Privacy policy

This privacy policy explains how nattali.lv processes and protects personal data when using the website www.nattali.lv.

This policy has been prepared in accordance with the requirements of the General Data Protection Regulation and the explanation provided by the Data State Inspectorate that an individual must receive clear information about data processing prior to the processing of their data.

1. Data Controller

The data controller is:

Email: pitstop1@inbox.lv

Phone: 28456498

2. What personal data is processed

The following personal data may be processed to ensure the operation of the website:

• first name, last name;

• email address;

• phone number;

• delivery or contact address, if provided;

• order or request information;

• payment information, if purchases are made on the website;

• IP address, technical information about the device and browser;

• cookie data.

3. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

• to communicate with website visitors;

• to process customer requests;

• to accept, process, and fulfill orders;

• to prepare invoices and comply with accounting requirements;

• to improve the website’s performance, security, and user experience;

• to fulfill obligations set forth in regulatory acts;

• to send marketing communications, if the individual has consented to this.

4. Legal basis for the processing of personal data

Personal data is processed based on:

• the individual’s consent;

• the performance of a contract or pre-contractual measures;

• the fulfillment of obligations set forth in laws and regulations;

• the controller’s legitimate interests, such as ensuring website security and improving service quality.

5. Disclosure of personal data to third parties

Personal data may be disclosed only if necessary to achieve a specific purpose, for example:

• to payment service providers;

• to delivery service providers;

• to accounting service providers;

• IT and hosting service providers;

• state and local government agencies in cases specified by law.

Personal data is not sold to third parties.

6. Retention period for personal data

Personal data is retained for as long as necessary to achieve the relevant purpose, as well as to fulfill obligations set forth in laws and regulations.

Accounting documents are stored for the period specified in regulatory acts. Communication data is stored for as long as necessary to process a request or to ensure further communication.

7. Cookies

The nattali.lv website may use cookies to ensure the website’s functionality, analyze visits, and improve the user experience.

Essential cookies are used for the technical operation of the website. Analytics and marketing cookies are used only with the user’s consent. DVI clarifies that a cookie policy is a separate explanation of cookie usage or one that should be included in the privacy policy.

8. Rights of the Data Subject

You have the right to:

• request information about the processing of your personal data;

• request the correction of data;

• request the deletion of data;

• restrict the processing of data;

• object to the processing of data;

• withdraw consent;

• request data portability, if applicable;

• to file a complaint with the Data State Inspectorate.

In Latvia, the Data State Inspectorate is the supervisory authority for the processing of personal data.

9. Data Security

The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, or unlawful processing.

10. Changes to the Privacy Policy

The Controller may update this Privacy Policy. The current version is always available at www.nattali.lv