Privacy Policy

Grand Ventures SIA is the controller for the personal data we process. We are not a registry or a public authority. We do not create official records and we cannot change them.

Besides source records (section 3), we process:

• Information You Provide: Contact-form name, email address and message. Company contact suggestions, with the submitter details and a hashed network identifier. AI prompts and their conversation context. We use these only to answer you, review suggestions or run your requested feature.
• Technical Information: Server and monitoring logs include IP address, requested URL and timestamp. They include device and browser details, and error diagnostics. Favourites, comparison lists and recently viewed pages are stored in your browser only.

Do not send confidential information, identity documents or sensitive personal data unless we ask. This applies to the contact form and AI features.

Datreal.com uses Google Analytics 4 to measure visits. It sets _ga cookies that distinguish visitors and sessions for up to two years. It receives page URLs, approximate location and device details. We do not use analytics or any other data for advertising. Google Analytics sets cookies only after you allow it in the cookie bar. Before that, it runs without cookies or identifiers. You can change your choice at any time:

Cookie Settings

Better Stack and Sentry-compatible monitoring collect error and performance diagnostics. You can block or delete cookies in your browser settings. Server logs are unaffected by cookie settings.

Local Browser Storage

Favourites, comparison lists and recently viewed pages never leave your browser. They disappear when you clear site data.

Our sources include company and beneficial-ownership registers, annual reports and other public filings. They include tax and insolvency authorities, property and cadastral registers, and sanctions lists. They also include licensed data providers. These sources cover Latvia, Lithuania, Estonia, Finland and Sweden, together with EU and international sources. Every page names its source.

About natural persons, we publish only what the source register itself makes public. These fields include name, year of birth, nationality, company roles and their dates. They include shareholdings and beneficial-ownership interests, insolvency proceedings and matrimonial-property register entries. They also include matches against official sanctions lists. We do not publish personal identity codes or home addresses. We do not publish private telephone numbers or private email addresses. We do not hold identity codes in unmasked form.

EU company law requires registers to disclose who represents, owns and controls a company. Anyone dealing with that company can thereby check it. The Court of Justice of the EU has confirmed three points about this disclosure. It serves legal certainty and the protection of third parties. There is no general right to have such data erased. Commercial or reputational inconvenience from being listed is not a reason to remove it. These points concern Case C-398/15, Manni. Datreal republishes these records for the same purpose. This covers counterparty checks, fraud prevention, credit and compliance work, journalism and research. That is our legitimate interest under GDPR Article 6(1)(f). It is documented in a standing assessment that we produce on request.

We mirror the register. Datreal shows source corrections, ended roles and closed companies after the next refresh. It marks historical entries as historical. We apply any source-register limit on how long a record may be shown.

Company information, including a company's registered address and published company contact details, is business data. A registered address may also be someone's home. It appears because the register lists it as the company's address.

Datreal's own ratings, risk indicators, valuations, links between records and AI summaries are our analysis. They are not official findings. Read them together with the source record.

Wrong at the source. If a register entry about you is incorrect, contact the registry that keeps it. Every Datreal page names its source. Company registers include Uzņēmumu reģistrs (Latvia), Registrų centras (Lithuania) and the e-Business Register (Estonia). They also include PRH (Finland) and Bolagsverket (Sweden). Once the register is corrected, Datreal updates at the next refresh. We update sooner if you send us the corrected extract.

Wrong on Datreal only. If we show something the register does not, tell us which page and field. Examples include mismatched persons, stale statuses or broken links between records. We will correct it.

Removal. We do not remove accurate business records because someone would prefer not to be listed. A publicly registered director, shareholder or beneficial owner holds a role made public by law. We review every objection explaining circumstances specific to you. Examples include records restricted by the source register itself or documented safety risks. We suppress specific details where your rights outweigh the public interest in that fact. Suppressions are recorded so that later imports do not restore the detail.

How to ask. Use the contact form. Include the page link, the exact detail concerned and what you want done. No legal wording is needed, and do not send identity documents unless we ask. If you say a record is inaccurate, send what shows it. A registry extract is ideal. We do not investigate the register on your behalf.

We reply within one month. For complex requests, we may take up to two further months. We will tell you within the first month. Requests are free unless manifestly unfounded or repetitive. If we refuse, we explain why. You may complain to Datu valsts inspekcija in Latvia. You may instead complain to the supervisory authority where you live. You may also take the matter to court.

Under the GDPR, you may also request access to your personal data held by us. You may request rectification. You may request restriction while a dispute is examined. Where conditions apply, you may request erasure or portability of data you gave us yourself.

Contact Us · Datu valsts inspekcija Opens in a New Tab · GDPR Opens in a New Tab

Published pages are public and may be indexed by search engines. Reports, exports, the public API and the MCP server carry the same information. They omit company contact details. Recipients are responsible for their own use of it.

We use hosting, monitoring and communications providers: Google Analytics, Better Stack, Sentry-compatible monitoring and Slack. Slack delivers contact-form submissions. AI features send your prompt and relevant company context through OpenRouter. They send these to the model you select. Search may use Tavily or Brave. Maps and imagery come from CARTO, OpenStreetMap, Mapillary, Panoramax, KartaView and Mapbox. Loading them sends your IP address to those providers. Some providers are outside the EEA. Those transfers rely on adequacy decisions or standard contractual clauses. We disclose information to authorities where the law requires it.

Source records remain while the source keeps them available and they remain company history. Company-related claims can arise many years after closure. We apply any source-register limit on how long a record may be shown. Contact messages and suggestions are kept as long as needed to handle them. This includes showing how they were handled. Technical logs follow the short retention periods set in our monitoring providers. Browser storage is yours to clear at any time.

We protect data with measures appropriate to the risk. No online service is perfectly secure; report suspected exposure through the contact form. We update this policy when our processing or the law changes. The date below identifies the current version.