Privacy Policy

Data controller

The controller of your personal data is [TO CONFIRM: the company's registered legal name, e.g. "SIA 'Name'", or a sole proprietor/natural person carrying out economic activity, and registration number], operating under the name "Garīkas".

Contact details: "Garīkas", Rudbāržu parish, Kuldīga municipality, LV-3325, Latvia · phone +371 29147778 · email info@garikas.lv.

If you have questions about this policy or the processing of your data, please write to info@garikas.lv.

What data we process

Booking enquiry form (overnight stays, sauna, shiitake tour, events): name, phone and/or email, preferred date, number of guests, chosen service, and any additional information you provide.

Online shop order: first name, surname, email, phone, chosen delivery method (Omniva parcel locker location or on-site pickup), chosen payment method, ordered items and their quantity, and – if you choose an invoice for a legal entity – company name, registration number, VAT number and legal address.

Technical data: a session identifier (so that the shopping cart and language selection work) and standard server log data (IP address, browser type, requested page) – see our cookie policy for details.

We do not collect payment card data – it is not currently entered on this site (see the "Payment" section below).

Why we process your data

To prepare and confirm your booking or order, communicate with you about it, and ensure delivery of the service or goods – this is necessary for the conclusion and performance of a contract with you (Article 6(1)(b) of the General Data Protection Regulation).

To issue invoices and comply with accounting and tax legislation requirements – for compliance with a legal obligation (Article 6(1)(c)).

To respond to your questions and improve our services – on the basis of our legitimate interests (Article 6(1)(f)).

How long we keep data

Booking enquiries that did not result in a transaction are kept for [TO CONFIRM: e.g. 6 or 12 months] from the date of the enquiry.

Transaction-related data (orders, invoices) is kept for the retention period for accounting documents set out in legislation – usually 5 years, unless legislation provides otherwise.

After the retention period ends, the data is deleted or anonymised.

Who we share data with

Omniva (postal services provider) – if you choose delivery to a parcel locker, we share with them your chosen parcel locker identifier and as much contact information as is necessary to deliver the shipment.

Our email and server services provider – [TO CONFIRM: the name of the website and email hosting company] – which technically supports the operation of this website and the sending of emails.

Our accounting services provider, if one is engaged, – for the processing of invoice and transaction data.

State authorities – where required by legislation (for example, the State Revenue Service).

We do not share data with other businesses for marketing purposes and do not carry out automated decision-making or profiling.

Cookies

This website uses a technically necessary cookie to save your shopping cart and language selection. We do not use analytics or advertising cookies. If you enable the Google Maps display on the site, Google may set its own cookies – see our cookie policy for details.

Your rights

You have the right to request access to your data, its correction or deletion, restriction of processing, to object to processing, and to request data portability to the extent provided for in legislation.

To exercise these rights, please write to info@garikas.lv. We will respond no later than within one month.

If you believe your rights have been violated, you have the right to lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).

Payment

Online card payments are not currently processed on this site – after receiving your order or booking, we will contact you individually to agree on payment. Once an online payment system is added, this section must be updated with the name of the payment service provider and a link to its privacy policy.

Changes to this policy

This policy may be updated from time to time. The current version is always available on this page, and the date of the last update is shown above.