Privacy policy
Updated:
This policy explains what data the website https://rozensteins.lv/ processes and what I do with it. In short: analytics tools and their cookies run only if you agree in the cookie banner; without consent only the cookies the site needs to work are used. Personal data such as your name and email is processed only if you fill in the contact form or email me.
Controller
Reinis Rozenšteins, Ropažu iela 14K-1 - 26, Rīga, Latvia, LV-1039
Email: reinis@rozensteins.lv, phone: +371 25925427
Cookies and consent
On your first visit the site shows a cookie banner (Cheklet) where you choose which cookie categories you accept. Until you agree, analytics tools set no cookies. You can change or withdraw your choice at any time with the cookie icon in the bottom-left corner of the page.
- Necessary — always on, the site does not work without them.
cp_consent(30 days) stores your cookie choice. Cloudflare security cookies (for example__cf_bm, 30 minutes) may be set to protect against bots. - Performance (analytics) — only with your consent. They help me understand how visitors use the site so I can improve it.
- Functionality — not used by the site at the moment.
Cloudflare’s server logs may briefly record technical information (IP address, requested page, browser, time) needed to run the site and protect it from abuse.
Analytics
Analytics tools are loaded by Google Tag Manager. It sets no cookies itself and starts the tools only after you consent to performance cookies (Google Consent Mode). With your consent the site uses:
- Google Analytics 4 (Google) — visit statistics: pages viewed, clicks, approximate location (country/city), device and browser. Cookies
_gaand_ga_HDLDWZYV4X, up to 13 months. - Microsoft Clarity (Microsoft) — anonymised session recordings and heatmaps (movement, clicks, scrolling; Clarity masks typed text). Cookies
_clck(1 year) and_clsk(1 day). - Hotjar (Hotjar Ltd.) — click and scroll heatmaps. Cookies
_hjSessionUser_*(1 year),_hjSession_*and other_hj*cookies (up to 30 minutes). - Ahrefs Web Analytics (Ahrefs) — cookieless visit statistics.
Legal basis: your consent. If you decline, the site works fully, just without analytics.
Contact form
If you fill in the contact form, the following data is processed: name, email address, project type, approximate budget (if given), the message, and your IP address for the anti-spam check.
The security check (Cloudflare Turnstile) runs as soon as the contact page loads, not only when the form is sent: it processes your IP address and browser/device signals on Cloudflare’s server (challenges.cloudflare.com) to tell people from bots.
Purpose: to reply to your message and discuss possible work together. Legal basis: taking steps at your request before entering into a contract, and my legitimate interest in replying to a message you sent.
The data is not stored in a database on the site. The message is sent to my work messaging tool (Slack), and I keep it as long as it is needed for the conversation or the work, but no longer than 2 years after our last contact.
Who receives the data
I do not use your data for marketing, sell it or pass it on to others. It is processed only by these service providers:
- Cloudflare — hosting, contact form handling and the Turnstile security check (decides whether the form is sent by a person; the IP address is used for this).
- Slack — delivering and storing form messages in my work messaging tool.
- Cheklet — running the cookie banner and recording your consent.
- Google (Google Tag Manager, Google Analytics 4), Microsoft (Clarity), Hotjar and Ahrefs — analytics, only with your consent.
These services may also process data outside the EU/EEA under standard contractual clauses or equivalent safeguards.
If you email me, the message is processed by my email provider like any other correspondence.
Your rights
You can withdraw your cookie consent at any time (cookie icon at the bottom of the page), and you can ask for access to your data, its correction or deletion, restrict its processing or object to it. Write to reinis@rozensteins.lv. If you believe your rights have been violated, you can complain to the Data State Inspectorate of Latvia (www.dvi.gov.lv).
Security
The site and form run over an encrypted connection (HTTPS). No security measure is absolute, so please do not send sensitive information (passwords, payment card details) through the form.
Changes
I may update this policy. The current version is always on this page, with the update date shown at the top.