Privacy policy

Who is responsible

SIA "Deverlin", registration no. 40203787255, Ozolciema iela 24 k-1 - 21, Rīga, LV-1058, Latvia, is the controller of your personal data. For anything related to privacy, email hello@deverlin.com.

When you contact us

When you send the contact form, we receive your name, email address, and whatever else you choose to tell us: company, preferred call time, the services you are interested in and your message. The form also sends your time zone and the page language so we can reply at a sensible time and in your language.

We use this only to reply to your enquiry and, if we end up working together, to prepare and carry out that work. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)). The same applies when you email us directly.

We keep enquiries for as long as we are in contact with you. If no cooperation follows, we delete them within 24 months of our last exchange. If we sign a contract, related correspondence is kept for as long as accounting and tax law requires.

Spam protection

The contact form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending it. To do this, Cloudflare processes technical data such as your IP address and information about your browser. Cloudflare states that Turnstile does not use this data for advertising and does not set tracking cookies. The legal basis is our legitimate interest in keeping the form free of spam (Art. 6(1)(f)).

The form also contains a hidden field and a timing check that help catch bots without any outside service.

Website analytics

We count visits with Umami, which we host ourselves on our server in Germany. Umami does not use cookies and does not identify or follow individual visitors: it records the page, the referring website, the browser, the device type and the country. Your IP address is used only at the moment of the visit to determine the country and is not stored. The legal basis is our legitimate interest in understanding which pages are useful (Art. 6(1)(f)).

Server logs

Like any website, our server records each request: IP address, date and time, the page requested, the browser and the response. We use these logs only to keep the site secure and to fix problems. Access logs are deleted after about five weeks and error logs after about ten weeks. The legal basis is our legitimate interest in running a secure website (Art. 6(1)(f)).

Cookies and local storage

The site does not set cookies. If you close the offer banner, your browser remembers that in its local storage so the banner stays closed. This is stored only on your device, is never sent to us, and you can clear it in your browser settings at any time.

Service providers

We use these providers to run the site. Each processes data only on our behalf and under a data processing agreement:

• Oracle Cloud Infrastructure: hosting of the website, its logs and our analytics, in Frankfurt, Germany.
• Zoho Corporation B.V. (Netherlands): Zoho Mail for our mailbox and ZeptoMail for delivering contact form messages, in Zoho’s EU data centre.
• Cloudflare, Inc. (USA): domain name service for deverlin.com and Turnstile spam protection. Cloudflare is certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing adequate protection.

Your rights

You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, restrict its use or transfer it to you in a portable format. You can also object to processing based on our legitimate interests. Email hello@deverlin.com and we will reply within one month.

If you believe we handle your data unlawfully, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv) or to the data protection authority where you live.

Changes to this policy

If we change how we process personal data, we will update this page and the date at the top.