Privacy Policy
Last updated: 11 October 2026
Latvian Gem ("we", "us", "our") is committed to protecting your personal data. This policy explains what information we collect, how we use it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and Latvian data protection law.
Data Controller
The data controller is Latvian Gem, operating from Riga, Latvia. You can contact us at info@latviangem.eu or by telephone at +371 28 329 863.
What Data We Collect
We collect personal data only when you actively provide it or when it is generated automatically by your use of our website.
Booking and Enquiry Forms
When you submit a booking request or enquiry β through the tour wizard, the Surprise Tour form, or any destination page β we collect your name, email address, telephone number, travel dates, group size, and any notes you provide. This data is used solely to respond to your enquiry and arrange your tour.
Contact Form
When you use our contact form we collect your name, email address, and message. We use this data only to respond to your message.
Analytics
With your consent, we use Google Analytics 4 to collect anonymised data about how visitors use our website β pages visited, session duration, and general geographic region. No personally identifiable information is collected through analytics. You can withdraw consent at any time via our cookie banner.
Technical Data
Our web server automatically records standard technical data including your IP address, browser type, and the pages you visit. This data is used for security monitoring and is not linked to your identity.
Legal Basis for Processing
- Contract performance β processing your booking enquiry and arranging your tour.
- Legitimate interests β security monitoring and fraud prevention.
- Consent β analytics cookies, which you can withdraw at any time.
Data Retention
We retain booking and enquiry data for three years from the date of your last contact, after which it is securely deleted. Analytics data is retained for 14 months in accordance with Google Analytics default settings. Technical server logs are retained for 90 days.
Data Sharing
We do not sell, rent, or trade your personal data. We share data only with the following trusted service providers, each bound by data processing agreements:
- Google LLC β analytics (Google Analytics 4) and email infrastructure
- Airo (GoDaddy) β website hosting and form submission processing
- Our local tour guides β name and group size only, for tour delivery
Cookies
We use the following categories of cookies:
Essential cookies
Required for the website to function. These cannot be disabled. They include your language preference and session security tokens.
Analytics cookies
Used to understand how visitors use our site (Google Analytics 4). These are only set with your consent. You can withdraw consent at any time by clicking "Cookie Settings" in the footer.
You can manage or withdraw cookie consent at any time using the cookie banner on this site.
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
- Right of access β request a copy of the personal data we hold about you.
- Right to rectification β ask us to correct inaccurate or incomplete data.
- Right to erasure β ask us to delete your personal data ("right to be forgotten").
- Right to restriction β ask us to limit how we process your data.
- Right to data portability β receive your data in a structured, machine-readable format.
- Right to object β object to processing based on legitimate interests.
- Right to withdraw consent β withdraw analytics consent at any time without affecting prior processing.
To exercise any of these rights, contact us at info@latviangem.eu. We will respond within 30 days. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at www.dvi.gov.lv.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Access to booking data is restricted to authorised staff only.
International Transfers
Some of our service providers (including Google) process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after any changes constitutes acceptance of the updated policy.
Contact Us
For any questions about this privacy policy or to exercise your data rights, please contact us:
- info@latviangem.eu
- Phone
- +371 28 329 863
- Address
- Riga, Latvia