Privacy Policy
Last updated: 2026-07-27
This website is operated by ZAB Corvus Vanags Legal SIA (CORVUS Attorneys-at-Law), registration No. 40203352796, Elizabetes iela 45/47, Riga, LV-1010, Latvia — the controller of personal data processed through this site. Contact: [email protected], +371 67304575.
What we collect
What you send us. When you use the contact form or write to us by email, we receive the data you provide: your name, email address, citizenship, and whatever you choose to tell us about your situation, including any documents you attach by email. We ask about citizenship because it directly determines which Latvian residence routes are legally available — it is the first fact any assessment turns on.
Technical data. Our servers keep standard access logs (IP address, time, pages requested) for security and troubleshooting. Our visitor analytics are aggregate and cookie-free: we see page-level statistics, not profiles of identified individuals.
Cookies. This site does not use advertising or cross-site tracking cookies. Only technically necessary storage is used, if any.
Why we process it, and on what legal basis
- Answering your enquiry and assessing your situation — steps taken at your request prior to entering into an engagement (GDPR Art. 6(1)(b)). The form's checkbox is your acknowledgement of this policy; where you volunteer personal data beyond what we ask for, we process it on the basis of your consent (Art. 6(1)(a)), which you may withdraw at any time.
- Providing legal services, if you engage us — performance of the contract (Art. 6(1)(b)).
- Legal obligations of a Latvian attorney-at-law office, including client identification (KYC/AML) where an engagement is opened, accounting and file-retention rules (Art. 6(1)(c)).
- Legitimate interests — security of our systems and keeping a record of correspondence (Art. 6(1)(f)).
We do not sell personal data and do not use it for third-party marketing.
Who receives it
Access is limited to the firm's attorneys and staff. Technical processors act on our behalf under data-processing agreements: website hosting, email infrastructure, and form handling. Data is disclosed to authorities only where the law requires it — and always within the limits of professional secrecy rules applicable to attorneys.
Where it is processed
Personal data is stored and processed within the EU/EEA wherever possible. If any processor operates outside the EEA or requires a transfer beyond it, the transfer occurs only under GDPR-compliant safeguards (adequacy decision or standard contractual clauses).
How long we keep it
- Enquiries that do not lead to an engagement: deleted no later than 12 months after our last exchange.
- Client files and related data where an engagement is opened: retained for the periods required by Latvian law and the professional rules applicable to sworn attorneys, then deleted or anonymized.
- Server logs: 90 days.
Your rights
Under the GDPR you may request access to your data, rectification, erasure, restriction of processing, data portability, and you may object to processing based on legitimate interests or withdraw consent. Write to [email protected] — we respond within one month (extendable for complex requests, as the GDPR permits). Note: where data forms part of an attorney's case file, statutory retention duties and professional secrecy may lawfully limit some of these rights.
You may also lodge a complaint with the Latvian supervisory authority: Datu valsts inspekcija (Data State Inspectorate), www.dvi.gov.lv.
Changes
We may update this policy; the current version with its date is always published on this page.