Privacy and cookie notice of the MeistriVaru online shop (https://meistrivaru.ee)
Controller: SIA "Alenda", reg. no. 43603060721, legal address: Kļavu iela 8, Bauska, LV-3901, Latvia, actual address: Bauskas iela 22, Riga, Latvia, Latvia, e-mail: info@meistrivaru.ee, phone: +371 22 811 277.
SIA "Alenda" is committed to protecting and respecting your privacy. Please read this privacy notice carefully so that you know why and how we collect your data and how we will use it.
This notice explains:
· How we use your personal information;
· What personal information we pass on to third parties;
· How long we keep your personal information;
· Information about marketing communications;
· Your rights;
· How we use cookies;
· Other important privacy information;
· Changes to how we protect your privacy;
· How to contact us.
When you first visit our website, we will ask you to confirm the use of cookies in accordance with the terms of this notice.
If you have questions about how we protect your privacy, please contact us by e-mail: info@meistrivaru.ee
***
HOW WE USE YOUR INFORMATION
This section provides the following information:
· the categories of personal data we process;
· the sources and specific categories of personal data not obtained directly from you;
· the purposes for which we process your personal data; and
· the legal basis for the processing.
We process your account data (“account data”). Account data may include your name and e-mail address, phone number and other data you provide when registering, as well as your purchase history. This data is obtained directly from you. We process account data to operate the website, to provide our services, to keep the website and services secure and to communicate with you. The legal basis for this processing is the performance of our contract and/or entering into a contract at your request, as well as our legitimate interests, namely monitoring and improving our website and services.
We process information relating to the provision of our services on our website (“transaction data”). Transaction data may include your contact details, bank account details and transaction details. Transaction data is processed to deliver goods and provide services and to keep proper records of these transactions. The legal basis for this processing is the performance of our contract and/or entering into a contract at your request, as well as our legitimate interests, namely the proper administration of our website and business.
We may process information you submit to subscribe to our e-mails and newsletters (“messaging data”). Messaging data is processed to send you the relevant messages and newsletters. The legal basis for this processing is your consent. Also, if we have already sold you goods or provided services on our website and you do not object, we may process messaging data on the basis of our legitimate interests, namely maintaining and improving customer relationships.
We may process information relating to any communication you send us (“correspondence data”). Correspondence data may include the content of the communication and metadata associated with it. If communication is initiated through the contact forms on our website, the website will generate metadata associated with the correspondence. Correspondence data is processed to communicate with you and for record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business, ensuring consistent, high-quality advice and resolving disagreements between you and our staff.
We may process your personal data as described in this notice where necessary to establish, exercise or defend legal claims, whether in court, administrative or other out-of-court proceedings. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
In addition to the specific purposes for which we may process your personal data set out above, we may also process your personal data where such processing is necessary to comply with a legal obligation to which we are subject.
***
WHAT PERSONAL INFORMATION WE PASS ON TO THIRD PARTIES
We want to earn and keep your trust. To do so, we will share your personal information only when necessary.
We may share your data with the following categories of third parties in order to provide our services to you as described in this notice:
· We may disclose your personal data to any member of our group of companies (including our subsidiaries, our parent company and its other subsidiaries);
· We may disclose your personal data to our insurers and professional advisers in order to manage risks, obtain professional advice, or bring, pursue or defend claims;
· Financial transactions relating to purchases of goods on our website are handled by our payment service provider EveryPay. We share your transaction data with the payment service provider only to the extent necessary for your payments, refunds and complaints.
· To deliver your order, we pass your contact and delivery details to the carrier you choose: Omniva, Venipak, Unisend or Smartposti.
· We may disclose your personal data to other service providers for specific services: the provider of the shop platform and servers (labaksveikals.lv), the accounting system (PayTraq), the customer and order management system (Pipedrive), and e-mail and SMS service providers (for example Brevo). Where we engage subcontractors, we will take all necessary measures to ensure that our processors keep personal data confidential.
In addition to specific cases, we may disclose your personal data in order to comply with our legal obligations.
The third parties mentioned in this section may also be registered outside the Republic of Latvia, the European Union or the European Economic Area. If we transfer your personal data to such parties, we will take all necessary measures to ensure that your privacy is adequately protected. For more information about the appropriate safeguards, you can contact us by e-mail at info@meistrivaru.ee
***
HOW LONG WE KEEP YOUR PERSONAL INFORMATION
Personal data that we process for any specific purpose or purposes is not kept longer than necessary for that purpose or purposes. In any case it is kept no longer than:
· account data will be kept for no longer than 3 (three) years after the last login to the account or your last purchase (whichever is later);
· transaction data will be kept for no longer than 10 (ten) years after the end of the provision of services;
· messaging data will be kept for no longer than 3 (three) years after the last login to the account or your last purchase (whichever is later);
· correspondence data will be kept for no longer than 2 (two) years after the end of the communication.
Sometimes we cannot say exactly how long we will keep your personal data. For example, access data will be kept for as long as necessary for specific purposes.
Notwithstanding the other provisions of this section, we may retain your personal data where necessary to comply with legal obligations binding on us.
***
INFORMATION ABOUT MARKETING COMMUNICATIONS
If you have given your consent, we will send you marketing communications by e-mail or text message to keep you up to date and help you browse and find our products.
You can opt out of marketing communications at any time.
You can do this as follows:
· By contacting our Customer Service team: info@meistrivaru.ee
If you opt out of marketing communications, we will update your profile to ensure that you do not receive such communications in future.
Please note that it may take a few days for the information to be updated in all our systems, so you may receive communications from us while we process your request.
Opting out of marketing communications does not mean that service communications, such as order updates, will stop.
***
YOUR RIGHTS
This part of the notice gives an overview of your rights under data protection rules. As some of the rights are complex, this notice covers only the main points. We ask you to consult the relevant legislation and guidance for full information about your rights.
You have the following rights in relation to your personal information:
· The right to access the personal information we hold;
· The right to request erasure of your data;
· The right to restrict processing;
· The right to object to processing;
· The right to data portability;
· The right to lodge a complaint with a supervisory authority;
· The right to withdraw consent.
If you wish to exercise your rights, make a complaint or have questions, please contact us by e-mail: info@meistrivaru.ee
1. Right of access. You have the right to consent or not to consent to our processing of your personal data and, where we process it, to access the personal data and other supplementary information. Supplementary information includes information about the purposes of the processing, the categories of personal data processed and the recipients of the personal data. Provided that the rights and freedoms of others are not affected, we will provide you with a copy of your personal data.
2. Right to rectification. You have the right to have any inaccurate data about you corrected and, taking into account the purposes of the processing, to have any incomplete data completed.
3. In some cases you have the right to have your personal data erased. These cases include: (a) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (b) you withdraw your consent and there is no other legal basis for the processing; (c) you object to the processing under certain data protection rules; (d) the processing is for direct marketing purposes; or (e) the personal data has been processed unlawfully. However, in certain cases you will not be able to exercise this right. The exceptions where processing is necessary are: (I) for exercising the right of freedom of expression and information; (II) for compliance with our legal obligations; or (III) for the establishment, exercise or defence of legal claims.
4. In certain cases you have the right to restrict processing. These cases include: (a) you contest the accuracy of the personal data; (b) the processing is unlawful and you oppose the erasure of the personal data; (c) we no longer need the personal data for processing, but you need it for the establishment, exercise or defence of legal claims; (d) you object to processing based on public or legitimate interests, pending verification of that objection. Where processing has been restricted as described above, we may continue to store your personal data. However, we will only process it: (I) with your consent; (II) for the establishment, exercise or defence of legal claims; (III) to protect the rights of another natural or legal person; or (IV) for reasons of important public interest.
5. You have the right to object to our processing of your personal data on grounds relating to your particular situation, to the extent that the processing is necessary for our legitimate interests or those of a third party. If you object to such processing, we will stop processing the personal information unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;
6. You have the right to object to our processing of your personal data for direct marketing purposes. If you object to such processing, we will stop processing your personal data for that purpose.
7. You have the right to object to our processing of your personal data for scientific or historical research purposes or for statistical purposes. If you object to such processing, we will stop processing the personal information unless the processing is necessary for the performance of a task carried out in the public interest.
8. Right to data portability. To the extent that the legal basis for our processing is:
1. your consent; or
2. the performance of a contract or taking steps at your request prior to entering into a contract, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where exercising it would adversely affect the rights and freedoms of others.
9. If you believe that our processing of your personal information infringes data protection rules, you have a legal right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija), Blaumaņa iela 11/13, Riga, LV-1011, www.dvi.gov.lv, or with another supervisory authority according to your place of habitual residence, place of work or place of the alleged infringement — in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
10. To the extent that our processing of your personal information is based on your consent, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
***
HOW WE USE COOKIES
Like other websites, we use cookies. Cookies are small data files that allow us to give you a faster and more secure experience of using websites. We use analytics and advertising cookies only with your consent in the cookie window.
Cookies usually do not contain any information that could identify the user, but personal information that we hold about you may be linked to information obtained from or stored in cookies.
Three ways to manage cookies:
· External sources (1)
· Browser settings (2)
· Our website’s cookies (3)
(1) Cookies from service providers
We use Google Analytics services to analyse how you use our website. You can learn more about Google’s privacy policy here.
If you do not want your browser to use Analytics, you can install the Google Analytics browser add-on.
For direct marketing purposes we use the Google advertising system. This helps us show you relevant offers. You can change your ad settings here.
For direct marketing purposes we may use the Meta (Facebook, Instagram) advertising platform, which, based on the cookies collected, helps us better identify buyer needs. To learn more about Meta’s privacy policy, click here.
(2) How can you manage cookies?
Most browsers allow users to refuse or delete cookies. The steps may differ depending on the browser and its version. Up-to-date information on how to block or delete cookies: Chrome; Firefox; Microsoft Edge and Safari.
Please note that deleting or disabling cookies may affect your experience and you may not be able to use certain features of our website.
(3) Which cookies do we use?
There are four main types of cookies. Below is information on how and why we use them:
(1) Website functionality cookies: these cookies let you browse the website and use available features such as “Add to cart”.
(2) Website analytics cookies: these cookies let us measure and analyse how our customers use our website and improve both its functionality and your shopping experience.
(3) Customer preference cookies: when you browse or shop on our website, these cookies remember your preferences so that we can make your shopping experience seamless and tailored to you.
(4) Targeting or advertising cookies: these cookies are used to show you relevant ads. They limit the number of times an ad is shown and help us measure the effectiveness of our marketing campaigns.
***
OTHER IMPORTANT PRIVACY INFORMATION
Third-party websites
We may work with third parties, usually referred to as service providers, who are authorised to place third-party cookies on our websites with your consent. These service providers allow us to give you a better, faster and more secure website experience.
Please note that third-party cookies are subject to the third parties’ privacy policies, and we therefore accept no responsibility for those privacy policies.
Children’s personal data
The services provided on our website are intended for persons over 14 years of age. The terms of individual loyalty programmes or competitions may include a different or higher minimum age for participants.
If we have reasonable doubts that we are processing the data of a person who has not reached the age stated in this section, we will delete such personal data from our databases.
***
CHANGES TO HOW WE PROTECT YOUR PRIVACY
We may change this notice from time to time to reflect how we process your data.
If we make significant changes, we will inform you on our website or otherwise, for example by e-mail, so that you can review the changes before continuing to use our website.
***
HOW TO CONTACT US
We always want to hear from our customers (especially if you feel we have let you down or could do something better).
If:
· you have questions or comments about this notice;
· you would like us to stop using your information;
· you wish to exercise any of the rights above or have complaints, please contact us.
You can contact us by writing to: info@meistrivaru.ee