Privacy Policy

Last updated: February 26, 2026

1. Data Controller

SIA "Interactive Media Spot" (hereinafter "SpotlightSignage", "we", "us") is the data controller responsible for your personal data. We are registered in the Republic of Latvia and operate in accordance with the General Data Protection Regulation (GDPR) and Latvian data protection laws.

2. Personal Data We Collect

We collect the following personal data when you use our services:

• Rental application data: business name, registration number, VAT number, contact person name, email address, phone number.
• Contact form data: name, business name, email address, phone number, message content.
• Technical data: IP address, browser type, and device information collected automatically when you visit our website.

3. Purpose of Data Processing

We process your personal data for the following purposes:

• Processing and responding to rental applications.
• Preparing and managing rental contracts.
• Providing customer support and responding to inquiries.
• Invoicing and payment processing.
• Complying with legal obligations (accounting, tax reporting).
• Protecting against spam and abuse (via reCAPTCHA).

4. Legal Basis for Processing

We process your data based on:

• Contract performance: processing necessary to fulfill our rental agreement with you.
• Legitimate interest: responding to inquiries, improving our services, and protecting against fraud.
• Legal obligation: complying with accounting and tax laws.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Payment processors: for processing payments (e.g., Stripe).
• Google reCAPTCHA: for spam protection. Google's privacy policy applies to reCAPTCHA usage.
• Email service providers: for sending transactional emails.
• Legal authorities: when required by law.

6. Data Retention

We retain your personal data for the duration of our business relationship and for the legally required period thereafter:

• Contract and invoicing data: 5 years after the end of the contract (as required by Latvian accounting laws).
• Contact form inquiries: 1 year after the inquiry is resolved.
• Technical logs: up to 12 months.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data we hold.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija).

8. Cookies

Our website uses only essential cookies required for the website to function properly. We do not use tracking or advertising cookies. Google reCAPTCHA may set its own cookies as part of the spam protection service.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure server infrastructure, and access controls.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

11. Contact

For questions about this Privacy Policy or to exercise your data protection rights, please contact us:

• Email: info@spotlightsignage.lv
• SIA "Interactive Media Spot", Riga, Latvia