Privacy Policy

Last updated: 14 August 2026

This privacy policy explains what personal data VSIA “Latvijas Nacionālais simfoniskais orķestris” (the Latvian National Symphony Orchestra, LNSO) processes through the website www.lnso.lv, for what purposes, on what legal basis, and what rights you have regarding your data.

This document is a general description and does not replace an individualised legal assessment. The policy will be reviewed and updated as necessary.

1. Data controller and contact details

The controller of your personal data is:

VSIA “Latvijas Nacionālais simfoniskais orķestris” (LNSO)
Registration No.: 40003373615
Legal address: Amatu iela 6, Riga, LV-1050, Latvia
Actual address: Krišjāņa Valdemāra iela 5, Riga, LV-1010, Latvia
Email: [email protected]
Phone: +371 67224850

If you have questions about this privacy policy or the processing of your data, please contact us at [email protected].

2. What data we process and for what purposes

2.1. Newsletter subscription. If you provide your email address in the website footer to subscribe to LNSO newsletters, we process your email address in order to send you information about LNSO concerts, news and events. Subscriptions are handled through a newsletter tool integrated into the website (the WordPress “Newsletter” plugin), and the data is stored in our server’s database. You can unsubscribe at any time using the unsubscribe link included in every email, or by writing to us at [email protected].

2.2. Contacting us. If you contact us by email or phone (for example, with general questions, regarding venue rental at [email protected], or regarding cooperation proposals), we process your name, contact details and the information you provide in your message or conversation in order to respond to your enquiry.

2.3. Ticket purchases. Tickets and subscriptions for LNSO concerts can only be purchased through our partner “Biļešu Paradīze” (SIA, www.bilesuparadize.lv), either online or at box offices. The LNSO website only directs you to the ticketing partner’s website; payment data and ticket-purchase data (name, contact details, payment details) are processed by that partner as an independent controller under its own privacy policy. LNSO may receive aggregated (not individual) attendance data from the ticketing partner for statistical and settlement purposes.

2.4. Website analytics. The website www.lnso.lv uses Google Analytics (Google Ireland Limited), which uses cookies to collect statistics about site visits — for example, the number of pages viewed, approximate location, device and browser type. This data is used to analyse and improve the website’s performance and content. Data is transferred to and processed on Google’s servers, including outside the European Union/EEA, based on the European Commission’s Standard Contractual Clauses or other safeguards provided for under the General Data Protection Regulation (GDPR). More information: https://policies.google.com/privacy.

2.5. Social media. The website contains links to LNSO’s social media accounts (Facebook, X/Twitter, Instagram, YouTube). If you follow these links or interact with our accounts on these platforms, the processing of your data is governed by that platform’s own privacy policy, not by this document.

2.6. Job applications. If a vacancy is published on the website and you apply by sending your CV and cover letter to the specified email address, we process the personal data provided in your application in order to evaluate your candidacy for the relevant position.

2.7. Technical data. Like any website, the www.lnso.lv server automatically logs technical data (such as IP address, request time, browser type) to ensure the website’s operation, security and troubleshooting.

3. Legal basis for processing

Depending on the specific processing activity, the legal basis for processing personal data is:

  • your consent (for example, when subscribing to the newsletter) — Article 6(1)(a) GDPR;
  • taking steps at your request prior to entering into a contract, or performance of a contract (for example, venue rental enquiries) — Article 6(1)(b) GDPR;
  • our legitimate interest in ensuring the website’s operation and security and improving our services (for example, technical data, aggregated visit statistics) — Article 6(1)(f) GDPR;
  • compliance with a legal obligation (for example, accounting and archiving requirements).

4. Recipients of data

Your personal data may need to be shared with:

  • service providers who ensure the website’s operation (website developer, server/hosting provider) and the newsletter tool;
  • Google Ireland Limited — for website analytics purposes (Google Analytics);
  • SIA “Biļešu Paradīze” — for the sale of tickets and subscriptions;
  • competent state authorities, where required by law.

We do not sell your personal data and do not use it for direct marketing that you have not agreed to.

5. Data retention periods

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law:

  • newsletter subscriber email addresses — until you unsubscribe;
  • correspondence (emails, enquiries) — generally up to 3 years after the last contact, unless the law provides for a different period;
  • job application data — for the duration of the relevant recruitment process and up to 6 months after its conclusion, unless you have consented to longer storage;
  • Google Analytics data — in accordance with Google’s default or our configured data retention period (generally up to 14 months);
  • accounting and financial documents — for the period set out in applicable law (generally 5–10 years).

6. Cookies

The website uses:

  • necessary/technical cookies — to ensure the website’s core functions (for example, the operation of the WordPress system);
  • analytics cookies — Google Analytics cookies for collecting visit statistics (see section 2.4);
  • functional cookies — for example, related to the newsletter subscription form.

You can manage or delete cookies in your browser settings, and block their installation — note that blocking certain cookies may affect the website’s functioning. LNSO is working on a technical solution that will allow website visitors to give or withdraw consent to non-essential (analytics) cookies before they are set, in line with the requirements of the Electronic Communications Law and the GDPR.

7. Your rights

Under the GDPR you have the right to:

  • request access to your personal data and a copy of it;
  • request the correction of inaccurate data;
  • request the erasure of data where there is no legal basis for its continued storage;
  • restrict the processing of data in certain cases;
  • object to processing based on legitimate interests;
  • data portability, where processing is based on consent or a contract and is carried out by automated means;
  • withdraw your consent at any time, where processing is based on consent (this does not affect the lawfulness of processing carried out before the withdrawal);
  • lodge a complaint with a supervisory authority.

To exercise your rights, please write to [email protected].

8. Lodging a complaint

If you believe that your personal data is being processed in breach of applicable law, you have the right to lodge a complaint with Latvia’s supervisory authority:

Data State Inspectorate (Datu valsts inspekcija)
Address: Elijas iela 17, Riga, LV-1050, Latvia
Phone: +371 67223131
Email: [email protected]
Website: www.dvi.gov.lv

9. Changes to this privacy policy

This privacy policy may be updated periodically, for example due to changes in applicable law or in our data processing practices. The current version will always be available in this section of the website, with the date of the last update indicated.