Legal information
Privacy policy
1. Controller
SIA DECEMBER DESIGN, registration No. 40203445206, Ezermalas iela 5, Liepāja, LV-3401. Email: magic@december.lv, tel. +371 2000 99 81.
We have not appointed a data protection officer because the law does not require us to do so. For all data-related matters, please write to the email address above.
2. Scope of this policy
This policy applies to www.december.lv and to communications when you contact us using the enquiry form, by email or by telephone. The online shop shop.december.lv has a separate privacy policy.
3. Data we process
If you complete the enquiry form or write to us, we process:
- your first name and surname;
- your organisation and job title, if provided;
- your email address and telephone number, if provided;
- the content of your message and attached files;
- correspondence history and quotations we send you.
Please do not include your personal identification number, payment card details or other sensitive information in the form. This information is not needed to handle your enquiry.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR — Regulation (EU) 2016/679) |
|---|---|
| Responding to an enquiry and preparing a quotation | Article 6(1)(b) — steps prior to entering into a contract |
| Entering into and performing a contract | Article 6(1)(b) — performance of a contract |
| Maintaining business communications with existing and prospective clients, including future communications about similar projects | Article 6(1)(f) — our legitimate interests |
| Complying with accounting and tax requirements | Article 6(1)(c) — legal obligation |
| Defending our rights in a dispute | Article 6(1)(f) — our legitimate interests |
- Responding to an enquiry and preparing a quotation
- Article 6(1)(b) — steps prior to entering into a contract
- Entering into and performing a contract
- Article 6(1)(b) — performance of a contract
- Maintaining business communications with existing and prospective clients, including future communications about similar projects
- Article 6(1)(f) — our legitimate interests
- Complying with accounting and tax requirements
- Article 6(1)(c) — legal obligation
- Defending our rights in a dispute
- Article 6(1)(f) — our legitimate interests
Our legitimate interest is to maintain and develop business relationships with clients and business partners, and to protect our rights. We have assessed that this interest does not override your rights, as we process only the business contact details you provide to us.
5. Is providing data mandatory?
You provide data voluntarily. Without your name and at least one means of contact (email or telephone), we cannot respond to your enquiry or prepare a quotation.
We do not carry out automated decision-making or profiling.
6. Marketing communications
We send marketing emails only if you have given consent, or if you are our client and we are writing about similar goods or services. You can unsubscribe in each email with one click or by writing to magic@december.lv.
You have the right to object at any time to the processing of your data for direct marketing purposes. Once we receive your objection, we will stop sending you marketing communications.
7. Data recipients
We do not sell data or disclose it to third parties for marketing purposes. Only the following service providers may access it, processing data on our behalf and under a data processing agreement (Article 28 GDPR):
| Recipient category | Service provider |
|---|---|
| Website development, hosting and form data storage | Lovable and its subprocessors |
| Email service | Google Workspace |
- Website development, hosting and form data storage
- Lovable and its subprocessors
- Email service
- Google Workspace
We may also disclose data to public authorities where required by law.
8. Transfers outside the EEA
Some service providers or their subprocessors may process data outside the European Economic Area, for example in the USA. In such cases, transfers are based on a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses. You can request a copy of the safeguards by writing to magic@december.lv.
9. Retention periods
| Data | How long we retain it |
|---|---|
| Enquiries and correspondence where no contract is concluded | Up to 2 years after the last contact |
| Contracts and related correspondence | For the duration of the contract and until the limitation period for claims expires |
| Accounting documents | For as long as required by the Accounting Law |
| Data for marketing communications | Until you withdraw consent or object |
- Enquiries and correspondence where no contract is concluded
- Up to 2 years after the last contact
- Contracts and related correspondence
- For the duration of the contract and until the limitation period for claims expires
- Accounting documents
- For as long as required by the Accounting Law
- Data for marketing communications
- Until you withdraw consent or object
When the retention period ends, we delete or anonymise the data.
10. Cookies
The website does not use advertising or marketing cookies. The hosting service sets two technical cookies: __dpl (ensures you see the correct version of the website) and session-id (session identifier). Fonts are loaded from Google Fonts, so your browser sends your IP address to Google. If we introduce analytics or marketing cookies, we will use them only with your consent, which you can withdraw at any time.
11. Security
Only employees who need the data for their work can access it. We use an encrypted connection (HTTPS), passwords and restricted access rights.
12. Your rights
You have the right to:
- access your data and receive a copy;
- request correction of inaccurate data;
- request erasure of data;
- request restriction of processing;
- object to processing based on our legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time where processing is based on it. This does not affect the lawfulness of processing before withdrawal.
Send your request to magic@december.lv. We will respond within one month. If necessary, we will ask you to confirm your identity.
If you believe we are processing your data incorrectly, you may lodge a complaint with the Latvian Data State Inspectorate (www.dvi.gov.lv) or the data protection authority in the EU country where you live or work. We recommend contacting us first — we are likely to resolve the matter more quickly.
13. Changes
We may update this policy, for example if service providers or legislation change. The current version is always available on this page.
Last updated: 21.10.2026