Privacy Policy
Last updated: October 20, 2026
1. Introduction
Prestantia Balt SIA (“Company”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal data when you visit our website at www.conexus.solutions (the “Website”), contact us, subscribe to our communications, request information about our services, or otherwise interact with us through the Website.
We primarily provide business-to-business (“B2B”) products and services. However, we recognise that information relating to individuals, including employees, representatives and other business contacts, may constitute personal data even when processed in a commercial context.
This Privacy Policy is intended to provide information in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), applicable national data protection laws, applicable national laws implementing Directive 2002/58/EC (the “ePrivacy Directive”), and other applicable privacy and electronic communications legislation.
Where applicable, this Policy also addresses relevant requirements under the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (“PECR”). References to these laws apply only to the extent that they are relevant to our activities and the individuals concerned.
This Privacy Policy applies to Website visitors, prospective customers, existing business contacts, representatives of business customers and suppliers, and individuals who communicate with us through our Website.
It does not necessarily apply to personal data processed within our B2B services on behalf of our business customers. Such processing may be governed by separate privacy notices, contractual terms and data processing agreements.
2. Who is responsible for your personal data?
The controller responsible for processing your personal data under this Privacy Policy is: Prestantia Balt SIA, registered address: Marsa Gatve 6-36, Riga, LV-1082, Latvia, company registration number: 40103222559, email: privacy@conexus.solutions, website: www.conexus.solutions
For the purposes of the GDPR, we act as the data controller when we determine the purposes and means of processing personal data described in this Policy.
3. Personal data we collect
Depending on how you interact with the Website, we may collect the following categories of personal data.
3.1. Identification and business contact information
When you contact us, request a demonstration, submit a form or communicate with us on behalf of an organisation, we may collect:
First and last name.
Business email address.
Business telephone number.
Job title, role and department.
Company or organisation name.
Country, region and other business address information.
Information you provide in your messages or enquiries.
We ask you to provide only the information reasonably necessary for your enquiry or the relevant interaction.
3.2. Website usage and technical information
When you visit the Website, we and, where applicable, our service providers may collect certain technical and usage information, including:
IP address.
Date and time of access.
Browser type and version.
Operating system and device type.
Language and general device settings.
Pages visited, navigation paths and referring URLs.
Session identifiers and other online identifiers.
Error reports, performance information and security logs.
Cookie identifiers and similar technologies, where applicable.
Some of this information may constitute personal data, particularly when it can be associated with an identifiable individual.
3.3. Enquiry and communication information
If you contact us by email, telephone, contact form or another communication channel, we may process:
The content of your communication.
Information about your request and our response.
Relevant correspondence history.
Information necessary to manage a potential business relationship.
We do not intentionally collect more information than is reasonably necessary for these purposes.
3.4. Marketing and business relationship information
Where applicable, we may process information concerning your interest in our services, communication preferences, event registrations, newsletter subscriptions, previous interactions and records of marketing consent or objections.
We may also maintain professional contact information about individuals acting in a business capacity, obtained from publicly accessible professional sources or business information providers, where permitted by applicable law.
Where personal data is obtained indirectly, we will provide the information required by applicable data protection law, subject to any applicable exceptions.
3.5. Cookie and preference information
We may collect information about your cookie preferences, consent decisions and interactions with consent-management tools.
Non-essential cookies and similar technologies will be used only where the required consent or other legally applicable permission has been obtained.
Further details are provided in Section 8.
3.6. Information from third parties
Where relevant and lawful, we may receive personal data from:
Your employer or the organisation you represent.
Professional networking platforms.
Business directories and publicly accessible sources.
Referral partners and business partners.
Providers of business contact or lead information.
Website analytics, security and communication service providers.
The information may include professional contact details, job role, company affiliation and business-related interests.
We will process such information only where we have an applicable legal basis and will provide any required privacy information.
3.7. Information we do not intentionally seek
Our Website is not designed to collect special categories of personal data, such as information about health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for identification, sex life or sexual orientation.
Please do not submit such information through the Website unless it is specifically requested for a lawful and appropriate purpose.
4. Purposes and legal bases for processing
We process personal data only where we have an applicable legal basis under Article 6 GDPR and, where required, have satisfied additional legal requirements.
The applicable legal basis depends on the specific purpose and circumstances of the processing.
4.1. Operating, maintaining and securing the Website
We process technical information to:
Deliver the Website and its content.
Maintain Website functionality and availability.
Diagnose errors and troubleshoot technical problems.
Protect the Website, infrastructure and users against fraud, abuse, unauthorised access and cyberattacks.
Maintain appropriate security and operational logs.
Legal basis: Our legitimate interests under Article 6(1)(f) GDPR in operating, maintaining and securing our Website and business, where these interests are not overridden by your rights and freedoms. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR may apply.
Access to information stored on, or obtained from, your device will also comply with applicable ePrivacy requirements.
4.2. Responding to enquiries and requests
We process identification, contact and communication information to:
Respond to questions and requests.
Provide information about our services.
Arrange meetings or demonstrations.
Prepare proposals and quotations.
Follow up on enquiries.
Take steps requested by you before entering into a contract.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract with you as an individual, or Article 6(1)(f) GDPR where we respond to business enquiries and manage prospective business relationships through the individual representing the organisation.
4.3. Managing business relationships
We may process relevant business contact information to manage communications with customers, prospective customers, suppliers and business partners.
Legal basis: Article 6(1)(b) GDPR where processing is necessary for a contract with you personally or pre-contractual steps requested by you; otherwise, Article 6(1)(f) GDPR where we have a legitimate interest in managing our business relationships.
4.4. Sending newsletters and marketing communications
Where permitted by law, we may send information about our services, product updates, events, webinars, reports and other business-related content.
We may use business contact details to communicate with existing business contacts or prospective customers, subject to applicable electronic marketing laws and your preferences.
Legal basis: Article 6(1)(a) GDPR where consent is required or obtained; or Article 6(1)(f) GDPR where appropriate for legitimate business-to-business marketing, subject to applicable national law and a balancing assessment.
The legal basis under the GDPR does not override any separate consent or other requirements imposed by applicable electronic communications legislation. We will obtain consent where required.
You may unsubscribe from marketing communications at any time.
4.5. Website analytics and improvement
Where enabled, we may use analytics tools to understand how visitors interact with the Website, identify popular content, measure performance and improve usability.
Legal basis: Article 6(1)(a) GDPR where consent is required or relied upon; or Article 6(1)(f) GDPR for analytics activities that are lawful without consent, subject to an appropriate assessment. Consent under applicable ePrivacy legislation will be obtained before placing or accessing non-essential cookies or similar technologies where required.
4.6. Personalisation and advertising
If we use advertising, retargeting or personalisation technologies, we may process online identifiers, Website interaction data and marketing preferences to measure advertising effectiveness or deliver relevant content.
Legal basis: Consent under Article 6(1)(a) GDPR and applicable ePrivacy legislation where required, or another legally valid basis where permitted by the relevant laws.
We will not activate consent-dependent advertising or tracking technologies before obtaining the required consent.
4.7. Compliance with legal obligations
We may process personal data to comply with applicable laws, regulations, binding requests from competent authorities and legal obligations, including obligations concerning accounting, recordkeeping and the exercise or defence of legal claims.
Legal basis: Article 6(1)(c) GDPR, where the processing is necessary to comply with a legal obligation applicable to us.
4.8. Establishing, exercising or defending legal claims
We may process relevant information where necessary to establish, exercise or defend legal claims, investigate disputes or protect our legal rights.
Legal basis: Article 6(1)(f) GDPR, where applicable. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR may apply.
4.9. Other purposes
If we intend to process your personal data for a new purpose that is not compatible with the original purpose, we will provide any additional information required by law and obtain consent where legally necessary.
5. Legitimate interests
Where we rely on Article 6(1)(f) GDPR, our legitimate interests may include:
Operating and improving our Website and business.
Responding to business enquiries.
Maintaining professional relationships.
Protecting our systems, users and assets.
Preventing fraud and misuse.
Managing and improving relevant business communications.
Establishing, exercising or defending legal claims.
We assess the necessity and proportionality of the processing and consider whether your interests, fundamental rights or freedoms override our interests.
Where required, we document this assessment. You may object to processing based on legitimate interests as described in Section 11.
6. Whether you must provide personal data
You can generally browse our publicly accessible Website without directly providing your name or business contact details.
However, certain information may be technically necessary to deliver the Website, maintain security or provide a functionality you request.
If you choose to contact us, request a demonstration or subscribe to communications, some information may be necessary to respond to or fulfil your request.
Where providing personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, we will inform you where applicable of the consequences of not providing it.
If you do not provide the information needed to process a request, we may be unable to respond or provide the requested service.
7. How we collect personal data
We collect personal data through the following methods:
Directly from you: When you submit a form, email us, subscribe to communications or otherwise contact us.
Automatically: Through server logs, technical systems, cookies and similar technologies, subject to applicable consent requirements.
From your organisation: When an employer, colleague or business partner provides your professional contact details in connection with a business relationship.
From third-party sources: Such as professional networking platforms, public business directories and business information providers, where lawful.
From service providers: Such as Website hosting, analytics, security and communication providers, where they provide relevant information to us under appropriate arrangements.
Where personal data is not obtained directly from you, we will provide the information required under Article 14 GDPR, including the relevant categories and source of the data, within the applicable time limits, unless a legal exception applies.
8. Cookies and similar technologies
8.1. What cookies are
Cookies are small files stored on your device. We may also use similar technologies, including pixels, tags, scripts, local storage and software development tools, to operate the Website or understand how it is used.
8.2. Categories of technologies
Depending on our actual Website configuration, we may use the following categories:
Strictly necessary technologies
These are required to provide a service explicitly requested by you or to transmit communications over an electronic communications network. They may support security, network management, consent preference storage or essential Website functionality.
Where an applicable exemption applies, these technologies do not require consent under ePrivacy legislation.
Preference technologies
These remember settings such as language or display preferences. Where they are not strictly necessary or otherwise exempt, we will obtain the required consent.
Analytics technologies
These help us understand Website usage and performance. We will obtain consent before using technologies that require consent under applicable law.
Marketing and advertising technologies
These may be used to measure advertising, build audiences or provide targeted advertising. Where required, we will obtain consent before activating them.
8.3. Consent and cookie preferences
Where consent is required, non-essential cookies and similar technologies will not be placed on or accessed from your device before you provide valid consent.
You can accept or reject non-essential cookies through our cookie consent interface and change your preferences at any time using the Cookie preferences on the Website.
Where consent is required, refusing non-essential cookies will not prevent you from accessing Website features that do not depend on them.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
8.4. Cookie information
The specific cookies and technologies used on the Website, their providers, purposes, durations and any relevant international transfers will be described in our Cookie Policy or cookie preference interface.
The actual cookie inventory must be kept accurate and updated as our Website and providers change.
8.5. Browser settings
You can also manage or delete cookies through your browser settings. However, browser controls may not replace the need to manage consent through our Website, and disabling certain technologies may affect Website functionality.
9. Sharing personal data with third parties
We may disclose personal data to the following categories of recipients, where necessary and lawful.
9.1. Service providers and processors
These may include providers of:
Website hosting and cloud infrastructure.
Website development and maintenance.
Security, fraud prevention and technical monitoring.
Email, business communications and contact management.
Customer relationship management (CRM).
Newsletter distribution.
Analytics and consent management.
Scheduling, meeting and video-conferencing tools.
Customer support and business administration.
Where a provider processes personal data on our behalf, we will enter into a data processing agreement meeting Article 28 GDPR requirements, where applicable.
We will provide access to personal data only to the extent necessary for the relevant purpose.
9.2. Professional advisers
We may disclose relevant personal data to lawyers, auditors, accountants, insurers and other professional advisers where necessary for the provision of their services, compliance with legal obligations or protection of our legal interests.
9.3. Authorities and legal recipients
We may disclose personal data to courts, regulators, law enforcement authorities or other competent bodies where required by law or where necessary to establish, exercise or defend legal claims.
9.4. Business transactions
In the event of a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, relevant personal data may be disclosed to prospective or actual counterparties and their professional advisers, subject to applicable confidentiality, security and data protection requirements.
9.5. Other recipients
We may disclose personal data to other recipients where you have requested or authorised the disclosure, where it is necessary to perform a contract, or where another lawful basis permits the disclosure.
We do not sell personal data in exchange for money. Any sharing for targeted advertising, cross-context behavioural advertising or similar activities will be assessed and disclosed as required by applicable law.
10. International transfers of personal data
We primarily seek to use service providers and arrangements that provide an appropriate level of data protection.
However, some of our service providers, group companies or other recipients may be located outside the European Economic Area (“EEA”), or may access personal data from outside the EEA.
Where personal data is transferred to a country that is not covered by an applicable adequacy decision, we will ensure that an appropriate transfer mechanism under Chapter V GDPR is in place, as applicable.
Such mechanisms may include:
Standard Contractual Clauses approved by the European Commission.
Other legally recognised safeguards under Article 46 GDPR.
An applicable derogation under Article 49 GDPR, where its strict requirements are met.
Where required, we will assess the circumstances of the transfer and implement supplementary measures.
You may request further information about the applicable transfer safeguards by contacting us using the details in Section 2, subject to lawful limitations.
Where relevant, transfers from the United Kingdom will be governed by the applicable UK data protection transfer requirements.
11. Your data protection rights
Subject to the conditions, exceptions and limitations established by applicable law, you may have the following rights.
11.1. Right of access
You may request confirmation as to whether we process your personal data and obtain access to that data, together with the information required under Article 15 GDPR.
11.2. Right to rectification
You may request correction of inaccurate personal data and completion of incomplete personal data under Article 16 GDPR.
11.3. Right to erasure
You may request deletion of your personal data where the conditions in Article 17 GDPR are met.
This right is not absolute. We may retain information where an applicable legal exception permits or requires retention, including for compliance with legal obligations or the establishment, exercise or defence of legal claims.
11.4. Right to restriction of processing
You may request restriction of processing in the circumstances described in Article 18 GDPR.
11.5. Right to data portability
Where the requirements of Article 20 GDPR are satisfied, you may receive personal data you have provided to us in a structured, commonly used and machine-readable format and request its transmission to another controller where technically feasible.
This right generally applies to processing based on consent or contract and carried out by automated means.
11.6. Right to object
You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR, including profiling based on those grounds, subject to the conditions in Article 21 GDPR.
Where we process personal data for direct marketing purposes, you have the right to object at any time, including to related profiling. Following such an objection, we will stop processing your personal data for direct marketing purposes.
11.7. Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
11.8. Rights relating to automated decision-making
Where applicable, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, subject to the exceptions in Article 22 GDPR.
We do not intend to make such decisions about Website visitors as part of the ordinary Website activities described in this Policy. If this changes, we will provide the information and safeguards required by law.
11.9. Right to lodge a complaint
You have the right to lodge a complaint with a competent supervisory authority, particularly in the EU/EEA country of your habitual residence, place of work or the place of the alleged infringement.
You may contact the relevant supervisory authority directly. In Latvia, the competent national authority is the Data State Inspectorate (Datu valsts inspekcija), where applicable.
You are not required to contact us before lodging a complaint, although you may do so if you wish.
11.10. How to exercise your rights
To exercise your rights, please contact us at:
Email: privacy@conexus.solutions
Please describe your request and, where reasonably necessary, provide sufficient information for us to identify the relevant personal data and verify your identity.
We will not request additional identification information unless it is necessary and proportionate to verify your identity.
We will respond within the time limits prescribed by applicable law, generally within one month of receiving a request under the GDPR. This period may be extended by up to two additional months where permitted by law, taking into account the complexity and number of requests. If an extension applies, we will inform you within the initial one-month period.
Requests are generally handled free of charge. We may charge a reasonable fee or refuse to act where permitted by Article 12(5) GDPR, for example in the case of manifestly unfounded or excessive requests.
12. Direct marketing and your communication preferences
We may send you business-related communications where we are legally permitted to do so.
Where consent is required for electronic marketing, we will request consent before sending such communications. Where applicable law permits certain communications to existing customers or business contacts without consent, we will comply with the relevant conditions, including any applicable opt-out requirements.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us at privacy@conexus.solutions.
If you opt out, we may retain limited information necessary to record and respect your objection or unsubscribe request, prevent further marketing and demonstrate compliance.
Unsubscribing from marketing communications will not prevent us from sending essential administrative, transactional, security-related or other non-marketing communications where necessary and lawful.
Where applicable, we will honour objections to direct marketing across the relevant channels and systems.
13. Data retention
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including any applicable legal, accounting, reporting or dispute-resolution requirements.
Retention periods depend on the category of data, the purpose of processing, applicable legal requirements and the circumstances of the relevant relationship.
Unless a different period is justified or required by law, our intended retention approach is as follows:
Website security and server logs: Retained for the period necessary to maintain security, investigate incidents and diagnose technical issues, typically 6 months.
Contact forms and general enquiries: Retained for the time needed to respond to the enquiry and manage related follow-up and correspondence, typically up to until consent is withdrawn or a valid objection is made.
Newsletter and marketing records: Retained until you unsubscribe, withdraw consent or otherwise object, subject to any necessary retention of limited suppression records and other lawful retention requirements.
Cookie consent records: Retained for the period necessary to demonstrate and manage consent, taking into account applicable law and the consent management system.
Legal and compliance records: Retained for the period required by applicable law or reasonably necessary to establish, exercise or defend legal claims.
These periods are indicative and must be replaced or confirmed against our actual retention practices.
When personal data is no longer necessary, we will delete it, anonymise it or securely isolate it where continued retention is legally required.
14. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Depending on the nature and risks of the processing, these measures may include:
Access controls and least-privilege permissions.
Authentication and account security controls.
Encryption where appropriate.
Security monitoring and logging.
Software updates and vulnerability management.
Backup and recovery procedures.
Confidentiality obligations and staff awareness measures.
Supplier security assessments and contractual safeguards.
Incident response and personal data breach procedures.
No Website, system or method of electronic transmission can be guaranteed to be completely secure. We regularly review our security measures and seek to improve them in line with applicable legal requirements and the risks involved.
Where a personal data breach occurs, we will assess and respond to it in accordance with applicable law, including notification to the competent supervisory authority and affected individuals where required.
15. Third-party websites and embedded content
The Website may contain links to third-party websites or include embedded content and functionalities provided by third parties, such as video players, maps, social media content, scheduling tools or external resources.
These third parties may process personal data under their own privacy policies and terms.
We are not responsible for the privacy practices of independent third-party websites or services that we do not control.
Where embedded content or third-party technologies access information on your device or process personal data, we will implement the consent mechanisms and other safeguards required by applicable law.
We encourage you to review the privacy information of third-party providers before interacting with their services.
16. Children
Our Website and B2B services are intended primarily for business users and professionals, not for children.
We do not knowingly collect personal data from children in connection with the Website unless this is appropriate and lawful in the specific circumstances.
If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us at privacy@conexus.solutions.
We will investigate the matter and take appropriate action in accordance with applicable law.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities, Website functionality, service providers, legal requirements or business operations.
The updated version will be published on the Website, together with a revised “Last updated” date.
Where required by law, we will provide additional notice of material changes or take other steps required by applicable law.
We encourage you to review this Privacy Policy periodically.
18. Contact us
If you have questions about this Privacy Policy, our handling of personal data or the exercise of your data protection rights, please contact:
Prestantia Balt, SIA
Address: Marsa Gatve 6-36, Riga, LV-1082, Latvia
Email: privacy@conexus.solutions
Website: www.conexus.solutions
We will review your enquiry and respond in accordance with applicable data protection legislation.