Legal
Privacy Policy
This privacy policy explains what personal data varsani.media collects, why we collect it, and the control you keep over it.
Last updated 21 October 2026
1. Who we are
Varsani Media SIA is a marketing agency with studios in Riga and Helsinki. We are the controller of the personal data collected through varsani.media, so we decide how it is used and we are responsible for protecting it.
Registration number 40203638846. Registered address: Brīvības bulvāris 19-22, Riga, LV-1050, Latvia. Questions about this privacy policy or your data go to contact@varsani.media.
The short version
We collect only what you choose to send us through our forms, plus the cookies you agree to.
Your details are used to reply to you, deliver the work you ask for and, if you subscribe, send our newsletter.
Your data is never sold or used for anything you wouldn't expect.
At any time, you can ask to see, correct or delete it.
2. What we collect and why
Personal data reaches us in five ways. For each one, this privacy policy sets out what we collect, why, the legal basis under the GDPR, and how long we keep it.
Contact form and email
What: your name, email address, company and message.
Why: to answer your enquiry and talk about your project.
Legal basis: our legitimate interest in replying to people who contact us, or steps you ask us to take before a contract.
Kept: up to 14 months after our last contact, unless you become a client.
Growth Snapshot applications
What: the details you enter in the application, such as your name, email, company, website, marketing budget and the competitors you name.
Why: to check eligibility, prepare your audit and hold the results call.
Legal basis: steps you ask us to take before a contract.
Kept: up to 14 months after we deliver your report, or for as long as we work together.
Digital Airspace™ early access
What: your name, email address and company.
Why: to tell you about early access and the launch.
Legal basis: your consent.
Kept: until 14 months after launch, or until you ask us to remove you.
Newsletter
What: your email address, and your name if you give it.
Why: to send our newsletter.
Legal basis: your consent.
Kept: until you unsubscribe. Every newsletter has an unsubscribe link.
Clients and suppliers
What: contact details, contracts and invoicing records.
Why: to deliver our services, invoice and keep our accounts.
Legal basis: the contract between us, and also our legal obligations under accounting law.
Kept: for the length of the relationship, and accounting records for as long as Latvian law requires.
When we run marketing or Digital Airspace™ for a client, any data about that client's own customers is processed under our contract and data processing agreement with the client, not under this policy.
3. Cookies
Apart from the few cookies the site needs to work, we use cookies only with your consent. You can also change your choice at any time with the Manage consent tab at the bottom of the screen. Finally, every cookie is listed in our Cookie Policy.
4. Who we share it with
We never sell personal data. Instead, we share it only with the service providers that help us run the website and the business, under data processing agreements that stop them using it for anything else:
Our web hosting provider, which stores the website, form submissions and backups.
Our email provider, which handles messages sent to and from varsani.media.
Brevo (Sendinblue SAS, France), which sends our newsletter.
We also disclose personal data to authorities, but only when the law requires it.
Our aim is to keep personal data inside the EU and EEA. However, if a provider processes it elsewhere, the transfer is covered by safeguards the GDPR recognises, such as an adequacy decision or the European Commission's Standard Contractual Clauses.
5. How we protect it
Only the people who need personal data to do their work can access it. In addition, the website runs over an encrypted connection and its software is kept up to date. No system is perfectly secure. However, if a breach ever puts your data at risk, we will tell you and the supervisory authority as the law requires.
6. Your rights
Under the GDPR you have the right to:
See the personal data we hold about you.
Have inaccurate data corrected.
Have your data deleted.
Restrict or object to how we process it.
Receive your data in a portable format.
Withdraw your consent at any time. This doesn't affect anything we did with your data before you withdrew it.
To use any of these rights, simply email contact@varsani.media. We then reply within one month.
You can also complain to a data protection authority, in the country where you live or work. In Latvia that is the Data State Inspectorate (dvi.gov.lv); in Finland, the Data Protection Ombudsman (tietosuoja.fi).
7. Children
Our services are for businesses, so we don't knowingly collect personal data from anyone under 16.
8. Changes to this privacy policy
We update this page when our practices change, and the date at the top shows the latest version. Also, if a change affects how we use data you have already given us, we will tell you before it applies.
9. Contact
Varsani Media SIA, registration number 40203638846, Brīvības bulvāris 19-22, Riga, LV-1050, Latvia. Email contact@varsani.media.