Privacy Policy
This Privacy Policy explains how SIA “KOMEKS”, registration No. 40103103167 (hereinafter – the Controller or we), processes personal data when using the online store and related services.
This Privacy Policy applies to all persons who use the online store, create a user account, place orders, use the contact form, or otherwise communicate with us.
Personal data processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR), the laws of the Republic of Latvia, and other applicable legal acts.
1. What personal data we process
The Controller ensures lawful and fair processing of personal data. When creating a user account or placing an order, the following data may be processed:
- name;
- surname;
- email address;
- phone number;
- delivery address;
- order information;
- order fulfillment status;
- delivery and payment method.
When making a payment, transaction-related information may be processed. Payment processing is carried out through authorised payment service providers. The online store does not store full bank card or authentication data.
When contacting us via the contact form, email, or other communication channels, we process the content of the message and contact information provided.
In certain cases, technical data may be used to ensure website security and analyse its performance:
- IP address;
- browser information;
- device data;
- visit time;
- cookie information.
2. Purpose and legal basis for processing personal data
Personal data is processed to ensure the operation of the user account, accept and fulfil orders, arrange delivery, process payments, provide customer support, and comply with legal requirements.
In certain cases, personal data is processed on the basis of the customer’s consent, for example, to send informational or marketing communications. Consent to receive commercial communications may be withdrawn at any time.
Data processing may also be necessary for the purposes of our legitimate interests, such as improving service quality, ensuring security, maintaining systems, and resolving disputes.
3. Transfer of personal data
Personal data may be disclosed only to the extent necessary to provide services. We do not sell or rent customers’ personal data to third parties.
During order processing, data may be shared with:
- Paysera;
- Omniva, DPD and Venipak;
- IT service providers;
- state and municipal authorities in cases provided for by law.
4. Personal data retention period
Personal data is stored only for as long as necessary to achieve the relevant purpose or as required by applicable laws and regulations.
User account information is stored until the account is deleted or as long as the account remains active. Data related to orders and accounting is stored for the period specified by applicable laws and regulations.
Contact data obtained via the contact form is stored for as long as necessary to process the request.
5. Personal data security
When selecting partners and service providers, we assess their ability to ensure an adequate level of personal data protection.
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, or loss.
Security measures are regularly reviewed and improved, taking into account technological developments and potential security risks.
6. Your rights
You have the right to:
- object to the processing of personal data;
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- receive information about the recipients of personal data;
- request the deletion or restriction of processing of personal data in cases provided for by law;
- receive your data in a structured format.
To exercise your rights, you may submit a request using the contact information provided on the website.
You have the right to withdraw your consent to marketing communications at any time if the processing is based on consent.
If you believe that the processing of personal data does not comply with legal requirements, you have the right to lodge a complaint with the Data State Inspectorate. Before contacting the supervisory authority, we encourage you to first contact us so that a possible solution can be found.
7. Changes to the Privacy Policy
The Controller reserves the right to update this Privacy Policy by publishing the latest version on the website. In the event of significant changes, users may be additionally informed if required by applicable laws or technical capabilities.
