1.General Provisions
This Privacy Policy on personal data processing is drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — GDPR), as well as the Personal Data Processing Law of the Republic of Latvia dated 21 June 2018. It sets out the procedure for the processing of personal data and the measures taken by SIA "GI4" (hereinafter — the Operator) to ensure data security.
1.1. The Operator considers the observance of human rights and freedoms, including the right to privacy, personal and family confidentiality, to be its most important objective.
1.2. This Policy applies to all information the Operator may receive about visitors of the website https://platformguru.co/.

2.Definitions Used in the Policy
2.1. Automated processing of personal data — the processing of personal data using computer technology.
2.2. Blocking of personal data — temporary cessation of personal data processing.
2.3. Website — a combination of graphic and informational materials, as well as software and databases accessible online at https://platformguru.co/.
2.4. Personal data information system — a set of databases containing personal data and the technologies used for their processing.
2.5. Anonymization of personal data — actions that make it impossible to determine the personal data’s subject without additional information.
2.6. Processing of personal data — any operation performed with personal data, including collection, recording, systematization, storage, updating, retrieval, use, transfer, anonymization, and deletion.
2.7. Operator — SIA "GI4", which determines the purposes and methods of processing personal data.
2.8. Personal data — any information relating to an identified or identifiable natural person.
2.9. User — any visitor to the website https://platformguru.co/.
2.10. Provision of personal data — disclosure of personal data to a specific person or group.
2.11. Dissemination of personal data — making personal data available to an indefinite number of people.
2.12. Cross-border transfer of personal data — transfer of data outside the European Union.
2.13. Deletion of personal data — irreversible destruction of personal data.

3.Rights and Obligations of the Operator
3.1. The Operator has the right to:
— request accurate data from the data subject;
— continue processing where there is a legal basis under the GDPR;
— independently determine the necessary measures for legal compliance.
3.2. The Operator is obliged to:
— provide data subjects with information on request about their data and its processing;
— process personal data in accordance with the laws of the EU and Latvia;
— notify the Data State Inspectorate (Datu valsts inspekcija) when required;
— ensure the security and confidentiality of personal data;
— stop processing and delete data upon achieving the purpose or revocation of consent.

4.Rights and Obligations of Data Subjects
4.1. Data subjects have the right to:
— access their personal data;
— request rectification, erasure, or restriction of processing;
— withdraw consent;
— lodge a complaint with the Datu valsts inspekcija or court;
— object to processing.
4.2. Data subjects are obliged to:
— provide accurate information;
— notify the Operator of any changes to their data.
4.3. Persons who provide false information are liable under Latvian and EU law.

5.Principles of Personal Data Processing
5.1. Lawfulness, fairness, and transparency.
5.2. Purpose limitation.
5.3. Data minimization.
5.4. Accuracy and relevance.
5.5. Storage limitation.
5.6. Integrity and confidentiality.

6.Purpose of Personal Data Processing
Purpose: to inform the User via email.
Personal data: first name, last name, email, phone number.
Legal grounds: Article 6 of the GDPR (consent, contract, etc.).
Types of processing: collection, storage, systematization, anonymization, deletion.

7.Legal Grounds for Data Processing
7.1. Based on consent.
7.2. For contract performance or negotiation.
7.3. Due to legitimate interests.
7.4. To fulfill legal obligations.
7.5. To protect vital interests.
7.6. To comply with Latvian and EU law.
7.7. For tasks carried out in the public interest.

8.Data Collection, Storage, Transfer, and Other Processing Procedures
8.1. The Operator takes all necessary measures to protect data.
8.2. Data is not transferred to third parties without consent, unless required by law.
8.3. Users may update their data by emailing gc@platformguru.co with the subject “Personal Data Update”.
8.4. The processing period is limited to the purpose or legal grounds.
8.5. For third-party services, their privacy policies apply.
8.6. Data subject restrictions may be limited for public interest purposes.
8.7. The Operator ensures the confidentiality of personal data.
8.8. Data is stored only as long as necessary.
8.9. Processing may be terminated due to purpose fulfillment, consent withdrawal, or unlawful processing.

9.List of Actions Performed by the Operator
9.1. Collection, recording, systematization, storage, updating, retrieval, use, transfer, anonymization, deletion.
9.2. Includes automated and online data processing.

10.Cross-border Transfer of Personal Data
10.1. Transfer is possible where the European Commission has decided there is adequate protection or appropriate safeguards under Article 46 GDPR are in place.
10.2. The Operator ensures proper data protection prior to transfer.

11.Personal Data Confidentiality
11.1. The Operator and involved parties must maintain confidentiality.
11.2. Data may only be shared with third parties with consent or under legal obligations.

12.Final Provisions
12.1. Questions regarding personal data processing should be directed to: gc@platformguru.co
12.2. This Policy remains effective until replaced by a new version.
12.3. The current version is available at: https://platformguru.co/privacy/eng