This policy explains how SIA “Need IT” handles personal data when you visit needit.lv, contact us, or use one of our mobile apps. We collect as little as we can, and we never sell personal data.
1. Who we are
The controller of your personal data is:
SIA “Need IT”
Registration No. 50203384721
Antonijas iela 9 – 12A, Rīga, LV-1010, Latvia
Email: info@needit.lv
Write to this address with any question about this policy or your data.
2. What this policy covers
- the website needit.lv;
- messages you send us through the contact form or by email;
- mobile apps published by Need IT on the Apple App Store and Google Play (“our apps”), unless an app links to its own privacy policy.
When we build software for clients, the client is the controller of the data processed in that software, and the client’s privacy policy applies.
3. Visiting needit.lv
The website does not use cookies, analytics or tracking scripts. It does not load fonts or scripts from third parties, except for the spam check on the contact form described in section 4.
The site is hosted on Cloudflare’s network. To deliver pages and protect the site against attacks, Cloudflare processes technical data about each request: your IP address, browser and device type, the page requested and the time. We use this only to run and secure the site. Legal basis: our legitimate interest in operating a secure website (GDPR Article 6(1)(f)).
4. Contacting us
When you use the contact form or write to us, we receive your name, email address and the content of your message. We use them only to reply and, if it comes to that, to prepare an offer or a contract. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b)) and our legitimate interest in answering enquiries (Article 6(1)(f)).
Messages from the form are delivered to our mailbox, hosted by Zoho in the EU. We keep correspondence while the conversation is relevant and delete it within 2 years after the last contact, unless it becomes part of a client relationship for which the law requires us to keep records (for example, accounting documents).
To keep spam out, the form uses Cloudflare Turnstile. It loads only when you start filling in the form and checks signals from your browser, such as your IP address and browser characteristics, to confirm that you are human. Legal basis: our legitimate interest in protecting the form from abuse (Article 6(1)(f)).
5. Our apps
5.1 Advertising
Some of our apps are free and show ads. Ads are delivered by Google AdMob, provided in the EEA by Google Ireland Limited. To show ads, measure them and prevent fraud, the AdMob software in the app collects:
- your device’s advertising identifier (Android advertising ID, or Apple IDFA if you allow it);
- your IP address, from which an approximate location (country or city) can be derived;
- device and app information, such as device model, operating system, language and app version;
- interactions with ads, such as views and taps;
- diagnostic data about ad delivery.
Your choices. In the EEA, the United Kingdom and Switzerland, the app asks for your consent before showing personalised ads, using Google’s consent tool. You can refuse, and you can change your choice at any time in the app’s settings. If you refuse, you will see non-personalised ads, which are based on context (such as the app itself and your approximate location) rather than on your profile. Google may still use data to limit how often an ad is shown, to prevent fraud and for aggregated reporting.
On iPhone and iPad, the app asks for your permission before accessing the IDFA (App Tracking Transparency). On Android, you can reset or delete your advertising ID in your device settings.
Legal basis: your consent for personalised advertising (Article 6(1)(a)); our legitimate interest in funding free apps with non-personalised ads and preventing ad fraud (Article 6(1)(f)).
Google processes this data under its own privacy policy. See how Google uses information from sites or apps that use its services and the Google Privacy Policy.
5.2 Other data
Unless an app’s store listing or the app itself says otherwise, our apps do not require an account, and we do not receive your name, email address, contacts, photos or precise location. Data you create in an app stays on your device unless the app clearly tells you that it is synchronised.
5.3 Children
Our apps are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
6. Who receives your data
We do not sell personal data. We share it only with service providers that help us run our services:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, security, spam protection (Turnstile) | Global network; EU-U.S. Data Privacy Framework |
| Zoho Corporation B.V. | EU | |
| Google Ireland Limited, Google LLC | Advertising in our apps (AdMob) | EU, USA; EU-U.S. Data Privacy Framework |
We may also disclose data when the law requires it, for example to a court or a supervisory authority.
7. Transfers outside the EU/EEA
Cloudflare and Google may process data in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework and also use the European Commission’s Standard Contractual Clauses, which provide the safeguards required by the GDPR.
8. How long we keep data
- Website request data: kept by Cloudflare for a limited time under its own policies. We do not keep access logs of our own.
- Messages from the contact form or email: see section 4.
- Advertising data: kept by Google under its own policies. We receive only aggregated reports.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that took place before the withdrawal.
To use these rights, email info@needit.lv. We will reply within one month.
You can also lodge a complaint with the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv, pasts@dvi.gov.lv, or with the supervisory authority of the EU country where you live.
10. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS) and access limited to the people who need it.
11. Changes to this policy
We will update this policy when our services or the law change. The date at the top of this page shows when it was last updated. If a change significantly affects how our apps use your data, we will also tell you in the app.