Personal Data Protection

We believe that your personal data should be handled responsibly, securely and transparently. This page explains how Printosaur.com approaches personal data protection and how you can exercise your rights.

This information supplements the Printosaur.com Privacy Policy and Cookie Information. Our Privacy Policy provides more detailed information about the data we collect, why we use it, who may receive it and how long it is retained.

1. Data controller

The controller responsible for personal data processed through Printosaur.com is:

Legal name: Viktors Silovs IK
Registration number: 40002231115
Registered address: Pārogres gatve 43, Ogre, Latvia, LV-5001
Email: info@printosaur.com
Telephone: +371 29998616

In this document, Viktors Silovs IK is referred to as “we”, “us” or the “Controller”.

2. Our data protection principles

When processing personal data, we follow these principles:

• Lawfulness and transparency — we process personal data only where an appropriate legal basis exists and aim to explain clearly how the data is used.
• Purpose limitation — we collect data for specific and clearly defined purposes, such as fulfilling orders, arranging delivery or providing customer support.
• Data minimisation — we aim to collect only the information reasonably required for the relevant purpose.
• Accuracy — we take reasonable steps to keep the personal data we hold accurate and up to date.
• Storage limitation — we do not retain data longer than required for the relevant purpose or by applicable law.
• Confidentiality and security — we protect personal data against unauthorised access, disclosure, loss, alteration or destruction.
• Accountability — we review our data-processing arrangements and improve them where necessary.

3. What information do we protect?

Personal data means information relating to an identified or identifiable natural person.

Depending on how you use Printosaur.com, the personal data we protect and process may include:

• your name and surname;
• email address and telephone number;
• delivery and billing address;
• order and delivery information;
• invoice and payment-status information;
• customer-account information;
• customer-support communications;
• reviews, complaints and claims;
• text, images, logos or 3D models submitted for personalisation;
• IP address, device data, system logs and cookie data;
• records of consent and privacy choices.

4. How do we protect personal data?

We use technical and organisational measures that are appropriate to the risks associated with the processing.

Depending on the system, the type of information and the level of risk, these measures may include:

• restricting access to people who need the data to perform their work;
• managing user access rights and authentication;
• using secure methods for transmitting and storing information;
• maintaining software and security updates;
• protecting systems against unauthorised access and misuse;
• maintaining backup and recovery arrangements where appropriate;
• entering into data-processing agreements with service providers;
• reviewing access and system logs;
• maintaining procedures for assessing personal data incidents;
• reviewing relevant systems and service providers.

No information system can guarantee absolute security. Our measures are therefore selected with regard to the nature and volume of the information, the technologies used and the potential risks to individuals.

5. Materials submitted for personalised orders

Printosaur.com may offer personalised or custom-made products. To fulfil such an order, you may provide:

• text or a person’s name;
• an image or photograph;
• a logo;
• a design file;
• a 3D model;
• other personalisation instructions.

We use these materials only to the extent necessary to assess, prepare and fulfil the order.

Please do not submit health information, copies of identity documents or other sensitive information unless it is genuinely necessary to manufacture the requested product.

Where submitted materials contain information about another person, you must have the right to use the materials and provide them to us for order fulfilment.

6. Access to personal data

Access to personal data is limited to what is necessary to perform a particular task.

Personal data may be accessed by:

• authorised persons working for the business;
• website and hosting providers;
• payment service providers;
• delivery and courier providers;
• accounting service providers;
• IT support and security providers;
• legal and other professional advisers.

Service providers may use personal data only to provide the agreed service and must comply with the applicable contractual and data protection requirements.

7. Transfers outside the European Economic Area

We prefer service providers that process personal data within the European Union or European Economic Area.

Where a provider processes personal data outside the European Economic Area, an appropriate transfer mechanism is used, such as:

• a European Commission adequacy decision;
• European Commission Standard Contractual Clauses;
• another safeguard permitted by applicable law.

8. Retention and deletion

We retain personal data only for as long as required:

• to fulfil an order;
• to provide customer support;
• to comply with accounting and tax obligations;
• to handle warranty requests or complaints;
• to establish, exercise or defend legal claims;
• to prevent or investigate security incidents;
• to comply with other legal obligations.

When information is no longer required and there is no legal basis for keeping it, it is deleted, anonymised or securely destroyed.

More detailed information about retention periods is available in the Printosaur.com Privacy Policy.

9. Your rights

Depending on the particular processing activity, you may have the right to:

• receive information about the processing of your personal data;
• request access to your personal data;
• receive a copy of your personal data;
• request correction of inaccurate or incomplete data;
• request deletion in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• receive certain data in a structured and machine-readable format;
• withdraw previously given consent;
• lodge a complaint with a supervisory authority.

These rights are not absolute. In some circumstances, applicable law may allow or require us to continue processing certain information.

10. How to submit a request

To exercise your data protection rights, email:

info@printosaur.com

We recommend using the subject line: “Personal data request”.

Your request should explain:

• which right you wish to exercise;
• which information or order the request relates to;
• how we can contact you with our response.

To prevent information from being disclosed to the wrong person, we may ask for additional information to verify your identity. We will not request more information than is reasonably necessary for that purpose.

We will respond without undue delay and normally within one month of receiving the request. For complex or numerous requests, the deadline may be extended where permitted by law, and the requester will be informed accordingly.

11. Withdrawing consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent:

• does not affect the lawfulness of processing carried out before withdrawal;
• does not affect processing based on another lawful basis;
• may mean that a voluntary feature can no longer be provided.

You may unsubscribe from marketing communications through the unsubscribe option in the relevant message or by contacting info@printosaur.com.

12. Personal data breaches

A personal data breach may involve accidental or unlawful:

• destruction;
• loss;
• alteration;
• unauthorised disclosure;
• unauthorised access.

Where a possible breach is identified, we assess its nature, scope and potential consequences, take steps to contain it and document the incident.

Where required by law, the Data State Inspectorate of Latvia and affected individuals will be informed.

13. How you can help protect your information

You can help protect your personal data by:

• using a secure and unique password;
• not sharing your account credentials;
• signing out when using a shared device;
• checking that emails genuinely originate from Printosaur.com;
• avoiding the submission of unnecessary sensitive information;
• notifying us if you notice suspicious account activity;
• keeping your contact information up to date.

14. Complaints

Where you have concerns about our processing of personal data, please contact us first at info@printosaur.com.

You also have the right to lodge a complaint with the Latvian supervisory authority:

Data State Inspectorate of Latvia
Elijas Street 17, Riga, LV-1050, Latvia
Email: pasts@dvi.gov.lv
Telephone: +371 67223131

The supervisory authority’s contact details were verified on 5 August 2026.

15. Related documents

Further information is available in the following Printosaur.com documents:

• Privacy Policy;
• Cookie Information;
• Online Store Terms and Conditions;
• Delivery and Payment Terms;
• Withdrawal and Returns Policy.

16. Changes to this document

We may update this document where our services, technologies, processing activities or legal requirements change.

The current version will always be available on Printosaur.com. The latest revision date will be displayed at the beginning of the document.

17. Contact details

For questions about personal data protection, contact:

Viktors Silovs IK
Registration number: 40002231115
Registered address: Pārogres gatve 43, Ogre, Latvia, LV-5001
Email: info@printosaur.com
Telephone: +371 29998616