Privacy policy

1. General provisions

1.1. This Privacy Policy describes how Rozentāls Jelgava district farm “KRASTIŅI” (registration no. 41701004855, legal address: “Krastiņi”, Lielplatones pag., Jelgavas nov., LV-3022, hereinafter referred to as the “Data Controller”) collects, processes and stores personal data that the website www.kiploks.lv obtains from its customers and visitors (hereinafter referred to as the “Data Subject” or “You”).

1.2. Personal data is any information relating to an identified or identifiable natural person. Processing is any operation which is performed upon personal data (e.g. collection, recording, storage, use, erasure, etc.).

1.3. The data controller complies with the data processing principles provided for in regulatory enactments and ensures that personal data is processed in accordance with applicable legislation and the General Data Protection Regulation (GDPR).

2. Collection, processing and storage of personal data

2.1. The data controller obtains, processes and stores personal data mainly using the online store website and email communication.

2.2. By visiting and using the services provided in the online store, you agree that the information provided is used and managed in accordance with the purposes set out in this Privacy Policy.

2.3. The data subject is responsible for the correctness and accuracy of the personal data submitted. The data subject is obliged to notify the Data Controller of any changes to the personal data submitted.

2.4. The Data Controller is not liable for any losses caused to the Data Subject or third parties if theyincurred due to inaccurate or incorrectly submitted personal data.

3. Processing of customer personal data

3.1. The data controller may process the following personal data for order fulfillment and communication:

  • First and last name;
  • Contact information: email address and phone number; email address and phone number;
  • Delivery details: delivery address and/or selected parcel terminal; delivery address and/or selected parcel machine;
  • Transaction details: purchased goods, payment information, invoice details, etc.

3.2. The legal basis for the processing of personal data is Article 6(1) of the General Data Protection Regulation (GDPR):

  • Sub-paragraph b: processing is necessary for the performance of a contract (delivery and processing of an order);
  • Sub-paragraph c: processing is necessary for compliance with a legal obligation (e.g. accounting);
  • Sub-paragraph f: processing is necessary for the purposes of the legitimate interests pursued by the controller

3.3. The data controller stores personal data for as long as it is necessary to fulfill the order, ensure accounting requirements (in accordance with the Accounting Law) or as long as another legal basis exists. Upon expiration of the storage period, the data is permanently deleted or anonymized.

3.4. To ensure the fulfillment of the order, the Data Controller transfers the necessary personal data to the following cooperation partners:

  • For delivery service providers (Omniva, etc.) — for ensuring delivery;
  • For the payment processing platform MakeCommerce (Maksekeskus AS) — for payment execution and processing;
  • For accounting service providers and public authorities - for the fulfillment of obligations set forth in legal acts.

For accounting service providers

4.1. Under the General Data Protection Regulation, you have the following rights:

  • Access your data and receive information about its processing;
  • Request correction of incorrect or incomplete personal data;
  • Request erasure of data “to be forgotten”, except in cases where the law requires data retention;
  • Restrict or object to data processing; Withdraw consent to data processing
  • Withdraw consent for data processing (if the processing is based on consent);
  • Contact the State Data Inspectorate (www.dvi.gov.lv) if you believe that your data protection rights have been violated.

You can submit a request to exercise your rights electronically by writing to the following email address: info@kiploks.lv.

5. Final provisions

5.1. This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the applicable laws and regulations of the Republic of Latvia.

5.2. The Data Controller has the right to make changes to the Privacy Policy. The current version is always published on the website. www.kiploks.lv.