Legal

Privacy Policy

1. General Provisions

1.1. This Privacy Policy describes how Following the Dragon SIA, registration No. 40203621657, legal address: Stabu iela 19 - 104, Rīga, LV-1011, Latvia (the "Data Controller"), obtains, processes and stores personal data collected from customers and visitors of the website followingthedragon.lv and the NeoSpace 定舍 studio (the "Data Subject" or "You").

1.2. Personal data is any information relating to an identified or identifiable natural person. Processing is any operation performed on personal data.

1.3. The Data Controller processes personal data in accordance with applicable law, including the EU General Data Protection Regulation (GDPR).

2. Obtaining, Processing and Storage of Personal Data

2.1. The Data Controller obtains and processes personal data primarily through the website, the online gift-card purchase process, email, and direct communication such as WhatsApp.

2.2. By using the services on the website, you agree that the information you provide is used as described in this Privacy Policy.

2.3. You are responsible for ensuring the data you submit is correct, accurate and complete, and for notifying us of any changes.

2.4. The Data Controller is not responsible for damages arising from inaccurate data you provide.

3. Personal Data Processed

3.1. The Data Controller may process:

  • First name, last name;
  • Contact information (email address and/or phone number);
  • Transaction data (gift cards purchased, price, and payment-related information);
  • Any other information you provide when purchasing a gift card, booking an experience, or contacting us.

Gift cards are delivered electronically as a code, so no physical delivery address is required.

3.2. The legal basis for processing is Article 6(1)(a), (b), (c) and (f) GDPR: your consent; performance of a contract; compliance with a legal obligation; and the legitimate interests of the Data Controller.

3.3. Retention: personal data is stored while it is necessary for the purpose for which it was collected, while legitimate interests or legal obligations (for example the Accounting Law) require it, or while your consent remains valid. After that it is securely deleted or anonymized.

3.4. Recipients and processors. To provide our services, we may share data with processors acting on our behalf:

  • Payment processing is provided by Stripe. Payment data necessary to complete your purchase is transferred to Stripe Payments Europe, Limited.
  • Website hosting, database and email infrastructure are provided by our technology providers acting as processors.
  • We may disclose data to state and law-enforcement authorities where required to establish, exercise or defend legal claims.

3.5. The Data Controller applies appropriate organizational and technical measures to protect personal data against loss, unlawful access or disclosure.

4. Your Rights

4.1. In accordance with the GDPR and the laws of the Republic of Latvia, you have the right to:

  • access your personal data and receive a copy, including in a portable electronic format;
  • request correction of inaccurate or incomplete data;
  • request erasure ("right to be forgotten"), except where retention is required by law;
  • withdraw consent previously given;
  • request restriction of processing;
  • lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija) of Latvia.

To exercise your rights, contact us at casperzhuriga@gmail.com.

5. Final Provisions

5.1. This Privacy Policy is developed in accordance with the GDPR (Regulation (EU) 2016/679) and the applicable laws of the Republic of Latvia and the European Union.

5.2. The Data Controller may amend this Privacy Policy at any time; amendments take effect upon publication on followingthedragon.lv.