Privacy policy

1. What personal data is and who controls it

Personal data is any information about an identified or identifiable individual. This includes your first and last name, email address, phone number, personal identity number (where needed to perform a contract), payment details and IP address.

The data controller is SIA "KEEME" (brand "Paliec Latvijā"). If you have questions about how we process personal data, write to us at info@palieclatvija.lv.

SIA "KEEME", reģ. Nr. 40203508501, juridiskā adrese: Pētersalas iela 2 – 8, Rīga, LV-1045.

2. What personal data we collect and why

We collect personal data only for lawful purposes and never more than is needed for that purpose. The main purposes are:

• Making and managing bookings: name, surname, email, phone, booking dates
• Managing user accounts: username, password (stored as a hash), profile picture
• Processing payments: payment card in tokenised form, we never store the full card number
• Customer service: message history and support requests
• Direct marketing messages: only with your explicit consent
• Improving the platform: anonymised usage data and statistics

3. Legal basis for processing

We process personal data on the following legal grounds:

• Performance of a contract: to fulfil the booking agreement between you and the host
• Legitimate interests: keeping the platform secure, preventing fraud and improving our services
• Consent: for marketing messages and newsletters, which you can withdraw at any time
• Legal obligations: to meet accounting and tax requirements

4. How long we keep data

We keep personal data only as long as the purpose of processing requires:

• Account data: until the account is deleted or 5 years after the last activity
• Booking data: 5 years after the booking is completed, for accounting purposes
• Message history: 3 years after the last exchange
• Cookie data: as set out in the cookie policy

5. Sharing data with third parties

We do not sell your personal data. In some cases data is shared with third parties so we can deliver the service:

• Hosts: the data needed to handle your booking
• Payment providers (Stripe): for secure payment processing
• IT providers (hosting, email services): to run the platform
• Law enforcement: only in response to lawful requests

All of our processors are located in the EEA or provide an equivalent level of data protection.

6. Your rights

Under the General Data Protection Regulation (GDPR) you have the following rights:

• Right of access: request information about the data we process
• Right to rectification: ask us to correct inaccurate data
• Right to erasure: ask us to delete your data (the right to be forgotten)
• Right to restrict processing: limit processing in certain circumstances
• Right to object: object to processing based on legitimate interests
• Right to data portability: receive your data in a structured format
• Right to withdraw consent: withdraw marketing consent at any time

To exercise your rights, please write to us at info@palieclatvija.lv. We will respond within 30 days. If you are not satisfied with our reply, you can contact the Latvian Data State Inspectorate.

7. Data security

We use technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These include:

• SSL encryption for data in transit
• Access controls and authentication
• Regular security reviews and system updates
• Staff training on data protection
• Secure storage with backups

8. Changes to this policy

We may update this privacy policy if our processing practices or the applicable rules change. We will tell you about significant changes by publishing an update on the platform or emailing you. The current version is always available on this page.