GK Solutions IT Security

Privacy Policy

GK Solutions SIA hereinafter referred to as "GK Solutions", "the Company", "we", "us" or "our", respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679, applicable Latvian data protection laws, and other relevant legal requirements.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website https://gksolutions.eu, contact us, use or request our services, cooperate with us, participate in recruitment processes, attend trainings, or otherwise provide us with your personal data.

This Privacy Policy applies to website visitors, customers, potential customers, business partners, subcontractors, service providers, job applicants, training participants, and other individuals whose personal data may be processed by GK Solutions.

By using our website or providing personal data to us, you confirm that you have read this Privacy Policy.

1. Data Controller

The data controller responsible for processing your personal data is:

GK Solutions SIA
Website: https://gksolutions.eu
Contact email: [email protected]
Registered address: Mazais ceļš 5B, Jelgava, LV-3001
Registration number: 43603047329

If you have questions about this Privacy Policy or the processing of your personal data, please contact us using the contact details above.

2. Personal Data We May Process

Depending on your relationship with us, we may collect and process the following categories of personal data:

  • Identification data - name, surname, position, company name, workplace, or similar information;
  • Contact data - email address, phone number, business address, residential address, or other contact details;
  • Business and contractual data - information related to service requests, proposals, contracts, invoices, cooperation, service delivery, and communication;
  • Recruitment data - CV, cover letter, employment history, education, professional qualifications, certifications, skills, interview notes, references, and other information submitted during a recruitment process;
  • Training and event data - registration details, attendance information, communication, and, where applicable, recordings or feedback;
  • Website usage and technical data - IP address, browser type, device information, operating system, pages visited, date and time of visit, cookies, and similar technical information;
  • Data provided by customers or partners - personal data that may be shared with us in connection with cybersecurity consulting, audits, training, incident response, or other services;
  • Other data voluntarily provided by you - information submitted when contacting us, requesting services, visiting our office, communicating with us, or otherwise interacting with GK Solutions.

We only process personal data that is necessary for specific, clearly defined purposes.

3. Purposes and Legal Basis for Processing

We process personal data for the following purposes and based on the following legal grounds:

3.1 Consent

We may process personal data based on your consent, for example, to:

  • Respond to specific requests where consent is required;
  • Send marketing communication, where applicable;
  • Use non-essential cookies or analytics tools;
  • Process participation in events, webinars, or optional activities;
  • Retain candidate data for future recruitment opportunities, where consent is requested.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

3.2 Contract or Pre-Contractual Steps

We may process personal data where it is necessary to:

  • Prepare offers or proposals;
  • Respond to service requests;
  • Enter into and perform contracts;
  • Provide cybersecurity consulting, audits, training, penetration testing, CISO as a Service, or other services;
  • Communicate with customers, partners, subcontractors, or their representatives;
  • Manage invoices, payments, and service delivery.

3.3 Legal Obligation

We may process personal data where required by applicable law, including for:

  • Accounting and tax obligations;
  • Compliance with legal, regulatory, or supervisory authority requests;
  • Employment-related obligations;
  • Record-keeping requirements;
  • Responding to lawful requests from public authorities.

3.4 Legitimate Interests

We may process personal data based on our legitimate interests, including to:

  • Manage and develop our business operations;
  • Respond to enquiries and maintain business communication;
  • Protect our rights and legal interests;
  • Ensure website, system, office, and information security;
  • Improve the quality of our services;
  • Manage customer and partner relationships;
  • Conduct internal administration;
  • Defend against claims or pursue legal remedies;
  • Offer similar services to existing customers, where permitted by law.

Where we rely on legitimate interests, we ensure that such interests do not override your rights and freedoms.

4. Personal Data Shared with Third Parties

We do not sell your personal data.

We may disclose or provide access to personal data only where necessary and legally permitted, including to:

  • IT, hosting, cloud, email, website, and infrastructure service providers;
  • Accounting, legal, audit, insurance, and professional advisory service providers;
  • Recruitment platforms or recruitment service providers;
  • Subcontractors or specialists involved in service delivery;
  • Customers or potential customers, where relevant for proposals, tenders, projects, or service delivery;
  • Public authorities, regulators, courts, law enforcement bodies, or other institutions where required by law;
  • Other recipients where disclosure is necessary to protect our legal rights, ensure security, or perform contractual obligations.

Where we use data processors, we ensure that appropriate contractual, technical, and organisational safeguards are in place to protect personal data and confidentiality.

5. International Data Transfers

In some cases, personal data may be transferred or accessed outside the European Economic Area, for example when we use international cloud, IT, communication, or business service providers.

Where such transfers occur, we ensure that appropriate safeguards are applied in accordance with GDPR, such as adequacy decisions, Standard Contractual Clauses, contractual protections, and other legally recognised transfer mechanisms.

6. Personal Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Typical retention principles include:

  • Customer, partner, contractual, accounting, and cooperation data may be retained for the period required by applicable accounting, tax, contractual, and limitation laws;
  • Personal data processed under customer agreements is retained in accordance with the relevant contract, data processing agreement, or customer instructions;
  • Website enquiry and communication data is retained for as long as necessary to respond to the request and manage related communication;
  • Recruitment data is retained for the duration of the recruitment process and for a reasonable period afterwards, unless a longer period is required by law or consent is given for future opportunities;
  • Marketing consent data is retained until consent is withdrawn or the data is no longer necessary;
  • Cookie data is retained according to the specific cookie type and cookie settings;
  • Training or event-related data is retained for as long as necessary to deliver the service, manage records, and protect legal interests.

When personal data is no longer required, we securely delete, anonymise, or otherwise dispose of it.

7. Personal Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, accidental or unlawful destruction, loss, alteration, disclosure, or misuse.

These measures may include access controls, confidentiality obligations, secure communication, system monitoring, information security procedures, supplier controls, and other safeguards appropriate to the nature and risk of processing.

Access to personal data is limited to employees, contractors, and partners who need it to perform their duties and who are required to maintain confidentiality.

8. Automated Decision-Making and Profiling

GK Solutions does not use personal data for automated decision-making that produces legal effects or similarly significant consequences for individuals.

We may use limited profiling or segmentation for website analytics, service improvement, or marketing purposes, where legally permitted and subject to applicable consent requirements.

9. Cookies and Website Usage

When you visit https://gksolutions.eu, we may collect certain technical information, such as IP address, browser type, device information, operating system, pages visited, and visit duration.

Our website may use cookies and similar technologies to:

  • Ensure website functionality;
  • Remember user preferences;
  • Analyse website usage;
  • Improve website performance and content;
  • Support marketing activities, where applicable.

Cookies may include:

  • Strictly necessary cookies - required for the website to function properly;
  • Functional cookies - used to remember preferences and improve usability;
  • Analytical cookies - used to understand website usage and improve performance;
  • Marketing cookies - used to personalise content or measure marketing activities, where applicable.

You can manage or disable cookies through your browser settings or, where available, through the website cookie banner. Blocking certain cookies may affect website functionality.

10. Recruitment Privacy

When you apply for a role at GK Solutions, or when we receive your application through email, LinkedIn, CV.lv, or another recruitment platform, we process your personal data for recruitment purposes.

We may process your CV, cover letter, contact details, employment history, education, qualifications, certifications, interview information, references, and any other information you provide during the recruitment process.

We use this data to:

  • Assess your suitability for a position;
  • Communicate with you;
  • Arrange interviews;
  • Evaluate qualifications and experience;
  • Make recruitment decisions;
  • Comply with legal obligations;
  • Protect our legal interests.

If we wish to retain your application for future opportunities after the recruitment process ends, we may ask for your consent where required.

11. Third-Party Websites

Our website may contain links to third-party websites, platforms, or services, such as LinkedIn, CV.lv, partner websites, or other external resources.

We are not responsible for the privacy practices, content, or security of third-party websites. We recommend reviewing the privacy policies of any external websites before submitting personal data.

12. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access - to request information about personal data we process about you;
  • Right to rectification - to request correction of inaccurate or incomplete personal data;
  • Right to erasure - to request deletion of personal data in certain circumstances;
  • Right to restriction of processing - to request limited processing of personal data in certain circumstances;
  • Right to object - to object to processing based on legitimate interests or direct marketing;
  • Right to data portability - to receive certain personal data in a structured, commonly used, machine-readable format;
  • Right to withdraw consent - where processing is based on consent;
  • Right not to be subject to automated decision-making - where such processing has legal or similarly significant effects.

To exercise your rights, please contact us using the contact details provided in this Privacy Policy.

We may ask you to provide information necessary to verify your identity before responding to your request.

We will respond to your request within one month, unless the request is complex or additional time is permitted under applicable law.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Latvian supervisory authority:

Data State Inspectorate of the Republic of Latvia
Website: https://www.dvi.gov.lv

13. Changes to this Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes in our services, legal requirements, technologies, or data processing practices.

The current version of this Privacy Policy will always be available on our website.

Last updated: June 18, 2026

14. Contact Details

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:

GK Solutions SIA
Website: https://gksolutions.eu
Email: [email protected]
Address: Mazais ceļš 5B, Jelgava, LV-3001