Privacy policy

Who is responsible

This site is run by Edijs Olbačevskis, a private individual based in Riga, Latvia. For anything about your data, write to digitus.restituo@gmail.com. That is the only channel, and it reaches me directly.

What is collected

The contact form on the collaborate and contacts pages asks for three things, and all three are required:

• Your name
• Your email address
• Your message

Nothing else is asked for. The message field is free text, so please do not put anything sensitive in it - health details, political or religious views, or similar. If you do, that is your choice, not something this site requests.

What happens automatically

Every website sees the IP address of the device asking for a page, and this one is no exception. The hosting provider records it in server logs together with the time, the page requested and the browser identifier. That happens before you fill in anything.

Why, and on what legal basis

Form data is used for one purpose only: to read your message and reply to it. The legal basis is Article 6(1)(b) of the GDPR, steps taken at your request before entering into a contract, or Article 6(1)(f), legitimate interest in answering someone who has written to me.

Server logs exist to keep the site running and to see when something breaks. The basis is Article 6(1)(f).

Cookies and analytics

This site sets no cookies. It uses no local storage, no session storage, no analytics, no tracking pixels and no advertising scripts. That is why you see no cookie banner: there is nothing to consent to.

Who else receives data

Four companies are involved in making this site work, and each of them sees something:

• Formspree, United States - receives the contents of the form when you send it, and stores the message so I can read it.
• Netlify, United States - hosts the site and records IP addresses in server logs.
• Google, through Google Fonts - the fonts load from Google servers, so your IP address reaches Google every time a page opens.
• Google, through YouTube thumbnails - the video page loads preview images from YouTube servers, so your IP address reaches Google there too. No video player is embedded, so YouTube sets no cookies.

None of these companies receives your data for their own marketing, and this site sells no data to anyone.

Data outside the European Union

Formspree and Netlify are based in the United States, so form data leaves the European Union. The transfer relies on Formspree's participation in the EU-US Data Privacy Framework, or on standard contractual clauses under Article 46 of the GDPR.

If you would like to contact me without your message leaving the EU, write directly to the email address above instead of using the form.

How long it is kept

Messages are kept while the conversation is useful and deleted within twelve months at the latest, unless we are still working together. Server logs are kept by the hosting provider for a short period and then rotated out.

Your rights

Under the GDPR you can ask me to do any of the following, at no cost:

• See what data I hold about you
• Correct anything that is wrong
• Delete it
• Restrict what I do with it
• Receive it in a portable format
• Object to it being processed at all

Write to digitus.restituo@gmail.com and I will reply within one month. Deletion is the simplest of these: say the word and the message is gone.

If you are not satisfied

You can complain to the Latvian supervisory authority, Datu valsts inspekcija, at dvi.gov.lv. You do not need to go through me first.

Changes to this page

If what this site does with data changes, this page changes with it, and the date at the top moves. There is no mailing list, so there is no notification - the date is the record.