La presente informativa sulla privacy è pubblicata in inglese e in lettone. Fa fede la versione inglese riportata di seguito.
SIA "Metbox"
Privacy policy
In force from: 01.03.2026
This is an English translation provided for convenience. The Latvian version is the approved text and governs in the event of any discrepancy.
This Privacy Policy (the "Privacy Policy") explains how SIA "Metbox" processes personal data obtained from customers, business partners, visitors to www.metbox.com, and other users of the services we provide.
1. Data controller
SIA "Metbox"
Reg. No.: 40103933718
Address: Kārļa Ulmaņa gatve 119, Mārupe, Mārupes nov., LV-2167, Latvia
Email: info@metbox.com
2. Personal data
Personal data is information relating to an identifiable natural person.
SIA "Metbox" does not process the data of children under 14 years of age.
3. Purposes and legal basis for processing personal data
3.1. Communication and handling of enquiries
Data: name, surname, email, telephone, content of the correspondence.
Basis: consent or legitimate interest.
Retention: 2 years.
3.2. Direct marketing
Data: name, surname, email, organisation, position.
Basis: consent or legitimate interest.
Retention: until consent is withdrawn.
3.3. Recruitment
Data: CV, education, experience, contact details.
Basis: consent, legitimate interest.
Retention: until the selection is complete + 6 months.
3.4. Social networks
Data: profile name, comments, messages.
Basis: consent and legitimate interest.
Retention: for as long as the account is maintained, or until deletion.
3.5. Website analytics and advertising
Data: pages visited, approximate location (country level), device and browser type, advertising identifiers, orders placed and their value.
Basis: consent. Without consent the visit is not analysed.
Retention: Google Analytics event data – 14 months.
See section 12 for details.
4. Sharing and disclosure of personal data
Any information you provide to SIA "Metbox" may be processed within our company and disclosed to third parties (processors) who provide services to SIA "Metbox" under contract and on our instructions (for example IT maintenance providers, data centre providers, outsourced accountants, translation providers, marketing and communications providers, and others).
SIA "Metbox" ensures that processors:
- process data only on a lawful basis,
- follow our instructions,
- apply appropriate technical and organisational measures,
- comply with the GDPR.
SIA "Metbox" may also disclose personal data to recipients, including:
- state authorities and public registers,
- courts or other state institutions where required by law,
- law enforcement authorities, the tax administration and supervisory authorities (where required by law),
- external professional advisers — lawyers, financial consultants, foreign partners (where necessary to provide services),
- IT, accounting, translation, call centre, courier, notary or other service providers,
- other persons where necessary to provide services,
- in the event of reorganisation, merger or change of ownership of SIA "Metbox".
Where required by law, your personal data may be disclosed to competent state authorities.
5. Transfers outside the EU/EEA
SIA "Metbox" does not transfer personal data to third countries (outside the EU/EEA), except where this is objectively necessary, for example:
- to provide services connected with other countries,
- to cooperate with foreign service providers or partners,
- where a particular matter or situation requires it.
Such a transfer takes place only where:
- a derogation permitted by the GDPR applies (e.g. Article 49 GDPR), or
- appropriate safeguards are in place.
If you have consented to analytics and marketing cookies, data is also transferred to Google LLC (USA) — see sub-section 12.2, which states the legal basis for that transfer.
6. Data protection measures
SIA "Metbox" implements appropriate technical and organisational measures to protect your personal data against:
- accidental or unlawful destruction,
- loss,
- alteration,
- unauthorised access,
- unauthorised disclosure,
- any other unlawful processing.
Although SIA "Metbox" maintains compliance with data protection requirements, please note that no method of transmission or storage is 100% secure.
7. Your rights
You have the following rights in relation to your personal data:
7.1. The right to be informed about how SIA "Metbox" processes your personal data.
7.2. The right to access your personal data.
7.3. The right to rectify inaccurate or incomplete personal data.
7.4. The right to erasure (the "right to be forgotten"), where applicable.
7.5. The right to restrict processing in certain cases.
7.6. The right to object to processing based on legitimate interests.
7.7. The right to withdraw consent (where processing is based on consent).
7.8. The right to data portability — to receive your data in a machine-readable format and transmit it to another controller.
To exercise these rights, submit a written request to: info@metbox.com
SIA "Metbox" will respond within 30 days, unless the law provides for an extension of that period. Before acting on a request we may ask you to verify your identity.
8. Lodging a complaint
You have the right to lodge a complaint with:
Data State Inspectorate (Datu valsts inspekcija), Blaumaņa iela 11/13–11, Riga, LV-1011, Latvia. Email: info@dvi.gov.lv, www.dvi.gov.lv
SIA "Metbox" encourages you to contact us before lodging a complaint — we will do our best to resolve the matter.
Limitations on rights
Some rights may be restricted where:
- the law requires it,
- it is necessary for the establishment, exercise or defence of legal claims,
- it would affect another person's rights or confidentiality,
- the data is protected by professional confidentiality.
9. Changes to the Privacy Policy
SIA "Metbox" may make changes to this Privacy Policy, for example:
- in connection with changes in legislation,
- changes in the operation of the business,
- new services.
Changes take effect upon publication on the Website. We encourage you to review the Privacy Policy regularly.
10. Disclaimer
The Website may contain links to third-party sites. SIA "Metbox" accepts no responsibility for the content, security or data processing of such sites.
11. Website and intellectual property rights
The content, design, software, domain name, logos, trade marks and copyright works of the Website are the property of SIA "Metbox" or are used under lawful permission.
Without the written permission of SIA "Metbox" it is prohibited to:
- copy, reproduce, publish or transmit,
- use commercially,
- create derivative works,
- republish or redistribute the content of the Website.
12. Cookies
The website www.metbox.com uses cookies and similar technologies to operate the website, improve the user experience and analyse how the website is used.
Cookies are small text files stored on your device (computer, tablet or mobile phone) when you visit the website. Similar technologies also include the browser's local storage and session storage.
Your consent
On your first visit the website shows a notice where you can give or refuse consent. No analytics or marketing cookie is placed before you have given consent, and refusing is as easy as agreeing — both options are presented equally and neither is pre-selected. Continuing to use the website is not in itself treated as consent.
You may withdraw consent at any time using the "Cookie settings" link at the bottom of any page. Withdrawal takes effect immediately and does not affect the lawfulness of processing carried out beforehand. Your choice is stored for 6 months, after which we ask again.
12.1. Necessary cookies and storage
These are necessary for the technical operation of the website and its core functions, including the shopping basket and checkout. They contain no advertising identifier and are not used for profiling. Under the Electronic Communications Law they do not require consent.
| Name | Type | Duration | Purpose |
|---|---|---|---|
| mb_consent_v1 | Cookie | 182 days | Stores your cookie choice |
| mb_country | Cookie | 12 months | Delivery country, for VAT and shipping |
| metbox.cart.v2, metbox.cart.key.v2, metbox.cart.touched.v2 | Local storage | Until cleared | Shopping basket and protection against duplicate orders |
| metbox.checkout.v1 | Session storage | Until the tab is closed | An order placed but not yet paid |
| metbox.ref.v1 | Session storage | Until the tab is closed | The partner code you arrived with, so it can be recorded on your order |
| metbox.tracked.* | Local storage | Until cleared | Marks an order already counted, so it is not counted twice |
12.2. Analytics and marketing cookies (only with consent)
With your consent we use Google Analytics 4 and Google Ads to understand how visitors reach the website, which advertising campaigns are effective, and to measure orders placed. This data is used for both statistical and advertising purposes, including ad personalisation and remarketing.
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _ga | Cookie | 2 years | Distinguishes visitors (Google Analytics) |
| _ga_<ID> | Cookie | 2 years | Maintains session state (Google Analytics) |
| _gcl_au | Cookie | 90 days | Ad conversion attribution (Google Ads) |
Recipients: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA). Transfers outside the EU/EEA are made on the basis of the EU–U.S. Data Privacy Framework, under which Google LLC is certified, and on the basis of the European Commission’s standard contractual clauses.
Retention period for Google Analytics event data: 14 months. After that the data is deleted automatically and only aggregated reports remain.
More about how Google processes data: https://policies.google.com/privacy
12.3. Server logs
The website server may automatically record certain technical information about a visit, such as:
- IP address
- browser type
- time of access
- pages visited.
This information is used solely for the security and technical maintenance of the website. Legal basis: legitimate interest in ensuring the security of the website.
12.4. Visitor statistics without cookies
We also keep our own visitor statistics using Umami, which runs on our own server. It sets no cookies and stores nothing on your device, so it does not ask for consent and is not affected by the choice above.
It records the page visited, the site you arrived from, and the general type of browser, operating system, device and country, all derived from the request itself. Your IP address is not stored. The data stays on our infrastructure and is not shared with anyone. Legal basis: legitimate interest in understanding how the website is used.
12.5. Managing cookies in your browser
In addition to the website’s own cookie settings, you can control or delete cookies in your browser at any time. Information on managing cookies can be found in your browser’s settings. Please note that blocking necessary cookies may prevent the shopping basket and checkout from working.
13. Contact
For questions relating to personal data or this Privacy Policy:
info@metbox.com
Kārļa Ulmaņa gatve 119, Mārupe, Mārupes nov., LV-2167, Latvia
+371 28060777
Domande? Contattaci.