Privacy policy

Controller

This site is run by CAR.LV. Address: "Lielmaņi", Building A, Mārupe Municipality, LV-2167. Email: info@car.lv.

What we process

If you call, email or write on WhatsApp, we use the contact details you send so we can answer a question about a car or a service.

On the site we store your language choice, whether the catalogue filter panel is collapsed, the referral parameter m and a visitor identifier. We also read a device fingerprint. The sections below give the details.

Cookies and similar tools

Settings: language choice (cookie and localStorage carlv.locale, the cookie for one year); whether the catalogue filter panel is collapsed (localStorage catalog:filters-collapsed).

Referral link m: if you open a link with the parameter m (or the older ref), the site keeps its value in the cookie car_lv_m for 30 days. Car pages then show the contact details of the manager that value identifies, and your visits and enquiries are credited to that manager.

Visitor identifier: cookie car_lv_v, 400 days. The next section explains it.

Visitor identifier and device fingerprint

From the first page, the site gives every visitor a random identifier and keeps it in the cookie car_lv_v for 400 days. That period starts again each time you use the site.

On each page load the site also reads a device fingerprint: your browser's user agent, languages, platform, number of processor cores, device memory, screen width, height and colour depth, pixel ratio, time zone, touch points, graphics card vendor and model, and short codes calculated from a test image your browser draws and from its audio settings. Your browser sends all of this to our server, together with one code calculated from it.

Your browser sends the identifier, the address of the current page without query parameters and the value of parameter m, if there is one, to our own server on each page load, when you open a car page and after you send an enquiry from a car page. While a page is open it sends a short ping with the same data every minute and each time you come back to the tab. The server adds your IP address, the browser's user agent and the time of your first and latest activity.

We use this to recognise a browser when you come back, to see who is on the site right now and which cars they have looked at, and to give a manager that history when answering an enquiry or following visits from their own link. Our staff see it in our customer system. The fingerprint is a second signal: it can show staff that two records may come from one device, and they can merge those records by hand.

A record starts without a name. It becomes tied to a person in three cases: you open a manager's personal link (the record is tied to that manager and, if the link was made for a particular client, to that client); you send an enquiry through a form on the site (the identifier is added to the enquiry with your name and contact details); or a staff member links the record to a client in our customer system.

Legal basis: our legitimate interest in serving people interested in our cars and crediting visits to the right manager (Art. 6(1)(f) GDPR). You may object (Art. 21 GDPR) by writing to info@car.lv. If you delete the cookie, the site creates a new identifier on the next page. Global Privacy Control and Do Not Track do not stop these records.

Statistics

We use Rybbit, open-source web analytics software, to see how the site is used. It runs on a dedicated server in the EU that is operated for us (st.eclectie.ch), and we use no third-party analytics service. Analytics data does not go to Google or any other third party and is not used for advertising.

Rybbit sets no cookies and stores nothing on your device.

On each page view it collects: the page address without query parameters, page title, referring page, browser and version, operating system, device type, screen size, language and, derived from the IP address, approximate location (country, region, city, time zone) and the network operator. It also collects page load performance measurements, clicks on buttons (with the button's label) and outbound links, and form interactions (the field's name and type). It never collects the text you type into a form. The Rybbit script also checks a few browser characteristics to tell automated traffic from real visitors and sends only a numeric score.

To count visitors, the analytics server derives a short identifier of its own from a hash of the IP address and the browser type. The IP address itself is not stored. This identifier stays the same while you keep the same IP address and browser, and it is the same on other websites measured with this tool. It is separate from the car_lv_v identifier and is not linked to a name or account, and no cross-site profiles are built.

Legal basis: our legitimate interest in understanding how the site is used and keeping it working (Art. 6(1)(f) GDPR). You may object (Art. 21 GDPR). If your browser sends Global Privacy Control or Do Not Track, Rybbit records nothing. Requests to st.eclectie.ch can be blocked with a browser extension or similar tool without affecting the site.

Analytics data is kept only as long as needed for this purpose and is then deleted (Art. 5(1)(e) GDPR).

Fonts

The site's typefaces load from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To fetch them, your browser connects to Google's servers, and Google receives your IP address. Legal basis: our legitimate interest in showing the site in its intended typefaces (Art. 6(1)(f) GDPR).

Your rights

You may ask to access, correct or delete your data. Write to info@car.lv.

Changes

We may update this text. The current version is always on this page.