DATA PROTECTION & PRIVACY

Privacy Policy

This Privacy Policy describes how Neat Production SIA collects, uses, stores, and protects personal data when you visit our website, submit inquiries, or engage our video production services. We process personal data in compliance with the EU General Data Protection Regulation (GDPR).

Last Updated: September 3, 2026

1. Data Controller Information

The entity responsible for the processing of your personal data as data controller is:

Neat Production SIA
Registration No: 43603083777
VAT No: LV43603083777
Address: Pasta iela 71 - 6, Jelgava, LV-3001, Latvia
Email: info@neat-production.com
Phone: +34 600 837 546

2. Personal Data We Collect

Depending on your interaction with our website and services, we may collect and process the following categories of personal data:

  • Inquiry & Contact Data: Full Name, Company Name, Corporate Email Address, Phone Number (if provided), Production Location preferences, Timeline, Budget Range, and Project Overview message content submitted via our contact form.
  • Technical & Usage Data: IP address, browser type, operating system, device information, referring URLs, pages visited, and interaction data collected through cookies (where consented).
  • Production & Communications Data: Communications, feedback, contracts, invoices, appearance releases, and talent agreements processed during project execution.

3. Purposes & Legal Basis for Processing

We process your personal data for the following specific purposes and legal bases under GDPR:

  • Responding to Enquiries & Project Qualification: To evaluate production scope, provide estimates, schedule consultations, and manage client communications (Legal Basis: Art. 6(1)(b) GDPR - Performance of pre-contractual measures, and Art. 6(1)(f) - Legitimate interest in conducting business inquiries).
  • Contract Execution & Video Production: To perform pre-production, filming, editing, talent management, billing, and deliver final video assets (Legal Basis: Art. 6(1)(b) GDPR - Contractual performance).
  • Website Performance & Analytics: To understand traffic patterns, optimize video content delivery, and improve site security (Legal Basis: Art. 6(1)(a) GDPR - Consent for optional cookies, and Art. 6(1)(f) - Legitimate interest for essential performance).
  • Legal & Compliance Obligations: To comply with financial accounting, tax regulations, and legal directives (Legal Basis: Art. 6(1)(c) GDPR - Legal obligation).

4. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact & Proposal Inquiries: Retained for up to 24 months from last contact unless a commercial agreement is executed or deletion is requested.
  • Client & Accounting Records: Financial invoices and contractual documents are retained for 7 years to comply with Latvian tax and statutory accounting laws.
  • Analytics & Cookie Preferences: Cookie consent records are stored locally for up to 12 months; Google Analytics data is retained according to consented parameters (up to 14 months).

5. Third-Party Service Providers & Data Processors

We do not sell or rent personal data. We share data only with trusted third-party service providers bound by data processing agreements and strict confidentiality obligations:

  • Form Processing & Communications: Formspree Inc. (for secure submission of contact form inquiries).
  • Analytics & Performance: Google LLC (Google Analytics 4 - activated only upon explicit consent).
  • Hosting & Cloud Infrastructure: Web hosting, content delivery networks (CDNs), and encrypted cloud backup providers.

6. International Data Transfers

Where third-party service providers (such as Formspree or Google) process data outside the European Economic Area (EEA), such transfers are safeguarded through Standard Contractual Clauses (SCCs) approved by the European Commission or EU-U.S. Data Privacy Framework certification.

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you hold the following rights regarding your personal data:

  • Right of Access: Request confirmation and a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where legal grounds exist.
  • Right to Restriction of Processing: Request temporary restriction of data processing.
  • Right to Data Portability: Receive your personal data in a structured, machine-readable format.
  • Right to Object: Object to data processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time for optional cookie consent or marketing without affecting prior lawful processing.

To exercise any of these rights, please email us at info@neat-production.com.

8. Right to Lodge a Complaint

If you believe our processing of your personal data infringes GDPR regulations, you have the right to lodge a complaint with a supervisory authority. In Latvia, the competent authority is the Data State Inspectorate (Datu valsts inspekcija - DVI) (www.dvi.gov.lv), or your local EU supervisory authority.

9. Data Security Measures

We implement robust technical and organizational security measures, including SSL/TLS encryption for all data in transit, restricted administrative access, encrypted storage, and regular security audits to protect your data against loss, misuse, or unauthorized access.

10. How to Contact Us Regarding Privacy

For questions, requests, or privacy inquiries, please contact our Data Protection Lead:

Neat Production SIA
Email: info@neat-production.com
Address: Pasta iela 71 - 6, Jelgava, LV-3001, Latvia