Privacy Policy

Effective Date: October 13, 2026 · Last updated: 10 November 2026

1. Introduction

The Controller processes personal data obtained from customers and visitors of the website pastniekamaja.lv in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and other applicable laws of the Republic of Latvia. This policy applies to data collected online, via telephone, e-mail, social media, or in person.

2. Controller Identity and Contact Information

Controller: SIA “EMEDA”
Registration Number: 42103029089
Legal Address: Krišjāņa Valdemāra iela 20/24 – 15, Liepāja, LV-3401, Latvia
Phone: +371 29113186
E-mail: info@pastniekamaja.lv
Website: https://pastniekamaja.lv/

3. Purposes and Legal Basis of Personal Data Processing

For processing table and service reservations, communicating with customers, and providing restaurant services — performance of a contract or taking steps prior to entering into a contract at the request of the data subject (Article 6(1)(b) of the GDPR), as well as the Controller’s legitimate interests in ensuring quality customer service (Article 6(1)(f) of the GDPR).
For the preparation and storage of invoices, accounting, and tax documents, and settling payments — compliance with a legal obligation (Article 6(1)(c) of the GDPR).
For reviewing complaints and applications, and ensuring website operation, security, and quality — the Controller’s legitimate interests (Article 6(1)(f) of the GDPR).
For analyzing website visitor traffic and usability (Google Analytics) — based on your consent (Article 6(1)(a) of the GDPR).
State and law enforcement authorities – data may be transferred in cases and to the extent specified by regulatory enactments.

4. Categories of Personal Data

Name, surname, telephone number, e-mail address.
Reservation information (date, time, number of guests, special requests, or message content).
Billing and accounting data (if applicable).
Communication history (via e-mail, phone, or social media).
Technical data regarding website visits (IP address, browser type, access time, analytical cookies).

5. Categories of Personal Data Recipients

Access to data is restricted to personnel who require it to perform their work duties. Data may be transferred to:

Accounting service providers.
Website hosting and IT infrastructure providers (e.g., Area IT, SIA).
Analytics and marketing tool providers (Google Analytics). These service providers process data strictly in accordance with the Controller’s instructions and regulatory requirements. We do not sell or distribute your data to third parties for commercial purposes.

6. Categories of Data Subjects

Current, former, and potential restaurant customers, individuals making reservations or contacting the Controller, and website visitors.

7. Data Transfers Outside Latvia / EU

The Controller does not intend to transfer personal data to countries outside the European Union or the European Economic Area. However, because third-party services such as Google Analytics are used on the website, Google’s international data protection mechanisms may apply to technical data processing.

8. Data Retention Period

Personal data is stored for as long as necessary to achieve the respective purpose (e.g., fulfilling a reservation) and as long as there is a legal obligation for either party to retain it.

Reservation and communication data are generally stored for up to 1 year, unless a dispute arises or longer retention is required.
Accounting documents are stored in accordance with statutory requirements (typically 5 years).
Analytical data is retained in accordance with Google Analytics data retention policies.

9. Data Subject Rights

You have the right to request information about and access to your personal data, request correction or deletion, restrict processing, object to processing, receive data in a portable format, and withdraw previously given consent, as permitted by the GDPR. You can submit a request by writing to info@pastniekamaja.lv or calling +371 29113186. We will respond within one month. To protect your data, we may ask you to verify your identity.

10. Cookie Processing

The website uses technical cookies necessary for the website’s proper operation, as well as analytical cookies (Google Analytics) to collect statistics and improve user experience. Your consent is requested for analytical cookies. You can delete or block cookies at any time through your browser settings.

11. Third-Party Services, External Links and Social Media

The website uses the following third-party services. Their processing of data is governed by the respective providers’ privacy policies:

Google Maps (map on the “Contact” page) and Google Fonts (web fonts) – Google Ireland Limited. When the page loads, Google may receive your IP address and technical browser data. Google Privacy Policy.
Google reviews widget (Trustindex) – displays public Google reviews on the home page; the widget is loaded from Trustindex servers. Trustindex Privacy Policy.

The website contains links to our profiles and other external websites – Facebook, Instagram, Tripadvisor, Foursquare and Google Maps (including for writing a review) – as well as to partner websites. These websites are independent and have their own privacy and cookie policies; SIA “EMEDA” is not responsible for their content or for any data processing carried out on them. When you click a social network link or button, that social network may process your data under its own terms.

12. Right to Submit a Complaint to a Supervisory Authority

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the Data State Inspectorate (Latvijas Republikas Datu valsts inspekcija): www.dvi.gov.lv, e-mail: info@dvi.gov.lv.

13. Validity of the Privacy Policy

The Controller reserves the right to amend this privacy policy at any time. The current version is always published on this website.