Data Protection

Our data protection principles

Beyond the specific rights described in our Privacy Policy and GDPR Compliance page, we follow these general principles for any personal data we handle:

• Lawfulness, fairness and transparency — we tell you what we collect and why.
• Purpose limitation — data is used only for the purpose it was collected for, unless you're told otherwise.
• Data minimisation — we ask for no more than we need.
• Accuracy — you can ask us to correct inaccurate data at any time.
• Storage limitation — we don't keep data longer than necessary.
• Integrity and confidentiality — data is protected with appropriate technical and organisational measures (HTTPS, access limited to team members who need it).

Data breach response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Latvian Data State Inspectorate within 72 hours of becoming aware of it, as required by Art. 33 GDPR, and will notify affected individuals directly where the risk is high, per Art. 34 GDPR.

Third-party processors

We use a limited number of trusted service providers (hosting, email, scheduling) to run the Site, each bound by their own data processing terms. We do not permit processors to use your data for their own marketing purposes.

Requests and questions

For any data protection question, or to exercise your rights, contact andreyfrost@gmail.com.