Privacy Policy
Last updated: October 9, 2026
1. General Information
This Privacy Policy describes how SIA "Bārs Shot Spot Kafe" (hereinafter – the Company) processes personal data obtained while operating the website and providing hospitality services, including table reservations and event-related services.
2. Data Controller
The controller of personal data is SIA "Bārs Shot Spot Kafe", registration No. 45403058313, address: Jauniela 19-1, Rīga, LV-1050, email: info@spotkafe.lv.
3. What Personal Data We Process
We process only personal data that you provide directly or that arises during communication or service provision, including:
- Name and contact information (phone number, email address)
- Information provided when making a reservation or inquiry
- Reservation details (date, time, number of guests, special requests)
- Communication content (emails, contact form or booking form submissions)
- Payment information, if a contract or paid event booking is concluded
4. Data Provision Requirements
Providing certain personal data, such as your name and contact information, is necessary in order to process a reservation or respond to your inquiry. Without this data, we may be unable to confirm your reservation or provide the requested service. Other information, such as special requests, is provided voluntarily and its absence will not prevent us from providing the core service.
5. Purposes of Personal Data Processing
Personal data is processed for the following purposes:
- Processing reservation requests and inquiries
- Managing table bookings and event reservations
- Communicating with guests regarding reservations and services
- Providing hospitality and customer services
- Responding to customer inquiries and requests
- Complying with legal obligations, including accounting requirements
- Improving website functionality and usage analytics (with consent)
- Preventing fraud, automated abuse and spam in contact and booking form submissions
6. Legal Basis for Processing (GDPR Article 6)
Personal data is processed on the following legal bases:
- Contract conclusion and performance – for managing reservations and providing services (GDPR Article 6(1)(b))
- Legitimate interests – for communication with guests and customer support (GDPR Article 6(1)(f))
- Legitimate interests – for website and booking system security, abuse prevention and request rate limiting (GDPR Article 6(1)(f))
- Consent – for analytics and marketing cookies (GDPR Article 6(1)(a))
7. Cookies, Google Tag Manager, Google Analytics, Google Ads and Microsoft Clarity
The website uses essential cookies and local storage that ensure the basic functionality of the website.
With the user's consent, the website may also use analytics cookies, such as:
- Google Tag Manager, a tag management service that loads and manages Google Analytics 4 (and any other tags we configure) only after consent;
- Google Analytics 4 (GA4), loaded via Google Tag Manager, to collect aggregated statistics about website visits and improve website performance;
- Microsoft Clarity, loaded directly by the website (not through Google Tag Manager) only after consent, to record session replays and heatmaps for the purpose of improving user experience on the website. Loading Clarity also sets additional cookies belonging to Microsoft's advertising network (Microsoft/Bing Advertising).
With the user's separate marketing consent, the website may also use advertising cookies, such as:
- Google Ads, loaded via Google Tag Manager only after marketing consent, to measure the performance of our advertising campaigns (conversion tracking) and to show more relevant ads on Google services and partner websites;
- Google Consent Mode v2, which communicates your cookie choices to Google services so that advertising and analytics tags adjust their behaviour accordingly. Where marketing consent is not given, advertising identifiers contained in the website address (such as gclid) are redacted before any data is sent to Google.
Analytics consent and marketing consent are requested and stored separately. Refusing marketing cookies does not affect analytics cookies, and refusing both does not affect the functionality of the website.
These tools may process information about visited pages, user interactions on the website, as well as device and browser technical information. This information may be shared with service providers such as Google LLC and Microsoft Corporation.
The table below lists the specific cookies and similar storage used on this website:
| Name | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
| gdpr_consent_v4 | spotkafe.lv | Stores your cookie consent choices | Local storage | Until changed or withdrawn by the user; renewed after 12 months | Necessary |
| _ga | Google Analytics 4 | Distinguishes unique website visitors | HTTP cookie | 400 days | Analytics |
| _ga_<container ID> | Google Analytics 4 | Persists session status and visit data | HTTP cookie | 400 days | Analytics |
| _clck | Microsoft Clarity | Persists a user identifier across sessions | HTTP cookie | 1 year | Analytics |
| _clsk | Microsoft Clarity | Connects multiple page views into a single session | HTTP cookie | 1 day | Analytics |
| MUID | Microsoft Advertising | Identifies your browser across Microsoft's advertising network | HTTP cookie | 390 days | Analytics |
| MR | Microsoft Advertising | Reduces duplicate requests during script/ad loading | HTTP cookie | 7 days | Analytics |
| SRM_B | Microsoft Advertising | Stores information about your visit for Microsoft's advertising network | HTTP cookie | 390 days | Analytics |
| SM | Microsoft Clarity | Session cookie used while loading Clarity's scripts | HTTP cookie | Session | Analytics |
| ANONCHK | Microsoft Advertising | Stores a session identifier and helps prevent fraudulent ad clicks | HTTP cookie | Under 1 day | Analytics |
| _gcl_au | Google Ads | Stores ad click information to measure conversions originating from our ads | HTTP cookie | 90 days | Marketing |
| _gcl_aw | Google Ads | Stores an ad click identifier when you reach the site from a Google ad | HTTP cookie | 90 days | Marketing |
| IDE | Google (DoubleClick) | Measures and personalises ads shown on Google partner sites | HTTP cookie | 390 days | Marketing |
| test_cookie | Google (DoubleClick) | Checks whether your browser accepts advertising cookies | HTTP cookie | Under 1 day | Marketing |
The MUID, MR, SRM_B, SM and ANONCHK cookies are not set directly by this website; they are set by Microsoft as part of loading the Microsoft Clarity script, and belong to Microsoft's own advertising infrastructure.
Cookie names and storage durations are set by the respective providers and may change without prior notice.
More information about their privacy practices can be found at:
- https://policies.google.com/privacy
- https://privacy.microsoft.com/privacystatement
Analytics cookies are used only after the user has given consent through the website cookie notice.
Users may withdraw or change their consent at any time through the website cookie settings, as well as by deleting cookies in their browser. Consent is in any case stored for no longer than 12 months, after which the cookie notice is shown again and consent must be renewed.
8. Server Logs and Website Security
The website server may automatically log technical information such as IP address, browser type, request time and visited pages. This information is used solely for website security, technical maintenance and troubleshooting.
To protect the contact and booking forms against bots and abuse, we use Cloudflare Turnstile and temporarily process technical data such as IP address, browser information, security check results and request frequency information.
9. Data Recipients
Personal data may be shared with third parties only when necessary for providing services or complying with legal requirements, including:
- IT and website service providers;
- Accounting service providers;
- Cloudflare (for website hosting, security and Turnstile verification);
- Resend (for delivering contact and booking form messages by email);
- Analytics and marketing service providers, only after user consent;
- Public authorities, where required by applicable law.
10. International Data Transfers
Some of our service providers, such as Google LLC, Microsoft Corporation, Cloudflare Inc. and Resend (Plus Five Five, Inc.), are located in or transfer personal data to the United States. Where personal data is transferred outside the European Union or European Economic Area, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses or, where applicable, the recipient's participation in the EU-U.S. Data Privacy Framework.
11. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected:
- Reservation requests and communication data – for as long as necessary to manage reservations and resolve potential disputes;
- Accounting data – according to legally required retention periods;
- Analytics data – according to the configuration of analytics tools and only with user consent;
- Security and rate-limiting data – temporarily and only for as long as necessary to protect the website against abuse.
12. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.
13. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access your personal data;
- request correction of inaccurate data;
- request deletion of your personal data;
- restrict processing of your personal data;
- object to processing based on legitimate interests;
- request data portability;
- withdraw consent at any time where processing is based on consent.
14. Complaints
If you believe that your personal data is processed in violation of the GDPR, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija).
15. Contact Information
If you have any questions regarding this Privacy Policy or the processing of personal data, please contact us at info@spotkafe.lv.