Zer.lv Privacy and Personal Data Processing Terms

These Terms explain how personal data is processed when Zer.lv is visited or used. They apply only to Zer.lv operated by SIA FIXLAB and do not describe any unrelated service.

Version 2026-10-22 · Terms · Privacy Terms · DPA

Edition 2026-10-22 applies to new registrations. Publishing it does not rewrite earlier acceptance. Existing contracts change only under the applicable notice and acceptance procedure. Previous captured editions and checksums are available in the edition archive; the captured 2026-09-04 text is not proof of a particular customer's historical acceptance.

Edition archive · Full export and switching

1. Controller and contact. For registration, subscription billing, direct support, service security and administration, SIA FIXLAB is controller, registration No. 40203523267, Liepu aleja 38, Babīte, Babītes pag., Mārupes nov., LV-2101, Latvia. The preferred privacy contact is fixlablv@gmail.com; a request received through another effective channel is not rejected solely because of its channel.
2. Scope and sources. Data subjects may include website visitors, company owners, employees and other authorised users, support contacts, and persons whose information a subscribing company enters into its workspace. Data is obtained directly from the person, from the owner or another authorised workspace user, automatically from the browser, device and server logs, or from Google when the person chooses Google sign-in.
3. Account and company data. We may process first and last name, email, phone number, password hash, language, Google account link identifier, company or individual-business status, company name, registration and VAT/PVN numbers, legal address, bank account, subscription status, invoices, consent and terms acknowledgement records, support correspondence, and registration source information supplied in the page address, such as campaign tags, referring page and advertising click identifier.
4. Technical and security data. We may process IP address, date and time of access, user-agent, browser, operating system, device name or model where available, session and mobile-device identifiers, push token, authentication results, security events, actions in the service and diagnostic error information.
5. Workspace data. Depending on how the subscribing company uses Zer.lv, workspace data may include its clients and contacts, phone numbers and emails, devices and serial or IMEI numbers, orders, defects, services, products, inventory, sales, finance records, documents, comments, attachments, employees, roles, salaries and event logs.
6. Controller and processor roles. The subscribing company is normally the controller of personal data that it or its users enter or import about clients, employees, suppliers and contacts. SIA FIXLAB processes that workspace data on the company's documented instructions as a processor under the Zer.lv DPA. SIA FIXLAB is an independent controller for account, subscription, billing, direct support, platform-security and legal-compliance data.
7. Purposes and legal bases. Article 6(1)(b) GDPR applies to performance of a contract with an individual who is a party to it. Administration of accounts of a legal entity's representatives and staff is based on Article 6(1)(f), balancing service administration, communication and security against their rights. Article 6(1)(c) applies to accounting, tax and statutory duties. Legitimate interests also cover proportionate security, reliability and defence of claims. Optional product news requires consent under Article 6(1)(a), which may be withdrawn. Workspace data is processed on the customer's documented instructions under the DPA; these independent-controller bases do not replace the customer's own lawful basis.
8. Required data. Fields marked as required are needed to review registration, identify the account owner and administer the contract. Company details are required only for the applicable company-account type. Optional fields may be left blank. Without the required data, the account or requested function cannot be provided.
9. Cookies, browser storage and registration measurement. Necessary storage supports secure sessions, language and user preferences. Authentication cookies use HttpOnly, SameSite and Secure on HTTPS. Zer.lv does not itself install advertising cookies, third-party analytics pixels or email-open pixels. Optional analytics or marketing storage will require an appropriate consent mechanism before use. Aggregate registration steps are retained for up to 180 days without names, email, telephone, IP or advertising-cookie identifiers. Mail-provider delivery processing is described below; provider-side settings must be distinguished from pixels installed by Zer.lv.
10. Google and transactional email. Optional Google sign-in supplies a verified email and Google identifier, never a Google password. Google/Firebase may process necessary device signals and push tokens for enabled mobile functions. Transactional registration, verification, security and subscription email is delivered through Brevo's SMTP relay, receiving the recipient address, necessary message content, contract or invoice attachments and delivery metadata. Google/Gmail may also process correspondence sent to the support address. The applicable provider entity, processing terms and transfer safeguards are available on request; these providers do not obtain unrestricted access to the workspace database.
11. Hosting and files. Zer.lv uses data-centre hosting in Germany within the European Economic Area. Uploaded comment attachments are kept outside publicly accessible web storage and protected by access controls, encryption, file size and type validation and automated malware checks. Protected database backups are created for recovery and retained for a limited period.
12. Recipients. Personal data is not sold or rented. Necessary access is limited to authorised SIA FIXLAB staff, the identified hosting and communication providers, confidential professional advisers and legally entitled authorities. Ordinary workspace customer records are not included in subscription emails. A new use of a mail provider for customer-workspace messages is subject to the DPA's subprocessor procedure before it starts.
13. International transfers. The main Zer.lv workspace hosting is located in the EEA. Some necessary service providers, including Google services selected or used for account functions, may process limited data outside the EEA. Such transfers take place only where permitted by Chapter V GDPR: for example, where the European Commission has recognised an adequate level of data protection or the recipient is bound by approved safeguards such as the European Commission Standard Contractual Clauses. Information about the applicable transfer mechanism may be requested at fixlablv@gmail.com.
14. Data not requested. Zer.lv does not request payment-card credentials and is not designed for special-category, criminal-conviction, device-password or unrelated personal-content data. Such workspace data requires necessity, a lawful basis, minimisation and safeguards previously agreed in writing with SIA FIXLAB, as required by the DPA. SIA FIXLAB does not access repaired-device content unless an authorised user uploads it.
15. Retention. Workspace records are retained during service and the agreed switching/retrieval period; expiry alone is not an erasure request. Erasure of active records and attachments normally takes place within 30 days after the verified instruction or agreed retrieval period. Application-managed backups currently rotate over 30 days; infrastructure backups and manual snapshots require separate lifecycle control. Login, transactional-email and non-order activity logs normally rotate after 60 days; the history of existing orders is workspace data and remains with those orders. Registration funnel aggregates rotate after 180 days. Verification data is retained for short security periods. SIA FIXLAB's own invoices and accounting source documents are retained for the applicable statutory period, ordinarily at least five years; accounting registers and specified payroll records have different periods. Contract acceptance and exact document evidence are encrypted, access-restricted and retained while the agreement is active and ordinarily five years afterwards for substantiated contract/accounting purposes, longer only under a documented legal requirement or live claim. Unpaid deleted applications are not given that paid-contract retention by default. Order-comment attachments. Each order may store up to four PNG/JPG/JPEG photos and four PDFs across all comments; other upload formats are not accepted. Each photo is limited to 3 MB; each PDF is limited to 5 MB and 5 pages. These attachments are automatically and permanently deleted from active storage 90 days after upload. Existing attachments receive a full 90-day period from activation of this rule, without retroactive immediate deletion; the displayed expiry date applies. Download and retain any files you need before that date. Comment text and the order remain. This rule does not delete accounting or stock-receipt documents and does not replace the customer's legal record-retention duties. Backup remnants follow the separately stated backup lifecycle.
16. Rights. Subject to GDPR, individuals can request access, correction, erasure, restriction and portability, object to legitimate-interest processing or marketing, and withdraw optional consent without affecting earlier lawful processing. The preferred contact is fixlablv@gmail.com; other effective requests are considered. We verify identity proportionately, reply normally within one month and explain any lawful extension of up to two additional months. Complaints can be submitted to Latvia's Data State Inspectorate at www.dvi.gov.lv. Requests concerning a subscribing company's records are handled with that controller.
17. Workspace requests. A person whose data was entered by a subscribing company should normally contact that company, because it determines the purposes and means of the workspace processing. If SIA FIXLAB receives such a request as processor, it will forward or otherwise assist the relevant company and will not independently decide the request except where law requires otherwise.
18. Owner and employee access. The company owner manages employee roles and permissions. Employees may access only the functions and company data permitted to their account and cannot export company data. Different company workspaces are logically isolated. Platform-supervisor or support access is limited to support, recovery, maintenance, security, abuse investigation or legal duties and is logged.
19. Minors and automated decisions. Zer.lv is a B2B service intended for adult owners and authorised business users. SIA FIXLAB does not knowingly register a child as an account owner. A subscribing company remains responsible for the lawful processing of any minor's data in its own customer records. Zer.lv does not make solely automated decisions that produce legal or similarly significant effects.
20. Security and incidents. Measures include Argon2id password hashing, HTTPS, protected sessions, role and company isolation, encrypted attachments and backups, rate and origin checks, restricted administration and logging. Email or authenticator-based multi-factor authentication is used according to account settings and applicable requirements. No service guarantees zero risk. Suspected incidents may be reported to fixlablv@gmail.com. Required notifications follow awareness of a personal-data breach without waiting for a final investigation; facts can be supplemented in stages.
21. Changes. The current version date is shown on this page. Material changes are announced through Zer.lv or to the account email before they take effect where reasonably possible. Earlier versions and acknowledgement records may be retained where needed to demonstrate compliance. If translations conflict, the Latvian version prevails.