How the committee handles personal data of visitors and partners

The data controller is Halal Latvia SIA, the operating legal entity of the committee. Details are available in the public Commercial Register of Latvia.

• Legal entity: Halal Latvia SIA, LV 40003917168.
• Address: Ūnijas iela 70 k-1 – 2, Rīga, LV-1084, Latvia.
• Contact channel: the website's contact form.

We work with a minimum data set. We do not collect special categories (religion, health, biometrics) without a separate legal basis.

• Contact form: name, email, message; phone is optional.
• Website technical data: IP address, device type, interface language.
• Analytics: aggregated visitor statistics via cookies.

Processing is carried out strictly under Article 6 GDPR and Latvian national law.

• Answering your inquiry – pre-contractual steps (Art. 6(1)(b) GDPR).
• Legal obligations of the operator (Art. 6(1)(c) GDPR).
• Legitimate interests – site security and statistics (Art. 6(1)(f) GDPR).
• Consent – for statistical cookies (Art. 6(1)(a) GDPR).

Data is kept no longer than needed for the purpose and the periods set by Latvian law.

• Form inquiries: up to 2 years after the last contact.
• Website technical logs: up to 12 months.
• Analytics cookies: according to your consent settings.

We do not sell personal data. Transfers happen only on a legal or contractual basis.

• Technical contractors (hosting, email, analytics) – under a data protection agreement.
• Latvian state authorities – upon lawful request.

Every individual whose data we process has a defined set of rights.

• Right of access to your data.
• Right to rectify inaccurate data.
• Right to erasure if no other legal ground to retain applies.
• Right to restrict processing.
• Right to object to processing based on legitimate interests.
• Right to lodge a complaint with Datu valsts inspekcija (DVI).

We apply organisational and technical safeguards: access controls, audit logs, channel encryption and backups.

• Security incidents are logged and notified to DVI within 72 hours where there is risk to data subjects.
• This policy may be updated; the date of the current edition is shown above.