Controller
The controller for personal data processed through this storefront is SIA DAMIJA, registration No. 40203487197, legal address Ģerāniju iela 11, Rīga, LV-1067, Latvia. Contact: info@damija-sia.com, +371 25706123.
What data is processed
- Account data: email address, password hash, sign-in and account identifiers.
- Preference data: selected language, stored account language preference, and essential cookie-consent acknowledgement state.
- Checkout data: name, email, phone number, delivery address, notes, order contents, and timestamps.
- Payment data: selected payment method, payment status, and transaction identifiers required to process the order.
- Technical data: server logs, essential session data, and security-related form protection data.
Why the data is used
- To create customer accounts and allow sign-in.
- To process orders, communicate about fulfilment, and handle returns or complaints.
- To confirm payments and complete orders.
- To protect the storefront against abuse and unauthorised access.
Legal bases
- Performance of a contract or steps requested before entering into a contract.
- Compliance with legal obligations, including tax, accounting, and consumer-rights obligations.
- Legitimate interests in running, securing, and improving the storefront.
Recipients
- A secure online payment provider, where used for checkout and payment confirmation.
- Service providers involved in payment, hosting, and order processing where necessary.
- Hosting and infrastructure providers that process data only to run the storefront.
Retention
Account and order data is kept for as long as needed to operate the storefront and meet legal accounting, tax, fraud-prevention, and consumer-rights obligations. Payment and order records may therefore be retained beyond the visible storefront order lifecycle where law requires it.
Your rights
Subject to the GDPR and applicable Latvian law, you may request access, rectification, erasure, restriction, objection, and data portability where available. To exercise these rights, contact info@damija-sia.com.
If you believe your data has been processed unlawfully, you may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija): www.dvi.gov.lv.