PRIVACY POLICY
The online store plauktiungaldi.lv cares about its customers’ privacy and the security of their personal data.
This privacy policy explains what personal data we collect, the purposes for which we use it, how long we retain it, and what rights customers have regarding the processing of their personal data.
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, or GDPR) and the laws and regulations of the Republic of Latvia.
1. Data controller
The data controller is:
SIA “Brūnais kastanis”
Registration No.: 40203791462
VAT No.: LV40203791462
Registered address: Robežu iela 42–2, Rīga, LV-1004
Online store: plauktiungaldi.lv
Email: [email protected]
Phone: +371 26076040
2. What personal data is processed?
When you place an order, contact us, or use the online store, we may process the following personal data:
First and last name;
email address;
phone number;
delivery address;
order number and information about purchased goods;
invoice and payment information;
questions, requests, and complaints submitted by the customer;
other information the customer voluntarily provides during communication.
Orders are paid for by bank transfer on the basis of an issued invoice.
We do not request payment card details.
3. Purposes and legal bases for processing personal data
Personal data is processed only for specific and lawful purposes.
Order processing and fulfillment
Data is used to accept orders, prepare invoices, identify payments, and arrange delivery of goods.
Legal basis: performance of a contract (Article 6(1)(b) of the GDPR).
Compliance with accounting and legal obligations
Data is processed and retained to comply with accounting, tax, and other legal requirements.
Legal basis: compliance with a legal obligation (Article 6(1)(c) of the GDPR).
Customer service and handling complaints
Data is used to answer customer questions, review warranty claims and complaints, and resolve order-related issues.
Legal basis: performance of a contract, compliance with a legal obligation, or the controller’s legitimate interests, depending on the circumstances.
Protection of legal interests
Where necessary, data may be used to handle claims, resolve disputes, and protect the Seller’s legitimate interests.
Legal basis: legitimate interests (Article 6(1)(f) of the GDPR).
4. Disclosure of personal data to third parties
To fulfill orders and operate the online store, personal data may be disclosed, to the extent necessary, to:
Delivery companies, including DPD and UPS;
suppliers of goods, where necessary to fulfill an order;
accounting service providers;
online store platform and technical maintenance providers, including Mozello;
banks and payment service providers;
government and law enforcement authorities in cases provided for by law.
Personal data is disclosed only to the extent necessary to provide the relevant service or comply with a legal obligation.
We do not sell customers’ personal data to third parties.
If personal data is transferred outside the European Economic Area, the data protection measures required by applicable law are put in place.
5. Personal data retention periods
Personal data is retained only for as long as necessary to achieve the relevant processing purpose.
Invoices and accounting documents are retained for the periods required by law.
Order information is retained for as long as necessary to fulfill contractual obligations and handle potential claims.
Customer correspondence and complaint information are retained for as long as necessary to resolve the matter and protect legal interests.
When there is no longer a legal basis for retaining personal data, it is deleted or anonymized.
6. Customer rights
Under the General Data Protection Regulation, customers have the right to:
Receive information about the processing of their personal data.
Request access to their personal data.
Request correction of inaccurate or incomplete data.
Request deletion of personal data in cases provided for by law.
Request restriction of the processing of personal data.
Object to processing based on legitimate interests.
Exercise the right to data portability where the conditions prescribed by law are met.
Withdraw consent where the processing in question is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please write to [email protected].
We respond to requests without undue delay, usually within one month of receipt, subject to the time limits and exceptions provided for in the GDPR.
If a customer believes their personal data is being processed in violation of the law, they have the right to lodge a complaint with the Data State Inspectorate:
7. Personal data security
We take appropriate technical and organizational measures to protect customers’ personal data against unauthorized access, loss, disclosure, or unlawful use.
Access to personal data is granted only to persons and service providers who need it to perform their duties or provide services.
8. Use of cookies
The online store plauktiungaldi.lv operates on the Mozello online store platform.
Technically necessary cookies may be used to operate the site and help ensure its functionality, security, and order placement.
Separate user consent is not required for the use of technically necessary cookies.
The online store owner has not currently independently enabled Google Analytics, Facebook Pixel, or other advertising tracking tools.
If analytics, advertising, or other cookies requiring consent are introduced in the future, visitors will be given relevant information and the opportunity to make a choice before those cookies are used.
Users can manage or delete cookies in their web browser settings. Blocking certain cookies may affect the website’s functionality.
9. Changes to the privacy policy
We reserve the right to update this privacy policy if our personal data processing practices, the services used, or applicable laws and regulations change.
The current version of the privacy policy is always available in the online store plauktiungaldi.lv.
10. Contact information
If you have questions about the processing of personal data or this privacy policy, please contact us:
SIA “Brūnais kastanis”
Registration No.: 40203791462
VAT No.: LV40203791462
Robežu iela 42–2, Rīga, LV-1004
Email: [email protected]
Phone: +371 26076040