Privacy Policy
Privacy
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR"), we provide you with the following information on how we process your personal data in connection with the use of the online interface in the relevant part. e-shop section and in connection with the sale of goods and the provision of services in the performance of our business.
Please, read the following information regarding how we process your personal data. When it comes to processing your data, you are the person concerned, i.e. the person whose personal data we process.
Who is the operator of personal data in the e-shop section?
Company LLP Agency SIA, Registration number: 40203423745, Address: Ieriku street 37, Riga, Latvia.
If you have any questions, or if you want to exercise your rights regarding the processing of your personal data, please contact the operator via email address [email protected]. You can also exercise your rights in writing delivered to the address of the operator's registered office.
How do we collect your personal information?
We collect personal data directly from you, unless otherwise expressly stated in this document - e.g. when creating an order, registering an account in the e-shop or when communicating with our customer support.
We process personal data based on the following legal bases:
- based on contractual and pre-contractual relationships (Article 6 (1) (b) GDPR) - ordering in the e-shop, managing your account in the e-shop, making reservations, complaints, etc..
- based on legitimate interests (Article 6(1)(f) GDPR) – in particular for cybersecurity purposes, certain types of direct marketing (if permitted by law), or internal statistics and service improvement, unless we need your consent for this.
- based on the fulfillment of a legal obligation (Article 6(1)(c) GDPR) - for example, accounting, invoicing, archiving of tax documents, etc..
- based on consent (Article 6(1)(a) GDPR) - for example, in email marketing, if required by law; in the use of marketing cookies, in sending certain newsletters, in profiling for marketing purposes beyond the scope of legitimate interest.
You are obliged to provide your personal data, if the processing of personal data is necessary for the fulfillment of the legal obligation of the operator. You are also required to provide personal data when it is a contractual requirement to do so, resulting from the contract between you and the operator.
It is necessary for you to provide your personal information in regard to the pre-contractual and contractual relations. Not providing your personal information may result in the inability to form this contract, or may prevent its fulfillment.
If the legal basis for personal information processing is authorization, the consent must be voluntary. In case we're processing your personal information based on your authorization, you have a right to revoke your consent at any time. The withdrawal of consent does not affect the legality of processing based upon the consent given before its withdrawal. Consent withdrawal is not sanctioned, monetarily or otherwise.
If we process your personal data based on a legitimate interest, you have the right to object to the processing of your personal data based on this basis, at any point in time, for reasons related to your specific situation, including an objection to profiling based on a legitimate interest (Article 21 of GDPR). The operator cannot further process personal data in such case, unless proven that the necessary legitimate reasons outweigh your personal interests, rights and freedoms as a data subject, or reasons for proving, enforcing or defending our legal claims.
For what purposes do we process your data in the e-shop and in connection with the performance of our activities?
Here you can find a list of purposes, their legal foundations and the period of storage of your personal data:
E-shop and store order processing
To process orders from the e-shop or at our stores, we need to process your regular personal data such as name and surname, contact details and billing details..
Legal basis: contractual relation
Storage period: 5 years since order completion
Delivery of orders and "returns" of goods
To deliver orders from our e-shop, or to deliver returned goods, we need to process your regular personal data such as name and surname, contact details and billing details. This data is also provided to third parties such as shipping companies for the purpose of actual delivery of the shipment..
Legal basis: contractual relation
Retention period: 5 years from the date of order processing or "return" of goods
Returns processing
In order to process a return or a refund, we need to process your common personal information like name and surname, contact and billing information.
Legal basis: contractual relation
Storage period: 5 years since return completion
Processing of reservations of goods in the rental office
To process reservations in our rental, we need to process your usual personal data such as first and last name, contact data, invoicing data and also social security number.
Legal basis: contractual relation
Storage period: 5 years since order completion
Accounting and tax agenda
Accounting documents issued based off of an order in the eshop are processed by an external accounting firm, and some data is provided to the financial administration to fulfill legal obligations.
Legal basis: law
Storage period: 10 years since issuing the receipt
Customer support
Customers can contact us through our customer support line or email address. Their personal data (if provided) is processed for the purpose of answering questions and fulfilling requests. In the case of contacting via telephone, the call will be recorded. If the question or request concerns an existing order, the legal basis for the processing is the contractual relationship resulting from the placed order. Otherwise, legitimate interest is the legal basis and the storage period is shorter.
Legal basis: contractual relationship (if it concerns an existing contract or order) or legitimate interest (if it concerns another issue, e.g. in providing quality customer support and resolving any complaints))
Retention period: 5 years (for existing contracts or orders) or 3 months (regarding other questions))
Email marketing
In order to inform the customer, we send occasional emails about promotions, news or interesting offers in the e-shop, based on the customer's consent..
Legal basis: consent / possibly legitimate interest (according to applicable legislation))
Retention period: 3 years from the date of consent, or until revoked
Cyber security
In order to protect our servers and user accounts from attacks and spam, we have to collect and analyze records regarding site access. Through automatic or manual analysis of these records, we're able to detect and block attack or spam attempts. These records contain no other personal information apart from an IP address..
Legal basis: legitimate interest
Storage period: 6 months
Operation of the loyalty system
Customers of our e-shop or stores can participate in a loyalty system that rewards their activity on the web platform or purchases in the form of additional loyalty discounts on goods. For the purposes of operating the loyalty system, no other data is required than that which is processed for the purpose of creating and managing a user account..
Legal basis: contractual relation
Storage period: up to 30 days after contract cancellation
Option to object: in section Loyalty discounts it is possible to disable the loyalty system for your account.
Customer behaviour profiling to improve product recommendations within the e-shop
To improve the quality of product searches and discover relevant products, we generate individual product recommendations. For more information about this method, please see the section “Will your personal data be used for profiling or automated individual decision-making?” below in this article..
Legal basis: legitimate interest (in improvement of the shopping process and product search)
Storage period: up to 30 days after contract cancellation
Option to object: in section Privacy settings it is possible to disable the creation of recommendations
Analytics of the use of the e-shop section
In order to improve the services provided by this site, we need to access analytical data of platforms such as Google Analytics. The processed data is anonymous, and its only identifier is the cookie, to which you can (but do not have to) allow us access to.
Legal basis: agreement
Storage period: 1 year or until the cookies are deleted
Option to withdraw approval: in section Cookie settings it is possible to withdraw consent for each individual cookies category.
Feedback and order rating
We are interested in receiving customer feedback regarding their satisfaction (or dissatisfaction) with our eshop and products, which they have purchased. We contact our customers through email delivered after order delivery, through Heureka third party service (for eshop ratings), and later through our own email (for product ratings). The customer is not required to provide any rating and has an option to object to receiving these emails while creating the order.
Lelag basis: legitimate interest (in improvement of e-shop services)
Storage period: 6 months
Option to object: disagreeing about receiving an email about rating while creating an order
Who has access to your personal data?
In connection with the fulfillment of the legal obligations of the operator, your personal data may be received by entities specified by law, in particular the tax office, state administration bodies and authorities exercising supervision, courts and law enforcement agencies.
Depending on the purpose of the processing and the specific circumstances, other persons (in the position of processor or separate or possibly joint controller) may also be among the recipients of your personal data, in particular:
- payment gateway providers enabling online payments,
- post and delivery services providers,
- order processing and e-shop customer support service providers,
- marketing services providers,
- external suppliers of programming work and system administration, hosting or IT support (including the operator of the web platform),
- companies that are external suppliers of accounting, auditing or HR services,
- companies that are external suppliers of services in the field of health and safety at work, health service and fire protection,
- companies that provide independent e-shop order ratings ,
- lawyer,
- executor,
- Liable person according to GDPR,
- bank, BNPL or tied consumer loan service provider
In cases when your personal data is processed through intermediaries, as a special category of recipients of personal data, we ensure that they proceed in accordance to valid legal regulations and the conditions agreed to in the contract regarding the processing of personal data, and that they are bound by confidentiality and protect your data in accordance with GDPR requirements.
Will your personal data be used for profiling or individual automated decision-making?
Your personal data may be used for the profiling of customer behavior in order to improve product recommendations. The data is processed on the basis of legitimate interest, as the result of its processing is the improvement of the functionality of the e-shop for you specifically. Through our own algorithm, based on the products you have previously purchased and the products or content you have visited on this page, we will generate a list of recommended goods that should best meet your requirements. Products from this list are visible in the section Recommended for you, if this list was generated for you. You can object to this information processing at any time, and you can do so by disabling the creation of recommendations in section Privacy settings in your account.
Your data will not be used for automatic individual decision making.
Our page uses cookies. You can find more information in section Cookie settings. Cookies, which are used to improve the functionality of our websites, are processed based upon our legitimate interests, cookies, which are used for marketing purposes, are processed based upon your consent. In case you want to forbid the usage and storage of cookies in your browser, you can do so in your browser settings. How you can block cookies depends on the browser you use.
What are your rights?
The right to access personal data acc. to Article 15 of GDPR:
The person concerned has a right to obtain a confirmation regarding the processing of their personal data by the operator. The person concerned has a right to obtain the access to their personal data (has a right to a copy of their personal data, which is available to the operator), and information regarding how the operator is processing this data in acc. with Article 15 of GDPR.
The right to correct personal data acc. to Article 16 of GDPR:
The person concerned has a right to rectification of their personal data, if it is inaccurate or needs completion, if it is incomplete. The operator must agree to the request for the correction or completion without undue delay.
The right to delete (right to "forget") acc. to Article 17 of GDPR:
The person concerned has a right to obtain that the operator will delete their personal information without undue delay, in case any reason mentioned in Article 17 par. 1 of GDPR is fulfilled (e.g. if personal information acquired by the operator is no longer needed or processed for purposes for which it was acquired for). This right of the person concerned will be judged by the operator, who will consider each party's point of view and based upon relevant circumstances in accordance with Article 17 of GDPR (e.g. the operator will not comply with the request, if the processing is necessary - in order to fulfil a legal obligation of the operator or to prove, enforce or defend any legal rights).
The right to restrict personal data processing acc. ro Article 18 of GDPR:
The person concerned has a right for the restriction of processing of their personal data, if any instance, acc. to Article 18 par. 1 of GDPR, occurs. If the processing has been restricted in accordance with Article 18. par. 1 of GDPR, such personal data is, except for storage, processed : a) only with consent from the person concerned, or b) in order to prove, enforce or defend legal rights, or c) for protection of another individual or legal person, or d) for reasons of essential public interest of the Union or member state.
The right to portability of personal data acc. to Article 20 of GDPR:
If the processing is based upon an agreement or a contract and is performed by automatic means, the person concerned has a right to acquire their personal information, which they provided to the operator, in a structured, commonly used and machine-readable format, and they have a right to transfer this information to another operator. If technologically possible, they have a right to transfer this information from one operator to the other.
The right to object acc. to Article 21 of GDPR:
If processing is based upon legitimate interests (Article 6 par. 1 letter f) of GDPR), person concerned has a right to object, at any point in time, based on reasons connected to their specific situation, against the processing of their personal information, including objecting against profiling based upon said interests. The operator thus cannot process the personal information anymore, unless proven, that there are necessary legal reasons that outweigh the interests, rights and freedoms of the person concerned, or their reasons for proving, enforcing or defending a legal claim. In case the person concerned objects to their personal information being processed for direct marketing purposes, incl. profiling in the extent that is connected to the direct marketing, the personal information cannot be processed for this purpose.
Right to withdraw consent
If the legal basis for processing is your consent, you can withdraw it at any time with future effect..
The right to submit a suggestion or complaint to the Office for Personal Data Protection
Cookies policy
What are cookies?
Cookies are small text files that are sent to your device when visiting a website. Cookies help us identify your device and help improve our website's functionality and enhance your user experience. Cookies are not viruses. The use of cookies is completely safe for your devices and the information contained within them.
For what purposes do we use cookies?
We use cookies to improve the functionality of our website and mobile application and to simplify its use. We also use cookies to personalize your browsing experience and displayed content, and to show offers that are relevant to you. Through cookies, we analyze your browsing history and use this data to offer you the ability to use our services, for statistical analysis purposes, and to provide you with product and advertising offers. Your non-personal browsing data, which cannot be used to identify an individual, may be shared with advertising service partners.
What types of cookies do we use?
Technical cookies. Technical cookies help display content on the website and mobile application on your device. Technical cookies ensure website and mobile application functionality, as well as customization according to your needs, such as adapting the website to your screen dimensions. Technical cookies are mandatory for the website and mobile application to work properly. Without them, you cannot use all the features on our website and mobile application. Technical cookies ensure that if you give consent, you don't have to do it every time you visit our online store or mobile application.
These cookies do not collect information about you and are not used for sales or marketing purposes.
Functional cookies. Functional cookies are designed to improve website and mobile application functionality, making the website and mobile application more convenient and your usage more efficient. Functional cookies may be used to save your selected website or mobile application language, help automatically save your registration data according to your preferences, save your selected shopping cart, and perform similar support functions for your chosen activities on the website and mobile application.
These cookies do not collect information about you that is used for sales or marketing purposes.
Analytical cookies. Using analytical cookies, we aim to better understand our website and mobile application visitors to optimize our website and mobile application activities according to your needs and wishes. Through analytical cookies, we analyze our performance – what we're doing right and what needs improvement. Analytical cookies help us improve our operations and ensure that your searches on our website or mobile application are useful to you and products are relevant. Information collected through analytical cookies is general and not individual. Analytical cookie information can be used to show the most viewed products, share information about currently most relevant products, and other useful information during your browsing. Analytical cookies may be used to evaluate the effectiveness of our advertising campaigns.
Purpose-based (product-based) cookies. We use purpose-based (product-based) cookies to personalize your browsing experience and displayed content, as well as to show offers that are relevant specifically to you. Purpose-based cookies analyze browsing history and this data is used to show you product offers. For example, when purchasing a mobile phone, to offer you a suitable phone case. Your non-personal browsing data, which cannot be used to identify an individual, may be shared with advertising service partners.
How can I manage cookie settings?
You can manage cookies through your browser settings, choosing which cookies to accept and which to delete. You can opt out of cookies at any time by deleting them from your browser where they are implemented. The location of cookie management depends on the browser you use. To learn more about how to customize or delete cookies in your browser, visit your browser's website or check the brief information about the most popular browsers here: Chrome; Mozilla; Edge; Safari; Opera.
You can revoke your consent to cookie usage at any time by requesting this via our email address: [email protected]. When revoking cookie usage consent, you must also delete the cookies in your browser.
It's important to know that by opting out of technical, functional, and analytical cookies, the website can no longer be used properly, therefore we do not recommend deleting or blocking cookies.