Legal
Privacy Policy
This policy explains what personal data latvianbluesband.lv collects, why, and what rights you have over it. We've kept it plain — no legal boilerplate that doesn't apply to us.
1. Who We Are
Latvian Blues Band is a music group based in Latvia. We are the data controller for personal data collected through this website.
Data controller: Viesturs Grapmanis
Email for privacy requests: info@itvgsolutions.lv
Website: latvianbluesband.lv
We do not have a Data Protection Officer (DPO) — our processing is not large-scale or systematic in a way that requires one under GDPR Article 37.
2. What Data We Collect
2.1 Newsletter (Mailchimp)
When you subscribe to our newsletter, we collect your email address. Mailchimp — our email service provider — also automatically records your signup timestamp, IP address, approximate location, and email engagement metrics (whether you open emails or click links).
This is the only form on the site. Subscription is entirely voluntary.
2.2 Website Analytics (Google Analytics 4)
Google Analytics is not yet active on this site. When it is enabled, GA4 will collect: approximate location (city-level, derived from your IP address — full IPs are not stored), device type, browser, pages visited, session duration, and how you arrived at the site. This data is anonymous and aggregate — we cannot identify you individually from it.
GA4 uses cookies. We will implement a cookie consent banner before activating analytics — it will not run without your explicit opt-in.
2.3 Hosting Logs (Netlify)
Our hosting provider, Netlify, automatically logs standard server access data including IP addresses and browser information. This is a normal part of operating any website and is handled by Netlify, not us directly.
2.4 Email Contact (Booking)
The booking link on this site opens your own email application via a mailto: link. We collect nothing through this — your email client handles it entirely.
2.5 Embedded Media (Spotify, YouTube)
This site includes Spotify and YouTube players. These embeds are loaded from Spotify's and Google's servers. When you interact with them, those services may set their own cookies and collect usage data under their own privacy policies. We have no control over or access to that data.
3. Why We Collect It (Legal Basis)
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Newsletter email + engagement | Sending news, show announcements, and updates | Consent — Art. 6(1)(a) |
| Analytics data (when active) | Understanding how people use the site so we can improve it | Consent — Art. 6(1)(a) |
| Hosting server logs | Operating, securing, and troubleshooting the website | Legitimate interest — Art. 6(1)(f) |
You can withdraw consent for the newsletter at any time using the unsubscribe link at the bottom of every email. You can withdraw consent for analytics by declining or withdrawing cookie consent through the cookie preference tool (available when GA4 is activated).
4. Who We Share Data With
We do not sell your data. We share it only with the service providers necessary to run this site.
4.1 Mailchimp (Intuit Inc., USA)
Your newsletter subscription is stored and managed by Mailchimp. Mailchimp acts as a data processor on our behalf under a Data Processing Addendum (DPA) that incorporates Standard Contractual Clauses. Mailchimp also inserts tracking pixels in emails to record open rates — this is standard email marketing practice and covered by the consent you give when subscribing.
4.2 Google LLC (USA)
When Google Analytics 4 is active, usage data is sent to Google and processed under Google's Data Processing Terms. Google acts as a data processor.
4.3 Netlify Inc. (USA)
This website is hosted on Netlify, which processes server access logs as part of normal hosting operations. Netlify acts as a data processor under their Data Processing Agreement, which includes Standard Contractual Clauses.
4.4 Spotify and YouTube
Embedded players load content directly from Spotify's and Google's servers. Any data collected through those embeds is governed by their own policies, which we link to above.
5. International Transfers
All three of our service providers (Mailchimp, Google, Netlify) are headquartered in the United States. Transfers of your personal data to the US are protected by two mechanisms:
- EU–US Data Privacy Framework (DPF): Both Mailchimp (Intuit) and Google are certified under the DPF, which the European Commission recognized as providing adequate protection in its July 2023 adequacy decision. The EU General Court upheld this decision in September 2025. An appeal is pending at the Court of Justice of the EU (Case C-703/25 P) — the outcome remains uncertain.
- Standard Contractual Clauses (SCCs): All three processors have SCCs incorporated into their Data Processing Agreements as a backup transfer mechanism, valid regardless of the DPF's status.
6. How Long We Keep Your Data
| Data | Retention period |
|---|---|
| Newsletter subscription | Until you unsubscribe (you can do this at any time via any email we send) |
| Analytics data | 14 months (Google Analytics default, as configured in our GA4 property settings) |
| Hosting server logs | Per Netlify's operational retention policy |
7. Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data (the "right to be forgotten")
- Restriction — ask us to pause processing while a dispute is resolved
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — for the newsletter, use the unsubscribe link in any email; for analytics, use the cookie preference tool
To exercise any of these rights, email us at: info@itvgsolutions.lv. We will respond within one month as required by GDPR.
You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, DVI) — the supervisory authority for data protection in Latvia:
Elijas iela 17, Riga, LV-1050, Latvia
8. Cookies
A cookie is a small text file stored in your browser. Here is what this site sets and why:
| Source | Purpose | Status |
|---|---|---|
| Google Analytics 4 | Site usage analytics (pages visited, session data, traffic source) | Not yet active — will require your explicit opt-in consent when enabled |
| Spotify | Music player functionality | Only set when you interact with the Spotify player |
| YouTube (Google) | Video player functionality | Only set when you interact with the YouTube player |
Analytics cookies are non-essential under the ePrivacy Directive and cannot be loaded without your prior consent. We will implement a cookie consent tool before activating Google Analytics.
You can manage or delete cookies at any time through your browser settings. Removing cookies does not affect your ability to use this site.
9. Children
This website is not directed at children under 13. We do not knowingly collect personal data from anyone under that age. If you believe a child has subscribed to the newsletter without appropriate consent, please contact us at the email above and we will delete their data promptly.
10. Changes to This Policy
We may update this policy when our data practices change or when legal requirements require it. The "Last updated" date at the top of this page will reflect any revisions. For material changes, we will add a note to the website.
Continued use of the site after a policy update does not constitute consent to the changes — please review the policy periodically.