Privacy Policy

Last updated: 01.07.2026

1. Who we are

This website (the "Site"), operated under the trading name "L'Atelier," is run by SIA Igel, a company registered in the Republic of Latvia under registration number 50203622211, with its registered address at Uguns iela 6, LV-1024, Riga, Latvia ("SIA Igel," "we," "us," "our"). We are the data controller for the personal data described in this Privacy Policy.

If you have questions about how we handle your personal data, or want to exercise any of the rights described in Section 6, write to us at the email above.

2. What data we collect, and why

2.1 Booking and stay data

When you make a booking through this Site, we collect your name, email address, phone number, arrival and departure dates, number of guests, and any special requests you give us.

Legal basis: performance of the contract (GDPR Article 6(1)(b)) — we need this to accept and manage your reservation, communicate with you about your stay, and provide check-in instructions.

2.2 Payment data

Payments are processed by Stripe (Stripe, Inc. and its affiliates, including Stripe Payments Europe, Ltd.) through Stripe Connect. We do not receive or store your full card number, CVC, or other card details — these go directly to Stripe. We receive only confirmation that payment was made, the amount, and a payment reference.

Legal basis: performance of the contract (Article 6(1)(b)), and compliance with our accounting and tax obligations (Article 6(1)(c) — see Section 5).

2.3 Guest registration data (required by Latvian law)

Latvian law (the Tourism Law, Section 11(7)) requires accommodation providers to have foreign guests complete a signed declaration and verify their identity against a valid ID document before or at the start of their stay. Because check-in at our apartments is self-service, we ask the lead guest to complete this declaration online ahead of arrival on behalf of their group, where permitted. This may include full name, nationality, date of birth, and identity document number.

Legal basis: compliance with a legal obligation (Article 6(1)(c)).

2.4 Local tourist tax data

Riga City Council levies a municipal accommodation tax on overnight guests and requires accommodation providers to report the number of guests hosted and nights stayed. We use your name and stay dates to fulfil this reporting obligation.

Legal basis: compliance with a legal obligation (Article 6(1)(c)).

2.5 Booking-widget and website data

Our reservation system is provided by Smoobu GmbH ("Smoobu"). The booking widget embedded on this Site may use strictly necessary technical cookies to allow the reservation calendar and checkout to function. We do not use Google Analytics, advertising pixels, or other tracking or marketing cookies on this Site, and we do not use your data for marketing.

Legal basis: legitimate interest in operating a functioning booking website (Article 6(1)(f)), limited strictly to what is technically necessary.

3. Who we share your data with

Smoobu GmbH — our booking engine / channel manager, processing your booking data on our behalf as a data processor.
Stripe — our payment processor, processing your payment data on our behalf as a data processor. Stripe is PCI-DSS certified.
Riga City Council (Rīgas valstspilsētas pašvaldība) — to comply with our accommodation-tax registration and reporting obligation.
Latvian state authorities (e.g. the State Police, State Border Guard, State Revenue Service) — only where we are legally required to provide information, such as under the Tourism Law's foreign-guest declaration rules, or in response to a lawful request.
Our accountant/bookkeeper — to prepare invoices and meet our tax obligations, acting as a data processor on our behalf.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

4. International data transfers

Smoobu is based in Germany and processes data within the EU/EEA. Stripe may process data using infrastructure located outside the EEA (including in the United States); where this happens, Stripe relies on the European Commission's Standard Contractual Clauses or another valid GDPR Chapter V transfer mechanism. You can review Stripe's own disclosures at stripe.com/privacy.

5. How long we keep your data

Booking and payment records linked to an invoice: 5 years from the end of the relevant accounting year, matching the retention period required under Latvian accounting and tax law.
Guest declaration/ID data collected under the Tourism Law: kept only for the period required to satisfy that legal obligation, then deleted.
Tourist-tax reporting data: kept for the period required under Riga City Council's reporting and audit rules.
General enquiries not linked to a completed booking: deleted after 12 months, unless you ask us to delete them sooner.

6. Your rights

Under the GDPR, you have the right to:

request access to the personal data we hold about you;
request correction of inaccurate data;
request erasure of your data, where we are not legally required to keep it (we cannot erase data we are legally obliged to retain, such as invoice records or Tourism Law declaration data, during their required retention period);
request restriction of, or object to, certain processing;
request a copy of your data in a portable format, where applicable;
withdraw consent at any time, where processing is based on consent (we do not currently rely on consent for any processing described in this policy).

To exercise any of these rights, contact us at eriks.igenbergs@ezisu-kalns.com. We will respond within one month, as required by the GDPR.

You also have the right to lodge a complaint with Latvia's data protection authority:

Datu valsts inspekcija (State Data Inspectorate) Elijas iela 17, Riga, LV-1050, Latvia www.dvi.gov.lv

7. Security

We use reasonable technical and organisational measures to protect your data, including encrypted (HTTPS) transmission on this Site and restricted access to booking and guest records. No system is completely secure, but we review our practices regularly.

8. Cookies

This Site uses only the technical cookies strictly necessary for the booking widget and payment processing to function. We do not use analytics, advertising, or social-media tracking cookies. Because these cookies are strictly necessary for the Site to work, we do not need separate consent to use them — but you're welcome to contact us for more detail on exactly what's set.

9. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the law or in how we operate. The "last updated" date above shows when it was last revised.

10. Contact

SIA Igel ("L'Atelier") Uguns iela 6, LV-1024, Riga, Latvia eriks.igenbergs@ezisu-kalns.com +371 27526886