Contacts

Last updated: August 11, 2026

1. General information

The purpose of this Privacy Policy is to inform Stars Resort website visitors and clients about the collection, use, storage, and protection of personal data.

The Stars Resort service provider and personal data controller is:

SIA “Key Point”
Registration No.: 40203284926
VAT No.: LV40203284926
Registered address: Upeņu iela 4–12, Rīga, LV-1082
Service location: Ainas iela 10, Sigulda
Email: info@starsresort.lv
Phone: +371 29335153

Company registration and VAT details are current according to publicly available information from Lursoft.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, also known as the General Data Protection Regulation (GDPR), and other applicable legislation.

2. What personal data we process

Depending on how you use the Stars Resort website and services, we may process the following personal data:

first and last name;
email address;
phone number;
information about the selected service;
selected villa;
arrival and departure dates;
number of guests;
information regarding sauna or other additional service bookings;
information required for invoice preparation;
payment and payment status information;
information you provide when contacting us;
IP address, browser, device, and website usage information;
information obtained through cookies and similar technologies.

We only process personal data that is necessary for the provision of a specific service or for another purpose specified in this policy.

3. Villa bookings

The Smoobu booking system is used for villa reservations on the Stars Resort website.

When booking a villa, data necessary for the booking, such as name, surname, contact information, booking dates, number of guests, selected property, payment information, and other information required to complete the booking, may be transferred to and processed in Smoobu.

This data is used to:

check available dates;
create and manage bookings;
synchronize availability across booking channels;
prevent double bookings;
contact the guest regarding the booking;
send booking confirmations and stay-related information;
manage booking changes or cancellations.

In its data processing terms, Smoobu states that it acts as a data processor on behalf of the client regarding guest data.

4. Sauna bookings and contact forms

The GoHighLevel / HighLevel platform may be used to provide sauna bookings, contact forms, and certain automated notifications.

This system may process:

full name;
email address;
phone number;
selected booking date and time;
information about the booked service;
payment status;
the message sent by the customer and other information necessary for facilitating the booking or communication.

HighLevel states that in cases where its clients use the platform to process their own customers' personal data, HighLevel acts as a data processor.

5. Payment processing

Stars Resort may use Stripe for online card payments.

During the payment process, Stripe may process information such as the customer's name, contact details, payment method information, transaction amount, date, and payment status.

When using the payment environment provided by Stripe, sensitive payment card data is sent to the payment service provider rather than processed on the Stars Resort website server.

If payment by invoice or bank transfer is selected for a booking, SIA “Key Point” processes the data necessary for invoice preparation, payment identification, and compliance with accounting requirements.

6. Purposes of personal data processing

Personal data may be processed to:

facilitate the booking of Stars Resort services;
prepare and execute a contract with the customer;
manage villa and sauna bookings;
receive and manage payments;
prepare invoices;
contact the customer regarding a booking;
send booking confirmations and practical information;
respond to customer questions and messages;
ensure the operation of the website and booking systems;
comply with accounting, tax, and other regulatory requirements;
protect the company's property and legitimate interests;
analyze website usage;
use marketing and advertising technologies with the user's consent.

7. Legal basis for personal data processing

Depending on the specific purpose of personal data processing, data may be processed:

for the conclusion and performance of a contract;
to fulfill the legal obligations of SIA “Key Point”;
to ensure the legitimate interests of SIA “Key Point”;
based on the consent provided by the individual.

For example, the processing of data required to make a reservation is primarily necessary for the conclusion and performance of a contract, whereas non-essential marketing cookies are used based on user consent. The GDPR provides for the following legal bases for the processing of personal data.

8. Cookies

The Stars Resort website may use cookies and similar technologies.

Necessary cookies are used to ensure the operation of the website and its core functions.

Analytical cookies may be used to collect information about website usage and help improve its performance.

Marketing and advertising cookies may be used to evaluate the effectiveness of advertising campaigns, build advertising audiences, and display more relevant ads to users on Stars Resort or third-party platforms.

Non-essential analytical and marketing cookies, which require user consent, are only activated after such consent has been received.

Users have the right to decline non-essential cookies and to change or withdraw their choice at any time. The Data State Inspectorate specifies that marketing and statistical cookies require user consent and that the option to withdraw this consent must be easily accessible.

9. Recipients of personal data

Personal data may be transferred to the extent necessary to companies that help provide Stars Resort services, including:

Smoobu — for villa reservations and availability management;
HighLevel / GoHighLevel — for sauna reservations, customer forms, and communication management;
Stripe — for payment processing;
to accounting service providers;
to website, hosting, IT, and technical service providers;
to analytics and advertising platforms, if the user has provided the necessary consent;
to state and supervisory authorities in cases stipulated by regulatory enactments.

Personal data is transferred only to the extent necessary to ensure the provision of the relevant service or the purpose of the processing.

10. Data transfer outside the European Economic Area

Certain technology service providers used by Stars Resort may also process data outside the European Economic Area.

In such cases, the transfer of personal data is carried out in compliance with the requirements set forth by the GDPR and by using applicable data protection mechanisms.

11. Data storage

Personal data is stored only for as long as necessary to achieve the specific purpose of the personal data processing or to fulfill obligations stipulated by regulatory enactments.

Information regarding reservations, payments, and transactions may be stored for as long as necessary:

for the fulfillment of reservations;
for compliance with accounting and tax requirements;
for processing customer inquiries;
for the resolution of potential claims or disputes.

If the processing of personal data is based on consent, such processing will be terminated upon the withdrawal of consent, unless there is another legal basis for the continued storage of the data.

12. Video surveillance

Video surveillance may be conducted on the Stars Resort premises for the safety of guests, staff, and property. The Stars Resort public terms of use currently state that video surveillance is carried out on the premises for guest safety.

Video surveillance data is used for security, property protection, and incident investigation purposes.

13. Data Subject Rights

In cases provided for by law, you have the right to:

receive information regarding the processing of your personal data;
request access to your personal data;
request the correction of inaccurate personal data;
request the erasure of personal data;
request the restriction of personal data processing;
object to the processing of personal data;
exercise the right to data portability;
withdraw previously given consent at any time.

These rights and the conditions for their application are defined by the GDPR.

To exercise your rights or to receive information regarding the processing of your personal data, please contact:

SIA “Key Point”
Email: info@starsresort.lv
Phone: +371 29335153

If you believe that the processing of your personal data does not comply with applicable laws, you have the right to lodge a complaint with the Data State Inspectorate.

14. Changes to the Privacy Policy

SIA “Key Point” reserves the right to update this Privacy Policy if there are changes to the Stars Resort website functionality, services used, personal data processing procedures, or applicable regulatory requirements.

The current version of the Privacy Policy is available on the Stars Resort website.

‍

1. General information

The purpose of this Privacy Policy is to inform visitors and clients of the Stars Resort website about how SIA “Stars Resort” collects, uses, stores, and protects personal data.

Data controller:

SIA “Stars Resort”
Reg. No.: 40203284926
Registered address: Upeņu iela 4 - 12, Rīga, LV-1082
Service location: Ainas iela 10, Sigulda
Email: info@starsresort.lv
Phone: +371 29335153

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the General Data Protection Regulation, and other applicable legislation of the Republic of Latvia.

2. What personal data we process

Depending on how you use the Stars Resort website and services, we may process:

Payment service providers may also process payment cards and other transaction information necessary to complete a payment. Stripe indicates that transaction data may include contact information, payment method details, transaction amount, date, and payment status.

3. Villa bookings

Stars Resort uses the Smoobu booking system for villa reservations.

When making a booking on the website, the information required to complete the booking is transferred to and processed by the Smoobu system in order to:

In its data processing agreement, Smoobu provides for the processing of personal data on behalf of the client to ensure the provision of booking management services.

4. Sauna bookings

Stars Resort uses the GoHighLevel / HighLevel booking system for sauna reservations.

When booking a sauna, your name, contact information, selected booking date and time, payment status, and other information necessary for facilitating the booking may be processed in the system.

HighLevel states that in cases where the platform is used by its clients to process their own customer data, HighLevel acts as a data processor on behalf of the service provider.

5. Payment processing

Stripe may be used for online payments.

Stars Resort does not receive or store full payment card details if they are entered within the payment environment provided by Stripe. Stripe processes the information required to complete the payment in accordance with its own terms of service and privacy policy.

If payment by invoice or bank transfer is selected for a villa booking, we process the information necessary for preparing the invoice, identifying the payment, and fulfilling accounting requirements.

6. Purposes of personal data processing

We may use personal data to:

7. Legal basis for personal data processing

Depending on the specific purpose of processing, personal data may be processed:

8. Cookies

The website may use cookies and similar technologies.

Necessary cookies may be used to ensure the operation of the website, reservation forms, security, and other basic functions.

Analytical cookies may be used to understand how visitors use the website and how we can improve its performance.

Marketing and advertising cookies may be used to evaluate the effectiveness of advertisements, build audiences, and show users more relevant ads on other platforms.

Analytical and marketing cookies that require consent are used only after the user has provided their consent. The user must also have the option to reject cookies and change their preferences later. The Data State Inspectorate specifies that non-essential cookies, including marketing and statistical cookies, require user consent and that withdrawing such consent must be easily accessible.

9. Recipients of personal data

Personal data may be transferred only to the extent necessary to provide the service, including:

We do not sell customer personal data to third parties.

10. Data transfer outside the European Economic Area

Some of the technology service providers we use may also process personal data outside the European Economic Area.

In such cases, data transfer is carried out using mechanisms provided for in applicable data protection regulations. HighLevel, for example, indicates its participation in the EU–U.S. Data Privacy Framework.

11. Data retention period

Personal data is stored only for as long as necessary to achieve the relevant purpose.

Reservation and transaction data may be stored for as long as necessary for the performance of the contract, the resolution of potential claims and disputes, and compliance with accounting and tax obligations stipulated by regulatory enactments.

Data processed based on consent is processed until the consent is withdrawn or until the relevant purpose for processing no longer exists.

12. Video surveillance

Video surveillance may be conducted within the Stars Resort premises for the safety of guests and property. The current Stars Resort terms of use also inform guests about video surveillance on the premises.

Video surveillance recordings are used solely for security, property protection, and incident investigation purposes and are not stored longer than necessary for these purposes, except in cases where longer retention of a specific recording is required for dispute resolution or legal protection.

13. Your rights

In cases provided for by regulatory enactments, you have the right to:

Withdrawing your consent does not affect the lawfulness of data processing carried out before the withdrawal. This right is derived from the General Data Protection Regulation.

To exercise your rights, please email info@starsresort.lv.

If you believe that your personal data is being processed in violation of legal requirements, you have the right to lodge a complaint with the Data State Inspectorate.

14. Changes to the Privacy Policy

SIA “Stars Resort” reserves the right to update this Privacy Policy if the website's functionality, the services used, or regulatory requirements change.

The current version of the Privacy Policy is always available on the website.