Skip to content
Tefcold Horeca

Privacy policy

What this policy covers

This page explains what happens to personal data on tefcoldhoreca.com — the equipment catalogue and order form of SIA "LA RONDE". It covers all four language versions of the site (English, Latvian, Estonian, Lithuanian) and the e-mail and phone contact that follows an order placed here.

This shop is addressed to businesses: the catalogue, the prices and the terms are written for a professional buyer. If you nevertheless buy as a private person, outside any trade or profession, the rights the law gives consumers apply to your purchase in full, and the consumer rules apply to it rather than the commercial ones. Either way this policy applies to you unchanged — data protection law does not depend on why you bought.

Your name, work e-mail address and phone number are personal data even when you order for your employer. Data about a company as such — its name, registration number, VAT number — is outside these rules. If you trade in your own name as a sole trader, that data is about you, and it is covered like the rest.

The shop is not aimed at children, and there is nothing here to sign up for: no accounts, no newsletter. This policy does not describe other websites run by the same company, or any site you reach after leaving ours.

Who is responsible for your data

The controller of the data described here is the seller behind this site:

  • SIA "LA RONDE", registration number 40103598208, VAT number LV40103598208, entered in the Register of Enterprises of the Republic of Latvia

  • Registered address: Miera iela 32A-15, Rīga, LV-1001, Latvia

  • Shop and warehouse: Vagonu iela 23, Rīga, LV-1009, Latvia

  • E-mail for this site: [email protected]

  • Phone: +371 25522233

  • Working hours: Monday–Thursday 08:30–18:00, Friday 08:30–17:00; closed on Saturdays, Sundays and public holidays

The same company also trades under other names and on other websites. Those are separate sites with their own texts; write to the address above about anything that happened here.

Data protection contact

We have not appointed a data protection officer, and we are not required to: we are not a public authority, and our core activity is selling refrigeration equipment, not monitoring people on a large scale or handling sensitive data (Article 37(1) GDPR).

Privacy questions go to the company directly: [email protected], with GDPR in the subject line, or by post to the registered address above. The people who answer have access to the order records and can act on your request.

We are established in Latvia, inside the EU, so we do not need — and have not appointed — a representative under Article 27 of the GDPR.

What data we collect

What data we collect

Only what an order or a visit actually needs:

  • Order form: your name, e-mail address, phone number, city, street address, postcode and country. Company name, VAT number and the note you can add to the order are optional.

  • The order itself: order number, products and quantities, prices, VAT rate, status, the language you ordered in, and the times the record was created and changed.

  • Correspondence: what you write to us by e-mail or tell us on the phone about an order.

  • Visit statistics: page address, referring page, page title, browser, operating system, device type, screen size, browser language and a rough location guess.

Your name, e-mail address, phone number and delivery address are needed to accept and deliver an order. No law obliges you to give them, but without them we cannot take your request. Company name, VAT number and the note are optional, and nothing changes if you leave them out.

There is no payment on this site — no card form, no payment provider, nothing is charged here — so we never see card details. You pay by bank transfer against an invoice, which means the payer name and account number reach us through our bank and stay in our accounting records. There are no user accounts either, so there are no passwords. We do not ask for special categories of data such as health, beliefs or political views.

Our system records the network address that arrives with an order. The site sits behind a network provider, so that address belongs to the provider, not to you. For the same reason the visit statistics hold no usable address of yours — no IP address is stored in them at all — and the location guess in them does not tell us where you are.

Where the data comes from

  • From you: everything you type into the order form, and everything you send us by e-mail or say on the phone.

  • From your browser: the technical details listed above, sent automatically when a page loads.

That is the whole list. We do not buy contact lists, we do not take data from social networks, and we do not add to your record from outside sources.

Why we process it

Why we process it

We use personal data for these purposes and no others:

  • to receive your order request, check it and confirm it to you;

  • to contact you about the order — availability, delivery, questions in your note;

  • to deliver the goods to the address you gave;

  • to issue the invoice and the delivery documents;

  • to meet our accounting and tax obligations;

  • to answer questions you send us by e-mail or phone;

  • to keep the site running and secure;

  • to bring or defend a claim arising from a sale;

  • to see which pages and products are used, from statistics that identify nobody.

Our legal bases

  • Article 6(1)(b) GDPR — steps taken at your request before a contract, and the contract itself. This covers your order request and the contact around it when you buy in your own name, as a private person or a sole trader.

  • Article 6(1)(f) — our legitimate interests. Where the buyer is a company, the details of its contact person rest on this basis: a sale to a company still needs a person to speak to. The same basis covers answering enquiries, keeping the site secure, visit statistics that identify nobody, and bringing or defending a claim.

  • Article 6(1)(c) — legal obligation. The invoice and the accounting record behind it must be kept and produced under Latvian accounting and tax law.

We do not ask you for consent anywhere on this site, because we run no marketing mail, no advertising and no accounts. If we ever add something that needs your consent, we will ask first, and you will be free to say no.

Cookies and tracking

Our site does not set cookies — no analytics cookie, no advertising cookie, no login cookie. When we checked the live pages, including the address the order form is sent to, none of them returned a cookie at all. The network provider in front of the site may set a short-lived security cookie if it has to check that a request is not automated; that check is the only thing it is used for.

There are no third-party hosts on the pages. Fonts, styles, images, scripts and the statistics collector are all served from this domain. No Google Fonts, no map widget, no CDN library, no advertising or social network scripts, no chat box. No advertising network, analytics vendor or social network learns that you were here; the only outside companies involved are the hosting and network providers listed below, and they see the traffic because they carry it.

One thing is stored in your browser: your cart, a short list of product identifiers and quantities. It contains no personal data, it stays on your device, and it is there only because you asked for a cart — storage strictly necessary for a service you requested (Article 5(3) of Directive 2002/58/EC). You can remove it at any time by emptying the cart or clearing your browser storage.

Our visit statistics run on open-source software (Umami) installed on the same hosting we use for the shop, in Finland. The data is not sent to any analytics company. The statistics use no cookies, follow nobody across other websites, and make no screen recordings or heatmaps — those features are switched off. Visits are grouped by an identifier that is rebuilt every month from browser characteristics and the network address the statistics receive; because that address belongs to the network provider in front of the site and not to you, the identifier groups browsers rather than people. The statistics request carries nothing that identifies you.

One consequence is worth stating plainly: we cannot pick you out of the visit statistics, because they hold nothing we could match to you, so there is nothing in them we could switch off for one person. If you would rather not appear in them at all, block the script in your browser.

Who else sees the data

Personal data reaches the companies that make the shop work, each in a defined role:

  • Our hosting provider (Germany and Finland) — hosts the website files, and separately the platform that stores the orders, with its database and daily backups.

  • Our content delivery and security service — the network layer in front of the site, and our DNS. Everything you submit with an order passes through it, so it handles the contents of the form.

  • Our email service provider — the mail service that delivers our messages to you, including the order confirmation.

  • 2lstack — the company that operates the shop platform for us; its technical staff can reach the systems that hold the orders.

  • Our own staff at SIA "LA RONDE", who handle the orders.

Two more recipients follow from the sale itself. If your order is delivered rather than collected from us, the transport company making the delivery is given the name, address and phone number it needs to deliver it. And the invoice and the payment record for your order are part of our accounting, so whoever keeps our books sees the buyer details on those documents.

We do not sell, rent or trade personal data. Apart from the above, we disclose data only where the law requires it — for example to a tax or supervisory authority acting within its powers.

Transfers outside the EEA

The data lives in the EU. The site files, the platform, the order database and the visit statistics are hosted in Germany and Finland.

The confirmation e-mail is sent through our email service provider in Switzerland. The European Commission has recognised Switzerland as providing an adequate level of protection for personal data (Commission Decision 2000/518/EC), and Switzerland is still on the Commission's list of recognised countries, so this transfer needs no further safeguard.

The network layer in front of the site is run by our content delivery and security service. The point that handled our traffic when we checked was in Warsaw, Poland, but the provider operates globally and processing outside the EEA cannot be ruled out. Its data processing addendum is incorporated by reference into its subscription terms, and that addendum applies the European Commission's standard contractual clauses to transfers that need them.

Ask us and we will tell you which safeguard applies at the time you ask.

How long we keep it

  • Your order and the invoice issued for it: five years. Section 28 of the Latvian Accounting Law (Grāmatvedības likums) sets five years as the minimum period for supporting accounting documents. We keep them that long, then delete them — longer only while a claim about the sale is still open.

  • Correspondence about an order: it stays in our mailbox while the matter is open and while a claim is still possible, and we remove it when we no longer need it. Claims arising from a commercial transaction expire three years after they arise (Commercial Law, Section 406).

  • Visit statistics: kept while they are useful for running the shop. They contain no name, no e-mail address and no IP address, and nothing in them points to a person.

  • Backups: the database is copied daily and the last fourteen copies are kept, so anything deleted from the live system also disappears from the backups within two weeks.

  • Your cart: on your device only, until you empty it or clear your browser storage.

Your rights

Under the GDPR you can ask us to:

  • give you a copy of the data we hold about you (Article 15);

  • correct anything wrong or incomplete (Article 16);

  • delete data (Article 17);

  • restrict what we do with it while a dispute about accuracy or grounds is resolved (Article 18);

  • give you, in a machine-readable file, the data you provided yourself where we hold it under a contract or your consent, or pass it to another provider (Article 20);

  • stop processing that rests on our legitimate interests (Article 21).

You can also complain to a supervisory authority — in Latvia that is Datu valsts inspekcija — or take the matter to court (Articles 77 and 79).

Deletion is the one right we cannot always grant in full: while accounting law obliges us to keep your order and its invoice, we keep them. Using a right is free and will never be held against you as a customer.

To use any of these rights, write to [email protected] with GDPR in the subject line. How a request is handled — what we need from you, how long we take, and what to do if our answer does not satisfy you — is set out on our Your data rights page.

Automated decisions and profiling

There are none. No automated decision produces legal or similarly significant effects for you: every order request is checked and confirmed by a person at our company. Prices on the site are the same for everyone and do not change according to who is looking at them.

We do not profile you. We do not score or segment visitors, and we do not follow you across other websites. Nothing we collect changes what you see on the site or what you pay.

How the data is protected

The site is served over an encrypted connection (HTTPS). Order data is stored on servers in the European Union, and the database is backed up daily.

The order records can be reached by our staff who handle orders and by the technical staff of the platform operator. There are no user accounts and no passwords on this site, and no payment happens here, so there are no card details to steal.

After you order, you receive a link to your order status. The page it opens shows the order number, the status, the items and the totals. Anyone holding that link can open the page, so treat it as private.

No system is perfectly secure and we will not pretend otherwise. If you notice something wrong — an order status page showing data that is not yours, or an e-mail from us that looks off — write to [email protected] and we will look into it.

If data is breached

If data is breached

We notify the Data State Inspectorate without undue delay and, where feasible, within 72 hours of becoming aware of a personal data breach, unless the breach is unlikely to put anyone's rights at risk (Article 33).

Where a breach is likely to put your rights at high risk, we contact you directly and without undue delay, in plain language: what happened, which data was involved, what we are doing about it and what you can do (Article 34).

Changes to this policy

We update this text when the site changes or the law does. The version and date at the bottom of the page change with it, and that is how you can tell whether anything has moved since you last read it.

We do not send out notices about changes: there is one address for this page and it always carries the current text. We will not start using data we already hold for a new purpose without a lawful basis for it.

Version and effective date

Version 1.0, in force from 19 August 2026. Controller: SIA "LA RONDE", registration number 40103598208, Miera iela 32A-15, Rīga, LV-1001, Latvia.

This text is written in English. The Latvian, Estonian and Lithuanian versions of this page are being prepared, and until they are published this page is shown in English on those versions too. If anything here reads wrong to you, tell us at [email protected].