Skip to content

Legal

Privacy & cookies

Last updated 29 August 2026

This notice explains what personal data nucleation.eu collects, why, on what legal basis, and how you exercise your rights under the General Data Protection Regulation. Questions about any of it, and any request concerning your own data, go through the request form at the foot of this page.

Who is responsible

SIA NUCLEATION, a company registered in Latvia and based in Riga, is the controller of the personal data described in this notice.

We publish no email address; the request form at the foot of this page is the way to reach us, and it is the same route for an ordinary enquiry and for a request about your own data. Replies go to whatever address you give us there. If you would rather write on paper, our registered address is published by the Latvian Register of Enterprises (Uzņēmumu reģistrs) against the registration number below.

Registered name:
SIA NUCLEATION
Registration number:
40203770329

What the contact form collects

When you send a message through the form, we receive the name, email address and message text you type, together with the time of submission. Nothing else about you is captured or inferred.

We use it for one purpose: to read your message and reply. Your address is not added to a mailing list, and the site sends no marketing.

The legal basis is Article 6(1)(b) — steps taken at your request before entering a contract — where you are enquiring about the service. For any other correspondence, the basis is our legitimate interest in answering people who write to us (Article 6(1)(f)).

The form carries a hidden field that people never see and automated submitters usually fill in; entries that complete it are discarded rather than delivered.

If you apply for a job

When you apply for a position through this site, we receive your email address, the time of submission, and one of two things: the address of your LinkedIn profile, or a CV you attach as a PDF. You may add a note, and whatever you put in it comes to us as well. The attachment is capped at 3 MB and no file type other than PDF is accepted. We do not ask for a date of birth, a photograph, a nationality or any special category of data, and you should not send them, in the note or in the CV. Where you give a LinkedIn address we look at the profile as any visitor would; we do not receive anything from LinkedIn about you by giving it.

We use it for one purpose: to assess you for the role you applied for, and to correspond with you about it. Applications are read by the principal. They are not added to a mailing list and are never used for marketing.

The legal bases are your consent, which you give by ticking the box on the application form (Article 6(1)(a)), and steps taken at your request before entering a contract of employment (Article 6(1)(b)). If you also tick the optional box, that separate consent lets us keep your application on file for future roles.

Ticking the boxes is entirely your choice. You can withdraw either consent at any time by using the request form, and we delete what we hold. Withdrawal does not affect what was lawful before it.

Where a role is also advertised on LinkedIn and you apply there instead, LinkedIn collects your application under its own privacy policy and passes it to us; from that point this notice governs what we do with it.

Analytics, only with your consent

The site uses Google Analytics 4 to count visits and see which sections are read. It is off by default: no Google script is requested and no analytics cookie exists until you choose "Allow analytics" in the banner. Declining is one click and loads nothing.

With consent, Google receives the pages you view, an approximate location derived from your IP address (the address itself is not retained by Google Analytics), your device and browser type, the site that referred you, and a randomly generated identifier stored in the cookies listed below. This does not tell us who you are.

The legal basis is your consent, under Article 6(1)(a) and under the Latvian rules implementing the ePrivacy Directive for storing information on your device.

Advertising features are switched off. The site signals to Google that advertising storage, advertising user data and ad personalisation are all denied, so the data is not used to build advertising profiles.

You can change your mind at any time: choose "Privacy & cookies" or "Cookies" at the bottom of any page, then Decline. The analytics cookies are deleted and nothing further is sent.

Hosting and server logs

The site is hosted by Vercel. Like any web server, its infrastructure automatically records technical details of each request — IP address, time, the address requested, and the browser's user-agent string — in order to deliver pages, keep the service available, and detect abuse.

The legal basis is our legitimate interest in operating and securing the site (Article 6(1)(f)). These logs are kept for a short operational period and are not used to identify or profile visitors.

Cookies and local storage

The site uses no cookies at all unless you allow analytics. There is one entry stored in your browser regardless — the record of your own banner choice — and it never leaves your device.

NameTypePurposeExpires
_gaCookie · Google AnalyticsDistinguishes one visitor from another2 years
_ga_RBT9NT52TXCookie · Google AnalyticsKeeps the analytics session state2 years
nucleation-consent-v1Local storage · this siteRemembers whether you allowed or declined analytics12 months

The two analytics cookies are set only after you choose "Allow analytics". The consent record is held in your browser's local storage and is never transmitted to a server; clearing your browsing data removes it and the banner will ask again. No advertising, profiling or cross-site tracking technology is used on this site.

Who else handles the data

We keep the number of parties small and use each one for a single job:

  • Vercel Inc. — hosting and delivery of the site.
  • Resend — delivery of contact-form messages to our mailbox.
  • Google Ireland Limited — analytics, and only where you have consented.
  • LinkedIn Ireland Unlimited Company — where a role is advertised on LinkedIn and you apply through it.

Each acts as our processor under a data-processing agreement; for Google that is the Google Ads Data Processing Terms, accepted for this account. Every optional data-sharing setting Google offers — contributing your data to its products, to benchmarking and modelling, to support access, and to business recommendations — is switched off, so the analytics data is not pooled for Google's own purposes.

Where data reaches the United States, the transfer relies on the European Commission's standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework.

We do not sell personal data and do not share it for advertising.

How long it is kept

Contact-form messages are kept while your enquiry is open and for as long as the resulting relationship or our record-keeping obligations require, then deleted.

Analytics data held by Google — both the event records and the user-level identifiers — is set to the shortest retention Google Analytics allows, two months, after which it is deleted automatically. This is separate from the lifetime of the cookies in your own browser, which the table above gives: those sit on your device until they expire or you clear them, and declining analytics deletes them immediately.

Job applications are kept until the role is filled or withdrawn and for six months afterwards, so that we can answer questions about the decision, then deleted. Where you gave the optional consent, we keep the application for twelve months from the day you sent it and delete it at the end of that period unless you have asked us to sooner.

Server logs are retained for a short operational period by the host and then discarded.

Your rights

Under the GDPR you may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where processing rests on consent, you may withdraw that consent at any time without affecting what was lawful beforehand.

To exercise any of these, use the request form at the foot of this page and say what you want; you do not have to use any particular wording, and there is no charge. We reply within one month, to the address you give us.

No decision affecting you is made automatically, and no profiling takes place.

If you think we have handled your data badly, you are entitled to complain to the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), or to the authority in the EU country where you live or work.

Security

The site is served only over HTTPS, so what you type into the form is encrypted in transit. Access to the mailbox that receives form submissions and to the analytics property is limited to the principal.

Changes to this notice

When the site changes in a way that affects this notice, we update it here. The date at the top always reflects the version you are reading.

Privacy request

Ask us about your data.

Use this for any request under this notice — a copy of your data, a correction, deletion, or a question about how the site works. Tell us what you want in your own words. We reply within one month to the address you give.

Back to nucleation.eu