Privacy Policy
Effective from: 29 September 2026
Last updated: 29 September 2026
1. General Provisions
SIA “Film Angels Studio”, registration number 50003608501, registered address: Matīsa iela 8, Riga, LV-1001, Latvia (hereinafter referred to as the Controller), is the owner of the website angels.lv (hereinafter referred to as the Website) and the controller of personal data within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter referred to as the GDPR).
This Privacy Policy describes how the Controller collects, processes and protects the personal data of natural persons (hereinafter referred to as the Visitor or Data Subject) when the Visitor accesses and interacts with the Website.
Personal data are processed in accordance with the GDPR, the Personal Data Processing Law of the Republic of Latvia and other applicable laws and regulations of the Republic of Latvia.
Contact details for data protection matters:
Email: studio@angels.lv
Postal address: SIA “Film Angels Studio”, Matīsa iela 8, Riga, LV-1001, Latvia
2. Personal Data We Process
Depending on how the Visitor interacts with the Website, the Controller may process the following categories of personal data.
Data provided directly by the Visitor: none.
Data collected automatically: IP address, browser type and version, device type, operating system, date, time and duration of the Website visit, pages viewed and actions performed on the Website, referral source indicating how the Visitor reached the Website, and cookie information, as described in Section 7.
3. Purposes and Legal Bases for Processing
Personal data are processed only for specific, explicit and lawful purposes.
For the purpose of providing and selling goods and services, including courses, books and mentoring services, the Controller processes the Visitor’s name, surname, email address, telephone number, postal address and invoicing information. The legal basis for such processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.
For the operation, security, analysis and improvement of the Website, as well as for marketing activities, the Controller processes technical information, IP addresses and cookie data. Where processing is technically necessary, the legal basis is the Controller’s legitimate interests. For analytics and marketing cookies, the legal basis is the Data Subject’s consent.
For the resolution of disputes and the establishment, exercise or defence of legal claims, the Controller may process any relevant personal data on the basis of its legitimate interests.
4. Data Retention Periods
The Controller retains personal data for as long as necessary to fulfil the relevant processing purpose or for as long as required by applicable laws and regulations.
Website analytics data are retained in accordance with the terms of the relevant service provider. In the case of Google Analytics, data are retained for up to 14 months. Marketing cookie data are retained in accordance with the settings of the cookie management tool, but for no longer than 24 months.
Once the applicable retention period has expired, the data are deleted or anonymised.
5. Recipients and Processors of Personal Data
The Controller cooperates with third parties that act as data processors within the meaning of Article 28 of the GDPR and provide services necessary for the operation of the Website and the fulfilment of the Controller’s obligations. The processors have entered into data-processing agreements with the Controller to ensure an appropriate level of personal data protection.
Website hosting and content management services are provided by Wix.com Ltd. Servers may be located in the European Union and the United States.
Website analytics services are provided by Google Ireland Limited through Google Analytics. Data may be processed in the European Union and the United States. Transfers to the United States are carried out on the basis of Standard Contractual Clauses.
Advertising performance measurement and retargeting services are provided by Meta Platforms Ireland Limited through Meta Pixel. Data may be processed in the European Union and the United States. Transfers to the United States are carried out on the basis of Standard Contractual Clauses.
The Controller does not sell personal data or disclose personal data to third parties for their own marketing or other commercial purposes.
6. Transfers Outside the European Union and the European Economic Area
Some of the processors referred to in Section 5, including Google and Meta, may process personal data outside the European Union and the European Economic Area, primarily in the United States.
Such transfers are carried out on the basis of Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) of the GDPR or other appropriate safeguards that provide a level of protection for the transferred data equivalent to that guaranteed within the European Union.
7. Cookies
Cookies are small text files stored on the Visitor’s device by their browser when they visit the Website. Cookies help the Website function, remember the Visitor’s preferences and provide the Controller with information about how the Website is used.
The Website uses three categories of cookies:
-
Strictly necessary cookies enable the core operation of the Website, including session management and security. Consent is not required for these cookies.
-
Analytics cookies, including Google Analytics cookies, help the Controller understand how Visitors use the Website. These cookies are activated only after the Visitor has given consent.
-
Marketing and advertising cookies, including Meta Pixel cookies, support targeted advertising and measure the effectiveness of advertising campaigns. These cookies are activated only after the Visitor has given consent.
When visiting the Website for the first time, the Visitor is offered the opportunity to choose which categories of cookies to allow. Consent may be withdrawn or changed at any time using the cookie settings tool available on the Website or by changing the browser settings.
Most browsers allow users to manage cookies through their settings. Visitors may block or delete cookies; however, some functions of the Website may not operate properly as a result.
8. Rights of the Data Subject
Under the GDPR, the Data Subject has several rights in relation to their personal data.
Right of access under Article 15 of the GDPR: the right to obtain confirmation as to whether personal data concerning the Data Subject are being processed, to receive information about such processing and to obtain a copy of the data.
Right to rectification under Article 16 of the GDPR: the right to request the correction of inaccurate or incomplete personal data.
Right to erasure or the “right to be forgotten” under Article 17 of the GDPR: the right to request the deletion of personal data where there is no longer a lawful basis for their processing.
Right to restriction of processing under Article 18 of the GDPR: the right to request that processing be restricted in certain circumstances.
Right to data portability under Article 20 of the GDPR: the right to receive personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller.
Right to object under Article 21 of the GDPR: the right to object to processing based on the Controller’s legitimate interests and to object at any time to processing for direct-marketing purposes.
Right to withdraw consent under Article 7 of the GDPR: where processing is based on consent, the Data Subject may withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint with a supervisory authority: if the Data Subject believes that their rights have been infringed, they may contact the Data State Inspectorate of Latvia:
Elijas iela 17, Riga, LV-1050, Latvia
Email: pasts@dvi.gov.lv
Website: www.dvi.gov.lv
To exercise any of the rights described above, please contact the Controller by email at studio@angels.lv or send a written request by post to SIA “Film Angels Studio”, Matīsa iela 8, Riga, LV-1001, Latvia.
The Controller will respond within one month of receiving the request. Where a request is complex or the Controller has received a large number of requests, this period may be extended by a further two months. The Data Subject will be informed of any such extension.
To protect the Data Subject’s personal data, the Controller may request additional information to verify the Data Subject’s identity.
9. Commercial Communications
A commercial communication is any communication sent electronically for the direct or indirect promotion of goods or services.
The Controller does not send commercial communications.
10. Data Security
The Controller implements appropriate organisational and technical measures to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration or destruction.
These measures include access controls that limit access to authorised persons, encryption of data during transmission using SSL/TLS, regular security updates and the selection of cooperation partners based on their ability to ensure an appropriate level of data protection.
Despite the measures implemented, complete data security on the internet cannot be guaranteed. In the event of a personal data breach, the Controller will act in accordance with Articles 33 and 34 of the GDPR.
11. Protection of Children’s Data
The Website is not intended for persons under the age of 16. The Controller does not knowingly process personal data relating to such persons.
12. Changes to the Privacy Policy
The Controller reserves the right to update this Privacy Policy periodically to reflect changes in applicable laws and regulations or in the Controller’s activities.
The current version of the Privacy Policy is always available on the Website. In the event of material changes, the Controller will inform Data Subjects by email or by publishing a notice on the Website.
The date displayed at the beginning of this Privacy Policy indicates when it was last updated.
13. Jurisdiction and Applicable Law
This Privacy Policy and the processing of personal data are governed by the laws and regulations of the Republic of Latvia and the European Union, including the GDPR and the Personal Data Processing Law of the Republic of Latvia.
Any disputes shall first be resolved through negotiation. If an agreement cannot be reached, the dispute shall be submitted to a court of the Republic of Latvia in accordance with the laws of the Republic of Latvia.
14. Contact Information
Questions concerning this Privacy Policy or the processing of personal data may be sent to:
SIA “Film Angels Studio”
Matīsa iela 8
Riga, LV-1001
Latvia
Email: studio@angels.lv