Privacy policy and cookies policy

The data controller responsible for your personal data is:

Company: SIA "Brandsite"

Registration: Reg. No. 41203071628

Address: Jura Alunana 2-11, Riga, LV-1010, Latvia

Email: [email protected]

Phone: +371 22 811 374

Website: https://brandsite.lv

3.1 Data you provide

When you submit a contact form, send an email, or request a quote, we collect your name, email address, phone number, and the content of your message. This data is stored in our CRM system (Zoho CRM) and used solely to respond to your inquiry and manage our business relationship with you.

3.2 Data collected automatically

When you visit our Website, we automatically collect technical information such as your IP address, browser type, operating system, pages visited, time spent on the site, and referring URL. This is done through the tools listed in Section 5.

4. Legal Basis for Processing

Processing activity Legal basis

Contact form / inquiry processing Performance of a pre-contractual relationship (Art. 6(1)(b) GDPR)

Analytics and website usage data Legitimate interest in improving website performance (Art. 6(1)(f) GDPR), with prior consent for non-essential cookies

Advertising and remarketing Your consent, given through our cookie consent banner (Art. 6(1)(a) GDPR)

Session recordings and heatmaps (Clarity) Your consent, given through our cookie consent banner (Art. 6(1)(a) GDPR)

Legal obligations Compliance with legal obligation (Art. 6(1)(c) GDPR)

We use the following third-party services on this Website. Each acts as a data processor under a Data Processing Agreement (DPA) with us, or independently as a data controller in respect of data processed under their own terms.

Google Analytics 4 (GA4)

Provider: Google Ireland Limited

Purpose: Website traffic analysis - pages visited, session duration, user behavior, traffic sources.

Data processed: Anonymized IP address, browser/device type, geographic region, pages visited, session data.

Data transfers: Data may be transferred to Google servers in the USA under Standard Contractual Clauses.

Legal basis: Consent (analytics cookies)

Privacy policy: https://policies.google.com/privacy

Google Search Console (GSC)

Provider: Google Ireland Limited

Purpose: Monitoring website visibility in Google Search. No personal data about individual visitors is collected by us through GSC.

Data processed: Aggregated search query data, indexing status. No individual user identification.

Data transfers: Processed by Google.

Legal basis: Legitimate interest

Privacy policy: https://policies.google.com/privacy

Microsoft Clarity

Provider: Microsoft Corporation

Purpose: Session recordings, heatmaps, and user behavior analysis to improve website usability. Clarity records mouse movements, clicks, and scrolling behavior.

Data processed: Session recordings, click data, scroll depth, anonymized IP, browser/device type. No passwords or payment details are recorded.

Data transfers: Data may be transferred to Microsoft servers in the USA under Standard Contractual Clauses.

Legal basis: Consent (analytics/marketing cookies)

Privacy policy: https://privacy.microsoft.com/en-us/privacystatement

CookieYes

Provider: CookieYes Ltd

Purpose: Cookie consent management platform - records and manages your cookie preferences.

Data processed: Cookie consent preferences, timestamp of consent, visitor ID (anonymous).

Data transfers: Data stored in the EU.

Legal basis: Legal obligation (GDPR consent management)

Privacy policy: https://www.cookieyes.com/privacy-policy/

Google Ads

Provider: Google Ireland Limited

Purpose: Display advertising and remarketing campaigns - showing ads to users who have previously visited our Website.

Data processed: Cookie identifiers, IP address, ad interaction data, remarketing list membership.

Data transfers: Data may be transferred to Google servers in the USA under Standard Contractual Clauses.

Legal basis: Consent (marketing cookies)

Privacy policy: https://policies.google.com/privacy

Zoho CRM

Provider: Zoho Corporation

Purpose: Customer relationship management - storing and managing contact information submitted through our contact forms and business correspondence.

Data processed: Name, email address, phone number, company name, and content of your inquiry.

Data transfers: Data may be processed in Zoho data centers. Zoho is GDPR-compliant and provides a standard DPA.

Legal basis: Pre-contractual relationship / legitimate interest

Privacy policy: https://www.zoho.com/privacy.html

Our Website uses cookies - small text files stored on your device. We use the CookieYes consent management platform to obtain and record your cookie preferences before placing any non-essential cookies.

Cookie categories we use:

• Strictly necessary: Required for the Website to function (cannot be disabled).

• Analytics: GA4, Microsoft Clarity - track usage patterns to help us improve the Website.

• Marketing: Google Ads - used for remarketing and advertising campaign performance measurement.

You can review and change your cookie preferences at any time by clicking "Cookie Settings" in the footer of our Website.

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.

• Right to rectification: Request correction of inaccurate or incomplete data.

• Right to erasure: Request deletion of your personal data ("right to be forgotten").

• Right to restriction: Request that we limit how we use your data.

• Right to data portability: Receive your data in a structured, machine-readable format.

• Right to object: Object to processing based on legitimate interest or for direct marketing purposes.

• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).