Privacy Policy
Last updated: January 29, 2026
1. Introduction
DirectoriaMosaic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (amberlvanalytics.com), use our services, or communicate with us.
We operate in accordance with the General Data Protection Regulation (GDPR) of the European Union, the Personal Data Processing Law of Latvia, and other applicable data protection laws.
2. Data Controller Information
The data controller for your personal data is:
DirectoriaMosaic
Terbatas street 14
Centra rajons, Rīga, LV-1011
Latvia
For privacy inquiries, please contact our Data Protection Officer at privacy@amberlvanalytics.com or by phone at +37167118383.
3. Personal Data We Collect
We may collect the following categories of personal data:
3.1. Information You Provide to Us
- Contact Information: Name, email address, phone number, organization, position, and postal address
- Account Information: Login credentials for our platform (if applicable)
- Profile Information: Professional background, experience, and areas of expertise
- Communication Data: Information provided in emails, forms, or other communications with us
- Service Data: Information related to your participation in our director exchange programs or consulting services
3.2. Information We Collect Automatically
- Usage Data: Information about how you interact with our website, including pages visited, time spent, and actions taken
- Device Information: IP address, browser type, operating system, and other technical information
- Cookies and Similar Technologies: Information collected through cookies and similar technologies (see our Cookie Policy for details)
4. How We Use Your Personal Data
We use your personal data for the following purposes and legal bases:
| Purpose | Legal Basis |
|---|---|
| To provide and manage our services, including director exchange programs and consulting services | Performance of a contract or pre-contractual measures |
| To communicate with you about our services, respond to inquiries, and provide support | Legitimate interests or performance of a contract |
| To improve our website, services, and user experience | Legitimate interests |
| To send you marketing communications about our services and events | Consent or legitimate interests (with opt-out option) |
| To comply with legal obligations and protect our legal rights | Legal obligation or legitimate interests |
| To ensure the security and functionality of our website and services | Legitimate interests |
We will not use your personal data for purposes incompatible with those described in this Privacy Policy without providing you with notice and, where required, obtaining your consent.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Specific retention periods are determined based on the nature of the data and the purpose of processing:
- Contact information from inquiries: 2 years after last communication
- Client service data: 5 years after service completion
- Marketing communication preferences: Until you opt-out or withdraw consent
- Website usage data: 2 years from collection
When personal data is no longer necessary, we will securely delete or anonymize it.
6. Data Sharing and Transfers
6.1. Categories of Recipients
We may share your personal data with the following categories of recipients:
- Service Providers: Third-party vendors who perform services on our behalf (e.g., hosting providers, email service providers)
- Professional Advisors: Legal, accounting, and other professional advisors when necessary
- Regulatory Authorities: Government and regulatory bodies when required by law
- Business Partners: With your consent, we may share your information with trusted business partners for specific purposes related to our services
6.2. International Transfers
We primarily store and process your personal data within the European Economic Area (EEA). However, some of our service providers may be located outside the EEA. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Countries with an adequacy decision from the European Commission
- Standard Contractual Clauses approved by the European Commission
- Binding Corporate Rules for transfers within a corporate group
You can request more information about these safeguards by contacting us using the details provided in Section 2.
7. Your Privacy Rights
Under applicable data protection laws, you have the following rights:
- Right to Access: You can request information about the personal data we hold about you and how we process it.
- Right to Rectification: You can request that we correct inaccurate or incomplete personal data.
- Right to Erasure: You can request that we delete your personal data in certain circumstances.
- Right to Restrict Processing: You can request that we limit how we use your personal data in certain circumstances.
- Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to our processing of your personal data based on legitimate interests, including profiling, and for direct marketing purposes.
- Right to Withdraw Consent: If we process your personal data based on consent, you can withdraw your consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. In Latvia, this is the Data State Inspectorate (https://www.dvi.gov.lv).
To exercise your rights, please contact us using the details provided in Section 2. We will respond to your request within one month, although we may extend this period by up to two additional months if necessary, taking into account the complexity and number of requests.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of sensitive data
- Regular security assessments and testing
- Access controls and authentication procedures
- Staff training on data protection and security
- Incident response procedures
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to take precautions to protect your personal information when online.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us, and we will take steps to remove such information and terminate the child's account.
10. Third-Party Links and Services
Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information.
If we make material changes to this Privacy Policy, we will notify you by email or by prominent notice on our website before the changes become effective.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:
Email: privacy@amberlvanalytics.com
Phone: +37167118383
Mail: DirectoriaMosaic
Attn: Data Protection Officer
Terbatas street 14
Centra rajons, Rīga, LV-1011
Latvia