1. Controller
The controller of your personal data is SIA Kestrel (“Kestrel” or “we”).
- Registration No.
- 40203559349
- Registered address
- Raiņa iela 26–22, Jelgava, LV-3001
- Email for data questions
- info@kestrel.lv
- Phone
- +371 29 997 132
2. What data we collect
We only collect the data needed for a specific purpose:
- Enquiry form and email: name, email, phone number, company name (if you give it) and the content of your message.
- Phone calls: your phone number and what you tell us during the call.
- Client data: if we start working together, contact person details, company details, contracts, invoices and project correspondence.
- Technical data: IP address, browser and device type, and time of visit. Our hosting provider processes these briefly to keep the site secure.
- Analytics: pages visited, device type, approximate location (country or city) and where you came from. Only if you have accepted analytics cookies.
- Cookies: see section 7.
We do not make automated decisions or carry out profiling.
3. Purposes and legal basis
We process data in line with the General Data Protection Regulation (GDPR). Each purpose has its own legal basis.
| Purpose | Legal basis |
|---|---|
| Reply to your enquiry or question and prepare an offer | Steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). If you write on behalf of a company, our legitimate interest in replying (point (f)). |
| Conclude and perform a contract: build, maintain and support a website | Performance of a contract (point (b)). |
| Issue invoices and keep accounts | Legal obligation under the Accounting Law (point (c)). |
| Keep the site running and secure, and protect it against spam | Our legitimate interests (point (f)). |
| Understand how the site is used and improve it | Your consent (point (a)), given in the cookie notice, which you can withdraw at any time. |
| Defend our rights in a dispute | Our legitimate interests (point (f)). |
Providing data is not mandatory, but without contact details we cannot reply to your enquiry.
4. Retention periods
- Enquiries that did not lead to working together: 12 months after the last contact.
- Contract and project data: for the term of the contract and 3 years after it ends.
- Accounting documents: for the period set by the Accounting Law.
- Technical data in security logs: up to 30 days.
- Analytics data: 14 months.
- Your cookie choice: 12 months, after which we ask again.
When the period ends, we delete or anonymise the data.
5. Recipients
We do not sell data. It is seen by the Kestrel team and by service providers who help us run the site and our work on our behalf:
- Cloudflare, Inc.: website hosting, email forwarding and protection against attacks.
- Resend, Inc.: sending enquiry form emails.
- Email service provider: email correspondence.
- Google Ireland Limited (Google Analytics): visitor analytics, only with your consent.
- Accounting service provider: invoices and accounting.
These providers may only use the data on our behalf. We may also disclose data to public authorities where the law requires it.
Cloudflare, Resend and Google may also process data outside the European Economic Area, including in the United States. In that case, the data is protected by the EU–US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
6. Your rights
You have the right to:
- access your data and receive a copy;
- correct inaccurate data;
- ask us to erase your data;
- restrict processing;
- object to processing based on our legitimate interests;
- receive your data in a portable format;
- withdraw your consent at any time. This does not affect processing carried out before you withdrew it.
To use these rights, write to info@kestrel.lv. We will reply within one month. To protect your data, we may ask you to confirm your identity.
8. Contact and complaints
For questions about your data, write to info@kestrel.lv or call +371 29 997 132.
If you believe we are processing your data incorrectly, you can complain to the Data State Inspectorate of Latvia (Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv). We encourage you to contact us first so we can resolve the matter faster.