Privacy Policy

1. Who is responsible for your data

The pieraksts24.lv website and the Pieraksts24 service are operated by Pieraksts24. Contact e-mail: info@pieraksts24.lv.

For privacy questions or to exercise your rights, write to info@pieraksts24.lv.

2. Our two roles

We act as the controller for data about businesses that use Pieraksts24 (business accounts), for messages sent through our website contact form, and for technical and security logs of our website.

When a client books an appointment with a business through Pieraksts24, that business is the controller of the booking data and we process it only on the business's behalf, as its processor. Section 4 explains what this means for clients.

3. Data we process as controller

Business accounts. When a business registers and uses Pieraksts24, we process: the e-mail address and password of the account (the password is stored only as a one-way hash, never in readable form), the business name and the address of its public booking page, services (name, duration, price), opening hours, days off and blocked time slots, the public business description, the chosen colour scheme, plan and free period details, usage counters for plan limits, the account approval status and the date of registration. We use this data to create and run the account, publish the booking page, send service e-mails (such as account approval and booking notifications) and provide support. Legal basis: performance of our contract with the business (Art. 6(1)(b) GDPR). Where the account belongs to a sole trader, this data is personal data of that person.

Contact form. When you write to us through the contact form, we process your name, e-mail address, the topic you choose, your message, whether you ticked the newsletter box, your IP address, your browser's user agent and the time of sending. The message is saved in our database, forwarded to our mailbox and you receive an automatic confirmation by e-mail. Legal basis: our legitimate interest in answering enquiries and protecting the form against abuse (Art. 6(1)(f) GDPR), or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Newsletter. If you tick the newsletter box on the contact form, we record your consent (Art. 6(1)(a) GDPR). We do not currently send a regular newsletter; if we start, we will only send it to people who have opted in, and every message will explain how to unsubscribe. You can withdraw your consent at any time by writing to info@pieraksts24.lv; this does not affect the lawfulness of processing before withdrawal.

Security and technical logs. When you use the website, our server records technical data: IP address, browser user agent, the requested address and method, date and time, and error messages. We also log security events such as failed or rate-limited log-in attempts, password changes and administrator actions, together with the related account. To limit abuse of log-in, registration, booking and contact forms, we store a counter linked to a hashed (pseudonymised) identifier derived from your IP address. Legal basis: our legitimate interest in keeping the service secure, preventing abuse and fixing errors (Art. 6(1)(f) GDPR).

E-mail delivery records. So that e-mails are delivered reliably and can be re-sent after a temporary failure, we keep a copy of each e-mail we send (recipient, subject, content and delivery status) in an outgoing queue and a delivery log for a limited time (see section 8). Where the e-mail concerns a booking, we do this as the business's processor.

4. Booking data (for clients)

When you book an appointment on a business's Pieraksts24 page, the business is the controller of your data. We process on its behalf: your name, phone number and e-mail address, the chosen service, date and time, the booking status, the confirmation link and any note the business adds (such as the reason a booking was declined). Your e-mail address is used to send you the confirmation link and updates about your booking. The business decides why and how long your booking data is kept.

To exercise your data protection rights regarding a booking, or if you have a question about it, please contact the business you booked with. If you contact us, we will forward your request to the business and help it respond. Our obligations as processor are set out in the Data Processing Agreement, which is part of our Terms of Service.

Read the Data Processing Agreement

5. Cookies and similar technologies

We only use cookies that are necessary for the website to work or that store your cookie choice. We do not use analytics, advertising or social media tracking cookies or scripts, and our fonts and scripts are served from our own server, so no third party receives data about your visit through them. If we ever introduce optional cookies, we will only set them with your prior consent.

• • PHPSESSID - strictly necessary session cookie that keeps you logged in, remembers your language choice and protects forms against cross-site request forgery. It is deleted when you close your browser.
• • cookie_consent - remembers that you have seen the cookie notice, so it is not shown again. It is kept for 12 months.

6. Who receives your data

We do not sell personal data and do not share it for advertising. Data is disclosed only to:

• • Hostinger International Ltd, our hosting provider, which provides the servers, database and e-mail sending for Pieraksts24 and acts as our processor under a data processing agreement;
• • the business you booked with, for booking data (the business sees the bookings made with it);
• • our own staff, only to the extent needed to run and support the service;
• • public authorities, courts or law enforcement where we are legally obliged to disclose data.

7. Where your data is stored

Pieraksts24 is hosted in our hosting provider's data centres in the European Union. We do not transfer personal data outside the European Union or the European Economic Area. If this ever changes, we will make sure appropriate safeguards are in place, such as the European Commission's standard contractual clauses, and update this policy.

8. How long we keep data

We keep personal data only as long as necessary for the purposes described above:

• • Business account data: while the account is active. After the account is closed, it is deleted within 30 days, except records that the law requires us to keep longer (for example accounting records for paid plans).
• • Booking data: while the business's account is active, unless the business deletes it earlier; deleted within 30 days after the account is closed.
• • Contact form messages: up to 24 months after our last correspondence with you.
• • Newsletter consent: until you withdraw it.
• • Server, error and security logs: up to 30 days.
• • Rate-limiting counters: they expire after at most one hour and are removed within 7 days.
• • Copies of sent e-mails in the outgoing queue and delivery log: up to 30 days after sending.
• • Database backups: kept on a rolling basis for up to 30 days, after which they are overwritten.
• • Cookies: as described in section 5.

9. How we protect data

We use encrypted connections (HTTPS/TLS), store passwords only as one-way hashes, restrict access to data by role, limit the rate of log-in and form requests, keep security logs and make regular backups. No system is completely secure, but we work to protect your data and will act promptly if a problem occurs.

10. Your rights

Under the GDPR you have the right to:

• • access the personal data we hold about you and receive a copy;
• • have inaccurate data rectified;
• • have your data erased, where there is no longer a reason to keep it;
• • restrict the processing of your data in certain cases;
• • receive data you provided to us in a machine-readable format and have it transmitted to another provider (data portability);
• • object to processing based on our legitimate interests;
• • withdraw your consent at any time, where processing is based on consent.

11. How to exercise your rights and complain

Write to info@pieraksts24.lv. We will reply within one month; in complex cases this may be extended as permitted by the GDPR, and we will tell you if so. We may ask you to confirm your identity, for example by writing from the e-mail address linked to your account. For booking data, please contact the business you booked with (see section 4).

If you believe we process your data unlawfully, you have the right to lodge a complaint with the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv), or with the supervisory authority of the EU country where you live or work. We would appreciate the chance to address your concern first.

12. Other information

Providing the data described above is necessary to create a business account, make a booking or get a reply to your message; without it we cannot provide these services. We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

13. Children

Pieraksts24 is not intended for children under 16, and we do not knowingly collect their personal data. Business accounts may only be created by adults. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy when our service or the law changes. The date of the latest update is shown at the top of this page. We will inform businesses of significant changes by e-mail.

15. Contact

For any question about this policy or your personal data, contact us at info@pieraksts24.lv.