Skip to main content
Back to Hub

Privacy Policy

Last updated: 7 May 2026

1. Data Controller

This Privacy Policy applies to all websites operated by Sanda Veisa, including sandaveisa.com and byatmosphere.com (the "Atmosphere" service).

Data Controller: Sanda Veisa
Location: Riga, Latvia, European Union
Contact: sanda.veisa@gmail.com

This policy is issued in compliance with the EU General Data Protection Regulation (GDPR) 2016/679 and the laws of the Republic of Latvia.

2. Data We Collect

We collect only the minimum data necessary for business communication:

  • Name and email address — submitted via contact, estimate, or inquiry forms.
  • Project or business details — information voluntarily provided describing your requirements.
  • Correspondence records — emails or messages exchanged in connection with a potential or active service agreement.

We do not use tracking pixels, behavioural analytics, or advertising cookies. No data is collected passively through your use of these websites.

3. Legal Basis for Processing

All processing of your personal data rests on one of the following lawful bases under GDPR Article 6:

  • Consent (Art. 6(1)(a)): When you voluntarily submit a contact or inquiry form.
  • Contractual necessity (Art. 6(1)(b)): When processing is required to fulfil a service agreement or to take steps at your request prior to entering one.
  • Legitimate interests (Art. 6(1)(f)): To respond to direct professional enquiries and manage ongoing client relationships.

We do not sell, rent, or share your personal data with third parties for marketing purposes under any circumstances.

4. How We Use Your Data

  • To respond to enquiries and provide project estimates.
  • To negotiate, prepare, and execute service agreements.
  • To deliver commissioned audio-visual content under the Atmosphere service.
  • To fulfil legal and contractual obligations.

5. Data Retention

Enquiries without a contract: Data is deleted within 12 months of the last communication if no service agreement is concluded.

Active or completed contracts: Data is retained for 7 years following the conclusion of the contract, in accordance with Latvian accounting and tax law requirements.

Atmosphere service clients: Licensing records are retained for the duration of the active licence plus 7 years.

6. Data Security & Storage

All data is transmitted over encrypted connections (TLS/HTTPS). Our infrastructure is hosted within the European Economic Area (Vercel, Supabase EU region). Access to personal data is restricted to Sanda Veisa personally. No data processors outside the EEA receive your personal data.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of access (Art. 15): Request a copy of the personal data held about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your data where no legal obligation requires its retention.
  • Right to restriction (Art. 18): Request that processing of your data be limited in certain circumstances.
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact: sanda.veisa@gmail.com. Requests will be responded to within 30 days.

8. Supervisory Authority

You have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija), the competent supervisory authority under GDPR in Latvia:

Elijas iela 17, Riga LV-1050, Latvia
www.dvi.gov.lv

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website following any changes constitutes acceptance of the revised policy.

6. TikTok Integration & Third-Party Data

This website and its connected automation services integrate with TikTok's developer platform (operated by ByteDance Ltd.) via the TikTok for Developers API. The following data may be accessed from your TikTok account when you explicitly authorise this application:

  • user.info.basic: Your TikTok open ID, display name, and profile avatar — used solely for authentication and identifying the authorised account.
  • video.upload / video.publish: The ability to upload video files and publish them to the authorised TikTok account — used exclusively for scheduled, automated publishing of original content created by Sanda Veisa.

TikTok data is not shared with any third parties, not stored beyond the duration required for the publishing task, and is accessed only via securely stored tokens issued by TikTok's OAuth system. Access tokens are stored in a secure, encrypted database and are never exposed publicly.

For information on how TikTok processes your data, please refer to the TikTok Privacy Policy. This integration is governed by the TikTok Developer Terms of Service.

7. Contact

For any privacy-related enquiries, contact: sanda.veisa@gmail.com