Legal
Privacy & cookies
Last updated 9 August 2026
This notice explains what personal data nucleation.eu collects, why, on what legal basis, and how you exercise your rights under the General Data Protection Regulation. Questions about any of it, and any request concerning your own data, go through the request form at the foot of this page.
Who is responsible
SIA NUCLEATION, a company registered in Latvia and based in Riga, is the controller of the personal data described in this notice.
We publish no email address; the request form at the foot of this page is the way to reach us, and it is the same route for an ordinary enquiry and for a request about your own data. Replies go to whatever address you give us there. If you would rather write on paper, the registered address below reaches the same people.
- Registered name:
- SIA NUCLEATION
What the contact form collects
When you send a message through the form, we receive the name, email address and message text you type, together with the time of submission. Nothing else about you is captured or inferred.
We use it for one purpose: to read your message and reply. Your address is not added to a mailing list, and the site sends no marketing.
The legal basis is Article 6(1)(b) — steps taken at your request before entering a contract — where you are enquiring about the service. For any other correspondence, the basis is our legitimate interest in answering people who write to us (Article 6(1)(f)).
The form carries a hidden field that people never see and automated submitters usually fill in; entries that complete it are discarded rather than delivered.
Analytics, only with your consent
The site uses Google Analytics 4 to count visits and see which sections are read. It is off by default: no Google script is requested and no analytics cookie exists until you choose "Allow analytics" in the banner. Declining is one click and loads nothing.
With consent, Google receives the pages you view, an approximate location derived from your IP address (the address itself is not retained by Google Analytics), your device and browser type, the site that referred you, and a randomly generated identifier stored in the cookies listed below. This does not tell us who you are.
The legal basis is your consent, under Article 6(1)(a) and under the Latvian rules implementing the ePrivacy Directive for storing information on your device.
Advertising features are switched off. The site signals to Google that advertising storage, advertising user data and ad personalisation are all denied, so the data is not used to build advertising profiles.
You can change your mind at any time: choose "Privacy & cookies" or "Cookies" at the bottom of any page, then Decline. The analytics cookies are deleted and nothing further is sent.
Hosting and server logs
The site is hosted by Vercel. Like any web server, its infrastructure automatically records technical details of each request — IP address, time, the address requested, and the browser's user-agent string — in order to deliver pages, keep the service available, and detect abuse.
The legal basis is our legitimate interest in operating and securing the site (Article 6(1)(f)). These logs are kept for a short operational period and are not used to identify or profile visitors.
Cookies and local storage
The site uses no cookies at all unless you allow analytics. There is one entry stored in your browser regardless — the record of your own banner choice — and it never leaves your device.
| Name | Type | Purpose | Expires |
|---|---|---|---|
| _ga | Cookie · Google Analytics | Distinguishes one visitor from another | 2 years |
| _ga_RBT9NT52TX | Cookie · Google Analytics | Keeps the analytics session state | 2 years |
| nucleation-consent-v1 | Local storage · this site | Remembers whether you allowed or declined analytics | 12 months |
The two analytics cookies are set only after you choose "Allow analytics". The consent record is held in your browser's local storage and is never transmitted to a server; clearing your browsing data removes it and the banner will ask again. No advertising, profiling or cross-site tracking technology is used on this site.
Who else handles the data
We keep the number of parties small and use each one for a single job:
- Vercel Inc. — hosting and delivery of the site.
- Resend — delivery of contact-form messages to our mailbox.
- Google Ireland Limited — analytics, and only where you have consented.
Each acts as our processor under a data-processing agreement; for Google that is the Google Ads Data Processing Terms, accepted for this account. Every optional data-sharing setting Google offers — contributing your data to its products, to benchmarking and modelling, to support access, and to business recommendations — is switched off, so the analytics data is not pooled for Google's own purposes.
Where data reaches the United States, the transfer relies on the European Commission's standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework.
We do not sell personal data and do not share it for advertising.
How long it is kept
Contact-form messages are kept while your enquiry is open and for as long as the resulting relationship or our record-keeping obligations require, then deleted.
Analytics data held by Google — both the event records and the user-level identifiers — is set to the shortest retention Google Analytics allows, two months, after which it is deleted automatically. This is separate from the lifetime of the cookies in your own browser, which the table above gives: those sit on your device until they expire or you clear them, and declining analytics deletes them immediately.
Server logs are retained for a short operational period by the host and then discarded.
Your rights
Under the GDPR you may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where processing rests on consent, you may withdraw that consent at any time without affecting what was lawful beforehand.
To exercise any of these, use the request form at the foot of this page and say what you want; you do not have to use any particular wording, and there is no charge. We reply within one month, to the address you give us.
No decision affecting you is made automatically, and no profiling takes place.
If you think we have handled your data badly, you are entitled to complain to the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), or to the authority in the EU country where you live or work.
Security
The site is served only over HTTPS, so what you type into the form is encrypted in transit. Access to the mailbox that receives form submissions and to the analytics property is limited to the principal.
Changes to this notice
When the site changes in a way that affects this notice, we update it here. The date at the top always reflects the version you are reading.
Privacy request
Ask us about your data.
Use this for any request under this notice — a copy of your data, a correction, deletion, or a question about how the site works. Tell us what you want in your own words. We reply within one month to the address you give.