Privacy Policy
Last updated: [[DATE]]
1. Who we are
This website is operated by [[LEGAL NAME, e.g. Storm Adventures SIA]], registration number [[REG. NO.]], registered address [[ADDRESS, CITY, POSTAL CODE, LATVIA]] (“we”, “us”).
We are the data controller for the personal data described in this policy. If you have any question about how we handle your data, write to [[PRIVACY EMAIL]].
2. What we collect
We only collect what you give us. We do not buy contact lists and we do not build profiles of visitors.
When you send us an enquiry
The contact form asks for your name, work email and the venue or company you represent. It also lets you add your role, your country, the type of venue you operate and a message. Only name, company and work email are required — the rest is optional and only helps us answer you properly.
When you subscribe to the Monthly Briefing
Your email address, and nothing else.
When you download a guide
Your email address, and which guide you asked for.
Technical data
Our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting. If analytics is enabled, see section 5.
3. Why we use it, and on what legal basis
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Answer your enquiry and discuss a possible project | Steps taken at your request before entering a contract — Art. 6(1)(b) |
| Send you the Monthly Briefing or a guide you asked for | Your consent — Art. 6(1)(a) |
| Keep our website secure and working | Our legitimate interest in operating the site — Art. 6(1)(f) |
| Understand how the site is used (analytics) | Your consent, given through the cookie banner — Art. 6(1)(a) |
We do not use your enquiry to add you to a marketing list. The Monthly Briefing is a separate, optional tick-box, and you can leave it at any time using the unsubscribe link in every email.
4. Who else sees your data
We share personal data only with service providers who help us run the site, and only for that purpose. They act on our instructions and cannot use your data for their own ends.
- Email delivery — [[EMAIL PROVIDER, e.g. Google Workspace / SMTP provider]], to deliver the form submission to us.
- Website hosting — [[HOSTING PROVIDER, COUNTRY]], where the site and its database are stored.
- Intuit Mailchimp (United States) — if you subscribe to the Monthly Briefing or request a guide, your email address is stored in our Mailchimp audience so we can send it to you.
- Google — if analytics is enabled and you consent to it (see section 5).
We never sell your data, and we do not pass it to third parties for their own marketing.
Transfers outside the EU/EEA
Mailchimp is operated by Intuit Inc. in the United States. Where personal data is transferred outside the EU/EEA, that transfer relies on the European Commission’s Standard Contractual Clauses and the provider’s own safeguards. You can ask us for details of these safeguards using the contact address in section 1.
5. Cookies and embedded content
When you first visit, a cookie banner asks what you allow. You can change or withdraw that choice at any time through [[COOKIE SETTINGS LINK — Cookiebot renewal link]].
Necessary
A small number of cookies are needed for the site to work at all — remembering your cookie choice, keeping forms secure, and remembering your language if you switch it. These do not require consent.
Statistics
[[IF GOOGLE ANALYTICS IS USED — otherwise delete this block]] With your consent we use Google Analytics to see which pages are read and how people find us. It is set up so that IP addresses are shortened before storage, and we do not use it to identify individuals. Without your consent, no analytics data is collected.
Video
Videos on this site are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com) and are not loaded until you click play. Until you do, no request is made to YouTube and no data reaches Google. Once you press play, YouTube receives your IP address and may set its own cookies, governed by Google’s privacy policy.
6. How long we keep it
- Enquiries — [[RETENTION, suggested: 24 months]] after our last contact with you, then deleted. If the enquiry becomes a project, we keep it for as long as the business relationship requires, plus the period required by accounting law.
- Monthly Briefing subscribers — until you unsubscribe.
- Server logs — [[LOG RETENTION, typically 30–90 days]].
7. Your rights
Under the GDPR you can ask us to:
- confirm what personal data we hold about you, and give you a copy;
- correct anything that is wrong or incomplete;
- delete your data, where we have no overriding reason to keep it;
- restrict or object to how we use it, including any processing based on our legitimate interest;
- receive the data you gave us in a portable, machine-readable format;
- withdraw your consent at any time, where consent is the basis — this does not affect anything we did before you withdrew it.
Write to [[PRIVACY EMAIL]] and we will respond within one month.
If you believe we have handled your data incorrectly, you have the right to complain to the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija) — dvi.gov.lv — or to the authority in your own country.
8. Automated decision-making
We do not make any decision about you by automated means, and we do not profile you. The ROI calculator on this site runs entirely in your browser: the figures you enter are never sent to us or stored anywhere.
9. Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. Where the change is significant, we will say so clearly.
10. Contact
[[LEGAL NAME]]
[[ADDRESS]]
[[PRIVACY EMAIL]]