Privacy policy

Versija: v1.1 (2025-09-04)

Sākuma datums: 15.09.2025 13:51:55

Beigu datums: Tekošais

Apraksts: This Privacy Policy outlines how the personal data provided by users of the website ipieeja.org is collected, used, stored, and protected, and provides information about the legal basis for data processing, users' rights under the GDPR (General Data Protection Regulation), and the use of cookies and similar technologies.

Original version of the policy in Latvian – lv
Policy in other languages – Policies

Privacy Policy Version: v1.1 (2025-09-04)

1. General Provisions

  1. This Privacy Policy describes how we collect, use, process, and protect your personal data when you use our website.
  2. We comply with the laws of the Republic of Latvia and the General Data Protection Regulation (GDPR), regardless of the user’s location.
  3. By using our website, you confirm your consent to the terms of this Policy.

Data Controller

The data controller is:

  • Aleksejs Volkovs – Website Administrator
  • Registration Number: 17088212068
  • 📧 Email: ipieeja@hotmail.com

Data Protection Officer

For questions regarding data protection, you may contact our Data Protection Officer:

Aleksejs Volkovs
📧 ipieeja@hotmail.com

2. Collected Data

Personal Data

When registering on the website, we collect the following data:

  • Full name;
  • Email address;
  • IP address;
  • Browser information (user agent).

This data is stored in encrypted form to ensure privacy.

This data is necessary for creating and managing your account.

Additional Data

We may collect and process aggregated statistics regarding website visits for analytical purposes. This information does not directly identify users.

3. Cookies and localStorage

Overview of Cookie and localStorage Usage

Our website uses cookies and localStorage, a browser storage technology, to ensure website functionality, customize settings, and improve user experience.

Cookies are small text files that the website stores in your browser to remember your choices or identify your session. localStorage is a similar technology that allows data to be stored in your browser for longer periods, such as preferred color or font. Neither technology allows access to your computer or files and does not contain malicious code.

Cookie Categories

Required Cookies

These cookies are necessary for the website to function correctly. They are set automatically and cannot be disabled.

  • .AspNetCore.Antiforgery.* – Protection against CSRF attacks.
  • .AspNetCore.Mvc.CookieTempDataProvider – Temporary data storage between requests.
  • .IPieeja.Session – Session management.
  • AnonConsentId – Identifies your consent preference (validity: 1 year).

Functional Cookies

Help us remember your settings, such as language or preferred layout.

  • IPieejaCulture – Stores selected language (validity: 1 year).

Authentication Cookies

Used to automatically log in users between sessions.

  • AccessToken – Access token (validity: 1 month).

User Interface Settings (localStorage)

This data is stored in your browser and helps customize the website’s appearance:

  • bgColor – Background color
  • textColor – Text color
  • fontSize – Font size

Analytics Cookies (Google Analytics)

Our website uses Google Analytics, a third-party service, to analyze website traffic and user behavior. Google Analytics uses cookies to collect anonymized data about how visitors use our website, such as the number of pages visited, browser type, and device information.

This data is used to improve website functionality and user experience. IP addresses are truncated to ensure anonymity.

Google may process this data in accordance with its own Privacy Policy. You have the right to opt out of the use of these cookies by changing your browser settings or using our consent management tools.

Marketing Cookies

These cookies are used to display advertisements and personalized offers, as well as to analyze user behavior for targeted marketing campaigns.

Currently, our website uses Google AdSense, which employs its own consent management tool (cookie consent banner) to obtain your consent for the use of cookies for advertising purposes. You can manage and change your preferences directly through these tools.

You may choose which categories to consent to. You can:

  • Accept All – Consent to all cookies and localStorage usage.
  • Customize Consent – Choose which categories to allow.
  • Reject All – Allow only essential cookies.

Your choice is stored in the AnonConsentId cookie for 1 year. This file contains no personally identifiable information.

You may withdraw your consent at any time. In such a case:

  • All non-essential cookies will be deactivated
  • localStorage data will be deleted
  • The consent record in the database will be marked as withdrawn to ensure traceability of the history.

Withdrawal of consent applies only to future data processing and does not affect the lawfulness of processing carried out prior to withdrawal.

To provide evidence of consent or its withdrawal in case of disputes, the relevant record (consent or withdrawal fact together with the anonymous identifier AnonConsentId) is stored in our database for an additional 5 years after withdrawal. This identifier is also stored in your browser as a cookie.

If the cookie is deleted, we cannot identify you or prove your previously given consent. However, in such a case, we will no longer process your non-essential data.

Data Security

Personal data is stored in encrypted form to ensure privacy.

All cookies are set with security attributes:

  • Secure – Operates only via HTTPS
  • HttpOnly – Prevents JavaScript access to sensitive cookies
  • SameSite – Reduces risks associated with CSRF

4. Purposes and Legal Bases for Data Processing

Your data is processed only for the following purposes:

  • Registration and management of your account;
  • Providing access to website features (creating posts, comments, orders);
  • Recording and managing consent;
  • Sending system notifications and informational messages;
  • Providing user support (answering questions, handling complaints);
  • Analyzing and adapting website usage to improve user experience and convenience;
  • Processing data for accounting and legal obligations;
  • Ensuring website security by preventing malicious use and cyberattacks;
  • Protecting our legitimate interests and resolving disputes.

Legal Basis for Data Processing (GDPR Article 6)

  • a) Your consent – e.g., for cookies or marketing;
  • b) Performance of a contract – e.g., for providing services on the website;
  • c) Compliance with legal obligations – e.g., invoice retention;
  • f) Our legitimate interests – e.g., security, website improvement.

5. Access to Data and Disclosure to Third Parties

  • Access to personal data is granted only to authorized persons who maintain the website.
  • We do not disclose your personal data to third parties without your consent, except when required by applicable law, such as upon a lawful request from law enforcement or supervisory authorities.

6. User Rights

Your Rights under GDPR

  • Right of Access (Article 15) — You may request information about the data we store.
  • Right to Rectification (Article 16) — You may request correction of inaccurate data.
  • Right to Erasure (Article 17) — If there is no lawful basis for further processing.
  • Right to Restriction of Processing (Article 18).
  • Right to Data Portability (Article 20).
  • Right to Object (Article 21).
  • Right to Withdraw Consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact us using the contact information in Section 11.

Right to Lodge a Complaint

If you believe your personal data is being processed in violation of this policy or applicable data protection laws, you have the right to lodge a complaint with the supervisory authority:

Data State Inspectorate
Elijas Street 17, Riga, LV-1050
Phone: +371 67223131
Email: pasts@dvi.gov.lv
www.dvi.gov.lv

We recommend contacting us first to resolve the situation amicably.

7. Data Retention

  • We retain your personal data only as long as necessary to fulfill the purposes of processing, such as account management or service provision. However, in some cases, the law requires us to retain your data for a specific period — for example, for tax or accounting purposes, dispute resolution, or other legal obligations. In such cases, data is retained for as long as required by applicable regulations.
  • After the retention period expires, data will be deleted or anonymized.

Data Retention Periods

  • User account data – Deleted immediately after account deletion, unless legal obligations require retention; if legal obligations exist, data is retained for an additional 5 years after account deactivation.
  • Cookie data – From 1 month to 1 year, depending on category.
  • Accounting data – Up to 10 years in accordance with Latvian regulations.
  • Communication records (emails, requests) – Up to 2 years.

Security Measures

We implement various technical and organizational measures to ensure the security and confidentiality of personal data:

  • Access to data is granted only to authorized personnel based on need-to-know;
  • Password-protected authentication and session security control;
  • Personal data is stored in encrypted form in the database and securely transmitted via HTTPS protocol;
  • Regular updates and vulnerability checks of systems and applications;
  • Data backup and recovery procedures for emergencies.

These measures are regularly reviewed and improved, taking into account current threats and technological developments.

Data Transfers to Third Countries

Some data (e.g., anonymized information processed by Google Analytics or Google AdSense) may be transferred outside the European Union to third countries (e.g., the USA).

In such cases, appropriate safeguards are applied, such as Standard Contractual Clauses (SCC) approved by the European Commission. More information is available here: Commission Implementing Decision (EU) 2021/914.

8. User Content and Copyright

  • Users who publish posts, comments, or other content on the website retain copyright to their material.
  • The user grants the website administration a non-exclusive, royalty-free license with no time limit, allowing the use, reproduction, publication, adaptation, and distribution of the user's content for the operation of the website and related platforms, including social networks, informational campaigns, mobile applications, email communications, and other communication channels.
  • The website administration reserves the right to edit or delete content that violates website rules, laws, or the rights of others.

9. Liability

  • We are not liable for temporary website disruptions, data loss, or user actions.
  • The user is personally responsible for posted information, which must comply with applicable laws.

10. Changes to Website Functionality

We reserve the right to change, suspend, or discontinue any website functionality at any time without prior notice.

11. Contact Information

If you have questions, requests, or complaints regarding personal data processing, please contact us:

📧 ipieeja@hotmail.com

12. Changes to the Privacy Policy

  • We reserve the right to update this Policy. Significant changes will be published on this page with an appropriate notice.
  • Continued use of the website after Policy changes constitutes acceptance of the updated terms.

Main Changes in This Version

General:

  • Added Privacy Policy version with date at the top and bottom of the page (v1.1 – effective from 2025-09-04).

In subsection "Personal Data" (Section 2. Collected Data):

  • Registration data: In addition to full name and email, IP address and browser data are now also stored. All data is encrypted in the database.

In subsection "Data Retention Periods" (Section 7. Data Retention):

  • User account data – Deleted immediately after account deletion, unless legal obligations require retention; if legal obligations exist, data is retained for an additional 5 years after account deactivation.

In subsection "Security Measures" (Section 7. Data Retention):

  • Personal data is stored in encrypted form in the database and securely transmitted via HTTPS protocol.

Version: v1.1 — Effective from 2025-09-04