GRILL WINSTACO
Your privacy.
Last updated: 6 October 2026.
This notice describes our website and enquiry tools. We receive requests online and confirm availability, payment and delivery personally. Online payments are not enabled.
Who is responsible?
AN DIZAINS, SIA, registration no. 45103002950, operates Grill WINSTACO and is the controller of personal data processed for this website and our enquiries. Contact us at grill@winstaco.com or +371 29207669. Registered office and workshop: Viskaļu iela 22, Rīga, LV-1026, Latvia.
Data and purposes
- Website access and security. Hosting involves your IP address, browser/request information and technical error data. We use temporary rate-limit counters to protect the site. Preview sign-in uses an 8-hour session cookie; the password is not an advertising identifier. Legal basis: legitimate interests in reliable and secure operation (GDPR Article 6(1)(f)).
- Your privacy choices. We store the choices, notice version and timestamp in your browser to respect them. Necessary storage is explained in the cookie notice; our legitimate interest is respecting your preferences.
- Optional fonts and maps. External providers receive technical data only after you enable the corresponding option. Legal basis for our optional integration: your consent (Article 6(1)(a)). You may withdraw it through “Privacy settings”. Refusal does not prevent browsing, viewing products or requesting a quote.
- Delivery estimates. Typing into the address search sends your search text to our server and Geoapify. Selecting a result sends its address/coordinates for road routing and pricing. Do not include a person's name or unrelated information in the address search. Legal basis: steps at your request before entering a contract (Article 6(1)(b)). You may instead contact us for a manual estimate.
- Enquiries. The forms use your name, email, phone number, billing/delivery addresses, invoice email, selected grill, dates and notes. For business customers, the forms also use the company name, registration number and VAT number, if supplied, to prepare a request. Business representatives’ contact details are used for our legitimate interest in handling business enquiries (Article 6(1)(f)). When online submission is enabled, choosing “Send request” sends these details securely to our server and saves the request in a private company Google Workspace spreadsheet. We send a transactional receipt to your contact email and a notification to our staff. We use the details to respond by phone or email and prepare a quote (Article 6(1)(b)); defending or resolving related claims may rely on legitimate interests or legal obligations. It is not a newsletter subscription. If online submission is unavailable, opening an email draft or saving a file does not send your request; you must send the draft yourself.
Contact details are needed to reply to an enquiry; an address is needed for an automatic delivery estimate. If you do not provide them, use the public contact details to discuss other arrangements. The calculator gives an estimate, not an automated decision about your legal rights.
Recipients and external services
- Render Services, Inc. hosts our website in the Frankfurt region. Hosting and security may involve subprocessors and international transfers. See Render privacy information and its Data Processing Addendum, which describes contractual transfer safeguards.
- Geoapify GmbH. provides address lookup and routing. Requests pass through our server, so we do not intentionally forward your browser's IP address to Geoapify. Its policy describes EU hosting and successful API-request logs generally retained for no more than 24 hours. See Geoapify privacy policy.
- Google Fonts and Adobe Fonts are used only when you enable external fonts. OpenStreetMap Foundation and unpkg are used only when you enable the external map and request delivery. These providers may operate outside the EEA or use global delivery networks. Their policies and the data involved are linked in our cookie notice.
- Google Workspace. provides our company email, the private spreadsheet used to record submitted requests and the Apps Script service used to send receipt acknowledgements. Access is restricted to authorised company staff. The website does not read your mailbox. The sender's email provider also processes the message. See Google Workspace data processing terms, which describe processing and transfer safeguards. Our staff use the enquiry to respond. We do not sell enquiry data or use it for advertising profiles.
Storage and retention
Unsent enquiry fields are held in the current browser page. Submitted requests and notification statuses are stored in our private company Workspace spreadsheet; this allows staff to follow up and prevents duplicate processing of retries. A file you download remains under your control. Privacy choices last 180 days. A sign-in session for our separate private preview lasts 8 hours. Application rate-limit counters expire after their 1-minute, 5-minute or 10-minute window and are removed by periodic cleanup.
Enquiries received by email are retained while needed to answer, arrange or resolve the enquiry and any resulting contract or dispute. Records required by law are retained for the applicable legal period. Hosting and provider security logs follow the providers' policies and applicable agreements; contact us for details about records relating to you.
Your rights
You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Contact grill@winstaco.com; we may need to verify your identity. You can complain to Latvia's supervisory authority, the Data State Inspectorate (Datu valsts inspekcija).
Changes before online sales
Before activating payments, customer accounts or delivery tracking, we will describe the additional data, payment and delivery providers, retention periods and rights in an updated notice. This website does not collect card details.