How the committee handles personal data of visitors and partners

The data controller is Halal Latvia SIA, the operating legal entity of the committee. Details are available in the public Commercial Register of Latvia.

• Legal entity: Halal Latvia SIA, LV 40003917168.
• Address: Ūnijas iela 70 k-1 – 2, Rīga, LV-1084, Latvia.
• Contact channel: the website's contact form.

We work with a minimum data set. We do not collect special categories (religion, health, biometrics) without a separate legal basis.

• Contact form: name, email, message; phone is optional.
• Website technical data: IP address, device type, interface language.
• Analytics: page views and actions on the site, recorded by Rybbit without cookies (see §08).

Processing is carried out strictly under Article 6 GDPR and Latvian national law.

• Answering your inquiry – pre-contractual steps (Art. 6(1)(b) GDPR).
• Legal obligations of the operator (Art. 6(1)(c) GDPR).
• Legitimate interests – site security and statistics (Art. 6(1)(f) GDPR).

Data is kept no longer than needed for the purpose and the periods set by Latvian law.

• Form inquiries: up to 2 years after the last contact.
• Website technical logs: up to 12 months.
• Analytics data: only as long as needed for analysis, then deleted (Art. 5(1)(e) GDPR).

We do not sell personal data. Transfers happen only on a legal or contractual basis.

• Technical contractors (hosting, email) – under a data protection agreement.
• Latvian state authorities – upon lawful request.

Every individual whose data we process has a defined set of rights.

• Right of access to your data.
• Right to rectify inaccurate data.
• Right to erasure if no other legal ground to retain applies.
• Right to restrict processing.
• Right to object to processing based on legitimate interests.
• Right to lodge a complaint with Datu valsts inspekcija (DVI).

We apply organisational and technical safeguards: access controls, audit logs, channel encryption and backups.

• Security incidents are logged and notified to DVI within 72 hours where there is risk to data subjects.
• This policy may be updated; the date of the current edition is shown above.

We measure visits with Rybbit, open-source web analytics software. It runs on a dedicated server in the EU that is operated for us (st.eclectie.ch). We use no third-party analytics service. Analytics data does not go to Google or any other third party, and we do not use it for advertising.

Rybbit sets no cookies and stores nothing on your device. The site itself uses one cookie, NEXT_LOCALE, to remember your interface language. It is deleted when you close the browser and is not used for analytics.

• On each page view we collect the page address and query parameters, page title, referring page, browser and version, operating system and version, device type, screen size and language. From the IP address we derive approximate location (country, region, city, time zone and coordinates) and the network operator.
• We also collect page load performance measurements, JavaScript errors, clicks on buttons (with the button's label) and outbound links (with the link's address and text), and form interactions (the form's name, target address, method and number of fields, and each field's name and type). Rybbit never collects the text you type into a form.
• On guide pages we also record which guide and section you read, how far down a page you scroll, and which links, table-of-contents entries and FAQ questions you open. These events carry only the guide's address, a section number, a position or a short code and counts, never the text you read.
• The Rybbit script checks a few browser characteristics to tell automated traffic from real visitors and sends only two numbers: a score and a code showing what the checks found. The server also checks the request headers, the network the IP address belongs to and how often requests arrive.
• To count visitors, the server derives a short identifier from a hash of your IP address and the names of your browser, operating system and device. The IP address itself is not stored. The identifier stays the same while you keep the same IP address and browser, and it is the same on other websites measured with this tool. It is not linked to a name or account, and no cross-site profiles are built.
• The legal basis is our legitimate interest in understanding how the site is used and keeping it working (Art. 6(1)(f) GDPR). You may object to this processing (Art. 21 GDPR).
• If your browser sends Global Privacy Control or Do Not Track, nothing is recorded. You can also block requests to st.eclectie.ch with a browser extension or similar tool without affecting the site.
• Analytics data is kept only as long as needed for this purpose and is then deleted (Art. 5(1)(e) GDPR).