Privacy

Company names, registration numbers, registered addresses, founding dates and legal forms come from the Latvian Register of Enterprises, which publishes them as open data. Sectors and descriptions are written by us or taken from a company’s own website.

This is information about businesses rather than about people, and we publish it in the public interest of making Riga’s tech scene legible.

Where we name a founder or list a role, we publish only what a person has already made public in a professional context: their name, their role, and a link to a public professional profile.

We never publish personal email addresses, phone numbers or home addresses, even where the company register exposes them. Our lawful basis is legitimate interest in maintaining an accurate directory of the local business ecosystem.

You can ask us to remove you. Email privacy@rigastartups.com and we will take your details down within 30 days. You do not need to give a reason, and removing a person does not remove their company from the map.

Submissions and edit suggestions are stored so we can act on them. If you leave an email address it is used only to come back to you with a question about that submission. It is never published and never added to a mailing list.

If you claim your company’s listing we store your email address, the name you give us, and how the claim was verified. Signing in uses a link emailed to you; we set a session cookie so you stay signed in, which is strictly necessary for the account to work and is not used for tracking.

To check a claim we may compare the name you give against the board members the Latvian Register of Enterprises publishes for that company. That comparison happens for verification only. We do not publish those names, we do not store the register’s personal identity codes or dates of birth, and the result is kept only as a yes or no against your claim. Our lawful basis is legitimate interest in making sure a listing is controlled by someone who actually works there.

If someone already edits the listing you claim, we show them your name, email address, any note you add and how the claim was verified, so they can confirm you work there. Editors of the same listing can see each other’s email addresses and when each last used their access, so a team can tell us when someone has left. None of this is shown to anyone else.

Changes you make to your own listing are published on the map and kept as a history, so we can tell who changed what if a record is disputed.

If you ask to watch a company, we store which company and when you asked, against the account you signed in with. Nothing else: no facts about the company, which are public anyway, and no record of what you looked at. Nobody else can read your list, including other signed-in people, which is enforced by the database rather than by the pages.

Our lawful basis is performing a service you asked for. Clearing the list removes it, and asking us to delete your account removes it with everything else.

We store your email address, the date you confirmed, and whether you asked for job alerts. Nothing is sent until you confirm from your own inbox, and every message carries a one-click unsubscribe link. Unsubscribing stops all mail immediately.

If you post an event on Gatherings we store what you enter about it, and your name and email as the host. The event becomes public once we have reviewed it; your email never does. We use it to tell you the review decision, to send you the private link that manages your event, and to reach you about the event itself. Our lawful basis is legitimate interest in running a reviewed, usable listing.

If you register for an event we store your name, your email and whether you are going, waitlisted or awaiting the host’s approval. The host of that event can see this list, and export it, so they can run the event. We email you a confirmation and, where the event has one, a reminder. Our lawful basis is taking the step you asked for by registering. We do not use a registration to add you to anything else, and registering needs no account.

Ask the host, or us, to take you off a list at any time. We keep a registration while the event is upcoming and for a short while after, then remove it. A host’s own event and its whole guest list are deleted together when the event is taken down.

We use privacy-preserving analytics that set no cookies and build no profile of you: page views, referrers and country, nothing that identifies a person. That is why this site has no cookie banner: the only cookie we ever set is the sign-in session for people who sign in, and a strictly necessary cookie needs no consent.

Hosting, database and email are all in the European Union. We do not sell data, and we do not share it with advertisers.

Under the GDPR you may ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@rigastartups.com. If you are unhappy with how we respond you may complain to the Data State Inspectorate (Datu valsts inspekcija) in Latvia.

If you have an account you do not have to ask anyone. Your account page lists what is held and deletes all of it in one press: the sign-in, any claims, the watchlist and any newsletter subscription for that address. Edits you made to a company listing stay on the listing with your name detached from them, because they describe the company rather than you. Ask us if you want those removed too.