Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Biedrība History Makers (registration No. 40008223319), Biķernieku iela 53-31, Rīga, LV-1039, Latvia. You can reach us about anything related to your data at [email protected].

2. What data we process and why

Visiting the website

When you open a page, our hosting server automatically processes technical data such as your IP address, date and time of the request, the requested address, referrer, browser and operating system. We need this to deliver the website, keep it secure and investigate errors or abuse. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

Analytics (only with your consent)

If you allow analytics in the cookie banner, we use Google Analytics 4 to understand how many people visit the site and which pages are useful. Google Analytics processes pseudonymous identifiers stored in cookies, the pages you view, how you arrived at the site, device and browser information and approximate location (country/city) derived from your IP address. Google Analytics 4 does not log or store IP addresses. We do not use Google Analytics for advertising, and advertising-related consent signals stay denied. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time under Cookie settings at the bottom of each page; withdrawal does not affect processing carried out before it.

Contacting us

When you write to us by email or through our social media accounts, we process your name, contact details and the content of your message to answer you. Legal basis: our legitimate interest in responding to enquiries, or steps taken at your request (Article 6(1)(b) and (f) GDPR).

Event registration

When you register for a conference or camp on this website, we process your name and surname, e-mail address, age, church (if you give one), the language you used and your consents. We use this to organise the event, send you a confirmation and practical information about it, plan for the right number of people and age groups, and register arrivals at the event. Legal basis: steps taken at your request to take part in the event (Article 6(1)(b) GDPR) and our legitimate interest in organising safe events (Article 6(1)(f) GDPR). Information about other History Makers events is sent only if you tick the separate box (consent, Article 6(1)(a) GDPR); you can withdraw it at any time by writing to us.

Donations

One-time and monthly card donations are processed by Stripe on Stripe's own payment pages. We never see or store your full card number. Stripe gives us the information needed to record the donation: name, email address, amount, date, payment status and limited card details (e.g. card brand and the last four digits). For bank transfers we receive the payer's name, account number, amount and payment reference from our bank. We use this data to accept and record donations, manage monthly donations, thank donors and meet our accounting obligations. Legal basis: performance of the donation at your request (Article 6(1)(b) GDPR) and our legal obligations under the Accounting Law of the Republic of Latvia (Article 6(1)(c) GDPR).

Social media links

Our pages link to History Makers on Instagram, Facebook and YouTube. These are ordinary links: no social media plugins are embedded and no data is sent to these platforms until you click a link. Once you are on their sites, their own privacy policies apply.

3. Cookies

Cookies are small text files stored by your browser. We use as few as possible. Necessary cookies are always active; analytics cookies are only set after you allow them.

You can change your choice at any time with the Cookie settings link in the footer. When you withdraw analytics consent, we stop loading Google Analytics and delete its cookies set on this domain. You can also block or delete cookies in your browser settings.

4. Who receives your data

We do not sell personal data. We share it only with service providers who help us run the website and process donations, and only to the extent necessary:

• Website hosting provider — hosts the website and its server logs (processor).
• Google Ireland Limited — Google Analytics, only with your consent (processor).
• Stripe Payments Europe, Limited (Ireland) — card payments for donations. For payment processing, fraud prevention and its legal obligations Stripe acts as an independent controller; see stripe.com/privacy.
• AS Swedbank — processes bank transfers to our account.
• Email and accounting service providers — to answer messages and keep our accounts.
• Public authorities — only when we are required to by law.

5. Transfers outside the EU/EEA

Some providers (for example Google and Stripe) may process data in the United States or other countries outside the EU/EEA. Such transfers rely on an adequacy decision, in particular the EU–US Data Privacy Framework, or on the European Commission's Standard Contractual Clauses with additional safeguards.

6. How long we keep data

• Server logs: for a short period, normally no longer than 30 days, unless needed to investigate a security incident.
• Analytics data: no longer than 14 months, after which Google Analytics deletes event-level data.
• Emails: as long as needed to handle your enquiry and any follow-up, and then deleted.
• Event registrations: deleted automatically 12 months after the event ends. If you agreed to receive news about future events, we keep your registration for that purpose until you withdraw consent.
• Donation records: for the period required by the Accounting Law of the Republic of Latvia (generally 5 years after the end of the financial year).
• Cookie choice: 180 days, after which we ask again.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased or its processing restricted;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting earlier processing.

To exercise your rights, email [email protected]. We will reply within one month. If you believe we process your data unlawfully, you may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv) or the supervisory authority in your country.

8. Children and young people

Our work is aimed at young people. In Latvia, a child aged 13 or older can consent to analytics cookies on their own; for younger children, consent must be given by a parent or guardian. We do not knowingly collect other personal data from children under 13 through this website. If you believe a child has sent us personal data, please contact us and we will delete it.

9. Security

The website is served over an encrypted HTTPS connection with strict security headers, it sets no tracking cookies without consent, and access to our data is limited to the people who need it.

10. Changes to this policy

We may update this policy when our activities or the law change. The current version is always available on this page with its date. If the change affects the cookies we use, we will ask for your consent again.

11. Contact