Privacy Policy

Last updated: 16.10.2026.

1. Controller

The controller of personal data is SIA GP Nord – the distributor of coresatin® products in the Baltics and operator of the online shop coresatin.lv.

SIA GP Nord
Registration No. 40203177406
VAT No. LV40203177406
Registered address: Kurzemes prospekts 23, Rīga, LV-1067, Latvia
Office and collection point: "Vismaņi" k-5, Mārupes pag., Mārupes nov., LV-2167, Latvia
Tel.: +371 66064140 · Email: info@gpnord.com
Bank: AS Citadele banka, SWIFT PARXLV22, account LV37PARX0021157860002

For questions about the processing of personal data, write to info@gpnord.com.

2. What data we process

  • Identification and contact details: first name, surname, email, phone number.
  • Delivery information: address or chosen parcel locker.
  • Order data: goods ordered, amount, payment status, communication about the order.
  • If the buyer is a company – company name, registration and VAT number.
  • Technical data: IP address, browser information and cookies (see the Cookie Policy).

We do not process payment card details – they are processed by the payment service provider.

3. Purposes and legal basis of processing

  • Accepting, paying for, delivering and communicating about orders – performance of a contract (Article 6(1)(b) GDPR).
  • Meeting accounting and tax obligations, handling complaints and withdrawals – legal obligation (Article 6(1)(c) GDPR).
  • Website security, fraud prevention and protection of our rights – legitimate interests (Article 6(1)(f) GDPR).
  • Sending news and offers and optional cookies – your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

4. Recipients of data

We share data only to the extent necessary for the specific purpose:

  • the delivery service provider (Venipak);
  • the payment service provider (AS Citadele banka, Klix);
  • website hosting and IT service providers, accounting service providers;
  • public authorities where required by law.

Personal data are not transferred to countries outside the European Union and the European Economic Area. Should this become necessary in future, transfers will take place only with the safeguards provided for by the GDPR.

5. Retention periods

  • We keep order and accounting documents for 5 years in accordance with the Accounting Law.
  • Communication about orders and complaints – until the limitation period for possible claims expires.
  • Data processed on the basis of consent – until consent is withdrawn.

6. Your rights

You have the right to access your data, request its correction or erasure, restrict processing, object to processing, receive your data in a portable format and withdraw your consent at any time. Send your request to info@gpnord.com (with a secure electronic signature) or submit it in person. We will reply within one month.

If you believe your data are being processed unlawfully, please contact us first. You have the right to lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).

7. Security

We use physical, technical and organisational measures to protect personal data against unauthorised access, loss or destruction, and review them regularly. The website uses an encrypted HTTPS connection.