Privacy Policy

Privacy Policy

Last updated: 12 November 2026.

We respect your privacy and are committed to protecting your personal data. In this privacy policy, we explain how personal data is processed when using the online platforms skolenuekskursijas.lv and edutrips.eu, including their language versions and subdomains.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation or GDPR) and other applicable legislation.

1. Data controller

Data controller for the processing of personal data on the platforms: Linda Užule.

Email: info@skolenuekskursijas.lv

2. For what purposes do we process personal data?

Personal data is processed solely for specific and legitimate purposes relating to the operation of the platform, the forwarding of user requests, security and the improvement of the website.

3. Communication with attractions and service providers

The platform provides contact forms which users can use to send a question or a service request to a specific attraction, tour organiser or other service provider.

When using the contact form, the following information is processed:

  • user’s name;
  • email address;
  • the message content entered by the user;
  • technical data necessary for processing the enquiry.

The information entered in the contact form is used to send the enquiry to the relevant service provider. The user may also receive confirmation of the enquiry’s submission via email.

The platform’s request log does not store the user’s full email address or the content of the message sent. The information required to verify and forward the request is processed whilst the request is being fulfilled.

The legal basis for forwarding requests is Article 6(1)(b) of the GDPR, where processing is necessary for the purposes of taking steps at the user’s request prior to entering into a contract, or point (f) — the controller’s legitimate interests in providing the communication service requested by the user.

4. Single transport service request

The platform offers the option to send a transport service request simultaneously to several transport service providers listed on the platform.

The following data may be processed in this form:

  • the contact person’s first name and surname;
  • email address;
  • the planned date or period of the rides;
  • the route and stops;
  • number of passengers and group composition;
  • departure and return times;
  • any other information voluntarily provided by the user.

When submitting a single transport request, the user is informed that the contact details provided and the content of the journey request will be forwarded to several transport service providers so that they can prepare an offer and contact the person making the request.

Confirmation of the email address may be required before the first request is sent. Information from an unconfirmed request is temporarily stored in a technical data repository for up to 24 hours.

To enable subsequent enquiries to be submitted without the need for repeated email verification, the system may use a browser cookie and a cryptographically derived identifier. This confirmation may remain valid for up to 12 months.

The full email addresses and message content of confirmed requests are not stored in the platform’s request statistics log.

5. Transfer of data to service providers

When using contact forms, the information provided by the user is forwarded to the relevant service provider. In the case of a joint transport enquiry, the information is received by several service providers.

The recipients use the information received to process the enquiry, prepare an offer and contact the user. If a service provider independently determines the purposes and means of further processing of the data received, it acts as a separate controller of personal data.

The platform is not responsible for data processing carried out independently by service providers, insofar as this is provided for by the applicable legislation. For enquiries regarding the service provider’s further processing of data, the user may contact the relevant service provider directly.

6. Record-keeping, statistics and security

The Platform records information on requests submitted via contact forms and transport request forms in order to ensure the monitoring of the service’s operation, to analyse the number of requests received by cooperation partners, and to prevent misuse of the platform.

Information regarding the date the request was sent, the recipient, the type of request and the delivery status is used for partner statistics.

The platform’s request log does not store users’ full email addresses or the content of messages sent.

To ensure the security of the platform and prevent misuse, IP addresses, partially masked email addresses and other necessary technical data may also be recorded.

Security data is retained for as long as necessary to identify, investigate and resolve security incidents. The retention period is assessed in accordance with the necessity of this data and the purpose of its processing.

Request statistics that do not contain any identifiable personal data of users may be stored on a long-term basis for the purpose of analysing the platform’s performance.

The legal basis for this processing is Article 6(1)(f) of the General Data Protection Regulation — the controller’s legitimate interests in ensuring the platform’s operation, security and statistics on the use of services.

7. Website visit statistics — Google Analytics 4

We use Google Analytics 4 to analyse visits to the platform and to improve its functionality and content.

In this process, information may be processed regarding:

  • pages visited and interactions with the website;
  • the type of browser and device;
  • approximate geographical location;
  • the duration of the visit and session activities;
  • online identifiers associated with the analytics service.

The Google Analytics service is provided by Google Ireland Limited. Analytics data is used to compile statistics, not to directly identify users on our platform. However, certain analytics identifiers may be considered personal data.

Analytics cookies are used in accordance with the consent provided by the user, which can be managed via the cookie settings tool available on the website.

The data retention period for Google Analytics is up to 14 months, depending on the analytics settings used.

8. Protection against automated requests — reCAPTCHA

To protect contact forms against spam and automated abuse, the platform uses Google reCAPTCHA technology.

Whilst this technology is in operation, Google may process technical information about the browser, device, IP address and the user’s interaction with the website.

The purpose of using reCAPTCHA is to protect the website and its communication functionality. The legal basis for data processing, insofar as it applies, is the controller’s legitimate interests in ensuring the security of the information system.

Further information: Google’s Privacy Policy.

9. Cookies and Complianz

The website uses cookies and similar technologies to ensure its operation, save necessary settings, maintain security and, with the user’s consent, collect visitor statistics.

The Complianz solution is used to manage cookie consent.

Essential cookies are used to ensure the website functions properly. Analytical and other optional cookies, which require consent, are used in accordance with the user’s preferences.

The user may review or change their cookie preferences at any time using the cookie settings management tool available on the website.

10. Retention periods for personal data

Personal data is processed and retained only for as long as is necessary for the specific purpose of processing or to fulfil the obligations laid down in legislation.

  • Contact form enquiries: full email addresses and the content of messages are not stored in the platform’s enquiry log.
  • Unconfirmed transport requests: in the technical data repository for up to 24 hours.
  • Email verification identifiers: up to 12 months.
  • Google Analytics 4: up to 14 months, in accordance with analytics settings.
  • Security and server logs: in accordance with the applicable technical retention policy.

11. Data recipients and processors

Personal data may only be made available to the extent necessary to provide the relevant service:

  • the attractions and service providers selected by the user;
  • transport service providers, if the single request form is used;
  • providers of website hosting and technical maintenance services;
  • email delivery and technical infrastructure service providers;
  • Google, to the extent that its analytics or security services are used;
  • public authorities, where required by applicable legislation.

When using certain services, data may also be processed outside the European Economic Area. In such cases, the data protection mechanisms set out in legislation apply.

12. User rights

In accordance with the GDPR, the user has the right, where applicable, to:

  • to receive information about the processing of their personal data;
  • to request access to their personal data;
  • to request the rectification of inaccurate data;
  • to request the erasure of data in the circumstances provided for by law;
  • to request the restriction of data processing;
  • object to the processing of data based on legitimate interests;
  • withdraw consent where processing is based on consent;
  • exercise the right to data portability, where applicable.

Requests regarding the processing of personal data may be sent to info@skolenuekskursijas.lv.

We process data subjects’ requests in accordance with the timeframes and requirements set out in the GDPR.

13. Right to lodge a complaint

If you believe that your personal data is being processed in a manner that does not comply with the requirements of the relevant legislation, you have the right to lodge a complaint with the State Data Inspectorate.

The Data Protection Inspectorate’s website: www.dvi.gov.lv .

14. Security of personal data

We use appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, loss or misuse.

These measures include access restrictions, protection against automated requests and secure data transmission via an HTTPS connection.

15. Changes to the Privacy Policy

We may update this privacy policy from time to time if there are changes to the platform’s functionality, the procedures for processing personal data, or the applicable regulatory framework.

The current version of the privacy policy is always available on this website. In the event of significant changes, users may be notified separately.

16. Contact details

If you have any questions regarding the processing of personal data, please contact us:

Email: info@skolenuekskursijas.lv