Privacy policy
This privacy policy provides information on how we collect, use, store and process your personal data, so please read this Privacy Policy carefully before you start using the services of SIA "Olmarie". By registering or otherwise using “Olmarie” SIA's website, you will be required to confirm that you have read and understood this Privacy Policy.
Definitions used:
Personal data – any information relating to an identified or identifiable natural person.
Data subject – an identified or identifiable natural person (hereinafter - Customer).
Profiling – automated processing of personal data, which manifests as the use of personal data for the purpose of evaluating specific personal aspects related to a natural person.
Manager – SIA “Olmarie”.
Processor – a natural or legal person whose manager processes personal data on behalf of SIA “Olmarie".
Third party – a natural or legal person, public authority, agency or structure that is not the data subject, controller, processor and persons authorized to process personal data under the direct authority of the controller or processor.
Consent of the data subject (customer) – a freely given, specific, deliberate and unambiguous indication by the Customer that the Customer agrees to the processing of his personal data in the form of a statement or clearly affirmative action.
Cookies – text files that are stored on the device used by the user in order to personalise the usability of the “Olmarie” SIA website for each specific user of the website.
1. General rules
1.1. “Olmarie” SIA is committed to protecting and respecting your privacy. We make every effort to ensure that our processing of personal data complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
1.2. The controller of your personal data is "Olmarie" SIA, single registration number: 50203032801, registered office at Jurmala, Teatra street 25 k-1, LV-2015, tel. number: +371 20384351.
1.3. The processors of your personal data are the legal persons who process personal data on behalf of “Olmarie” SIA and in accordance with the instructions of “Olmarie” SIA, and who are committed to complying with the requirements of regulatory enactments in the field of data processing.
1.4.1. When processing personal data, the Controller shall ensure the lawfulness and fairness of the processing of personal data;
1.4.2. respect the rights of the Customer;
1.4.3. Transparent information is provided to the Client about the collection, use, viewing or other processing of their personal data and the extent to which personal data is or will be processed, specifying the specific purposes of the processing;
1.4.4. ensure that the personal data is adequate, relevant and necessary for the purposes for which it is processed. The Controller shall only process data and to the extent that it is necessary for the Controller's business activities in order to ensure the provision of services/sale of goods.
1.4.5. ensure that Personal Data are not stored for longer than necessary, i.e. for as long as the contract concluded with the Client is valid, for as long as the Controller or the Client can exercise their legitimate interests in accordance with the procedure established by external laws and regulations, for as long as a legal obligation to store the data exists for either of the parties, for as long as the Client's consent to the respective processing of personal data is valid, unless there is another lawful basis for processing the data. After the retention period has expired, the personal data shall be permanently deleted.
1.4.6. ensure that Personal Data is accurate, ensure that inaccurate Personal Data is rectified or erased.
1.4.7. ensure that Personal Data is processed in a manner that ensures appropriate security and confidentiality of Personal Data, including by preventing unauthorised access to or use of Personal Data and unauthorised access to systems and equipment used for processing.
1.4.8. ensure that Personal Data is not transferred without secure and adequate protection.
2. Legal basis for processing personal data
2.1. Your personal data is processed on the following legal grounds:
- Point (a) of the first part of Article 6 of the General Data Protection Regulation - when your consent is received;
- Point (b) of the first part of Article 6 of the General Data Protection Regulation - to ensure the performance of the contract;
- Clause (c) of the first part of Article 6 of the General Data Protection Regulation - to ensure the fulfillment of a legal obligation;
- Clause (c) of the first part of Article 6 of the General Data Protection Regulation - to ensure the fulfillment of a legal obligation;
2.2. By choosing not to provide personal data in any part or by withdrawing consent in whole or in part (in relation to specific data provided), “Olmarie” SIA will not be able to provide the customer with the services for which the personal data is necessary.
3. Personal data and the purposes for which they are processed
3.1. The Controller processes personal data for the following purposes:
3.1.1. to identify the Customer;
3.1.2. for the preparation and conclusion of a contract;
3.1.3. for the supply of goods and services (performance of contractual obligations);
3.1.4. for advertising and distribution of goods or commercial purposes;
3.1.5. customer service;
3.1.6. creating and managing a customer profile;
3.1.7. handling and processing objections;
3.1.8. billing administration;
3.1.9. improving the website;
3.1.10. statistics and market research;
3.1.11. security.
3.2 The Controller processes the following personal data:
3.2.1. for the processing of registration data - name, surname, e-mail, password.
3.2.2. for delivery data processing - name, surname, e-mail, mobile phone, address, delivery method, payment method, payment details.
3.2.3. cookies - the Customer's browsing history and behaviour on the Manager's website.
3.2.4. for accounting processing - order history, payment information, delivery information.
3.2.5. for marketing information - name, telephone number, email address, device identification number. 3.2.4. claim rights - name, contact details, order and delivery information.
3.3. Processing of personal data for commercial purposes shall only be carried out if the Customer has freely given a specific, informed and unambiguous indication that the Customer consents to such processing. The Customer may object to receiving commercial communications in accordance with the law without giving his/her consent to receive commercial communications (for more information on commercial communications, please refer to Section 6 of the Terms)
3.4. The processing of personal data may be carried out in an automated manner, including through profiling of the Customer, in order to provide new, specific, individual offers by the Manager to a particular Customer, taking into account information obtained and automatically collected by the Manager from personal data provided by the Customer and previous purchases on the Manager's website, if the Customer has consented to this.
3.5. The Manager may carry out automated decision-making with respect to the Customer if it has received a freely given, specific, informed and unambiguous indication from the Customer that the Customer consents to such actions. The Customer may object to automated decision-making in accordance with the law without giving its consent to the automated processing of personal data.
3.6. Automated decision-making, such as the preparation and display of commercial communications (pop-up banners) on the Website by the Manager to advertise the products available on the Website and to assist Customers in making their choice from the range of products offered, including based on the information about their favourite products displayed in the commercial communications (pop-up banners). By consenting to the automated processing of personal data for this purpose, the Customer agrees that the Controller will use information about the goods purchased by the Customer on the Website by placing commercial notices (pop-up banners) on the Website containing the following data: information about the goods purchased, an image of the goods from the Website and anonymised information about the person who has purchased a particular product, the pop-up banner stating, for example: "Customer from Riga just purchased ...( information about the product as described above).
3.7. Automated decision-making is carried out by the Manager in order to send the Customer a reminder about the items that have been placed in the shopping basket of the Customer's profile on the Website.
3.8. Automated decision-making is performed by the Manager to ask the Customer to submit a review of an item, which is included in the statistics on the evaluation of the item, without identifying information of the Customer.
3.9. Opting out of receiving commercial communications shall not have any legal effect on the Customer and shall not restrict the Customer's right to purchase goods and services on the Website.
3.10. The refusal of automated data processing for the purposes set out in the Terms shall not have legal consequences for the Customer and shall not limit the Customer's right to purchase goods and services on the Website.
4. What personal data we transfer to third parties
4.1. We may transfer the Customer's personal data to recipients in the categories set out below:
4.1.1. Financial transactions related to the purchase of goods on the website processed by the Manager's payment service providers, including the payment platform makecommerce.lv. We disclose the Customer's financial transaction data to the Manager's payment service providers, including Maksekeskus AS, to the extent necessary for the performance of payment transactions, refunds and complaints handling.
4.1.2. We may transfer Customer Personal Data to other service providers for the provision of specific services, such as website hosting providers, courier services, server and maintenance providers, email service providers, accounting service providers.
4.2. We may transfer the Client's personal data not only in the cases specified above, but also in the performance of our legal obligations, as well as, if necessary, to protect the interests of the Client or other persons, for example, in legal proceedings or before public authorities.
4.3. We may transfer the Client's personal data to public authorities in accordance with the laws and regulations in force in the Republic of Latvia, in the manner and to the extent prescribed by the laws and regulations.
4.4. For direct marketing purposes, we may transfer personal data to our partners who provide marketing services to us with the Client's consent.
4.5. We will only engage service providers who have put in place appropriate technical and organisational measures to ensure an appropriate level of security for the processing of data, which will ensure the procedures set out in the laws and regulations - a level of processing and protection of personal data equivalent to the requirements set out in the General Data Protection Regulation.
4.6. In certain cases, in compliance with the requirements of regulatory enactments, personal data is accessed by the Controller's business partners located in third countries (i.e. countries outside the European Union and the European Economic Area): developers or service providers in the capacity of data processor.
4.7. In the cases referred to in paragraph 4.6., the third-country business partners engaged by the Controller shall ensure a level of data protection equivalent to the level of data protection provided by the Controller.
5. Cookies
5.1. The website may use cookies. The terms of use of cookies are available here.
6. Commercial communications
6.1. A commercial communication is any communication in electronic form intended to advertise, directly or indirectly, goods or services or the image of a trader, organisation or person carrying on a trade, business or regulated profession. Information giving direct access to general information about the service provider and its activities (domain name or e-mail address) shall not be considered to be a commercial communication.
6.2 The Controller may use personal data to provide information about the services, promotions and other activities offered by olmarie.lv.
6.3 Through olmarie.lv, you can opt-in (give your consent) to receive commercial communications.
6.4 The consent given by the Customer to receive commercial communications is valid until revoked (also after termination of the service contract). The Customer may at any time opt-out from receiving further commercial communications in any of the following ways:
6.4.1. by making an appropriate note in his/her user profile at olmarie.lv;
6.4.2. by sending an e-mail to olmarie@inbox.lv;
6.4.3. in person at the point of sale;
6.4.4. by using the automated opt-out option provided in the commercial communication, by clicking on the unsubscribe link at the end of the relevant commercial communication (email).
6.5. “Olmarie” SIA shall cease sending commercial communications as soon as the Customer's request has been processed. The processing of the request depends on the technological possibilities, which may take up to three days.
7. Your rights
7.1. Right to receive information about the processing of personal data;
7.2. the right to inspect your personal data that we store;
7.3. the right to request the rectification of your personal data that we hold (most of which you can rectify by logging into your account);
7.4. the right to ask us to erase your personal data ("right to be forgotten");
7.5. the right to restrict the processing of your personal data;
7.6. the right to object to the processing of your personal data;
7.7. the right to object to your personal data being processed for direct marketing purposes;
7.8. the right to object to the automatic processing of personal data;
7.9. the right to data portability;
7.10. the right to withdraw consent to the processing of your personal data;
7.11. the right to lodge a complaint with a supervisory authority;
7.12. if you wish to exercise your rights, or if you have any questions about the processing of your personal data or the exercise of your rights, please contact us by email.
7.13. If you believe that we are in breach of the legislation regulating the protection of personal data when processing your personal data, you have the right to lodge a complaint with the Data State Inspectorate at 17 Elijas Street, Riga, LV-1050, https://www.dvi.gov.lv/lv/. In all cases, please contact us before making a complaint so that together we can find a suitable solution.
8. Consent and changes to the Privacy Policy
8.1. By using the Online Shop olmarie.lv and/or participating in olmarie.lv activities, the Customer confirms his/her consent to the processing of personal data.
8.2. Withdrawal of consent shall not affect the processing of data carried out at the time when the Customer's consent was valid.
8.3. Withdrawal of consent shall not interrupt the processing of data carried out on the basis of other legal grounds.
8.4. Upon receipt of a request from the Customer to exercise its rights, the Controller shall verify the identity of the Customer, assess the request and comply with it in accordance with the laws and regulations.
8.5. The Manager shall send a reply to the Customer by registered mail to the contact address provided by the Customer, an electronically signed reply by e-mail at the Customer's request, taking into account, as far as possible, the method of receipt of the reply indicated by the Customer.
8.6. The Controller shall ensure compliance with the data processing and protection requirements in accordance with the laws and regulations and, in the event of an objection by the Customer, shall take reasonable steps to resolve the objection. However, if this fails, the Customer shall have the right to apply to the supervisory authority.
8.7. The Controller reserves the right to unilaterally change and supplement the Privacy Policy at any time without notice by publishing the changes on olmarie.lv under the Privacy Policy section.
9. Contacting us
9.1 In order to improve the quality of the services we provide, we are always willing to listen to feedback from our customers and to answer any questions that may arise.
9.2 You can contact us using any of the contact methods that are most convenient for you, which are listed in the Privacy Policy or on the website olmarie.lv under the Contact section.
Privacy Policy last updated:
January 25, 2024.