01
Who we are
digitals is a paid advertising and performance marketing studio based in Riga, Latvia, operating within the European Union.
For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”), digitals is the data controller for personal data processed through this website. Where we deliver marketing services on behalf of a client, we normally act as a data processor under that client's instructions, governed by a separate agreement.
For any question about this policy or about how your data is handled, contact us at info@digitals.lv.
02
Information you submit through our contact form
Our website has no user accounts, registration or login. The only information you actively provide is what you choose to send through our contact form or by email.
Through the contact form we may collect:
- Your name
- Your company name
- Your email address
- Your phone number (optional)
- Your website address
- Any information you voluntarily include in your message, such as your goals, budget range, current channels or the challenges you would like help with
03
Information collected automatically
When you visit our website, limited technical information is collected automatically by our hosting infrastructure and by the analytics and advertising technologies described below. This can include your IP address (often truncated or pseudonymised), approximate location derived from it, browser and device type, operating system, referring website, the pages you view, and the dates and times of your visit.
This information is used in aggregate to understand how the site performs and how visitors find and use it. We do not attempt to identify individual visitors from it.
04
Analytics and marketing technologies
Subject to your consent where required, we use the following third-party technologies on this website:
- Google Tag Manager — a tag management system used to deploy and control the measurement tags listed below. Google Tag Manager itself does not store personal data but it loads the tools that do.
- Google Analytics 4 (Google Ireland Limited) — measures website traffic, traffic sources, page performance and on-site behaviour. IP addresses are processed in a shortened form and data is collected using first-party cookies and identifiers.
- Meta Pixel (Meta Platforms Ireland Limited) — measures actions taken on our website following interaction with our content or advertising on Facebook and Instagram, and supports audience building and advertising measurement.
- LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) — measures website conversions from LinkedIn campaigns and provides aggregated, professional-level audience insights.
- Other analytics, conversion measurement, heatmap or advertising technologies where a specific campaign or project requires them. Where such tools are added, they are governed by the same consent, purpose and retention principles set out in this policy.
05
Cookies and consent
Cookies and similar technologies (local storage, pixels, device identifiers) are small files or values stored by your browser. We distinguish between strictly necessary cookies, which are required for the site to function and load correctly, and analytics and marketing cookies, which are optional.
Strictly necessary cookies are set on the basis of our legitimate interest in delivering a secure, working website. Analytics and marketing cookies — including those used by Google Analytics 4, Meta Pixel and the LinkedIn Insight Tag — are only set where you have given consent, in line with Article 6(1)(a) GDPR and Latvian implementations of the ePrivacy rules.
You may withdraw or change your consent at any time through the cookie settings available on this website, and you can additionally block or delete cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and blocking strictly necessary cookies may affect how the site works.
06
Why we process your data
We process personal data for the following purposes only:
- Responding to enquiries — reading, answering and following up on messages sent through our contact form or by email, including sending you relevant information about our services.
- Providing marketing services — planning, delivering, reporting on and improving paid advertising, creative and measurement work for clients.
- Website analytics — understanding traffic volume, sources and on-site behaviour in aggregate.
- Improving website performance — diagnosing technical issues, testing changes and improving content, speed and usability.
- Advertising measurement — attributing conversions, measuring campaign effectiveness and optimising our own advertising.
- Meeting legal, accounting and tax obligations and, where necessary, establishing, exercising or defending legal claims.
07
Legal basis under the GDPR
Each processing activity relies on one of the following legal bases:
- Consent — Article 6(1)(a): analytics and marketing cookies and similar technologies, and any optional marketing communications.
- Contract or steps prior to entering a contract — Article 6(1)(b): handling your enquiry, preparing quotes and proposals, and delivering agreed services.
- Legitimate interests — Article 6(1)(f): operating and securing our website, keeping records of business correspondence, and understanding aggregate demand for our services. We balance these interests against your rights and freedoms.
- Legal obligation — Article 6(1)(c): retaining accounting, tax and other records required by Latvian and EU law.
08
How long we keep data
We keep personal data only as long as necessary for the purpose it was collected for.
- Contact form enquiries that do not lead to a working relationship: up to 24 months from the last contact, so that we can pick up the conversation if you return.
- Client correspondence, contracts, campaign documentation and reporting: for the duration of the relationship and up to 5 years afterwards, or longer where accounting or tax law requires it.
- Analytics data: retained according to the settings of the relevant platform, typically up to 14 months for Google Analytics 4 event data and comparable periods for advertising platforms.
- Cookie consent records: retained for as long as needed to demonstrate that consent was validly obtained.
09
Third-party services and recipients
We do not sell personal data. We share it only with service providers who help us operate our business and website, and only to the extent necessary. These may include website hosting and infrastructure providers, email and productivity providers, analytics and advertising platforms (including Google, Meta and LinkedIn), and professional advisers such as accountants.
Some of these providers may process data outside the European Economic Area. Where that happens, transfers are safeguarded by an adequacy decision of the European Commission, by Standard Contractual Clauses, or by another mechanism permitted under Chapter V of the GDPR, together with supplementary measures where appropriate.
Advertising and analytics platforms act as independent or joint controllers for parts of their own processing. We recommend reviewing their privacy notices for details of how they use data collected through their technologies.
10
Security
We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access control on a need-to-know basis, use of reputable providers, and regular review of the tools we run. No system can be guaranteed to be entirely secure, but we work to keep the risk of unauthorised access, loss or misuse as low as reasonably possible.
11
Your rights
Under the GDPR you have the following rights in relation to your personal data:
- Access — to be told whether we process your data and to receive a copy of it.
- Rectification — to have inaccurate or incomplete data corrected.
- Erasure — to have your data deleted where there is no longer a lawful reason for us to keep it.
- Restriction — to ask us to limit how we use your data while an issue is being resolved.
- Portability — to receive data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
- Objection — to object to processing based on our legitimate interests, and to object at any time to processing for direct marketing purposes.
- Withdrawal of consent — to withdraw consent at any time where processing is based on consent.
- Not to be subject to automated decision-making that produces legal effects concerning you. We do not carry out such decision-making.
12
Making a request or a complaint
To exercise any of the rights above, email info@digitals.lv with a description of your request. We will respond within one month of receipt, and we may ask for information to confirm your identity where necessary. If a request is complex, we may extend the deadline by up to two further months and will tell you if that happens.
If you believe your data has been handled unlawfully, you may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, Elijas iela 17, Riga, LV-1050, Latvia) or with the supervisory authority in your country of residence.
13
Changes to this policy
We may update this policy to reflect changes in our services, the technologies we use or applicable law. The current version is always published on this page with the date it was last updated. Material changes will be highlighted clearly on the website.
14
Contact
digitals · Riga, Latvia · info@digitals.lv
For privacy requests, please write “Privacy request” in the subject line so we can route it correctly.
