Privacy policy
This policy covers oats.lv, pension.oats.lv and bmx.oats.lv. The estimator at oats.lv/tame has its own annex, linked at the end, because it processes a project brief that the others do not.
Who is responsible
SIA "OATS", registration number 40203754767, Latvia.
Write to info@oats.lv about anything on this page.
Your rights
Under the GDPR you can ask for a copy of the personal data I hold about you, ask me to correct it, ask me to delete it, ask me to restrict how it is used, ask for it in a portable form, and object to processing based on legitimate interest.
Email info@oats.lv to exercise any of these. I answer within one month. If you are not satisfied, you can complain to the Data State Inspectorate, the Latvian supervisory authority, at dvi.gov.lv.
The contact form on oats.lv
The contact popup collects three fields: your name, your email address and your message.
Purpose: to answer you. Legal basis: your consent, given by sending the form, and my legitimate interest in responding to business enquiries.
Delivery: the form is passed to Resend, an email delivery service, which sends it to info@oats.lv. Your email address becomes the reply-to address so I can answer. Nothing is written to a database on the way through.
Retention: the message stays in the info@oats.lv mailbox until I delete it. Ask me to delete it and I will.
Analytics
These sites use GoatCounter. It sets no cookies, records no IP address and builds no profile. It counts page views and referrers only. There is nothing here that identifies you.
The pension calculator
Everything you type into pension.oats.lv stays in your browser. Your figures are saved to your own device using localStorage, not to a server. Clear your browser storage and they are gone.
Two actions send data to the server. Downloading the PDF report sends your age, retirement age, gross monthly salary, expected salary growth, property size and the projected capital and monthly figures for each of the three pillars. The optional AI insight sends the same kind of calculator state.
These payloads carry no name, no email address and no account of any kind. There is nothing in them that identifies you as a person.
The report request is not stored. The server renders the PDF, returns it and keeps only a counter of how many reports have been produced.
The written commentary in the report is produced by DeepSeek, which receives the figures above and no identifier. The separate AI insight endpoint uses Anthropic. Both are third-party model providers outside the EU.
The web server keeps an access log, and that log records the IP address of the requesting device alongside these POST requests, as it does for any page request. The log rotates and old files are discarded. IP addresses are also held in memory for a few minutes to rate-limit the export endpoint, and are not written anywhere for that purpose.
The BMX statistics site
bmx.oats.lv collects nothing from you. There is no account, no form and no tracking beyond the analytics described above.
The site does publish personal data about riders: name, club, age group and competition results. That data comes from public Latvian BMX competition results published on sqorz.com. Legal basis: legitimate interest in reporting published sports results.
If you are a rider, or the parent of one, and you want your data removed from the site, email info@oats.lv and I will remove it.
The rider report PDF includes a written summary generated by DeepSeek from the same public results. Download counts are kept as a plain number. IP addresses are used only to slow repeated requests and are not stored.
The estimator
oats.lv/tame processes a project description you write, which is more than the other sites handle. It has its own policy.