Skip to content
Siffo
0

Privacy policy

1. General provisions

1.1. This privacy policy describes how SIA “Siffo”, reg. No. 40203019290, Zvaigznāja gatve 7-38, Riga, LV-1082 (the “controller”), obtains, processes and stores the personal data it collects through www.siffo.lv from its customers and the visitors of the website (the “data subject” or “you”).

1.2. Personal data is any information relating to an identified or identifiable natural person. Processing is any operation performed on personal data, such as collection, recording, alteration, use, viewing, erasure or destruction.

1.3. The controller follows the data processing principles laid down by law and processes personal data in accordance with the legislation in force.

2. Collection, processing and storage of personal data

2.1. The controller obtains, processes and stores personally identifying information mainly through the online shop website and by email.

2.2. By visiting the online shop and using its services you agree that the information you provide is used and managed for the purposes set out in this privacy policy.

2.3. The data subject is responsible for the personal data they submit being correct, accurate and complete, and informs the controller of any changes without delay. Knowingly providing false information is a breach of this privacy policy.

2.4. The controller is not liable for any loss suffered by the data subject or third parties as a result of false personal data.

3. Processing of customer data

3.1. The controller may process the following personal data:

  • name and surname

  • date of birth

  • contact details (email address and/or phone number)

  • transaction data (goods purchased, delivery address, price, payment information, etc.)

  • any other information submitted when buying goods and services or contacting us

3.2. The controller may verify the accuracy of the data submitted using publicly available registers.

3.3. The legal basis for processing is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation: the data subject’s consent; the performance of a contract or steps taken at the data subject’s request before entering into one; compliance with a legal obligation of the controller; the legitimate interests of the controller or a third party, except where they are overridden by the data subject’s interests or fundamental rights.

3.4. The controller stores and processes personal data for as long as at least one of the following applies: the data is needed for the purpose for which it was obtained; the controller or the data subject may pursue their legitimate interests in the manner set out by law (for example, lodge objections or bring a claim in court); there is a legal obligation to keep the data (for example, under the Accounting Law); the data subject’s consent is in force and there is no other lawful basis for processing. When none of these applies any longer, the personal data is irreversibly deleted or anonymised.

3.5. To meet its obligations to you, the controller may pass your personal data to partners and processors acting on our behalf, such as accountants and courier services. Payments are processed by the payment platform makecommerce.lv, so we pass the personal data needed for a payment to the platform’s owner, Maksekeskus AS. On request we may pass personal data to state and law enforcement authorities, and use it to defend our legal interests.

3.6. When processing and storing personal data, the controller applies organisational and technical measures to protect it against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.

4. Rights of the data subject

4.1. Under the General Data Protection Regulation and the laws of the Republic of Latvia you have the right to:

  • access your personal data, receive information about its processing, request a copy in electronic form and have it transferred to another controller (data portability)

  • have incorrect, inaccurate or incomplete data corrected

  • have your data erased, except where the law requires it to be kept

  • withdraw your consent to processing

  • restrict the processing of your data

  • lodge a complaint with the Data State Inspectorate

You can submit a request to exercise your rights in person at SIA “Siffo” or electronically by writing to siffo@siffo.lv.

5. Final provisions

5.1. This privacy policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation) and the laws in force in the Republic of Latvia and the European Union.

5.2. The controller may change or supplement this privacy policy at any time. Changes take effect once published on www.siffo.lv.