The controller of your personal data in Buildner Books, the bookshop at architecturebooks.bnr.ac (the Shop), is SIA “BN Publishing” (we, us):

SIA “BN Publishing”, registration number 40203252333
Blaumaņa iela 11/13 - 20A, Rīga, LV-1011, Republic of Latvia
Email books@buildner.com

For any question or request about your data, write to books@buildner.com, with “Privacy” in the subject, or to our address. We have not appointed a data protection officer; this address reaches the people who run the Shop.

We process personal data under the EU General Data Protection Regulation (GDPR) and the Personal Data Processing Law of Latvia.

This policy covers the Shop, its checkout, withdrawal and download pages, and the emails it sends. Stripe’s payment page, WeTransfer, Google’s and Meta’s services have privacy policies of their own.

When you visit: with every request your browser sends our server technical data: the IP address, the browser and device type, the address asked for, the page you came from and the time. Our server keeps these in its logs. From the IP address our server also works out the country you are in, to show the prices for your region: the European Union, the USA or the rest of the world, and, on your first visit, to open the Shop in that country’s language when your browser’s language settings name none of the Shop’s languages (clause 3.6). It looks the address up in a database on our own server (IP geolocation by DB-IP, db-ip.com), so the address goes to no one else for this.

When you order: your email address and name; for printed books, the delivery name and address, the country and a phone number for the courier; what you bought and the amounts; your answers to the checkout boxes, with their wording, the date and time you sent them, and the IP address and browser details they were sent from; the region whose prices you were charged and the country your IP address was placed in; Stripe’s references for the checkout and the payment, and the fee Stripe charged. Your card details go only to Stripe; we never see them.

When printed books are sent: the carrier and the tracking number.

For each PDF download link: when it was used and how many times.

When you write to us or use Withdraw from contract: what you send us (your name, email address, order number and what you write about the books) and our answer.

For measurement with Google Analytics and the Meta Pixel, while it is on: the details in section 5.

If you come to the Shop from one of our ads, the ad’s tags (the names of its campaign, ad set and ad, and the page you landed on) are kept with your order. They name the ad, not you.

You don’t have to give us personal data, but we can’t take and deliver an order without the details in clause 2.2.

To take your order, deliver it, send PDFs and tracking details, and handle withdrawals, returns and questions. Legal basis: our contract with you (GDPR Article 6(1)(b)).

To keep accounting and tax records of orders, payments and refunds, and to meet our duties under consumer law, such as the receipt for a withdrawal. Legal basis: our legal obligations (Article 6(1)(c)).

To keep the Shop running and secure, and to prevent fraud and misuse (server logs, limits on repeated requests). Legal basis: our legitimate interest in a safe, working shop (Article 6(1)(f)).

To see how readers find and use the Shop, which of our ads bring readers and orders, and to measure our ads on Facebook and Instagram (section 5). Legal basis: our legitimate interest in knowing whether the Shop and our advertising work (Article 6(1)(f)). How to stop it: clause 5.4.

To keep a record of what you agreed to at checkout (clause 2.2), and to establish, exercise or defend legal claims. Legal basis: our legitimate interests in being able to show the terms of our contract and in defending our rights (Article 6(1)(f)).

To show and charge the prices of the region you shop from, and on your first visit to open the Shop in your language: the first of your browser’s languages that the Shop has or, if none, the language of the country you are in, when the Shop has it (clause 2.1). Legal basis: our legitimate interest in pricing books for where they are sold and shipped, and in showing the Shop in a language you read (Article 6(1)(f)). You can change the language at the top of every page.

We don’t send newsletters or marketing emails, we don’t sell personal data, and we make no decisions about you by automated means alone, apart from the region of the prices you see and the language the Shop first opens in (clause 3.6).

We share personal data only with the services that help us run the Shop, and only what each one needs:

• Stripe (Stripe Payments Europe, Ltd., Ireland, with Stripe, Inc. in the USA): takes the payment, checks it for fraud and sends the receipt.
• Mailgun (Mailgun Technologies, Inc.): sends our emails, from its European Union region.
• DigitalOcean (DigitalOcean, LLC): hosts the Shop’s server, in Frankfurt, Germany.
• WeTransfer (WeTransfer B.V., the Netherlands): holds the PDF files. When you download a PDF, WeTransfer receives your IP address and browser details.
• Meta (Meta Platforms Ireland Ltd.): ads measurement, while it is on (section 5).
• Google (Google Ireland Ltd., with Google LLC in the USA): Google Analytics, while measurement is on (clause 5.6).
• The partner who packs and posts our printed books, and the postal and courier services that deliver them: your name, delivery address and phone number, and your email address if the carrier needs it.
• YouTube (Google Ireland Ltd.): only if you play the video review on the home page or a book page. The player loads from youtube-nocookie.com when you press play.
• Our accountant, and authorities such as the tax authority or a court, when the law requires it.

Mailgun, DigitalOcean and the packing partner work for us and may use the data only on our instructions. Stripe, WeTransfer, Google, Meta, YouTube and the postal services also use data for their own purposes, under their own privacy policies.

Some of these services are based in, or reach the data from, countries outside the European Economic Area, mainly the USA. These transfers rely on the EU-US Data Privacy Framework, where the company is certified, or on the European Commission’s standard contractual clauses. Delivering printed books abroad needs your address in the destination country.

We advertise the Shop on Facebook and Instagram and measure which ads lead to visits and purchases. For this the Shop uses the Meta Pixel in your browser and Meta’s Conversions API on our server. We also use Google Analytics to see how readers find and use the Shop (clauses 5.6 and 5.7).

While measurement is on, the Pixel sends Meta the pages you open in the Shop, the books you look at and put in your bag, the start of a checkout, and a purchase with its value, titles and order number, together with your IP address, browser details and the Meta cookies _fbp and _fbc (clause 6.2). Neither the Pixel nor Google Analytics runs on the terms, privacy and withdrawal pages.

When an order is paid, our server sends Meta one purchase event: the order number, value and titles, and your email address, phone number, name, city, region, postal code and country, each turned into a hash (SHA-256) before it leaves our server, with the IP address, browser details and Meta cookies from your checkout. Meta compares the hashes with the hashed details of its own accounts, to match the purchase to a Facebook or Instagram account, and shows us the results only as totals. As soon as the event is sent (or not sent, clause 5.4), we delete that copy of the IP address, browser details and cookies from the order. The record of your checkout boxes (clause 2.2) keeps its own IP address and browser details.

Measurement is on for every visitor from the first visit, and a notice says so. The Shop has no switch of its own to turn it off. You can stop it in your browser: block or delete cookies, use a browser or add-on that blocks trackers, or turn on Global Privacy Control (the Shop then keeps measurement off, for your orders on our server too). For interest-based ads you can also opt out at www.youronlinechoices.eu or www.aboutads.info/choices, and in the ad settings of your Facebook or Instagram account. You can object to measurement at any time by writing to books@buildner.com (clause 8.1). If you turned measurement off in the Shop before 1 October 2026, it stays off on that device.

Meta also uses the data it receives for its own purposes, as its privacy policy explains. Meta and we are jointly responsible for collecting the data in the Shop and sending it to Meta; Meta alone is responsible for what it does with the data after that.

Google Analytics (Google Ireland Ltd.) counts visits and shows us, as totals, how readers find the Shop and use it. While measurement is on, your browser sends Google the pages you open, the page or link you came from, the books you look at and put in your bag, the start of a checkout, and a purchase with its value, titles and order number, together with your browser and device type, screen size, language and approximate location. The cookies _ga and _ga_DHD9NPS49K (clause 6.2) tell Google that visits come from the same browser. Google Analytics doesn’t store your IP address; Google uses it only to work out your approximate location. We have switched off Google signals and ad personalisation, so the data is not linked to Google accounts or used for Google’s ads.

Google may also use the data for its own purposes, as How Google uses information from sites that use its services explains, and may transfer it to the USA (clause 4.3). Besides the ways in clause 5.4, you can block Google Analytics on every website with Google’s opt-out browser add-on.

The Shop keeps a few small records in your browser: cookies, and local or session storage.

What they are:

Stripe sets its own cookies on its payment page, to take the payment and prevent fraud. WeTransfer and YouTube set theirs when you use them. Their policies explain them.

The records for measurement are kept only while measurement is on (clause 5.4). The others are needed for the Shop to work. You can delete any of them in your browser’s settings; your bag then empties.

Orders, payments and refunds, with the record of your checkout boxes: as long as Latvian accounting and tax law requires us to keep these records, then we delete them.

Checkouts that were started but never paid: deleted after 30 days.

The IP address, browser details and Meta cookies kept with an order for ads measurement: deleted as soon as the purchase event is sent, skipped or given up; for a checkout that is never paid, with the checkout after 30 days (clause 7.2).

Download links work for 30 days; the record of their use stays with the order.

Withdrawals and messages: with the order they concern, or as long as we need them to answer you and to keep a record of what was agreed.

Server logs: deleted automatically as the logs roll over.

Browser storage: as listed in clause 6.2.

Google Analytics: Google deletes the data it keeps for us after the period set in our account, at most 14 months.

You have the right to ask us for a copy of your data (access), to have it corrected (rectification) or deleted (erasure), to limit its use (restriction), to receive it in a machine-readable form (portability), and to object to its use based on our legitimate interests, including measurement.

Write to books@buildner.com. We answer within one month and may ask you to confirm who you are. Some data we must keep by law (clause 7.1), even if you ask us to delete it.

You can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija), or to the data protection authority of the EU country where you live or work:

Elijas iela 17, Rīga, LV-1050, Republic of Latvia
Phone +371 67223131, email pasts@dvi.gov.lv, www.dvi.gov.lv

The Shop uses HTTPS throughout. Its data is kept on our server in the European Union, and only the people who run the Shop can open the orders, each with a personal login.

Card details are entered only on Stripe’s page. Download links are long random codes, and we keep only a scrambled (hashed) copy of each.

The Shop is for adults. We don’t knowingly collect data about anyone under 18.

We update this policy when the Shop or the law changes. The date of the current version is at the top of this page.

For anything about your data: books@buildner.com, or SIA “BN Publishing”, Blaumaņa iela 11/13 - 20A, Rīga, LV-1011, Republic of Latvia.