Privacy policy

1. Data controller

The controller of your personal data is SIA "SEPmāja", reg. No. 40103178532, registered address: Paula Lejiņa iela 6-65, Rīga, LV-1029, Latvia.

For data protection matters, contact us at [email protected] or +371 29 341 000.

2. What data we process

We only process data that you provide to us yourself and technical data required for the website to work:

• in the request form — hotel name, contact person's name and email address;
• when you contact us by email, phone, WhatsApp or Telegram — the information you share in the conversation;
• when you visit the website — technical data (IP address, browser type, time of request) that the hosting provider processes automatically for security purposes.

3. Purposes and legal basis

• Responding to your request and preparing an offer — steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Keeping in touch with existing and potential clients — our legitimate interests (GDPR Article 6(1)(f)).
• Keeping the website secure and running — our legitimate interests (GDPR Article 6(1)(f)).

4. Recipients

We do not sell your data or share it with third parties for advertising. Data may only be shared with service providers that keep the website and communication running, and only to the extent necessary:

• Cloudflare, Inc. — website hosting and security;
• Resend, Inc. — delivery of form requests to our email;
• JSC RSIC (RU-CENTER), Russia — email services: storage of requests and correspondence.

5. Transfers outside the EU

Cloudflare and Resend may process data in the USA. These transfers are made with appropriate safeguards: the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Our email provider, RU-CENTER, is located in Russia, a country for which the European Commission has not adopted an adequacy decision. Requests and messages sent to [email protected] are stored on this provider's servers in Russia. If you do not want your data transferred to Russia, please contact us by phone at +371 29 341 000.

If you contact us via WhatsApp or Telegram, these services process your data under their own privacy terms.

6. Retention

We keep requests and correspondence for as long as needed to handle your request and our cooperation. If no contract is concluded, we delete the data no later than 2 years after our last contact. If a contract is concluded, we keep the data for the term of the contract and as long as required by law.

The hosting provider keeps technical logs for a short period under its own terms.

7. Your rights

You have the right to:

• access your data and receive a copy;
• have inaccurate data corrected;
• request erasure of your data;
• restrict or object to processing;
• receive your data in a portable format.

To exercise these rights, write to [email protected]. We will reply within one month.

If you believe your data is processed unlawfully, you can lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

8. Cookies

This website does not use cookies, analytics or advertising trackers. Fonts and images are loaded from our own server.

9. Changes

We may update this policy. The current version is always available on this page, and its effective date is shown at the top.