Privacy policy
What the site knows about a visitor, where it gets that from, what for, and how to switch it off.
Updated:
Company details
- Company
- SIA “Serebra”
- Reg. No.
- 50203223001
- Registered address
- Anniņmuižas bulv. 38/3-135C, Rīga, LV-1067
Who processes the data
The data described below is processed by SIA “Serebra”, the company that runs OS studio in Riga. Its company details are at the top of this page. For anything to do with your data, write to us on Telegram or at [email protected]. Every way to reach us is listed at the foot of every page.
The short version
There are two forms on this site: one on the Contacts page and a short one at the bottom of most pages. What you write in them reaches the studio, so that we can reply, and nobody else. Everything else is collected automatically — anonymised visit statistics and a couple of technical records in your browser.
What is collected
Without any action on your part, the site receives the following.
- Visit statistics: which pages were opened, which site you came from, your approximate region (country and city), browser language, device type and screen size. Collected through Google Analytics 4.
- The site language you chose — so that your next visit opens the same version.
- Your answer to the cookie banner — so that we do not ask again.
- Technical hosting records: IP address, request time, page address and browser version. Cloudflare keeps these, and they exist so the site works and stays protected from attacks.
The forms on this site
If you send the form on the Contacts page, we receive your name, a phone number, email address or Telegram username, the topic you picked and your message. Depending on the topic, also the practice you are booking and the times that suit you, the room you picked, a rough date and number of guests, what you teach and a link about you, or a company name. The short form at the bottom of the pages sends less: your name, your email or Telegram username, a phone number if you gave one, and your message. Exactly what you wrote, and nothing more. It arrives in the studio's Telegram chat and is saved in the studio's enquiries spreadsheet in Google Sheets, and we use it only to reply to you.
What the site does not do
This list matters no less than the previous one.
- It shows no advertising and collects no data for any: the Google Analytics ad signals are denied permanently and no consent turns them on.
- It sells no data and passes it to nobody beyond the services listed below.
- It builds no profiles and makes no automated decisions about visitors.
Cookies and browser storage
Three records, and none of them advertising.
- NEXT_LOCALE — a cookie holding the code of the language you chose. It lives for a year. It appears only when you switch the language yourself, so it needs no consent.
- os-studio.analytics-consent — an entry in your browser's local storage holding your answer to the banner. It stays until you clear the site's data.
- _ga and _ga_* — Google Analytics cookies. They appear only after you press Accept, and live for up to two years.
How consent to analytics works
Until you answer, Google Analytics runs without cookies: it writes nothing to your browser and sends only an anonymised signal that a page was opened. That is Consent Mode, and it is on for every visitor from the first second.
Accept allows the analytics cookies to be written. Essential only leaves everything as it was — the cookieless mode.
You can withdraw consent by clearing the site's data in your browser settings: the banner will come back and you can answer differently.
Legal grounds
Each kind of data has its own ground.
- Analytics — your consent, given through the banner (GDPR Article 6(1)(a)).
- The language cookie — necessary to deliver what you asked for yourself by switching the language.
- Technical hosting records — the legitimate interest in the site working and being protected from attacks (GDPR Article 6(1)(f)).
- A message sent through the form — the legitimate interest in answering your enquiry (GDPR Article 6(1)(f)).
Who the data goes to
The site relies on a few external services, and data reaches them.
- Google Ireland Limited — Google Analytics 4, visit statistics, and Google Sheets, which holds the spreadsheet of enquiries from the form.
- Cloudflare, Inc. — hosting and protection from attacks.
- Telegram — messages from the form reach the studio through it. Telegram or an email service — also if you write to the studio yourself. Everything you send in that conversation is handled under the rules of the service you choose.
Transfers outside Europe
Google and Cloudflare have American parent companies, and part of the data is processed outside the European Economic Area. Such transfers rest on the standard contractual clauses approved by the European Commission and on those companies' participation in the EU–U.S. Data Privacy Framework.
How long we keep it
Visit statistics — no longer than 14 months from your last visit, after which Google Analytics deletes them automatically. Cloudflare keeps the technical hosting records only briefly. Messages from the form, in the chat and in the enquiries spreadsheet, and correspondence on Telegram and by email we keep for as long as it is needed to deal with your enquiry.
Your rights
Under the GDPR you have the rights listed below. To exercise any of them, write to us on Telegram or at [email protected].
- Find out what data about you exists and receive a copy of it.
- Correct inaccurate data.
- Ask for the data to be erased.
- Restrict the processing or object to it.
- Withdraw consent to analytics at any time — this does not make the processing before the withdrawal unlawful.
- Complain to the supervisory authority: in Latvia that is the State Data Inspectorate, Datu valsts inspekcija (dvi.gov.lv).
Children
The site is written for adults. Yoga for children is one of our directions, but a child is booked in by a parent or legal guardian, and it is they who write to us. We collect no data about children through this site.
Changes to this policy
If the site starts collecting anything else, we will update this document and change the date at the top of the page. A material change to what is collected will require fresh consent.