept: Google Analytics data for no more than 14 months; Clarity data for the period set by Microsoft.
• Marketing (only with your consent). Tools: Google Ads, Meta Pixel. They measure how well our advertising works. If you send an inquiry after clicking an ad, Google may receive your e-mail and phone number in hashed (scrambled) form to match the inquiry to the ad (“enhanced conversions”). Meta receives the event “inquiry sent”. We also keep the ad click number and campaign tags on your device for up to 90 days and send them with your inquiry to our customer database. Google and Meta may use the data for their own purposes under their own privacy policies. Legal basis: your consent (Art. 6(1)(a); Section 7.1 of the Latvian Information Society Services Law). Kept: cookies up to 90 days; Google and Meta keep data under their own policies.

Cookies

Which cookies are used, what each one does and how to change your choice is described in the Cookie Policy. You can change or withdraw your choice at any time with “Cookie settings” at the bottom of every page.

Cookie PolicyCookie settings

Who receives your data

• Our staff who handle inquiries.
• Service providers that process data for us: hosting and database (Railway), e-mail (Microsoft 365), our customer database (Conway CRM) and, for the chat, Anthropic.
• Google, Meta and Microsoft - only for the tools you agreed to above. For part of their processing they decide for themselves, under their own privacy policies (links in the Cookie Policy).
• Authorities and courts, if the law requires it.

Transfers outside the EU/EEA

Some of these providers are based in, or process data in, the United States. Such transfers rely on the EU–US Data Privacy Framework (for certified companies) or on the EU Standard Contractual Clauses. You can ask for a copy of the safeguards at sales@cway.lv.

Your rights

• access your data and get a copy;
• correct inaccurate data, erase data or restrict its processing;
• receive your data in a portable format (data portability);
• object to processing that is based on our legitimate interest (GDPR Art. 21);
• withdraw your consent at any time (this does not affect earlier processing);
• complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija): Elijas iela 17, Riga, LV-1050, pasts@dvi.gov.lv, www.dvi.gov.lv.

To use your rights, write to sales@cway.lv.

Is giving data required?

Giving contact data in a form or in the chat is voluntary, but without it we cannot answer you. Optional cookies are voluntary; refusing them does not limit the use of the site. We take no decisions about you by automated means alone. If you agree to marketing, advertising partners may build advertising audiences from the data they receive.

Changes

We update this policy when our tools or practices change.