Last updated: 12 March 2026
1. Data controller
The data controller is Krimuldas Novada Bērnu Un Vecāku Atbalsta Biedrība, registration number 40008183980, registered address Kurzemes prospekts 1b, Kurzemes rajons, Rīga, LV-1067, Latvia. For any question about your data, write to torie-dixonxuxx@gmx.com or call +371 28 333 352.
We have not appointed a Data Protection Officer, as we are not required to do so. Data protection questions are handled by the board member responsible for professional standards.
2. What data we process
Enquiries and correspondence: name, e-mail address, telephone number and the content of your message.
Members: name, personal contact details, date of joining, membership fee records and meeting attendance.
Programme participants: name, contact details, the ages of children participating, and the information you choose to share about your family's situation.
Counselling programme: the fact of referral and the number of sessions funded. The content of counselling sessions is held by the treating psychologist under professional confidentiality and is not disclosed to the association.
Volunteers: name, contact details, role, and confirmation that the required criminal record statement has been provided.
Donors: name, amount, date and payment reference as recorded in our accounts.
Website: our site does not use advertising or profiling cookies. Server logs of our hosting provider may record IP addresses for security purposes.
3. Purposes and legal grounds
Answering enquiries and providing support — performance of a contract or steps taken at your request, and our legitimate interest in responding (Art. 6(1)(b) and (f) GDPR).
Managing membership and governance — performance of the membership relationship and compliance with the Law on Associations and Foundations (Art. 6(1)(b) and (c)).
Delivering programmes for children — your consent, and the child's vital interests where a safeguarding concern arises (Art. 6(1)(a) and (d)).
Accounting and donation records — a legal obligation under Latvian accounting and tax law (Art. 6(1)(c)).
Where we process special category data, such as information about health or a family crisis, we do so only with your explicit consent, or where processing is necessary to protect the vital interests of a child (Art. 9(2)(a) and (c) GDPR).
4. Sharing and recipients
We do not sell or rent personal data and we do not share it for marketing purposes.
Data may be shared with: contracted psychologists and mediators providing the service to you; the parish social service or the Orphan's and Custody Court, where required by law to protect a child; our accountant and auditor; and the State Revenue Service and Register of Enterprises where reporting is required.
Our e-mail and hosting providers process data on our behalf as processors within the European Economic Area or under an adequacy decision or standard contractual clauses.
5. Retention
Enquiry correspondence: 12 months from the last contact.
Programme participation records: 3 years after the end of participation.
Membership records: for the duration of membership and 5 years afterwards.
Accounting documents, including donation records: 5 years, or 10 years where required by Latvian accounting law.
Safeguarding incident records: 10 years, as this may be necessary for the protection of a child.
6. Your rights
You have the right to access your data, to rectification, to erasure, to restriction of processing, to object to processing based on legitimate interests, and to data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any right, write to torie-dixonxuxx@gmx.com. We reply within one month. If you are not satisfied, you may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050.
7. Children's data
Personal data of a child under 18 is processed only with the consent of a parent or legal guardian, except where an immediate safeguarding response is required. Photographs of children are taken and published only with separate written parental consent, which may be withdrawn at any time, after which we remove the image from our own channels.
8. Security and changes
Access to personal data is limited to the coordinators and board members who need it. Records are kept in access-controlled digital storage; paper records are held in a locked cabinet at the office.
We may update this policy. The date of the last revision is shown at the top of this page, and material changes are announced to members at the general meeting.