Who controls your data
Woden SIA, registration No. 40103165646 and VAT No. LV40103165646, is the controller for personal data it receives through 42days and uses to respond to enquiries or deliver services.
For privacy questions or to exercise your data rights, email support@42days.eu. Please state that your request concerns data protection so it can be handled appropriately.
Data we process
This website does not currently use an account system. If you send the contact form, we collect your name, email address, preferred language, and the project information you choose to provide so we can respond to your enquiry.
If you book a call, the scheduling form may collect information such as your name, email address, time zone, meeting choice, and anything you choose to add to the booking. We also receive the booking details needed to prepare for and conduct the meeting.
Our hosting provider may process ordinary technical request data, such as IP address, browser information, timestamps, and security logs, to deliver and protect the website.
Analytics and advertising
If you consent to analytics, we may use Google Analytics 4 to understand aggregate website usage and whether a visit results in a submitted enquiry or completed booking. If you consent to advertising measurement, Google Ads and Meta Pixel may measure those outcomes as campaign conversions.
These optional tools can process identifiers, IP address, device and browser information, page activity, referrer and campaign parameters, and conversion events. We do not send the contents of your contact or Cal.com booking forms through conversion events. You can reject optional tracking or change your choice at any time using the privacy-settings button in the lower-left corner.
Why we process it
- To arrange and conduct calls, respond to enquiries, and take steps you request before entering a contract.
- To prepare proposals and deliver agreed design, engineering, and product services.
- To keep the website available, secure, and resistant to misuse.
- To comply with accounting, tax, legal, and dispute-resolution obligations.
Legal bases
Depending on the context, processing is based on taking steps at your request before a contract or performing a contract, our legitimate interests in responding to enquiries and securing our services, compliance with legal obligations, or your consent where consent is specifically requested. You may withdraw consent at any time without affecting earlier lawful processing.
Service providers and transfers
Contact-form email delivery is provided through Resend. Resend receives the enquiry details needed to deliver the message to us. Scheduling remains optional and is provided through Cal.com; Cal.com loads only when you choose to open the calendar and may then process device, usage, cookie, and booking data under its own service terms and privacy practices. Review the Cal.com Privacy Policy before submitting a booking.
Where you consent, Google and Meta also act as recipients of analytics or advertising measurement data. We may additionally use hosting, email, video-meeting, document, and professional-service providers where necessary. Providers receive only the information needed for their role and are required to protect it. Some providers may process information outside the EEA; where required, transfers rely on an adequacy decision or appropriate contractual safeguards.
How long we keep it
Enquiry and booking data is kept only as long as reasonably needed to follow up, establish a working relationship, document decisions, or resolve disputes. Contract, invoice, and transaction records may be kept for the periods required by Latvian accounting, tax, and other applicable law. Security logs are retained for a limited operational period unless an incident requires longer preservation.
Your rights
Subject to the conditions in applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may also withdraw consent and lodge a complaint with a supervisory authority.
In Latvia, the supervisory authority is the Data State Inspectorate. We may ask for enough information to verify your identity before fulfilling a request.
Changes to this policy
We may update this policy when our website, providers, or legal obligations change. The latest version will remain available on this page and the date above will be updated when material changes are published.
