Privacy policy

Baltic Podcast Studio is responsible for the personal data described on this page, as its controller under the General Data Protection Regulation (GDPR). Address: Akadēmijas laukums 1, Rīga, LV-1050, Latvia. Email: hello@balticpodcaststudio.com.

When you contact us on WhatsApp, by phone or by email, we use your name, your contact details and what you tell us to answer you, arrange your session and carry it out. The legal basis is the steps you ask us to take before a contract, and the contract itself (GDPR Article 6(1)(b)).

We keep invoices and the related accounting records because Latvian accounting law requires it (GDPR Article 6(1)(c)).

If you allow analytics in the cookie notice, the site loads Google Analytics 4. It counts visits and shows which pages and contact links people use, which helps us improve the site. If you reject it, or make no choice, nothing from Google loads.

Google Analytics 4 does not log or store IP addresses. Google signals and ad personalisation are off. Its cookies last up to 13 months after your last visit. Google Analytics keeps the data for 14 months, then deletes it automatically.

The legal basis is your consent (GDPR Article 6(1)(a)). Storing its cookies on your device and reading them also needs your consent under the EU ePrivacy rules, which Latvia applies through its Law on Information Society Services.

When you open the site, Cloudflare and our Hetzner server record technical data: your IP address, the date and time, the page requested, the page you came from, and your browser and device type (user agent). We use it to deliver the site, keep it secure, find errors and fend off attacks.

The legal basis is our legitimate interest in a site that works and stays secure (GDPR Article 6(1)(f)). The logs are deleted after 14 days, unless we need them longer to investigate a specific incident. You can object to this processing (GDPR Article 21).

The site uses these cookies. The consent and language cookies are strictly necessary, so they need no consent; the legal basis is our legitimate interest (GDPR Article 6(1)(f)). The analytics cookies are set only if you accept them.

bps_consent

Stores your answer in the cookie notice. Kept for 180 days.

NEXT_LOCALE

Remembers the language you chose when it differs from your browser's. Deleted when you close the browser.

_ga, _ga_D6BSQ2S14T

Set by Google Analytics only after you accept, to tell visits apart. Kept for up to 13 months after your last visit.

We do not sell personal data. These companies receive it. A processor handles data only on our behalf and on our instructions.

Google Ireland Limited (Ireland)

Our processor: runs Google Analytics, which we use only with your consent. Its parent company is Google LLC (USA).

WhatsApp Ireland Limited (Ireland)

Carries your messages when you write to us on WhatsApp. WhatsApp processes them as a provider under its own terms and privacy policy, not as our processor.

Cloudflare, Inc. (USA)

Our processor: delivers the site through its network and protects it from attacks.

Hetzner Online GmbH (Germany)

Our processor: hosts the site and the studio's email on servers in Germany.

Hetzner Online GmbH keeps the data in Germany. Google LLC, Meta Platforms, Inc. (the parent company of WhatsApp) and Cloudflare, Inc. are in the USA, and data may be processed there.

All three take part in the EU–US Data Privacy Framework, so transfers to them rely on the European Commission's adequacy decision of 10 July 2023 (GDPR Article 45). Where that decision does not apply, they rely on standard contractual clauses approved by the European Commission (GDPR Article 46(2)(c)).

Consent cookie

180 days, then the notice asks again.

Analytics cookies

Up to 13 months after your last visit.

Analytics data

14 months in Google Analytics, then deleted automatically.

Server logs

14 days, unless we need them longer to investigate a specific incident.

Inquiries and bookings

Until your inquiry, or your session and its follow-up, is complete. We delete the messages no later than 12 months after the last one.

Invoices

As long as Latvian accounting law requires.

Under the GDPR you can ask for access to your data (Article 15), for its correction (Article 16) or erasure (Article 17), for restricted processing (Article 18) or for a copy in a portable format (Article 20). You can also object to processing (Article 21), in particular where it relies on our legitimate interest, as server logs do.

To use a right, write to hello@balticpodcaststudio.com. We answer within one month (GDPR Article 12(3)) and may first ask you to confirm your identity.

You can withdraw your consent to analytics at any time in the cookie settings, here or at the foot of every page. Withdrawal does not affect processing that took place before it.

No, giving us data is voluntary. But without your contact details we cannot answer you or book a session.

We make no automated decisions about you and do not profile you (GDPR Article 22).

If you believe we process your data unlawfully, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv) or to the supervisory authority of the EU country where you live or work.

We update this policy when the way we process data changes. The date at the top shows the last change.