Privacy policy

1. Who processes the data

The controller responsible for processing:

• Tetiana Bugai — a natural person, Latvia
• E-mail: tacunyasamarkina@gmail.com

Services are provided as the private practice of a natural person, without a legal entity. A postal address for official correspondence is provided on request to the e-mail above.

No separate data protection officer has been appointed: the scale of processing does not require one. For any question about processing, write to the e-mail above.

2. What data is collected

Through the request form you provide:

• your name;
• a phone number or WhatsApp;
• the date of the occasion — if you give it;
• the number of guests — if you give it;
• the type of occasion — if you choose one;
• a message — whatever you write in the free field.

The IP address and the time of submission are stored together with the request: this protects the form against automated abuse.

The web server keeps a technical access log. The IP address in it is masked as it is written — the full address never reaches the disk.

If you write directly on Telegram, Instagram, Facebook or by e-mail, the data processed is whatever you share in that conversation.

Special categories of data (health, beliefs and the like) are not collected. Please do not include them in the message field.

3. Why the data is needed and on what basis

• Replying to your request and discussing the service — steps taken at your request before entering into a contract, Article 6(1)(b) GDPR.
• Providing the service and settling payment — performance of a contract, Article 6(1)(b) GDPR.
• Protecting the site from spam and abuse — legitimate interest, Article 6(1)(f) GDPR.
• Keeping accounting and tax records — a legal obligation, Article 6(1)(c) GDPR.

There is no automated decision-making or profiling. No newsletters are sent. Data is not used for new purposes without a separate legal basis.

4. Is providing data mandatory

Filling in the form is voluntary. But without a name and a contact it is impossible to answer a request — that is the only way to reach you. The other fields are optional and help me estimate the work more precisely.

5. How long data is kept

• Requests that did not lead to work together — up to 12 months from the enquiry.
• Data from completed orders and related documents — for the periods set by Latvian law for accounting and tax records.
• The technical web server log — about two weeks, then it is overwritten.
• Messenger and e-mail correspondence — for as long as it is needed for communication, then deleted.

6. Who receives the data

Data is not sold and is not passed to third parties for their own purposes. Access is limited to the providers that keep the site and the communication running:

• Hetzner Online GmbH (Germany) — the server the site runs on; the data centre is in Finland;
• Telegram Messenger Inc. — if notifications about new requests are sent to the messenger;
• Google Ireland Limited (Gmail) — the mailbox that receives the messages.

Fonts and all other resources are served from our own server, so loading a page does not send your data to third parties.

Data is disclosed to public authorities only on a justified request, in the manner prescribed by law.

7. Transfers outside the EEA

The server and data storage are located in the European Economic Area. If an individual provider processes data outside it, the transfer is based on the European Commission's standard contractual clauses or on an adequacy decision.

8. Cookies and analytics

The site uses no advertising cookies and connects no third-party advertising systems. A consent banner is not required: consent is only needed for optional cookies, and there are none here.

To understand traffic, the site uses its own analytics system, Umami, installed on the same server (stats.tetableart.eu). It writes no cookies, assigns no identifier to visitors and shares no data with third parties. Only anonymous information about the visit is collected:

• the address of the page opened and the page it was reached from;
• the country (determined from the IP address; the address itself is not stored);
• device type, operating system, browser and language;
• the fact that a key button was pressed or the form was submitted — without the content of the request.

Statistics are collected on the basis of legitimate interest (Article 6(1)(f) GDPR): understanding which parts of the site are useful to visitors. This data cannot be linked to a specific person.

If Do Not Track is enabled in your browser, the visit is not counted at all.

Your browser may store technical information on its own — that is how browsers work, not a setting of this site.

9. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it;
• have inaccurate data corrected;
• request erasure of your data;
• restrict processing;
• object to processing based on legitimate interest;
• receive your data in a machine-readable format and pass it to another recipient;
• withdraw consent where processing was based on it — withdrawal does not affect the lawfulness of processing before it;
• lodge a complaint with the supervisory authority.

To exercise these rights, write to tacunyasamarkina@gmail.com. A reply is given within one month; in complex cases the period may be extended by a further two months, with notice of the reasons.

The supervisory authority in Latvia is the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, pasts@dvi.gov.lv, www.dvi.gov.lv. Before complaining it is worth contacting me first: most questions are resolved faster directly.

10. Security

The site runs over a secure HTTPS connection. Requests are stored in a database on a server with restricted access, and backups are made regularly. Access to the data is limited to those who need it to answer a request and provide the service.

11. Children

The services are intended for adults and children's data is not collected deliberately. If you share information about a child for a children's party, please give only what is needed to style the table.

12. Changes to this policy

This policy may be updated. The current version is always available on this page, with the date at the top. Material changes affecting your rights are communicated separately to those with whom there is ongoing correspondence or a contract.