1. Introduction

Limited Liability Company Zemletes.lv (hereinafter - we or Zemletes) is a commercial company registered in the Republic of Latvia, which is engaged in the sale of consumer non-food products. At the moment we have shops in Riga. In addition, within the framework of cooperation agreements concluded with leasing companies, we, as a cooperation partner, offer to draw up leasing transactions for the purchase of goods.

2. What is personal data and how we process it

Personal data is any information relating to an identified or identifiable natural person (data subject). Personal data include any information by which a person can be directly or indirectly identified, such as his or her name, personal identification number, residential address or physical location, physical, physiological, genetic, mental, economic, cultural or social characteristics of that person. Identity factors and other similar information which characterizes the person concerned and enables him to be identified, directly or indirectly.

With regard to your personal data, we are the data controller, who determines the purposes and means of processing personal data, except for the execution of leasing transactions, where, in accordance with the agreement concluded with the leasing company, we act as a processor of personal data.

3. Purpose of processing personal data

We process personal data for the following purposes:

Registration of permanent members.
Membership in our shopping club gives its members the opportunity to buy goods at a discount, use special offers, as well as use the special offers of our partners. To register as a club member and receive a membership card, please provide your name and telephone number. We need this information to identify and contact club members. Without submitting this data, membership in the club is not possible. By filling out the registration application, a club member can apply for commercial communications. If a club member has agreed to receive commercial communications, we will send them using the method of communication provided by the club member.

Sale of goods.
For this purpose, we only collect personal data if the goods are purchased through an online store, the goods are paid for by bank transfer or the goods are received by proxy, or the customer pays for the purchase in cash for an amount exceeding EUR 1500.00. In this case, we process personal data to identify the customer and prepare a payment document (if the payment is made by bank transfer); submit a declaration to the State Revenue Service (in the case of cash settlement) or to identify a person who is authorized to receive goods on behalf of another person. Personal data is also processed in other cases related to the sale of goods - for example, if the buyer files a claim with us regarding the non-conformity of the goods, referring to the Consumer Rights Protection Law; for the administration of settlements, including the recovery and recovery of debts (if the goods have been purchased on a post-paid basis), the handling and processing of customer claims, and the like.

Supply of goods.
If the customer wishes to receive a delivery service, we ask to provide the customer's name, delivery address and telephone number. If we choose to deliver the product through the services of a third party, we pass this data on to the service provider.

Lotteries.
The purpose of processing the personal data of the Lottery participants is to organize and implement the Lottery in accordance with the Lottery Rules, to identify the Lottery participants, to determine and award the Lottery winners, and to provide information about the Lottery. The basis for the processing of the personal data of the Lottery participants is the Lottery participant's consent to participate in the Lottery. In particular, consent to participate in the Lottery shall be deemed to be consent to the processing of your personal data in accordance with the procedures and to the extent set out in this Annex. Participation in the Lottery is not possible without consent to the processing of your personal data.

Video surveillance.
In order to ensure security and surveillance in our premises and territory, as well as for the protection of our and our customers' property, video surveillance is performed. Video surveillance recordings are stored for a maximum of 30 days. After the expiration of this period, we will delete these recordings, unless the video surveillance recordings have not been previously requested by the competent state or local authorities, or no criminal offenses have been detected. In this case, the storage time of the video is determined as needed.

Requests.
Upon receipt of a relevant request, we provide information to public administration institutions and subjects of operational activities in the cases and to the extent specified in regulatory enactments.

Leasing transactions.
In this area, we act as a processor of personal data in accordance with the cooperation agreement concluded between us and the leasing company. We process personal data on behalf of the relevant leasing company, in strict accordance with the cooperation agreement and the instructions of the personal data controller, the leasing company.

Staff selection.
We process the data of persons who have expressed a wish to apply for vacancies in our company. The data obtained in the staff selection process are used only to assess the applicant's suitability for the position (qualifications, experience, etc.). We do not request data that does not relate to the performance of the intended work or is not related to the applicant's suitability for the position. We also do not request information that is not necessary for the assessment of suitability for the position, and we comply with the restrictions set forth in the Labor Law regarding the request for information. We only receive feedback from previous jobs if the applicant has given their prior written consent. Applicants' personal data is processed in accordance with the terms and conditions set out in this policy.

Other cases.
We process personal data in unspecified, special cases, informing the data subject of the purpose of the data processing at the time of data collection. For example, from time to time we conduct surveys, customer days, and similar events that may involve the processing of personal data. The processing of personal data is also carried out in exceptional cases in order to protect the vital interests of the data subject or a third party.

4. Lawfulness of the processing of personal data

We process personal data only for lawful purposes, if at least one of the following reasons is established:

·      the processing of personal data is necessary for a contract to which the data subject is a party or the data subject is a party’s contact person, representative, trustee, or the like, for the performance or performance of measures at the request of the data subject prior to the conclusion of the contract;

·         the processing is necessary for the protection of our legitimate interests or that of a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh such interests, in particular where the data subject is a child;

·         the data subject has consented to the processing of his or her personal data for one or more specific purposes;

·         processing is necessary for the performance of a legal obligation incumbent on us;

·         processing is necessary to protect the vital interests of the data subject or of another natural person.

5. Processing of special categories of personal data

Special categories of personal data are data revealing a person's racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, and genetic data, biometric data for the purpose of unique identification of a natural person, health data or data on the sexual life or sexual orientation of a natural person.

As a data controller, we do not process data for specific categories of our customers. The only exception can be made if the treatment is necessary to protect the client's vital interests (for example, due to the client's sudden deterioration in health, it is necessary to call an ambulance, and in similar emergencies).

In the cases provided for in the Labor Law and other regulatory enactments, we process the data of special categories of applicants for vacancies in our company. For example, we have the right to require an applicant to undergo a medical examination to ensure that he or she is fit to perform the intended work.

With regard to the execution of leasing transactions, we, as a processor of personal data, process certain special categories of personal data on behalf of and in the interests of the leasing company as a data controller. For example, in relation to the amount of income, information may be required on the pensions and benefits received, which in turn may indicate, directly or indirectly, the state of health of the data subject.

6. Website visits and cookie processing

The zemletes.lv website uses cookies. Cookies are small alphanumeric files that we store on your browser or on your device's hard drive. There are different types of cookies that we use for different purposes; but in general, cookies help us to distinguish you from other users of the website. In this way, we can make it easier for you to use the website and improve your website. You can block the use of cookies at any time by activating your browser settings, which allow you to refuse the use of some or all cookies. However, if you block the use of cookies, some websites may be inaccessible or not functioning properly.

Our website may contain links to third party websites. These third parties have their own privacy policies that are in no way related to us. Zemletes.lv SIA is not responsible for the terms of use of these websites and their privacy policy.

7. Notices

We send commercial notices about the services offered by ledakcijas.lv and other types of notices and reminders to our customers only if permitted by law or with the express consent of the customer.

Customers have the right to refuse to receive notifications and reminders at any time by sending a notice of refusal to the e-mail address info@zemletes.lv

8. Recipients of personal data

We use the services provided by third parties to help us conduct and administer business. These are third parties such as credit institutions in connection with the settlements to be made; our information technology and database maintainers and their administration providers; cloud computing service providers; providers of legal services, accounting and auditing services; debt collection companies; document copying, scanning and destruction service providers; third parties through whom we send commercial and other communications and information; a security company that has access to video surveillance recordings; third parties providing prizes in our competitions and lotteries; third parties who conduct customer surveys on our behalf and compile the results of these surveys. In each case, we will only provide the data controller with the amount of your data required for the purpose and task. Data is processed only for this purpose and purpose, it is protected in accordance with the requirements of the Regulation and other applicable laws and regulations. After reaching the goal or completing the task, your data is permanently deleted, keeping the audit trail as the fact of deletion.

In addition to the above, we transfer your data to the persons provided for in external regulatory enactments in the order and to the extent provided by the relevant regulatory enactment (for example, to the State Revenue Service, law enforcement institutions, courts, etc.). We may also transfer your data to third parties in cases provided for by law to protect your legitimate interests (for example, by applying to a court for debt collection, etc.)

9. Duration of storage of personal data

We store your data for no longer than is necessary for the purposes of its processing.data is stored as long as:

·         the agreement or contract reached between us is in force and as long as one of the parties to the agreement or contract is able to exercise its legitimate interests (for example, to file claims and applications, to sue, etc.);

·         processing of data is necessary for us to be able to fulfill our legal obligations;

·         processing is necessary to protect your or a third party's vital interests;

·         your consent to the relevant processing of personal data is valid, unless there is another lawful basis for the processing of personal data.

After the above conditions cease, your personal data will be permanently deleted.

10. Data security

We have a responsible approach to the security of your personal data. Zemletes.lv has taken the necessary measures to ensure adequate protection of personal data. We use a variety of security technologies and procedures to protect your personal information from unauthorized access, use or disclosure. However, please note that absolute security cannot be guaranteed for any data transmission over the Internet. Please assess the risks to the confidentiality of your information on a case-by-case basis if you decide to transfer any information containing personal information to us via the Internet.

11. Your rights

The Regulation provides a number of rights that you can exercise at any time by contacting us. We undertake to enable you to exercise this right and to fulfill the obligations of the controller or processor of personal data provided for in the Regulation and other regulatory enactments.

You have the right to receive confirmation from us as to whether or not your data is being processed and, if so, to access and receive the following information about your data: the purposes of the processing; categories of personal data; recipients of personal data; the duration of the retention of personal data or the criteria according to which the retention period is determined.

You have the right to ask us to correct your data if it is inaccurate.

You have the right to request the deletion of your data, and we will comply with this request without delay if at least one of the following conditions is met:

·         the data are no longer necessary for the purposes for which they were collected or otherwise processed;

·         you withdraw your consent to the processing of data and if there is no other legal basis for their processing;

·         if the processing is justified by the legitimate interests of us or a third party, there is no overriding legitimate basis for the processing;

·         you object to the processing of your data for direct marketing purposes;

·         if the data have been processed unlawfully;

·         to ensure the fulfillment of a legal obligation to us specified in regulatory enactments;

·         if your data was collected in connection with the provision of information society services.

You have the right to request that we restrict the processing of your data. We will comply with this request without delay if at least one of the following circumstances exists:

·         if you dispute the accuracy of the data - for a period of time during which we can verify the accuracy of your data;

·         if the processing is unlawful but you object to the deletion of the data and instead request a restriction on the use of the data;

·         we no longer need your data, but you need it to make, enforce or defend legal claims;

·         you have objected to the processing of your data based on the legitimate interests of us or a third party until it has been verified that our legitimate reasons outweigh your legitimate reasons.

You have the right, at any time, to object to the processing of your personal data based on our legitimate interests or that of a third party, based on reasons relating to your particular situation. In this case, we will no longer process your data, unless we indicate compelling legitimate reasons for processing that are more important than the interests, rights and freedoms of the data subject, or to raise, enforce or defend legal claims.

As stated above, you have the right to request a restriction on the processing of your data and to object to the processing of the data. However, please note that failure to exercise our rights as a result of exercising these rights may make it impossible or impossible for you to achieve the desired results. Therefore, before making a decision to restrict or object to the processing of your personal data, please contact us to clarify any issues of interest to you and to avoid any confusion and to make an informed decision.

If you believe that your personal data is being processed unlawfully, unreasonably, or that its processing otherwise violates the requirements of the Regulation or other regulatory enactments, or that you have any doubts or questions about the processing of your personal data, please do not hesitate to contact us. application or complaint. We will answer all your questions and correct any mistakes you may have.

If you believe that your personal data is being processed unlawfully, unreasonably, or that its processing otherwise violates the requirements of the Regulation or other regulatory enactments, you have the right to submit a complaint to the Data State Inspectorate.

12. How to contact us

You can contact us:

·         in writing by sending correspondence to the legal address of "Zemletes.lv SIA" 15a Cesvaines Street, Riga, LV-1073;

electronically, using e-mail info@zemletes.lv

CONTACTS:

Zemletes.lv SIA

Shop / Office / Warehouse:

Cesvaines Street 15A,

Riga LV-1073, 1st floor

VAT reg. Nr.: LV40203375394

Bank: AS Citadele banka

IBAN account Nr.:konts LV97PARX0027387510001

SWIFT code: PARXLV22

Phone: +371 25633444

 E-mail: info@zemletes.lv