Privacy policy
SIA What Else is the controller of the personal data we process when you visit whatelse.lv or get in touch with us. This page explains what data we process, why, how long we keep it and what your rights are.
Controller and contact
- Legal name
- SIA What Else
- Registration number
- 40203758415
- Location
- Riga, Latvia
- Phone
- +371 29 131 310
- Write to us
- Contact form
Enquiries
When you fill in the contact form, we receive your name, email address, phone number (if you give one) and your message. The form sends the enquiry to our mailbox by email; the website does not store it in a database. If you call us, we use your phone number and what you tell us in the same way.
We use these details only to answer your enquiry, clarify the scope of work and prepare an offer. If we sign a contract, we also use them to carry it out.
To protect the form from abuse, the server briefly keeps your IP address in memory and limits how many enquiries one address can send. The IP address is not attached to the enquiry, is not written to a database and is deleted automatically within two hours at most.
Visit statistics (Google Analytics)
If you press Accept in the cookie banner, the site loads Google Analytics 4. It shows us which pages are viewed and for how long, on which devices and browsers, where visitors come from and roughly from which country or city. We use this only to understand what is useful to visitors and to improve the site.
Until you choose, Google Analytics is not loaded at all, and after Reject it is not loaded until you change your choice. We use Google's consent mode in its basic form, with ad storage, ad user data and ad personalisation always denied: the statistics are never used for advertising.
Google Analytics 4 does not log or store IP addresses. The service is provided by Google Ireland Limited, and the statistics are kept for no longer than 14 months.
Videos from YouTube
Some pages show a YouTube video. Until you press the play button, you only see a picture from our own server, and nothing is sent to Google.
When you press play, the YouTube player loads from youtube-nocookie.com. Google then receives your IP address and browser details and may store data in your browser under its own terms.
Technical logs
The site runs with a hosting provider whose servers are in the European Union. Like any web server, it briefly records the IP address, the time of the request, the page opened and browser details in technical logs. These records keep the site secure and help us find errors and attacks; they are deleted automatically after a short time.
Legal bases
The General Data Protection Regulation (GDPR) sets the legal bases for processing. We rely on these:
- Enquiries, preparing an offer and carrying out a contract: Article 6(1)(b) GDPR, steps taken at your request before a contract and the performance of the contract.
- Technical logs and protecting the form: Article 6(1)(f) GDPR, our legitimate interest in keeping the site secure and available.
- Visit statistics: Article 6(1)(a) GDPR, your consent, given with Accept and withdrawable at any time.
- YouTube videos: the same point (a), your consent, given by pressing the play button.
- Accounting records once a contract exists: Article 6(1)(c) GDPR, our legal obligations.
Cookies and browser storage
Until you choose, the site sets no cookies at all. There is no language cookie: the language is part of the address (/lv/, /ru/, /en/).
The Google Analytics cookies _ga and _ga_<ID> are set only after Accept and last up to two years. If you press Reject or withdraw consent later, the site deletes them at once. Your choice itself is kept not in a cookie but in your browser's local storage (localStorage) for 365 days; after that the banner asks again.
There are no other cookies, and we show no advertising. The Instagram and Facebook links are plain links: these networks load nothing until you open them.
You can change your choice at any time with Cookie settings at the bottom of every page or with the button below.
What is stored in your browser
- _ga
- Google Analytics cookie, only after Accept. Tells visitors apart by a random ID. Kept up to 2 years.
- _ga_<ID>
- Google Analytics cookie, only after Accept. Keeps the state of the visit. Kept up to 2 years.
- we-consent-v1
- An entry in your browser's local storage, not a cookie. Remembers whether you accepted or rejected statistics. Kept 365 days.
Who receives the data
Only the people on our team who need your data for their work see it. We pass data to public authorities only where the law requires it. We do not sell personal data or pass it on for advertising.
When you play a YouTube video, Google receives data as an independent controller under its own privacy policy.
These service providers process data on our behalf:
- Our hosting provider, with servers in the European Union: the website, the contact form and the technical logs.
- Our email provider: delivering enquiries and keeping them in our mailbox.
- Google Ireland Limited: visit statistics, only with your consent.
Transfers outside the EEA
Google Ireland Limited may transfer statistics data to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. The same applies to the YouTube player once you start it.
If any other service provider were ever to transfer data outside the European Economic Area, we would allow it only with the safeguards set out in Chapter V of the GDPR.
How long we keep data
We keep data only as long as the purpose we collected it for requires:
- Enquiries: until we have answered and prepared an offer. If no contract follows, we delete them within 12 months of the last contact.
- Contract and accounting data: as long as accounting and contract law require.
- Google Analytics statistics: no longer than 14 months.
- Your cookie choice: 12 months (365 days), then we ask again.
- Google Analytics cookies in your browser: up to 2 years, unless you delete them earlier or withdraw consent.
- The IP address used to protect the form: in server memory only, no longer than 2 hours.
- Technical logs: briefly, then they are deleted automatically.
Your rights
Under the GDPR you have these rights:
- Access to your personal data and a copy of it.
- Rectification of inaccurate data.
- Erasure of your data.
- Restriction of processing.
- Objection to processing based on our legitimate interest.
- Portability: receiving the data you gave us in a structured, machine-readable format.
- Withdrawal of consent at any time, without affecting the lawfulness of processing before it.
How to use your rights
Call us on +371 29 131 310 or write to us through the contact form. We will reply without undue delay and within one month at the latest, and we may ask you to confirm your identity.
If you believe we process your data wrongly, you can lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv).
Automated decisions
We make no decisions based solely on automated processing, including profiling, that would have legal or similarly significant effects on you.
Changes to this policy
We will update this policy when the way the site works, our service providers or the law change. The date the current version takes effect is shown at the top of this page.