Privacy policy

Introduction

The operation of the online store arabusmarzas.lv (hereinafter – the "Controller") on the website https://arabusmarzas.lv (hereinafter – the "Website") processes personal data obtained from the data subject – the user of the Website (hereinafter – the "User").

Company: SIA "Attrezzo", Reg. No. 40203442572, VAT No. LV40203442572, E-mail: hello@arabusmarzas.lv, Address: Jāņa Čakstes prospekts 22A, Ogre, LV-5001

The Controller cares about the User's privacy and the protection of personal data, respects the User's right to the lawfulness of personal data processing in accordance with applicable legislation: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation), and other applicable legislation in the field of privacy and data processing.

In view of the above, the Controller has developed this Privacy Policy to provide the User with the information stipulated in the Regulation.

The Privacy Policy applies to data processing regardless of the form and/or medium in which the User provides personal data (on the Website, in paper format, or by phone).

Controller – Personal Data and Contact Information E-mail: hello@arabusmarzas.lv

Processing Purposes and Legal Basis for Processing

If the User transmits personal data to the Controller using the Website's contact forms, e-mail, or other means of communication, such as name, surname, e-mail or postal address, telephone number, personal messages, etc., the Controller stores and uses this information to execute or conclude the relevant service provision agreement.

The data Controller needs to process the aforementioned data to identify the customer, assess solvency, prepare, conclude, and certify the conclusion of the contract, ensure/maintain the operation of services, provide customer service, review and process applications and objections, manage payments, as well as for other purposes directly related to the conclusion or performance of the contract.

The legal basis for data processing is Article 6(1)(b) of the Regulation, which states that data processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Categories of Personal Data 

Categories of personal data – name, surname, e-mail or postal address, IP address, telephone number, or content of the message, etc.

Categories of Recipients of Personal Data

Data is disclosed to those employees of the Controller for whom it is necessary for the performance of their direct duties in order to execute or conclude the relevant service provision contract.

When collecting and using personal data, the Controller partly uses the services of external service providers who strictly follow the Controller's instructions in accordance with the contract and whom the Controller checks before using the service and continuously monitors thereafter.

Categories of Data Subjects

Categories of data subjects – current, former, and potential customers of the Controller.

Transfer of Data Outside the European Union

The received data is not and will not be sent outside the European Union or the European Economic Area, nor will it be sent to any international organization.

Data Retention Period

Unless otherwise specified in the data protection instructions, the Controller deletes personal data no later than three years after the original reason for data retention is no longer valid, except in cases where we have a legal obligation to continue storing such data (for example, but not limited to, for accounting purposes or for litigation purposes).

Data Subject's Access to Personal Data

The data subject has the right to access their personal data within one month from the date of submitting the relevant request.

The User may submit a request regarding the exercise of their rights in writing, by appearing in person at the legal address of the Controller (presenting an identity document) or by e-mail, signed with a secure electronic signature.

Upon receiving the User's request regarding the exercise of their rights, the Controller verifies the User's identity, evaluates the request, and fulfills it in accordance with regulatory enactments.

The User has the right to receive the information stipulated in regulatory enactments regarding the processing of their data, the right to request access to their personal data, as well as to request the Controller to supplement, correct, or delete them, restrict processing, or object to processing, insofar as these rights do not contradict the purpose of data processing (conclusion or performance of contracts).

The data subject has no right to receive information if the disclosure of such information is prohibited by law in the fields of national security, national defense, public safety, and criminal law, as well as for the purpose of ensuring state financial interests in tax matters or the supervision of financial market participants and macroeconomic analysis.

Commercial Communications

The data Controller sends commercial communications with the User's consent. Article 9, Paragraph 2 of the Information Society Services Law also provides for cases where commercial communications may be sent without consent, for example, if the e-mail address was obtained in the course of providing a previously provided service, service provision, or goods sale.

The User may give their consent to receive commercial communications from the Controller in the service application form published on the Website.

The consent given by the User to receive commercial communications is valid until it is withdrawn. The User may refuse further commercial communications at any time by using the automatic opt-out option specified in the commercial communication, by clicking on the unsubscribe link at the end of the respective commercial communication.

The data Controller will stop sending commercial communications as soon as the User's request is processed.