Skip to content
Open menu

Privacy Policy

Last updated: June 28, 2026

1. General Information

This Privacy Policy describes how SIA "Bārs Shot Spot Kafe" (hereinafter – the Company) processes personal data obtained while operating the website and providing hospitality services, including table reservations and event-related services.

2. Data Controller

The controller of personal data is SIA "Bārs Shot Spot Kafe", address: Jauniela 19/1, Rīga, LV-1050, email: spotkafe@gmail.com.

3. What Personal Data We Process

We process only personal data that you provide directly or that arises during communication or service provision, including:

  • Name and contact information (phone number, email address)
  • Information provided when making a reservation or inquiry
  • Reservation details (date, time, number of guests, special requests)
  • Communication content (emails, contact form or booking form submissions)
  • Payment information, if a contract or paid event booking is concluded

4. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

  • Processing reservation requests and inquiries
  • Managing table bookings and event reservations
  • Communicating with guests regarding reservations and services
  • Providing hospitality and customer services
  • Responding to customer inquiries and requests
  • Complying with legal obligations, including accounting requirements
  • Improving website functionality and usage analytics (with consent)
  • Preventing fraud, automated abuse and spam in contact and booking form submissions

5. Legal Basis for Processing (GDPR Article 6)

Personal data is processed on the following legal bases:

  • Contract conclusion and performance – for managing reservations and providing services (GDPR Article 6(1)(b))
  • Legitimate interests – for communication with guests and customer support (GDPR Article 6(1)(f))
  • Legitimate interests – for website and booking system security, abuse prevention and request rate limiting (GDPR Article 6(1)(f))
  • Consent – for analytics and marketing cookies (GDPR Article 6(1)(a))

6. Cookies, Google Analytics, Meta Pixel and Microsoft Clarity

The website uses essential cookies that ensure the basic functionality of the website.

With the user's consent, the website may also use analytics and marketing cookies, such as:

  • Google Analytics 4 (GA4), to collect aggregated statistics about website visits and improve website performance;
  • Meta (Facebook) Pixel, to analyze user interactions and provide personalized advertising on Meta platforms such as Facebook and Instagram;
  • Microsoft Clarity, to record session replays and heatmaps for the purpose of improving user experience on the website.

These tools may process information about visited pages, user interactions on the website, as well as device and browser technical information. This information may be shared with service providers such as Google LLC, Meta Platforms Inc. and Microsoft Corporation.

More information about their privacy practices can be found at:

  • https://policies.google.com/privacy
  • https://www.facebook.com/privacy/policy
  • https://privacy.microsoft.com/privacystatement

Analytics and marketing cookies are used only after the user has given consent through the website cookie notice.

Users may withdraw or change their consent at any time through the website cookie settings, as well as by deleting cookies in their browser.

7. Server Logs and Website Security

The website server may automatically log technical information such as IP address, browser type, request time and visited pages. This information is used solely for website security, technical maintenance and troubleshooting.

To protect the contact and booking forms against bots and abuse, we use Cloudflare Turnstile and temporarily process technical data such as IP address, browser information, security check results and request frequency information.

8. Data Recipients

Personal data may be shared with third parties only when necessary for providing services or complying with legal requirements, including:

  • IT and website service providers;
  • Accounting service providers;
  • Cloudflare (for website hosting, security and Turnstile verification);
  • Resend (for delivering contact and booking form messages by email);
  • Analytics and marketing service providers, only after user consent;
  • Public authorities, where required by applicable law.

9. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected:

  • Reservation requests and communication data – for as long as necessary to manage reservations and resolve potential disputes;
  • Accounting data – according to legally required retention periods;
  • Analytics data – according to the configuration of analytics tools and only with user consent;
  • Security and rate-limiting data – temporarily and only for as long as necessary to protect the website against abuse.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.

11. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of your personal data;
  • restrict processing of your personal data;
  • object to processing based on legitimate interests;
  • request data portability;
  • withdraw consent at any time where processing is based on consent.

12. Complaints

If you believe that your personal data is processed in violation of the GDPR, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or another competent supervisory authority.

13. Contact Information

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact us at spotkafe@gmail.com.