Privacy

Bedrock SIA, reg. no. 40203768377, Mūkusalas iela 25-8, Rīga, LV-1004, is the controller of the personal data described here, except where Cloudflare acts as a controller, as set out below. Questions go to office@bedrock.lv.

When you visit, the host processes your IP address and request details to deliver the pages and keep the site secure. The legal basis is Bedrock’s legitimate interest in running a secure site (GDPR Art. 6(1)(f)).

If you write to Bedrock, your address and message are used to reply. The legal basis is legitimate interest in answering correspondence or, where you are discussing a contract, steps before a contract (Art. 6(1)(f) and (b)). Where a law requires an email to be kept, the basis is that legal duty (Art. 6(1)(c)).

No law or contract requires you to give Bedrock any data. Your browser has to send your IP address for the pages to load, so the site cannot be read without it. Bedrock cannot reply to a message without your address.

The host, Cloudflare, Inc., and Google Cloud EMEA Limited. Cloudflare and Google may transfer data to the United States under the EU-U.S. Data Privacy Framework, with standard contractual clauses as the fallback. Write to the email address above for a copy of the clauses.

Cloudflare handles the logs of your visit for Bedrock, and says it is a controller of other personal data it collects from visitors. Its privacy policy is at cloudflare.com/privacypolicy.

Cloudflare’s terms keep server logs until they are no longer needed to provide the service, and at most until Bedrock’s agreement with Cloudflare ends. Emails are deleted 24 months after the matter ends, unless accounting or other law requires them to be kept longer.

You may ask for access to your data, and for its correction, erasure, restriction or portability. You may complain to the Latvian data protection authority, Datu valsts inspekcija.

You may object at any time, on grounds relating to your situation, to processing based on legitimate interest.

Bedrock makes no decisions about you based solely on automated processing, and does not profile you. Cloudflare’s network automatically blocks traffic it reads as malicious.