Privacy policy

01Who processes the data

The data controller is DGRT Studio, Latvija, operating under the DGRT Studio brand. For any question about your data, write to dgrt.studio.team@gmail.com.

02What data we collect

Forms on the website (an idea or a project request): name, email, message, the budget and timing you chose, your Telegram or WhatsApp contact if you asked for a call, the page language and your consent to be named as the author of an idea.

Invoices and agreements: name, email, company details (if you gave them), the contents of the invoice, and the time you accepted the terms, your IP address, browser details and a digital fingerprint of the accepted text — this is the proof that the terms were accepted.

Payments: when you pay by card, you enter your card details on Stripe’s page — we never see or store them and only receive the amount and the payment status. With a bank transfer we see the payer’s name and account number in our bank statement.

Technical data: the server briefly keeps request logs (IP address, time, page opened) to protect against abuse and to find errors. We do not use advertising or analytics cookies and do not track you.

03Why and on what legal basis

To reply to your request or idea and discuss working together — steps before entering into a contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR).

To issue an invoice, do the work and receive payment — performance of a contract (Art. 6(1)(b)).

To keep accounting records and documents — a legal obligation (Art. 6(1)(c)).

To keep proof that the terms were accepted and defend ourselves in a dispute — legitimate interest (Art. 6(1)(f)).

To name you as the author of an idea we have built — your consent (Art. 6(1)(a)), which you can withdraw at any time.

04Who we share data with

We do not sell data or share it for advertising. Data is only received by the services without which the work is impossible:

Stripe Payments Europe, Ltd. (Ireland) — card payments; Google (Gmail) — sending and receiving email; the provider we rent our server from — storing the website’s data; Telegram or WhatsApp — only if you chose to talk there. Public authorities and our accountant receive data only when the law requires it.

Stripe and Google may process data outside the EU, including in the USA. Such transfers are protected by GDPR mechanisms: the EU adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

05How long we keep data

Requests and ideas that did not lead to an agreement — no longer than 2 years after the last contact, then deleted. We will delete them sooner if you ask.

Invoices, payment data and proof of acceptance — for as long as Latvian accounting law and limitation periods require. We cannot delete such data on request before that.

Technical server logs — a few days or weeks, after which they are overwritten.

06Cookies and browser storage

The website does not set cookies for visitors. Only your chosen site language is saved in your browser. Stripe’s payment page uses its own cookies that are needed for secure payments.

07Your rights

You can find out what data we hold about you, correct it, delete it, restrict or object to its processing, receive your data in a convenient format and withdraw your consent. Write to dgrt.studio.team@gmail.com — we will reply within a month.

If you believe we are violating your rights, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv).

08Changes

If we change this policy, the new version will appear on this page with a new date. How we work is described in our terms of cooperation.