Privacy Policy

RR Network SIA (hereinafter "we", "our", "RR Network") is responsible for protecting your personal data. This privacy policy explains how we collect, use, store and protect your information when you use our website and services.

This policy applies to:

• The website rrn.lv and its related pages

• Contact and application forms

• The AI assistant (chatbot) service

• Email lists and newsletters

• Consulting and workshop services

2.1. Data you provide directly:

• Contact details (name, email address, phone number) - to communicate with you and provide our services

• Company information (company name, position, industry) - to prepare an offer

• The content of your request (your questions, the problems you describe) - to provide consulting

• Workshop data (business processes, system descriptions) - for diagnostics and building solutions

2.2. Data collected automatically:

• Technical data (IP address, browser type, device type) - to run the website

• Usage data (pages and sections visited, clicks on links and buttons, scroll depth, active time on a page) - to improve the website

• Contact form steps (opening the form, which fields were filled in, submission or abandonment) - we record field names only, never what you type

• Session recordings and heatmaps (how a page was scrolled and where you clicked) - to improve the website's usability. Every input field is masked in recordings, so the text you type is not recorded

• Cookies (session ID, preferences) - for functionality and analytics

Analytics data, session recordings and heatmaps are collected only after you give consent in the cookie banner.

2.3. AI assistant (chatbot) data:

When you use our AI assistant, we process:

• The questions and messages you enter

• The conversation history during the session

• Technical information about the session

Important: the AI assistant is meant for general information. Please do not share sensitive personal data (financial information, passwords, health data) in chatbot conversations.

We process your data for the following purposes and on the following legal grounds:

• To answer your requests - Legitimate interests (GDPR Article 6(1)(f))

• To provide the services you request - Performance of a contract (GDPR Article 6(1)(b))

• To send offers and information - Consent (GDPR Article 6(1)(a))

• To improve our website and services - Legitimate interests (GDPR Article 6(1)(f))

• Website analytics, session recordings and heatmaps - Consent (GDPR Article 6(1)(a)), which you can withdraw at any time in the cookie banner

• To meet legal requirements - Legal obligation (GDPR Article 6(1)(c))

4.1. Essential cookies:

These cookies are needed for the website to work:

• Session ID - website functionality (duration: the session)

• Cookie consent - stores your choice (duration: 1 year)

4.2. Analytics cookies:

With your consent, we use analytics tools to improve the website:

• Google Analytics 4 (Google Ireland Limited) - visit statistics, clicks, scrolling and contact form steps (cookies _ga and _ga_*, duration: up to 2 years)

• PostHog (PostHog Inc., data stored in the EU) - usage analytics, session recordings with masked input fields, and heatmaps (cookies ph_*, duration: up to 1 year). IP addresses are not stored

• Vercel Analytics - anonymised visit statistics without cookies

Until you give consent, Google Analytics runs in Google's Consent Mode without analytics cookies, and PostHog is not loaded at all.

4.3. Tools that manage cookies:

• Google Tag Manager - loads the analytics tools above according to your consent

• CookieScript - manages the cookie banner and your consent

4.4. Third-party cookies:

• Cal.com - meeting bookings

• AI chatbot service - assistant functionality

4.5. Google Maps content:

Our home page shows reviews from Google Maps. This content is subject to the Google Maps Additional Terms of Service and the Google Privacy Policy. Your browser loads the reviewers' photos directly from Google's servers.

You can manage your cookie preferences in our cookie banner or in your browser settings.

We keep your data for the following periods:

• Contact form data - 2 years after our last contact

• Client project data - 5 years after the project ends

• Chatbot conversation history - 30 days

• Analytics data (Google Analytics, PostHog) - up to 26 months

• Session recordings - up to 30 days

• Accounting documents - 5 years (as required by Latvian law)

When the retention period ends, the data is securely deleted or anonymised.

6.1. Data processors:

We work with trusted service providers:

• Cloud services - data storage (EU/EEA)

• Email services - communication (EU/EEA)

• Analytics tools - website statistics: Google Ireland Limited (Google Analytics, Google Tag Manager), PostHog Inc. (data stored in the EU), Vercel Inc. (Vercel Analytics)

• CookieScript - cookie consent management

• Payment processing - invoice payments (EU/EEA)

6.2. Transfers outside the EU/EEA:

If data is transferred outside the European Economic Area, we ensure appropriate safeguards under GDPR Article 46 (standard contractual clauses or adequacy decisions).

6.3. We do NOT share data:

• With third parties for marketing purposes without your consent

• With data brokers or advertising networks

Under the GDPR you have the following rights:

• Right of access - to ask what data of yours we process

• Right to rectification - to correct inaccurate or incomplete data

• Right to erasure - to ask us to delete your data (the "right to be forgotten")

• Right to restriction - to restrict processing in certain cases

• Right to data portability - to receive your data in a structured format

• Right to object - to object to processing based on legitimate interests

• Withdrawal of consent - to withdraw your consent at any time

8.1. Data deletion request:

1. Send an email to partner[at]rrn.lv

2. Use the subject: "Data deletion request"

3. In the message, include:

• Your name

• The email address linked to your data

• Your specific request

8.2. Other requests:

Send any request about exercising your rights to partner[at]rrn.lv with the subject "GDPR request".

Response time: within 30 days, as the GDPR requires. In complex cases this may be extended to 60 days, and we will let you know.

We use technical and organisational measures to protect your data:

• SSL/TLS encryption for data in transit

• Secure storage with access control

• Regular security reviews

• Data protection training for our staff

• Incident response procedures

Our services are not intended for people under 18. We do not knowingly collect data from minors. If we learn that we have received a child's data, we will delete it immediately.

We may update this privacy policy. We will tell you about significant changes by:

• Publishing a notice on our website

• Sending an email notice (if you are on our contact list)

Please review this policy regularly. By continuing to use our services after a change, you accept the updated policy.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

Data State Inspectorate (Datu valsts inspekcija)

Elijas iela 17, Riga, LV-1050, Latvia

Phone: +371 67223131

Email: pasts[at]dvi.gov.lv

Website: www.dvi.gov.lv