0Cart

Privacy policy

Privacy Policy

1. General Provisions.

1.1. This Privacy Policy describes how SIA Brandberry.eu, registration no. 40203587107 (hereinafter referred to as the "Data Controller"), collects, processes, and stores personal data received from its customers and visitors to the website (hereinafter referred to as the "Data Subject" or "you").

1.2. Personal data refers to any information related to an identified or identifiable natural person, i.e., the Data Subject. Processing refers to any operation involving personal data, such as collection, recording, modification, use, viewing, deletion, or destruction.

1.3. The Data Controller complies with data processing principles set out in applicable laws and confirms that personal data is processed in accordance with current legislation.

2. Collection, Processing, and Storage of Personal Data.

2.1. The Data Controller primarily collects, processes, and stores personally identifiable information through the e-commerce website and email. (Note: Update accordingly if personal data is collected through other means, e.g., paper forms.)

2.2. By visiting and using services provided by the e-commerce site, you agree that any information provided will be used and managed according to the purposes defined in this Privacy Policy.

2.3. The Data Subject is responsible for providing correct, accurate, and complete personal data. Deliberate provision of false information is considered a breach of this Privacy Policy. The Data Subject must promptly inform the Data Controller about any changes in the provided personal data.

2.4. The Data Controller is not liable for any losses incurred by the Data Subject or third parties resulting from false personal data provided.

3. Processing of Customer Personal Data.

3.1. The Data Controller may process the following personal data:

  • Name, surname
  • Date of birth
  • Contact information (email address and/or phone number)
  • Transaction details (purchased items, delivery address, price, payment information, etc.)
  • Any other information provided during the use of website services, purchasing goods, or communication with us.

ADJUST THE LIST BASED ON THE SPECIFIC PERSONAL DATA PROCESSED BY YOUR COMPANY.

3.2. In addition to the above, the Data Controller reserves the right to verify the accuracy of the data provided using publicly available registries.

3.3. The legal basis for processing personal data is Article 6(1)(a), (b), (c), and (f) of the General Data Protection Regulation (GDPR):

  • (a) The Data Subject has consented to processing their personal data for one or more specific purposes;
  • (b) Processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject before entering into a contract;
  • (c) Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
  • (f) Processing is necessary for legitimate interests pursued by the Data Controller or a third party, except where such interests are overridden by the interests, fundamental rights, and freedoms of the Data Subject requiring personal data protection, especially when the Data Subject is a child.

3.4. The Data Controller stores and processes personal data of the Data Subject as long as at least one of the following criteria applies:

  • Personal data are required for the purposes they were collected;
  • As long as the Data Controller or the Data Subject can pursue their legitimate interests, such as objecting or submitting legal claims according to applicable laws;
  • As long as a legal obligation to store the data exists, e.g., according to accounting regulations;
  • As long as the Data Subject’s consent to personal data processing remains valid, unless another lawful basis exists.

Upon the end of the circumstances mentioned above, the storage period for personal data ends, and all related personal data are irreversibly deleted from computer systems, electronic and/or paper documents containing personal data, or these documents are anonymized.

3.5. To fulfill its obligations, the Data Controller may transfer your personal data to cooperation partners or data processors performing necessary data processing on our behalf, such as accountants, courier services, etc. Payment processing is provided by the platform makecommerce.lv; therefore, personal data required for payments are transferred to the platform owner Maksekeskus AS. Upon request, personal data may also be provided to state or law enforcement agencies to protect our legal interests and handle legal claims.

3.6. When processing and storing personal data, the Data Controller implements organizational and technical measures to ensure protection against accidental or unlawful destruction, alteration, disclosure, or other illegal processing.

4. Rights of the Data Subject

4.1. According to GDPR and Latvian laws, you have the right to:

  • Access your personal data, receive information on data processing, request an electronic copy of your personal data, and the right to transfer data to another controller (data portability);
  • Request correction of incorrect, inaccurate, or incomplete personal data;
  • Request deletion of your personal data ("right to be forgotten"), except where data retention is legally required;
  • Withdraw your previously given consent to data processing;
  • Request restriction of data processing—temporarily or permanently stop processing all your personal data;
  • Submit complaints to the Data State Inspectorate.

You can exercise these rights by submitting a request in person at Maskavas 240, Riga, or by email to customer support at [email protected].

5. Final Provisions

5.1. This Privacy Policy is developed according to Regulation (EU) 2016/679 of the European Parliament and Council (General Data Protection Regulation), and current laws of Latvia and the European Union.

5.2. The Data Controller reserves the right to make changes or additions to this Privacy Policy at any time without prior notice. Amendments take effect upon publication on the Brandberry.eu website.