Privacy policy

Controller

The data controller is LatOak SIA, registration No. 50203731681, registered address "Austrumi 7"-1, Vecates pagasts, Valmieras rajons, LV-4211, Latvia. For data protection matters write to latoaklatvia@gmail.com.

This policy follows Regulation (EU) 2016/679 (General Data Protection Regulation).

What data we process and why

To fulfil an order: first and last name, email address, phone number, delivery address, order contents and payment status. Legal basis — performance of a contract.

For legal entities additionally: company name, registration number and VAT number. Legal basis — performance of a contract and accounting requirements.

To meet accounting and tax obligations: invoices and payment documents. Legal basis — legal obligation.

For correspondence and handling complaints: the content of the correspondence and contact details. Legal basis — our legitimate interest in answering enquiries and evidencing the exchange.

For the newsletter: email address and language preference. Legal basis — your consent, which you may withdraw at any time.

We do not carry out automated decision-making or profiling that produces legal effects for you.

Who receives the data

Data is shared only with the providers needed to fulfil an order, and only to the extent required:

• the website and database host;
• the payment service provider;
• the delivery and assembly partner;
• the accounting service provider.

Data processing agreements are concluded with processors. We do not sell data or pass it on for advertising purposes.

We may disclose data to public authorities where required by law.

Transfers outside the EU

We process data in the European Union or the European Economic Area. If a service requires a transfer outside it, that transfer relies on a European Commission adequacy decision or standard contractual clauses.

How long we keep it

Order and accounting data is kept for five years after the end of the relevant financial year, as required by accounting legislation.

Correspondence is kept for two years after the matter is closed.

A newsletter address is kept until you withdraw consent.

Your rights

You have the right to:

• access your data and receive a copy of it;
• have inaccurate data corrected;
• request erasure where the data is no longer needed and no legal obligation requires us to keep it;
• restrict or object to processing based on legitimate interests;
• receive your data in a structured, machine-readable format and transmit it to another controller;
• withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

Send requests to our email address. We reply within one month; in complex cases we may extend this period and will tell you if we do.

Complaints

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Latvian Data State Inspectorate (dvi.gov.lv).

Cookies

The site uses only the cookies needed for it to work: the cart, the selected language and the admin panel session. These do not require consent.

No analytics or marketing cookies are used. If they are added, your consent will be requested before they are set and this section will be updated.

Changes to this policy

We may update this policy. The current version is always available on this page.