Who is responsible

Blitzpunkt IK, registration number 40002207575, registered at Vagonu iela 24-2, Riga, LV-1009, Latvia, is the data controller for the processing described here.

For any data protection question: contact@blitzpunkt.com or +371 29384947. We have not appointed a Data Protection Officer because the scale of our processing does not require one; questions are answered by company management.

What we collect

Two kinds of data, one of them only with your consent.

  • Contact form correspondence. If you fill in the form we receive your name, email address, phone number if you give one, how you heard about us if you tell us, the text of your message and the page you sent it from, so that we know which language to answer in. Apart from the page, it is the same information you would send by writing to us directly.
  • Usage statistics, if you allow them. Google Analytics records the pages you view, how you arrived (for example from a search or a link on another site), your device and browser, your approximate location (city level, worked out from your IP address, which Google Analytics does not store), and actions such as sending the contact form (with the option you chose for how you heard about us, but none of the text you typed) or clicking our email address or phone number. Your browser is told apart from others by a random identifier kept in a cookie.

What we do not do

  • We do not sell or trade your data. Not in any form, not to anyone.
  • We do not load any Google code, or set any cookies, until you agree.
  • We do not use your data for advertising or remarketing. There is no Google Ads tag, no Facebook pixel and no tracking beyond what this page describes.
  • We do not make automated decisions about you that have legal or similarly significant effects.
  • We do not send newsletters unless you specifically ask for one.

Cookies and browser storage

We set cookies only with your consent, given in the banner shown on your first visit. You can change or withdraw it at any time under “Cookie settings” at the bottom of every page. Withdrawing is as easy as agreeing, and removes our Google Analytics cookies from your browser.

  • _ga, _ga_* - Google Analytics, for statistics: tell visitors and visits apart. Kept for 2 years.
  • consent, in browser storage rather than a cookie - remembers your choice so we do not ask on every page. Kept for 12 months, then we ask again.

If your browser suggests you might prefer Latvian, English pages offer a switch to the Latvian version. When you use or dismiss that offer, a single value named “lang-prompt” is stored in your browser so we do not ask again. It stays on your device, never reaches us, and clearing your browser data removes it.

Our legal basis

Correspondence is processed in order to answer your inquiry and, where relevant, prepare a quote. That is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)).

Telling us how you heard about us is optional. We use the answer only to see where inquiries come from, which is our legitimate interest (GDPR Article 6(1)(f)).

Analytics relies on your consent (Article 6(1)(a) and, for anything stored on your device, the Latvian Information Society Services Law). You can withdraw it at any time; that does not affect what was collected before.

Remembering your cookie choice and your answer to the language offer is strictly necessary to do what you asked, so it needs no consent.

How long we keep it

  • Correspondence: 24 months after our last exchange, then deleted. If you become a client, the correspondence becomes project documentation and is kept in line with accounting and contractual requirements.
  • Statistics: Google Analytics keeps the detailed data for 14 months, then deletes it. Aggregated reports that identify no one are kept.

Who else sees it

The site and the contact form endpoint run on Amazon Web Services, eu-central-1 (Frankfurt, Germany). That provider acts as a processor: it handles the data only on our instructions and may not use it for its own purposes.

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor.

Email correspondence is held in Zoho Mail, in Zoho’s EU data centers, with Zoho also acting as our processor. Beyond these providers, we do not share data with anyone except where the law requires it.

Transfers outside the EU

Our site and our email are hosted in the European Union. Google may also process analytics data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and Google’s terms include the European Commission’s Standard Contractual Clauses as well.

Your rights

If you are in the EU or EEA, you have the following rights over your data:

  • Access - get a copy of what we hold about you.
  • Rectification - correct anything inaccurate.
  • Erasure - ask us to delete it.
  • Restriction - ask us to pause processing while something is disputed.
  • Objection - object to processing based on legitimate interest.
  • Portability - receive your data in a machine-readable format.
  • Withdrawal of consent - change or withdraw your cookie choice at any time under “Cookie settings” at the bottom of every page.

To use any of these, write to contact@blitzpunkt.com. We respond within 30 days, usually sooner, and there is no charge.

If you think we have handled something badly you have the right to complain to the Latvian Data State Inspectorate (dvi.gov.lv). We would rather hear about it from you first.

Visitors outside the European Union

We apply the same standard to everyone, wherever they are. In practice: wherever you live, you can ask for access to your data, correction of it or its deletion, by writing to the address above.

Visitors in the United Kingdom have the same rights under the UK GDPR. Visitors in Switzerland have them under the Swiss Federal Act on Data Protection.

For California residents: we do not sell or share personal information as those terms are defined in the CCPA and CPRA. Google Analytics processes usage statistics for us as a service provider, and only if you allow it.

Security

The site is served over HTTPS only. Access to contact form submissions is limited to the people on our team who need it to do the work. We do not store payment details - invoices are paid by bank transfer, and our bank details are published openly on our company details page.

Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date below. For material changes we will tell clients we are actively working with.

Questions

If anything here is unclear, or you want to exercise any of your rights, write to us at contact@blitzpunkt.com or call +371 29384947.

Last updated: