Privacy policy

Updated 12 October 2026.

This policy explains how the Kārumnieki guest house handles your personal data when you visit karumnieki.lv, send an enquiry or get in touch with us.

Who handles your data

The data controller is SIA “SunBee”, registration number 40103759170, registered address Sarkandaugavas iela 26 k-4-189, Riga, LV-1005, Latvia. The guest house is at Kalnabeites, Siguldas pagasts, Siguldas novads.

For questions about your data, write to karumnieki@gmail.com or call +371 29338444. No data protection officer has been appointed.

What data we use and why

Enquiries and contact

When you send the enquiry form, we receive your name, phone number, e-mail address (if you give one), the dates and type of the event, the number of guests and beds, the extras you ticked, your comment and the language of the page. We receive the same kind of data when you call, write on WhatsApp or send an e-mail.

We use it only to answer you and prepare an offer. Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). Name and phone number are required, because without them we cannot reply.

Visit statistics

Only if you press “Allow” in the cookie banner does the site load Google Tag Manager and Google Analytics. They record how the site is used: which pages were opened, the type of device and browser, the approximate location (country or city), and whether you pressed the phone number, WhatsApp, the map share button or sent an enquiry. Google Analytics does not store the IP addresses of users in the European Union. We cannot see who you are.

Legal basis: your consent (GDPR Article 6(1)(a) and section 7.1 of the Latvian Information Society Services Law). You can withdraw it at any time with the “Cookie settings” button at the foot of the page. Without consent the site works just the same.

Running the site safely

When you open the site, the server records your IP address, the time, the address you opened and the name of your browser. The enquiry form checks that it is sent by a person, not a bot: when you start filling it in, Cloudflare Turnstile loads and receives your IP address and technical details of your browser. In the Reviews section, the Google reviews load from our own server on Cloudflare’s network, not from Google, so Google learns nothing about your visit; Cloudflare receives your IP address. Legal basis: our legitimate interest in keeping the site secure and free of spam (GDPR Article 6(1)(f)).

The map

The Google Maps map loads only when you press “Show map”. Google then receives your IP address and the page address and may use its own cookies. Google is responsible for that data under its own privacy policy.

Who receives your data

These service providers handle data on our behalf:

  • SIA “Nano IT” (Latvia): hosting the site.
  • Cloudflare, Inc. (USA): processing the enquiry form, protecting it from bots and loading the reviews onto the page.
  • Sendinblue SAS, trading as Brevo (France): delivering enquiries to our e-mail.
  • WhatsApp Ireland Limited, part of Meta (Ireland): a notice of each enquiry on our WhatsApp.
  • Google Ireland Limited and Google LLC (Ireland, USA): our Gmail e-mail and, if you allow it, Google Analytics.

If you write to us on WhatsApp, the conversation takes place on the WhatsApp platform under its own terms. We do not sell your data or pass it on for advertising.

Transfers outside Europe

Google, Cloudflare and Meta may also process data in the USA. This is based on the European Commission decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, which these companies have joined.

How long we keep data

  • Enquiries and correspondence: 12 months after our last contact. If we sign a contract, as long as the contract and the accounting rules require.
  • Meta keeps notices on the WhatsApp platform for no longer than 30 days.
  • Google Analytics data: 14 months.
  • Server logs: as long as the site’s security needs, under the hosting provider’s terms.
  • Your choice in the cookie banner: 180 days.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its use, to object to use based on our legitimate interest, and to receive your data in a portable form. You can withdraw consent at any time. This does not affect anything done before you withdrew it.

Write to karumnieki@gmail.com. We will reply within one month. We do not make automated decisions about you.

If you think we handle your data wrongly, you can complain to the Data State Inspectorate (Datu valsts inspekcija): Elijas iela 17, Riga, LV-1050, pasts@dvi.gov.lv, www.dvi.gov.lv.

Cookies

Which cookies and browser storage we use, how long they last and how to change your choice is explained in the cookie policy.

Changes

If this policy changes, the new version will be on this page with a new date.