Terms used
Apavi 12 – A limited liability company that operates the online store www.somijasapavi.lv and processes the personal data of data subjects.
Personal Data – Any information relating to an identified or identifiable natural person (data subject).
Processing of Personal Data – Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Client – A natural person (data subject) who can be directly or indirectly identified by reference to an identifier using personal data contained in a personal data processing system.
Client’s “Consent” – Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of his or her personal data.
Controller – A natural or legal person, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, as well as provides access to personal data.
Authorized Person (Processor) – A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Cookies – Small text files (website browsing data) that are created and stored on the Client’s device (computer, tablet, mobile phone, etc.) when visiting the online store www.somijasapavi.lv
Legitimate Interests – The interests of SIA “Apavi 12”, based on the provision of quality services, which constitute a legal basis provided that the interests or fundamental rights and freedoms of the data subject do not override the legitimate interests of Apavi 12. SIA “Apavi 12” has the right to process the Client’s personal data to the extent objectively necessary and sufficient to ensure timely, high-quality and convenient customer service.
Notice on the Processing of Personal Data
Apavi 12 collects, processes, stores, deletes, and protects the personal data of natural persons for the purposes of the online store www.somijasapavi.lv, in accordance with Personal Data Protection Regulation No. 2016/679 and other applicable legal acts of the Republic of Latvia.
In accordance with the applicable legal acts governing the processing of personal data of natural persons, Apavi 12 observes the following principles:
- Ensures lawful and fair processing of personal data;
- Processes personal data only for specified purposes;
- Personal data received is not stored longer than necessary and is deleted once the specified purpose has been achieved;
- Personal data processing is carried out in compliance with the rights of natural persons;
- Secure storage of personal data is ensured;
- Collected personal data is not transferred to other companies within the European Union or outside the European Union, except in accordance with and in compliance with the applicable legal acts of the Republic of Latvia and Personal Data Protection Regulation No. 2016/679.
Privacy Policy
The privacy policy applies to the processing of every client’s personal data and the services provided to the client. It provides information on how Apavi 12 collects, processes, stores, shares, deletes, and protects the client’s personal data. Apavi 12 ensures lawful and fair processing of client personal data.
Categories of Personal Data Processing
The categories of personal data depend on the services and products used by the client. Apavi 12 is entitled to process the following categories of personal data:Data provided by the client to Apavi 12;
- First and last name;
- Correspondence address, phone number, email address;
- Communication data, including emails related to client communication with Apavi 12;
- Cookies – data on visits to the online store www.somijasapavi.lv. If the client does not wish to allow cookies, they may disable them in their browser settings, but in this case, website functionality may be limited;
- Data on date, time, and internet browsing volume.
Legal Basis for Personal Data Processing
- The client, as the data subject, gives their own consent (data subject consent) for the collection and processing of personal data for specified purposes. Consent is voluntary and can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing or service quality based on the consent prior to withdrawal.
- Apavi 12’s legitimate interests – providing quality services. Apavi 12 has the right to process client data to the extent objectively necessary and sufficient for timely, quality, and convenient service and internal process support.
- Apavi 12 has the right to process client data to comply with regulatory requirements and respond to lawful requests from state and municipal authorities.
- When processing client data, Apavi 12 may perform profiling to assign bonuses and send automated individual offers solely for business purposes, without legal consequences for the client.
Purposes of Personal Data Processing
- Concluding and performing contracts with the client;
- Assessing the client’s ability to fulfill contractual obligations;
- Providing technical support for services offered;
- Promoting industry development and offering new services;
- Processing statistical data and performing market analysis.
Collection of Personal Data
Apavi 12 collects client data when the client:
- Visits, browses, or subscribes to the newsletter at www.somijasapavi.lv;
- Purchases and uses products or services from Apavi 12;
- Participates in contests, lotteries, or surveys.
- Apavi 12 and its authorized persons, under GDPR No. 2016/679, are entitled to process personal data received from the client.
Retention Period of Personal Data
Apavi 12 is entitled to process and store personal data as long as:
- The client’s consent for personal data processing has not been withdrawn;
- The period necessary to realize Apavi 12’s legitimate interests and protection;
- The retention period of personal data is specified by Latvian laws;
- Contractual obligations between the client and Apavi 12 are in effect.
Sharing of Personal Data
- Apavi 12 shares client data only to the necessary and sufficient extent in accordance with Latvian laws and the objective circumstances of the situation;
- If necessary, client data is provided to authorized persons of Apavi 12, partners, or service providers involved in ensuring and improving the quality of products and services ordered or used by the client;
- Apavi 12 may transfer client data to law enforcement and other state or municipal authorities if required by Latvian laws and official requests.
Protection of Personal Data
- Apavi 12 applies modern technologies and follows technical and organizational requirements to protect client data from unauthorized access, accidental loss, destruction, or disclosure;
- All persons involved in processing client data are checked, and appropriate security measures are evaluated according to legal requirements;
- Apavi 12 is not responsible for unauthorized access or loss of personal data if it occurs due to circumstances beyond Apavi 12’s control (e.g., due to client fault or negligence).
Client Rights
- The client has the right to refuse marketing communications at any time and object to the disclosure of their personal data. Withdrawal of consent does not affect the lawfulness of processing or service quality based on prior consent;
- The client has the right to correct all personal data held by Apavi 12;
- The client has the right to request deletion or restriction of personal data processing if it is not necessary for the purposes for which the data was collected and processed;
- The client has the right to receive information about natural or legal persons who have received information about the client;
- The client has the right to receive or transfer their personal data to another data controller. This right applies only to data provided to Apavi 12 based on consent or contract. A written request is required to exercise these rights.