Last updated: 2026-05-25
Privacy Policy
This policy explains how GIBA Films handles personal data when you visit this site. It also lists the cookies and similar trackers we use and how to control them. If anything is unclear, write to us using the channels below and we will explain.
Who we are
GIBA Films is a video production studio operating from Latvia. We act as the data controller for personal data collected through this site. The legal entity behind the brand is GIBA Films, registered at LV.
What data we collect
Browsing data
When you visit the site, our hosting provider (DigitalOcean) records your IP address, user-agent string and the path you requested. These logs are kept for 30 days for security and uptime monitoring.
Analytics data (after consent)
If you click Accept on the cookie banner, Google Analytics 4 starts collecting a pseudonymous cookie ID, page views and clicks, approximate location at country/city level, plus device and browser type. Your raw IP address is not stored by GA.
Communication data
When you write to us through mailto:, Telegram or Instagram, your message reaches us through that channel. We treat it as confidential and only use it to reply to your enquiry.
We do NOT collect through this site: your name, email, phone, payment details, IDs, biometrics — none of these are requested anywhere on the page.
Cookies and similar trackers
We use a minimal set: one technical preference and Google Analytics (only after your consent).
| Name | Provider | Purpose | Lifespan |
|---|---|---|---|
| _ga | Google Analytics | Distinguish unique visitors and session state | 2y |
| _ga_<id> | Google Analytics | Distinguish unique visitors and session state | 2y |
| _gid | Google Analytics | Distinguish visitors within 24h | 24h |
| giba-consent | giba.films | Remember your cookie banner choice | localStorage |
We do NOT use advertising cookies, social trackers (Facebook Pixel, LinkedIn, X), session-replay or heatmap tools.
Why we collect it
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Analytics | Understand site usage, improve UX | Consent (Art. 6(1)(a)) |
| Access logs | Security, uptime | Legitimate interest (Art. 6(1)(f)) |
| Email/messenger correspondence | Reply, prepare quote/contract | Pre-contractual measures (Art. 6(1)(b)) |
| Cookie consent state | Remember your choice | Legitimate interest |
How long we keep it
- ·Analytics events: 14 months (GA4 default, we do not extend)
- ·Access logs: 30 days
- ·Email correspondence: duration of project plus 3 years for tax and legal records
- ·Cookie consent state: until you clear browser storage
Who we share data with
We use the following processors. Each is bound by their own GDPR-compliant terms:
- ·Google LLC (USA) — Google Analytics 4. DPF certified. privacy policy ↗
- ·Cloudinary Ltd. (Israel/USA) — video hosting and CDN. Receives an IP when you stream a clip. privacy policy ↗
- ·Sanity.io (Norway) — content CMS. Serves text and image data from our store. privacy policy ↗
- ·DigitalOcean LLC (USA) — site hosting. Sees server logs. DPF certified. privacy policy ↗
We do not sell your data and we do not share it with anyone outside this list.
International transfers
Some processors are in the United States. Transfers happen under the EU-US Data Privacy Framework (where applicable) or Standard Contractual Clauses approved by the European Commission, providing safeguards equivalent to GDPR.
Your rights
Under GDPR you have the right to:
- ·Access the data we hold about you
- ·Correct inaccurate data
- ·Delete your data (right to be forgotten)
- ·Restrict processing in certain situations
- ·Object to processing based on legitimate interest
- ·Receive your data in a machine-readable format
- ·Withdraw consent at any time
- ·Lodge a complaint with the Latvian Data State Inspectorate
To exercise any of these rights, write to the contact channels in the Contact section on the homepage. We respond within 30 days.
Supervisory authority: Datu valsts inspekcija (Latvian Data State Inspectorate), www.dvi.gov.lv ↗
Children
The site has no forms or registration — there is nothing to submit through this page. The only data flow from a visitor's browser is analytics cookies, and only after you click Accept on the cookie banner. We do not target children under 16 as a separate audience. If you are a parent or guardian and concerned your child accepted analytics here, clear localStorage for this site or write to us.
How to manage cookies
- ·Decline analytics in the cookie banner.
- ·Clear localStorage for this site to see the banner again.
- ·Block third-party cookies in your browser's privacy settings.
- ·Install the Google Analytics Opt-out Browser Add-on to opt out across all sites.
Changes to this policy
When we make material changes, we update the date at the top. For significant changes (new processors, new data categories, expanded purposes), we show a notice for 30 days.
Contact
Questions about this policy or your data? Write to the contact channels in the Contact section on the homepage.
Data controller: GIBA Films, LV.