Privacy policy
This Privacy Policy explains how the Baltic AI Commerce Association handles personal data when you use baica.net or interact with us.
Last updated: 11 August 2026
Who we are
The data controller for personal data collected through baica.net is Baltic AI Commerce Association (biedrība), registered in Latvia, reg. no. 40008360763, address Bertas Pīpiņas iela 4, Riga, LV-1010, Latvia (referred to below as "BAICA", "we", "us", "our"). You can reach us at hello@baltics.ai.
What we collect
We only collect personal data that you provide voluntarily, or that is necessary for the site to work. Specifically:
- Contact and enquiry data — your name, email, organisation, and message when you email us or complete a form on the site.
- Newsletter data — your email address when you subscribe to our newsletter.
- Research participation data — anything you submit to BAICA research, including case study material. It is analysed in aggregate and, unless we agree otherwise in writing, published only in anonymised form.
- Membership data — the information you provide when applying for individual or organisational membership.
- Server log data — technical information recorded automatically by our hosting provider when you visit the site (IP address, device and browser type, referring URL, pages requested, timestamps). This is standard hosting telemetry, kept for security and reliability. We run no analytics or advertising trackers; the only cookies come from our embedded forms — see our Cookie policy.
Why we use it
- To reply to your enquiries and provide the information you ask for (legal basis: performance of a request / legitimate interest).
- To send newsletters and event invitations you have opted in to (legal basis: consent). You can unsubscribe at any time using the link in every newsletter.
- To run research studies and publish anonymised findings (legal basis: consent for participation; legitimate interest in publishing aggregated results).
- To administer membership and partnership relationships (legal basis: contract and legitimate interest).
- To operate, secure, and improve the site (legal basis: legitimate interest).
- To comply with legal obligations that apply to BAICA as a Latvian nonprofit association.
Who we share it with
We do not sell personal data. We share it only with service providers that help us operate the site and its programs, under written data-processing terms. These currently include:
- Vercel Inc. — hosting and delivery of the website.
- HubSpot Ireland Limited — the forms on this site and the CRM behind them. Anything you submit through a form on baica.net is processed and stored by HubSpot on our behalf, under a data processing agreement.
- Email delivery providers used to send the newsletter and reply to enquiries.
We may also disclose personal data where required by law, court order, or regulator, or where necessary to protect the rights, property, or safety of BAICA, its members, or the public.
International transfers
Some of the providers we use process data outside the European Economic Area. Where that happens, we rely on the safeguards required by the GDPR, including Standard Contractual Clauses.
How long we keep it
We keep personal data only for as long as needed for the purpose it was collected for, and then either delete or anonymise it. Newsletter subscribers are kept until they unsubscribe. Enquiry emails are typically kept for up to 24 months. Membership records are kept for as long as the membership is active and for the retention period required by Latvian law after it ends.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to processing of your personal data, and to receive it in a portable format. Where processing is based on consent, you can withdraw that consent at any time. To exercise any of these rights, email hello@baltics.ai. If you believe your rights have been breached, you may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija).
Security
We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No online service can guarantee absolute security.
Children
The site is not directed at children under 16. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page.
Contact
Questions about this policy or how we handle your data: hello@baltics.ai.
Everything we publish is free.
Guides, research notes and case digests, with no sign-up and no paywall. Membership is how the work gets funded and shaped, and it is free during 2026.