Privacy policy

1. Controller

SIA “Habo Properties”. For personal data matters: jolanta@habo.lv.

2. Purposes and legal bases

We use enquiry data to respond and arrange viewings or consultations based on consent (GDPR Article 6(1)(a)). Property information and documents necessary to prepare and provide a requested service are processed for pre-contractual steps or performance of a contract (Article 6(1)(b)).

Access and technical data are processed in our legitimate interests to operate the site, prevent unauthorised access and defend claims (Article 6(1)(f)).

Form fields marked * are required to submit and respond to an enquiry; others are optional. The form cannot be submitted without the required information.

3. Recipients

Data are available to authorised HABO representatives and, as necessary, providers: OpenAI Sites/ChatGPT and Cloudflare (operation, access and storage), Resend (email notifications), and OpenStreetMap (technical map request data). Photon (komoot) and Esri ArcGIS receive property addresses for location lookup. Property documents and images selected by an administrator for AI listing preparation are sent to the OpenAI API.

Providers may process data outside the European Economic Area. OpenAI (Sites and API) and Resend data-processing agreements provide for EU standard contractual clauses or an applicable European Commission adequacy decision. Ask jolanta@habo.lv for details of a particular transfer and a copy of its safeguards.

4. Retention

Enquiry retention depends on completion of the enquiry and correspondence, continuing services and applicable limitation periods for claims. Property documents depend on representation, transaction progress and applicable document-retention duties. Technical data and necessary cookie retention depend on session duration and infrastructure security settings.

5. Your rights

Contact jolanta@habo.lv to request access and correction and, where GDPR conditions apply, erasure, restriction or portability. You may object to processing based on legitimate interests.

You may withdraw consent at any time without affecting the lawfulness of earlier processing. You may complain to Latvia’s Data State Inspectorate: www.dvi.gov.lv.

6. Visitor analytics and cookies

Google Analytics 4 (Google Ireland Limited) starts only with your consent (GDPR Article 6(1)(a)). It processes page views, browser and device technical data and approximate location for visitor statistics. Ad personalisation and Google Signals are disabled. _ga and _ga_* cookies last up to 180 days; we remember your choice in your browser for 180 days. Change or withdraw consent using “Cookie settings” in the footer. Google may process data outside the EEA under the transfer safeguards in its processing terms, including EU standard contractual clauses. User and event data retention follows the Analytics account settings; aggregated reports may have a different retention period.

How Google uses data