Privacy Policy

Last updated: 10 November 2026.

This privacy policy explains how the “Kalniem Pāri” guest house processes your personal data when you visit kalniempari.com, contact us or book our services. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the laws of the Republic of Latvia.

1. Controller

The data controller is SIA “Upe AK” (operating the “Kalniem Pāri” guest house), registration No. 42103058177, VAT No. LV42103058177, legal address: Alejas iela 24-22, Liepāja, LV-3401, Latvia.
Guest house address: “Mazgrantiņi”, Nīgrande parish, Saldus municipality, LV-3898, Latvia.
Data protection contact: info@kalniempari.com, +371 29285496.

2. Data we process

  • Contact data – name, phone number, email address and message content when you contact us by phone, email or social media.
  • Booking data – dates of stay, number of guests, selected services (e.g. event hall, catering, sauna, hot tub), payment and invoice details.
  • Data required by law – data needed to meet accounting and other legal obligations (e.g. registration of foreign guests in tourist accommodation).
  • Technical data and cookies – IP address, browser and device information, pages visited (see section 7).

If you book via Booking.com, that platform is operated by Booking.com B.V., which processes your data under its own privacy policy; we receive only the data needed to fulfil your booking.

3. Purposes and legal basis

  • Answering enquiries and preparing offers – steps prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Processing bookings and providing services – performance of a contract (Art. 6(1)(b)).
  • Accounting, tax and other legal obligations (Art. 6(1)(c)).
  • Website operation, security and handling of claims – our legitimate interests (Art. 6(1)(f)).
  • Visitor statistics (Google Analytics) and displaying external content (Google Maps, YouTube, Instagram) – your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Recipients

  • Website hosting, caching and security providers (e.g. Cloudflare), IT support.
  • Google Ireland Ltd. / Google LLC (Google Analytics, Google Maps, YouTube) and Meta Platforms Ireland Ltd. (Instagram) – only with your cookie consent.
  • Booking.com B.V. – if you book via that platform.
  • Our accounting service provider and public authorities where required by law.

We do not sell your personal data and do not use it for automated decision-making.

5. Transfers outside the EU/EEA

Some providers (e.g. Google, Meta, Cloudflare) may process data outside the European Economic Area, including in the USA. Such transfers are based on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. Retention

  • Correspondence – up to 2 years after the last contact, unless needed longer for a booking or a claim.
  • Booking and accounting records – for the period required by law (e.g. the Latvian Accounting Law).
  • Cookies and statistics – according to each cookie’s lifetime and the service’s settings.

7. Cookies

We use necessary cookies (to run the website and remember your choice) and – only with your consent – statistics and external media cookies (Google Analytics, Google Maps, YouTube, Instagram). You can change your choice at any time with the cookie consent button in the corner of the website.

8. Third-party services and external links

To run the website and display its content we use the third-party services listed below. When they load, the provider may receive your IP address and browser information and, where applicable, set its own cookies. Processing by these providers is governed by their own privacy policies:

The website fonts (DM Sans, DM Serif Display) are served from our own server, so no data is sent to Google when they load.

The website contains links to external websites and social networks: Facebook, Instagram, Booking.com and Google Maps. These links lead to third-party sites that have their own privacy rules. We are not responsible for the content of those sites or for the personal data processing carried out there. When you click a social network link or button, that social network may process your data (for example, if you are logged in to it) – see the Facebook privacy policy and the Instagram privacy policy.

9. Your rights

You have the right to request access to your data, rectification or erasure, restriction of processing, to object to processing, to receive your data in a portable format, and to withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal). Send requests to info@kalniempari.com – we will reply within one month.

10. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access.

11. Right to lodge a complaint

If you believe your data is being processed unlawfully, please contact us first. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv).

12. Validity and changes to this privacy policy

The controller may amend or supplement this privacy policy at any time, for example when legislation or the services used on the website change. The current version is always published on this page.

Last updated: 10.11.2026.