PRIVACY POLICY

1. GENERAL PROVISIONS

1.1 LaBluette Ltd (hereinafter referred to as “we”) are committed to protecting your privacy. We ensure that the processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, hereinafter – GDPR), the Personal Data Protection Act, as well as other applicable laws and regulations.

1.2 The controller of your personal data is:
LaBluette Ltd.
Reg. No.: 40203292425
Address: Ūnijas iela 28-71, Rīga, LV-1084
E-mail: info@labluette.lv

1.3 Please read this Privacy Policy carefully to understand why and how we collect, use and store your personal data.

1.4 This policy addresses the following issues:
1.4.1 Purposes of the use of personal data;
1.4.2. transfer of personal data to third parties;
1.4.3;
1.4.4 Marketing communications;
1.4.5 Your rights;
1.4.6 Use of cookies;
1.4.7 Changes to the Policy;
1.4.8 Contact us.

1.5 On your first visit to our website, we will ask for your consent to use cookies in accordance with the terms of this policy.

1.6 As the data subject, you are responsible for ensuring that the personal data you submit is correct, accurate and complete. Knowingly providing false information is considered a violation of our Privacy Policy. The Data Subject is obliged to notify the Data Controller immediately of any changes to the personal data provided.

1.7 We shall not be liable for any loss suffered by you or any third party as a result of any false submission of personal data.

1.8 Persons under the age of 18 are encouraged to contact their parents or legal guardians (legal representatives), to agree on the manner and extent of the submission of Data and to secure parental consent for the processing of Data of minors.

2. HOW WE USE YOUR PERSONAL DATA

2.1. Types of personal data, purpose, retention period and legal basis

Data type	Goal	Storage period	Legal basis
Name, address, contact details (email, phone number, Facebook account)	Contact during the order process if payment is pending	Up to 1 year after last contact	Legitimate interests
Name, surname, address, contact details	Order processing, delivery, invoicing	Up to 10 years after the transaction	Execution of the contract
Email, phone number, social media accounts	Sending news and offers (email, SMS, Facebook, Gmail, phone calls)	Up to 1 year after consent or until withdrawal	Consent

Note: You can withdraw your consent to receive marketing communications at any time by emailing info@labluette.lv, using the opt-out link in the email, or by notifying us during a conversation with a member of our staff.

2.2 The processing of personal data is carried out on the basis of your consent as the data subject, in order to conclude a contract, to take the necessary measures at your request, and to ensure the service and its quality.

2.3 Personal data may be disclosed to the competent state or local authorities and law enforcement authorities at their request and for the protection of our rights and legitimate interests.

Personal data may be transferred to third parties within the framework of a contract in order to perform a function necessary for the performance of the contract, such as for the receipt of payments, delivery, etc.

The payment processing is provided by the payment platform makecommerce.lv, therefore our company transfers the personal data necessary for payment processing to the owner of the platform Maksekeskus AS.

Personal data is transferred only to the extent necessary and applicable, in accordance with the requirements of the regulatory enactments.

3. Rights of the data subject

3.1 You may exercise the following statutory rights at any time to affect the processing of your Personal Data:

Right of access to your data: you have the right to request access to all your data and to receive copies of your Personal Data in the format of your choice.
Right to rectification of inaccurate data: if you notice that we have inaccurate information containing your Personal Data, you have the right to request that we rectify the inaccurate or incomplete Personal Data.
Right to be forgotten: You may request that Personal Data be erased if it is no longer necessary for the purpose for which it was collected, or if you believe that its processing is unlawful or it must be erased in order for us to comply with legal requirements.
3.1.4 Right to restrict processing: you have the right to have the processing of your Personal Data restricted if you contest that the Personal Data we hold about you is accurate; if you believe that the processing of your Personal Data is unlawful; if you believe that we do not need your Personal Data but you need it to exercise or defend a legal claim; if the data protection rights override our legitimate interests.
3.1.5 Right to be informed: you have the right to be informed if Personal Data has been disclosed to third parties, if Personal Data has been rectified, erased or if processing of Personal Data has been restricted.
3.1.6 Right to data portability: Where Personal Data is processed automatically on the basis of your consent or a contract with us, you may request that we provide it to you in a structured, commonly used and machine-readable format, or request that the Personal Data be transferred to another controller. Please note, however, that you have the right to have Personal Data transferred to another controller where it is technically feasible to do so.
3.1.7 Right to object: You have the right to object to the processing of certain Personal Data (for example, processing for marketing purposes).
3.1.8 Right to withdraw your consent: Where processing of Personal Data is based on your consent, you have the right to withdraw it at any time by contacting us.
3.1.9 Opt-out of marketing information: You also have the right to opt-out of communications with us regarding information that we consider to be of interest to you. You can exercise this right at any time by contacting us.

3.2 If you have any questions about the protection of your Personal Data, please contact us using the contact details found on the Website or in this Policy.

3.3 You have the right to contact the Data Inspectorate if you believe that your Personal Data is being processed improperly or that your rights as a data subject have been violated. Information and a model application form is available at – https://www.dvi.gov.lv/lv/iesniegumu-paraugi

4. Cookies used

4.1 A cookie is a small text file that is created and stored on your device when you visit a website. It “remembers” your actions, settings and preferences to make our website easier to use.

4.2 Cookies are used to process website usage history data, diagnose problems and gaps in the website, collect statistics on user habits and browsing experience, and ensure the full and convenient use of our website functionality, so that we can provide you with the best experience when you visit our website

4.3 All information collected by persistent cookies is anonymous and does not identify you as a natural person.

4.4 If you do not wish to receive cookies, you can set your browser to reject all cookies or to send a warning when a cookie is installed, but this may interfere with your use of our website and make it more difficult to use.

4.5 For further information on cookies and how to manage or delete them, please visit www.aboutcookies.org.

5. Policy changes

Please note that this policy is subject to change and amendment and the current and updated version will be published on the website.

6. Contact options

If you have any questions about the processing of your personal data, please contact us by e-mail: info@labluette.lv or in the form of a written application by post to Ūnijas iela 28-71, Riga, LV-1084