Privacy policy

Privacy Policy

Processing of Personal Data

By providing the information required when placing an order, the Buyer confirms that they have read and agree that their personal data may be used by the Seller to process and fulfil the Buyer’s order in accordance with the laws and regulations of the Republic of Latvia.

By providing their information, the Buyer agrees that notifications related to the processing of their order may be sent to the email address provided.

We respect your privacy and are committed to protecting the security of your personal data. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation — GDPR), we ensure that your personal data is processed in a transparent and fair manner.

Processing of Personal Data

We do not retain your personal data for longer than is necessary for the specific purpose or purposes for which it is processed. In any event, your personal data will not be retained for longer than the following periods:

  • Account data -up to 3 (three) years after your last login to your account or your last purchase, whichever is later.
  • Transaction data - up to 10 (ten) years after the provision of services has ended.
  • Communication data - up to 3 (three) years after your last purchase, whichever is later.
  • Correspondence data - up to 2 (two) years after the end of the relevant communication.

Notwithstanding the other provisions of this section, we may retain your personal data where this is necessary to comply with a legal obligation to which we are subject.

In some cases, we may not be able to specify precisely how long your personal data will be retained. For example, access data may be retained for as long as necessary for the specific purposes for which it was collected.

We are entitled to retain your personal data where this is necessary to comply with a legal obligation applicable to us.

Our Commitment to Your Privacy

KMSMART OU Latvian Branch is committed to protecting and respecting your privacy. Please read this Privacy Policy carefully to understand why and how we collect your personal data and how we use it.

When you visit our website for the first time, we may ask you to consent to the use of cookies in accordance with this Privacy Policy and our cookie settings.

If you have any questions about how we protect your privacy, please contact us at info@izoart.lv.

Account and Order Data

We process account and order data. This may include your first and last name, email address, telephone number and other information you provide when registering, as well as your purchase history.

This information is obtained directly from you.

We process account and order data in order to operate our website, provide our services, maintain the security of our website and services, and communicate with you.

The legal basis for this processing is the performance of a contract, taking steps at your request prior to entering into a contract, and/or our legitimate interests, including monitoring and improving our website and services.

Transaction Data

  • We process information relating to the provision of our services through our website.
  • Transaction data may include your contact details, bank account information and information relating to the transaction.
  • Transaction data is processed in order to provide our services and maintain accurate records of transactions.

The legal basis for this processing is the performance of a contract, taking steps at your request prior to entering into a contract, and/or our legitimate interests, including the proper administration of our website and business activities.

Marketing and Newsletter Communications

  • We may process information that you provide when subscribing to our email communications and newsletters.
  • Communication data is processed in order to send you relevant communications, news and updates.
  • The legal basis for this processing is your consent.

Where we have previously provided services to you and you have not objected to receiving marketing communications, we may also process communication data on the basis of our legitimate interests, including maintaining and improving our relationship with customers, to the extent permitted by applicable law.

Correspondence

We may process information relating to any communication you send to us.

Correspondence data may include the content of your communication and metadata associated with the communication. Where communication is initiated through a contact form on our website, the website may generate metadata relating to that correspondence.

Correspondence data is processed for the purposes of communicating with you and maintaining appropriate records.

The legal basis for this processing is our legitimate interests, including the proper administration of our website and business, maintaining consistent and high-quality customer service, and resolving disputes between you and our employees or representatives.

Legal Claims and Legal Obligations

We may process your personal data as described in this Privacy Policy where this is necessary to establish, exercise or defend legal claims, whether in court, in administrative proceedings or through other out-of-court procedures.

The legal basis for this processing is our legitimate interests, including protecting and enforcing our legal rights, your legal rights and the legal rights of other persons.

In addition to the specific purposes described above, we may process your personal data where such processing is necessary to comply with a legal obligation to which we are subject.

Disclosure of Personal Data to Third Parties

We may disclose your information to third parties in the following circumstances:

Service Providers and Partners

We may use other companies, including current or future affiliated entities, to provide services jointly with us or on our behalf and to assist us in operating our business.

Where a service is provided by one of our third-party partners, your information may be transferred to or made available to the partner responsible for providing the requested service, to the extent necessary for that purpose.

Legal Requirements and Law Enforcement

We may disclose personal information where necessary to comply with applicable laws and regulations, cooperate with law enforcement or government authorities, prevent criminal activity, or protect the legal rights and interests of KMSMART OU Latvian Branch, you and other persons.

To the extent permitted by applicable law, we may disclose personal information without notifying you where we reasonably and in good faith believe that such disclosure is necessary or appropriate to:

(a) comply with any applicable law, regulation, legal process or enforceable governmental request;

(b) cooperate with law enforcement authorities or other government agencies in connection with an investigation, including where the requesting authority is not required to formally serve us with a subpoena or other legal process;

(c) investigate, prevent or take action regarding suspected or actual criminal activity;

(d) enforce or perform a contract, or protect and defend the rights, property or interests of KMSMART OU Latvian Branch, its affiliated entities and their respective employees, customers, partners and agents, other users and the general public; or

(e) act in circumstances involving a threat to the personal safety of any person.