Controller
The controller for personal data processed through this storefront is SIA DAMIJA, registration No. 40203487197, legal address Ģerāniju iela 11, Rīga, LV-1067, Latvia. Contact: info@damija-sia.com, +371 25706123.
What data is processed
- Account data: email address, password hash, sign-in and account identifiers.
- Checkout data: name, email, phone number, delivery address, notes, order contents, and timestamps.
- Payment data: selected payment method, invoice number, payment reference, payment status, and where applicable PayPal order identifiers, payer identifiers, and capture identifiers.
- Technical data: server logs, essential session data, and security-related form protection data.
Why the data is used
- To create customer accounts and allow sign-in.
- To process orders, communicate about fulfilment, and handle returns or complaints.
- To take and verify PayPal payments or reconcile bank-transfer payments.
- To sync storefront orders into FluxERP2 for invoicing, warehouse fulfilment, and accounting.
- To protect the storefront against abuse and unauthorised access.
Legal bases
- Performance of a contract or steps requested before entering into a contract.
- Compliance with legal obligations, including tax, accounting, and consumer-rights obligations.
- Legitimate interests in running, securing, and improving the storefront.
Recipients
- PayPal, where used as the payment service provider for checkout and payment capture.
- FluxERP2, which receives storefront order data to create the operational back-office, invoice, and payment-matching record.
- Hosting and infrastructure providers that process data only to run the storefront.
Retention
Account and order data is kept for as long as needed to operate the storefront and meet legal accounting, tax, fraud-prevention, and consumer-rights obligations. Payment and order records may therefore be retained beyond the visible storefront order lifecycle where law requires it.
Your rights
Subject to the GDPR and applicable Latvian law, you may request access, rectification, erasure, restriction, objection, and data portability where available. To exercise these rights, contact info@damija-sia.com.
If you believe your data has been processed unlawfully, you may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija): www.dvi.gov.lv.