Privacy Policy

1. General information

This privacy policy explains how [[TO BE COMPLETED: full name]] ("we") processes personal data when you use the website aresminigolfs.lv and visit Āres Minigolf.

Data controller: [[TO BE COMPLETED: full name]], address: Pērkona iela 1, Ikšķile, Ogre Municipality.

2. Contact information

If you have questions about the processing of personal data or wish to exercise your rights, contact us:

• E-mail: lindasleinus@gmail.com
• Phone: +371 27813683

We have not appointed a separate data protection officer – we will answer your questions using the contact details above.

3. What data we process

(a) Data you provide yourself. In the booking form we ask only for your name, along with your preferred date, time, number of people and ticket type. The form does not send anything to our server – the message is composed on your device and opened in WhatsApp, from where you send it to us. When you send the message, we also see your WhatsApp phone number and profile name. If you contact us by e-mail or phone, we receive your e-mail address or phone number respectively, and the content of your message.

(b) Technical data generated automatically. When you visit the website, the hosting server may log your IP address, browser and device type, pages visited and the time of the visit. This data is necessary for the operation and security of the website.

We do not process your payment data – payments are made in person on site.

4. Purposes of processing

We process personal data in order to:

• respond to your questions and requests;
• process your booking request and confirm the visit time;
• provide the requested service (minigolf, terrace, gift cards);
• ensure the operation and security of the website and improve its content.

5. Legal basis

Each purpose has its own legal basis under the General Data Protection Regulation (GDPR):

• your consent (GDPR Art. 6(1)(a)) – third-party embedded content, namely the Google Maps map;
• performance of a contract or pre-contractual steps (Art. 6(1)(b)) – processing your bookings and service requests;
• our legitimate interests (Art. 6(1)(f)) – website security, basic functionality and correct display;
• legal obligation (Art. 6(1)(c)) – accounting requirements where a transaction takes place.

6. Cookies

The website uses a minimal amount of cookies and similar technologies. Optional content is loaded only after your consent.

• Necessary (functional) – your cookie choice is stored in your browser (the "cookie-consent" entry) to remember your decision and avoid asking the same question again. This technology is essential for the website and does not require consent.
• Third-party embedded content – the Google Maps map in the "Contacts" section. It is loaded only after your consent and may set its own cookies and transfer data to Google.
• The website does not use analytics, profiling or marketing cookies. We do not track you.

You can withdraw or change your consent at any time by clicking "Cookie settings" in the footer. Cookies can also be managed and deleted in your browser settings.

7. Data recipients and processors

We may transfer personal data to trusted service providers acting on our behalf or ensuring the operation of the website:

• Hosting – a suitable hosting provider within the European Union.
• Communication via WhatsApp – when you fill in the booking form, the message is sent to us through WhatsApp (WhatsApp Ireland Ltd. / Meta); WhatsApp's own privacy policy also applies to that conversation.
• Embedded map – Google Maps (Google Ireland Ltd.), loaded only after your consent.
• Fonts – the website design uses Google fonts, optimized and served from our own site's server.

Data is not sold to third parties and is not used for advertising. If individual service providers (for example, Meta or Google) process data outside the EU/EEA, this takes place on the basis of an appropriate safeguard, such as the standard contractual clauses approved by the European Commission.

8. Retention period

We store personal data no longer than necessary for the relevant purpose:

• communication and booking data – up to 2 years after the last contact;
• accounting documents – 5 years in accordance with Latvian law, where a transaction takes place;
• cookies and your consent record – until you withdraw it or clear your browser data.

9. Your rights

Under the GDPR you have the right to:

• access your data;
• rectify inaccurate or incomplete data;
• erase your data ("the right to be forgotten");
• restrict processing;
• object to processing;
• data portability;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to lindasleinus@gmail.com. We will respond within one month.

10. Complaints

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority: Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia, e-mail pasts@dvi.gov.lv, www.dvi.gov.lv.

11. Security

We use reasonable technical and organisational measures to protect data, including an encrypted connection (HTTPS) and restricted access to data – only persons who need it to provide the service have access.

12. Links to other websites

The website contains links to third-party websites and profiles (for example, Instagram and Facebook). This policy does not apply to such websites, and we are not responsible for their privacy practices. We recommend reviewing the privacy policy of the website concerned.

13. Children's data

The website is not intended for children, and we do not knowingly process data of persons under 16 years of age. A booking for a child is made by a parent or another adult.

14. Changes to the policy

We may amend this policy from time to time. The current version is always available on this page, with the date of the last changes shown at the top.