Privacy policy – SILVALAND

Last updated: 1 September 2026
Effective date: 1 September 2026

1. Introduction

This Privacy Policy explains how SIA Silvaland (“Silvaland,” “we,” “us”) collects, processes, and protects your personal data. By using our website (silvaland.eu) or platform (silvaland.app), you consent to this policy.

2. Data Controller

Controller: SIA Silvaland
Registration number: [To be added]
Email: compliance@silvaland.eu

3. Types of Data We Collect

3.1 Identity & KYC Data

Name, date of birth, nationality, citizenship
Proof of identity (passport, national ID, driving license)
Tax identification number
Residential address and proof of address
Beneficial ownership information (if applicable)

3.2 Financial Data

Bank account details
Investment amounts and transaction history
Payment method information
Tax residency and financial status

3.3 Platform Usage Data

Login information and timestamps
IP address and device information
Pages accessed and time spent
Dashboard interactions
Support tickets and communications

3.4 Communication Data

Emails and support messages
Feedback and survey responses
Phone calls (if you call support)

4. Legal Basis for Processing

We process your data under these legal bases:

Contract: Processing necessary to manage your investment agreement
Legal obligation: KYC, AML/CFT, tax reporting (Latvian law)
Legitimate interest: Fraud prevention, security, platform improvement
Consent: Marketing communications (you can opt out anytime)

5. How We Use Your Data

5.1 Account Management

Verify your identity and eligibility to invest
Process deposits and withdrawals
Manage your portfolio and generate reports
Send you account notifications and confirmations

5.2 Regulatory Compliance

Know Your Customer (KYC) verification
Anti-Money Laundering (AML/CFT) screening
Sanctions checks
Tax reporting to authorities as required by law
Regulatory audits and inspections

5.3 Security & Fraud Prevention

Monitor for fraudulent activity
Detect suspicious transactions
Protect against unauthorized access
Maintain audit trails

5.4 Communication

Answer your support questions
Provide project updates and notifications
Send administrative communications
Market new investment opportunities (with your consent)

5.5 Analytics & Improvement

Analyze platform usage to improve user experience
Evaluate investment performance
Identify market trends

We do not sell your personal data. We may share data with:

6.1 Service Providers

Payment processors (for deposit/withdrawal processing)
Valuation firms (for asset appraisals)
Legal advisors (for contract review)
Cloud hosting providers (for data storage)
Compliance consultants (for regulatory advice)

All service providers sign data processing agreements and handle data confidentially.

6.2 Legal Authorities

We may disclose data if required by:

Latvian law or court order
Regulatory authorities (Financial and Capital Market Commission, tax authorities)
AML/CFT reporting obligations
Sanctions screening

6.3 Business Transfers

If Silvaland is acquired or merged, your data may transfer to the new entity under the same privacy protections.

7. Data Retention

Data Type	Retention Period
KYC documents	5 years after account closure (Latvian AML law)
Investment agreements	Duration of investment + 7 years (tax law)
Transaction records	7 years (tax law)
Platform usage logs	12 months
Support communications	3 years
Marketing consent	Until you opt out

8. Your Rights

Under GDPR, you have the right to:

Access: Request a copy of your personal data
Correction: Correct inaccurate data
Deletion: Request deletion (“right to be forgotten”) — except where data must be retained by law
Portability: Receive your data in portable format
Restrict processing: Limit how we use your data
Object: Opt out of marketing or certain processing activities
Lodge a complaint: File a complaint with the Latvian Data Protection Authority

To exercise these rights, email: compliance@silvaland.eu

9. International Transfers

Your data is processed and stored in Latvia (EU). If you are located outside the EU, your data is transferred to Latvia under GDPR adequacy decisions and appropriate safeguards.

10. Security

We protect your data through:

Encrypted login (HTTPS/TLS)
Encrypted data storage (AES-256 or equivalent)
Access controls (authentication, authorization)
Regular security audits and penetration testing
Employee training on data protection
Incident response procedures

No system is 100% secure. We cannot guarantee absolute security, but we maintain industry-standard protections.

11. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Review their privacy policies before sharing data.

12. Children’s Privacy

Silvaland services are not intended for anyone under 18. We do not knowingly collect data from minors. If we discover we have collected data from a minor, we will delete it.

13. Cookies & Tracking

See our Cookie Policy

14. Changes to This Policy

Silvaland may update this policy anytime. Material changes will be communicated via email. Continued use of the platform constitutes acceptance.

15. Contact & Complaints

Data Protection Officer / Compliance:
Email: compliance@silvaland.eu

Latvian Data Protection Authority:
Website: [LDPA official site]
Email: [LDPA contact email]

Last updated: 1 September 2026