Skip to content
+371 28784320
0

Privacy policy

What data we process, why, how long we keep it and what your rights are.

Controller

The personal data controller is LatOak SIA, registration No. 50203731681, legal address "Austrumi 7"-1, Vecates pagasts, Valmieras novads, LV-4211. For data protection inquiries, please write to latoaklatvia@gmail.com.

The policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation).

What data we process and why

For order fulfillment: name, surname, email address, phone number, delivery address, order content, and payment status. Legal basis — performance of a contract.

For legal entities, additionally: company name, registration number, and VAT number. Legal basis — performance of a contract and accounting requirements.

For fulfilling accounting and tax requirements: invoices and payment documents. Legal basis — legal obligation.

For communication and complaint handling: content of correspondence and contact information. Legal basis — legitimate interests to respond to inquiries and prove the course of communication.

For newsletters: email address and language choice. Legal basis — your consent, which you can withdraw at any time.

For website usage analysis and advertising effectiveness measurement: cookie identifiers, visited pages, device and browser type, approximate location (country or city), and activities on the website, such as viewing products, adding to cart, and purchasing. Legal basis — your consent, which you can withdraw at any time. More details — in the "Cookies" section.

We do not perform automated decision-making or profiling that would have legal consequences for you.

To whom we transfer data

Data is received only by those service providers necessary for order fulfillment and website operation, as well as — with your consent — analytics and advertising partners, and only to the extent necessary for this:

  • website and database host;
  • payment service provider;
  • delivery and assembly partner;
  • accounting service provider;
  • Google Ireland Limited — website visit statistics (Google Analytics), only with your consent;
  • Meta Platforms Ireland Limited — measurement of advertising effectiveness and display of advertisements on Facebook and Instagram (Meta Pixel), only with your consent;
  • Google Ireland Limited — measurement of advertising effectiveness and display of advertisements on the Google network (Google Ads), if we use these advertisements, and only with your consent.

Data processing agreements are concluded with processors. We do not sell data. For advertising purposes, data is transferred only to Meta and Google and only if you have given consent for marketing cookies.

We may transfer data to state institutions if required by regulatory acts.

Data transfer outside the EU

We process data within the European Union or the European Economic Area. If a service requires transfer outside of it, it occurs based on a European Commission decision on the adequacy of the level of protection or standard contractual clauses.

Google and Meta may also process data in the USA. In such a case, the transfer occurs based on the European Commission's decision of July 10, 2023, on the EU-U.S. Data Privacy Framework, under which both companies are certified, as well as on standard contractual clauses.

How long we store data

We store order and accounting data for five years after the end of the respective financial year, as required by accounting regulations.

We store correspondence for two years after the issue is closed.

We store the newsletter address until you withdraw your consent.

We store Google Analytics statistical data for 14 months. Meta and Google store advertising data in accordance with their privacy policy.

Your rights

You have the right to:

  • access your data and receive a copy of it;
  • rectify inaccurate data;
  • request data erasure if it is no longer necessary and there is no legal obligation to store it;
  • restrict or object to processing if it is based on legitimate interests;
  • receive data in a structured, machine-readable format and transmit it to another controller;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Submit your request to our email address. We will respond within one month; in complex cases, we may extend this period, informing you about it.

Complaints

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the Data State Inspectorate (dvi.gov.lv).

Cookies

Cookies are small text files that the website stores on your device. The browser's local storage works similarly. Hereinafter, both will be referred to as cookies.

Necessary cookies — without them, the website does not function correctly, so consent for them is not required:

  • latoak_locale — selected language; stored for 1 year;
  • latoak.cart.v1 — cart content; stored until you delete it;
  • latoak.consent.v1 — your cookie choice; stored until you delete or change it;
  • session cookie in the administration panel — for website employees only.

Analytics cookies — only with your consent. Google Analytics 4 helps to understand how many visitors are on the website, which pages they view, and where they come from. The IP address is not stored.

  • _ga — distinguishes visitors; stored for 2 years;
  • _ga_<ID> — saves the session state; stored for 2 years.

Marketing cookies — only with your consent. Meta Pixel allows us to measure whether advertising on Facebook and Instagram has been useful and to show ads to people who have already visited our website. In the collection and transfer of this data, Meta Platforms Ireland Limited is our joint controller; Meta processes the data further as an independent controller in accordance with its privacy policy (facebook.com/privacy/policy).

  • _fbp — distinguishes browsers for advertising measurement; stored for 90 days;
  • _fbc — saves information about a click on a Meta ad; stored for 90 days (only if you come to the website from an ad).

If we use Google Ads advertising, Google Ads cookies are also used with your consent. These allow us to understand whether a purchase or other action on the website occurred after clicking on our ad in Google Search, YouTube, or other Google sites, and to show ads to people who have already visited our website. Google Ireland Limited processes this data as an independent controller in accordance with its privacy policy (policies.google.com/privacy).

  • _gcl_au — links ad clicks to actions on the website; stored for 90 days;
  • _gcl_aw — saves information about a click on a Google ad; stored for 90 days (only if you come to the website from an ad);
  • IDE (on google.com / doubleclick.net domain) — for ad display and measurement; stored for up to 13 months.

We load cookies using the Google Tag Manager tool. It does not set cookies itself and does not collect personal data.

How to give or withdraw consent. On your first visit, the website asks if you agree to analytics and marketing cookies. If you choose "Decline," these tools are not loaded, and data is not sent to Google and Meta. You can change your choice at any time by clicking "Cookie settings" at the bottom of the page. You can also delete cookies in your browser settings.

The legal basis for necessary cookies — Section 7.¹ of the Law on Information Society Services; for analytics and marketing cookies — your consent (Article 6(1)(a) GDPR).

Policy amendments

We may refine the policy. The current version is always available on this page.