PRIVACY POLICY

1. General provisions

1.1. This Privacy Policy describes how BALTIC MASTER, Sabiedriba ar ierobezotu atbildibu (SIA), registration No. 40003544694, legal address: Sliežu iela 31, LV-1005, Riga, Latvia (hereinafter – Data Controller) collects, processes and stores personal data that the online store gastroshop.lv obtains from its customers and persons visiting the website (hereinafter – the Data Subject or you).

1.2. Personal data is any information relating to an identified or identifiable natural person, i.e. the Data Subject. The processing of personal data is any operation performed on personal data, such as the acquisition, recording, storage, use, viewing, transfer, erasure or destruction of data.

1.3. The Data Controller shall comply with the principles of data processing provided for in the legislation and shall ensure that personal data is processed in accordance with the requirements of the applicable laws and regulations.

2. Collection, processing and storage of personal data

2.1. Personally identifiable information is collected, processed and stored by the Data Controller mainly using:

  • the website of the online store gastroshop.lv
  • e-mail
  • telephone communication
  • placing orders in the online store.

2.2. By visiting and using the services provided in the online store, you agree that any information provided is used and managed in accordance with the purposes specified in this Privacy Policy.

2.3. The data subject is responsible for ensuring that the personal data provided are correct, accurate and complete. Deliberately providing false information is considered a violation of this Privacy Policy.

2.4. The Data Subject is obliged to immediately inform the Data Controller of any changes in the submitted personal data.

2.5. The Data Controller shall not be liable for losses incurred due to false personal data submitted to the Data Subject or third parties.

3. Processing of customers’ personal data

3.1. The data controller may process the following personal data:

  • name, surname
  • phone number
  • E-mail address
  • delivery address
  • company name and registration data (if the buyer is a legal entity)
  • transaction data (ordered goods, delivery information, payment information)
  • any other information submitted when contacting us or using the Site Services.

3.2. The data controller has the right to verify the accuracy of the submitted data using publicly available registers.

3.3. Legal basis for the processing of personal data in accordance with Article 6(1) of the General Data Protection Regulation (GDPR):

  1. (a) the data subject has given consent to the processing of his or her personal data;
  2. (b) the processing is necessary for the performance of the contract or for the performance of measures prior to the conclusion of the contract;
  3. (c) the processing is necessary for compliance with a legal obligation;
  4. f) the processing is necessary to ensure the legitimate interests of the Data Controller.

3.4. Personal data are stored as long as at least one of the following conditions exists:

  • the data are necessary for the purpose for which they were obtained;
  • The Data Controller or the Data Subject has the legal right to defend his or her interests;
  • there is a legal obligation to store the data (e.g. for accounting purposes);
  • as long as the Data Subject’s consent to data processing is valid.

After the expiration of these conditions, personal data is deleted or anonymized.

3.5. In order to ensure the provision of services, the Data Controller may transfer personal data to cooperation partners, for example:

  • delivery service providers (couriers, parcel operators)
  • accounting service providers
  • IT service providers.

Payment processing is provided by the payment platform makecommerce.lv, therefore, the personal data necessary for making payments are transferred to the owner of the platform Maksekeskus AS.

If necessary, personal data may also be transferred to state institutions or law enforcement institutions.

3.6. When processing personal data, the Data Controller implements organizational and technical security measures to protect the data against:

  • accidental or unlawful destruction
  • unauthorized access
  • disclosure of data
  • other unlawful processing.

4. Rights of the data subject

In accordance with the GDPR and the legislation of the Republic of Latvia, you have the right to:

4.1. access your personal data and receive information about its processing;

4.2. receive a copy of your data in electronic format and request data portability;

4.3. request the correction of inaccurate or incomplete personal data;

4.4. request the erasure of your personal data (“right to be forgotten”), if this is not restricted by law;

4.5. withdraw your consent to the processing of personal data;

4.6. restrict data processing;

4.7. to submit a complaint to the Data State Inspectorate.

You can submit a request for the exercise of your rights:

📍 in person:
Rails street 31, LV-1005, Riga, Latvia

📧 electronically:
riga@balticmaster.lv

📞 phone:
+371 20026205

5. Final provisions

5.1. This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 (GDPR) of the European Parliament and of the Council, as well as the applicable laws and regulations of the Republic of Latvia.

5.2. The Data Controller has the right to make changes or additions to the Privacy Policy at any time. Changes shall come into force after their publication on the website:

https://gastroshop.lv