Privacy Policy

The controller of personal data is SIA Konda, registration No. 40103877618, Mārupes nov., Babītes pag., Spilve, Alejas iela 9, LV-2101, Latvia, e-mail: info@kondabaltic.lv, telephone +371 27503039 (hereinafter, the Controller).

This policy explains what personal data we collect on kondabaltic.lv, why we process it and what your rights are. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Latvian legislation.

• Orders in the shop — first name, surname, e-mail address, telephone number, city, postcode, selected parcel locker, order contents and notes. Purpose: fulfilment and delivery of the order and communication about the order. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
• Contact forms and price enquiries — name, e-mail address, telephone number, message text and attached files. Purpose: to respond to your enquiry and prepare a quotation. Legal basis: your consent and steps taken prior to entering into a contract (Article 6(1)(a) and (b) GDPR).
• Accounting and statutory requirements — invoice and payment data. Legal basis: legal obligation (Article 6(1)(c) GDPR).
• Handling of claims and protection of rights — order and communication history. Legal basis: legitimate interests (Article 6(1)(f) GDPR).
• Website visit analytics — Google Analytics cookie identifier, pages visited, device and browser, approximate location. Purpose: to understand how the website is used and to improve it. Legal basis: your consent (Article 6(1)(a) GDPR); see section 6.
• Reminders about an unfinished order — e-mail address and cart contents, if you started a payment but did not complete it. Purpose: no more than two reminders (approximately 2 and 24 hours later) with a link to your cart; if you complete the order, no reminders are sent. Legal basis: legitimate interests (Article 6(1)(f) GDPR). Each reminder contains a link to unsubscribe from them in one click; you may also write to info@kondabaltic.lv.
• Seasonal offers to customers — e-mail address and the language of your latest order, if you have ordered from kondabaltic.lv within the last 24 months. Purpose: a few e-mails a year before holidays (for example Christmas) about similar products of ours. Legal basis: legitimate interests (Article 6(1)(f) GDPR) and Section 9(2) of the Latvian Law on Information Society Services. You can opt out when ordering (by ticking “Do not send me seasonal offers”), in one click in every such e-mail, or by writing to info@kondabaltic.lv.

We do not carry out automated decision-making and, apart from the reminders mentioned above about an order you started yourself and the seasonal offers to customers, we do not use your data for direct marketing without your separate consent.

Payments are processed by the payment platform https://makecommerce.lv/; therefore, our company passes the personal data necessary to execute the payment to the owner of the platform, Maksekeskus AS.

We do not store your bank account or payment card details.

We may disclose your data only to those who need it to fulfil the order and operate the website:

• carriers (Omniva, DPD) — name, telephone number, e-mail address and selected parcel locker;
• manufacturers and partners involved in fulfilling the order — where the manufacture or delivery of a specific order requires personal data to be transferred — only the data needed for that service (for example, name, delivery address and telephone number);
• Google Ireland Limited — only with your consent, for website analytics (Google Analytics);
• the payment platform Maksekeskus AS — to execute the payment;
• IT service providers (server and e-mail services) that process data on our behalf;
• public authorities — only in cases provided for by law.

We do not sell your personal data to third parties.

We keep order and accounting data for as long as required by law (usually 5 years). We keep contact form messages until the enquiry has been dealt with and thereafter for no longer than 12 months. Reminders about an unfinished order are sent no later than 7 days after the payment was started. Seasonal offers are sent for no longer than 24 months after your latest order. Data processed on the basis of consent are kept until consent is withdrawn.

The shop uses browser storage to keep your cart identifier and your account login; without it, the cart and the account would not work. No consent is required for this.

Only with your consent do we use Google Analytics (Google Ireland Limited) cookies to see, in aggregated form, how visitors use the website (pages visited, device type, approximate location). Analytics data are not used for advertising. You may give or withdraw consent at any time via the “Cookie settings” link in the website footer. We do not use advertising cookies.

You have the right to:

• access your data and obtain a copy of it;
• rectify inaccurate data;
• request erasure of your data or restriction of processing;
• object to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, please write to info@kondabaltic.lv. We will reply within 30 days. If you believe that your data are being processed unlawfully, you may lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija; dvi.gov.lv).

We may update this policy; the current version is always available on this page. The terms of purchase are set out in the Terms of Use.