Privacy Policy

Last updated: March 12, 2026

1. General Provisions

1.1 Introduction

This Privacy Policy ("Policy") describes how Valters Kamaldiņš (based in Latvia) ("Data Controller", "we", "us") processes the personal data of users ("you", "your") of the website Kamaltek.com ("Site").
This Policy is prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Latvian Law on Processing of Personal Data, and other applicable laws of the Republic of Latvia relating to data protection and consumer rights.

1.2 Contact Information

For any inquiries regarding data processing, you may contact the Data Controller directly via the Contact form on the Site. We aim to respond to all legitimate requests within 30 days.

2. Categories of Personal Data and Purpose

2.1 Data Collection

We process only the minimum amount of data necessary to provide our services. This includes:
  • Identifier Data: Display name and email address provided during account registration.
  • Technical Data: IP address, browser type, device information, and access timestamps collected automatically for security and anti-abuse purposes (e.g., rate limiting).
  • Communication Data: Content of private messages, forum posts, and contact form submissions.
  • Engagement Data: Kudos, awards given/received, and forum reputation metrics.

    • 2.2 Processing Purposes

    Your data is processed for the following purposes:
    • To provide and maintain the Site's functionality (Base: Performance of a Contract).
    • To ensure the security of the Site and prevent fraudulent activities or abuse (Base: Legitimate Interest).
    • To respond to your inquiries and support requests (Base: Legitimate Interest).
    • To comply with legal obligations, such as accounting or law enforcement requests (Base: Legal Obligation).

      • 3. Data Sharing and Transfers

      3.1 Third-Party Sub-processors

      We utilize trusted service providers to host the Site and ensure its security:
      • Cloudflare, Inc. (USA/EU): Infrastructure, DDoS protection, D1 database hosting, and Turnstile (human verification). Cloudflare is a member of the EU-U.S. Data Privacy Framework.
      • Brevo (Sendinblue SAS, France): For transactional email delivery. All data is processed within the EU.

        • 4. Data Retention and Security

        4.1 Retention Policy

        Personal data is kept only for as long as necessary for the purposes for which it was collected. Account-related data is kept while the account is active. Transactional logs and IP data are typically kept for no longer than 12 months for security analysis.

        4.2 Security Measures

        We implement robust technical measures, including HTTPS encryption, password hashing, and restricted access to backend databases, to prevent unauthorized access or disclosure.

        5. Your Rights as a Data Subject

        5.1 GDPR Rights

        Under the GDPR and Latvian law, you have the following rights:
        • Right of Access: Obtain a copy of your personal data.
        • Right to Rectification: Correction of inaccurate data.
        • Right to Erasure ('Right to be Forgotten'): Deletion of your data where applicable.
        • Right to Object: Objecting to processing based on legitimate interests.
        • Right to Data Portability: Receiving your data in a structured, machine-readable format.

          • 5.2 Supervisory Authority

          If you believe your data processing violates the GDPR, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at Elijas iela 17, Rīga, LV-1050.