Privacy Policy

This privacy policy provides our customers with information about the purposes, methods  and conditions of personal data processing by the online store www.pernille.lv  (hereinafter – the online store), as well as customers’ rights in relation to the processing of personal data by the online store.

We respect our customers’ privacy, so the security of their personal data is our priority. We use appropriate organizational and technical measures to ensure the ongoing security of customers’ personal data and compliance with legal requirements and our internal rules.

To sell goods through the online store, we need to process personal data as described in this privacy policy. If you do not agree with the online store’s terms of use, this privacy policy or any part of it, you may choose not to provide your personal data. In that case, unfortunately, we will not be able to provide you with access to the online store’s services.

1. Controller and contact information

1.1. The controller of customers’ personal data is SIA “Pernille”, registration number 40203449829 , registered address Eduarda Smiļģa iela 18-1, Rīga, LV-1002, Latvia. You can contact us by phone at 26400010 or by email at [email protected] (hereinafter – the Seller and/or we). We provide the content available in the online store and process customers’ personal data when selling goods.
1.2. If you have questions about the processing of customers’ personal data by the online store, please contact us at [email protected] 

2. Purposes of personal data processing

We use customers’ personal data only for the purposes stated in this privacy policy. The online store uses customers’ personal data for the following purposes:

2.1. To sell goods, including for the following purposes:

          2.1.1. To identify a customer who wishes to purchase a product.
          2.1.2. To prepare an invoice for the customer.
          2.1.3. To process orders for accounting purposes and administer payments.
          2.1.4. To deliver goods and fulfill obligations under the distance purchase agreement.
          2.1.5. To ensure the fulfillment of obligations arising from the purchase agreement.
          2.1.6.To review and process objections received from customers.
2.2. To communicate with customers and send notifications.
2.3. To inform customers about news and other related information that we consider necessary.


3. Types of customers’ personal data

3.1. To fulfill transactions made in the online store and deliver goods, we may process the following customer personal data, depending on the delivery method chosen by the customer: the customer’s first name, last name, email address, mobile phone number, and data relating to the delivery of and payment for goods that the customer provides to us or that we obtain from third parties.
3.2. To send our newsletters by email, we may process the following customer personal data, depending on the scope and purpose of the information provided by the customer: the customer’s first name, last name and email address.
3.3. To properly fulfill customer orders or other requests related to ordered goods (such as returns or checking that goods have been delivered correctly), we retain the date and time of the customer’s purchase, product names, quantities, the total purchase price (after all discounts), the amount of discounts granted, order status and payment method.


4. Legal basis and duration of personal data processing

4.1. Personal data may be processed by the online store on any of the following legal bases:

       4.1.1. Entering into and performing a contract with the customer – to conclude a purchase agreement at the customer’s request and ensure its performance.

      4.1.2. Compliance with a legal obligation – where required by law, we may process data received from the customer to the extent necessary to comply with the relevant legal requirements, for example, for accounting purposes.

       4.1.3. Customer consent – the customer’s personal, freely given, specific and informed indication that they agree to the processing of their personal data.

      4.1.4. Pursuit of legitimate interests – the Seller may process customers’ personal data to pursue its legitimate interests, including, but not limited to, conducting its business, offering quality and tested products, retaining customer requests and submissions concerning purchases, taking steps to retain customers, and advertising its goods and services by sending commercial communications.

4.2. We process personal data provided by customers for as long as the customer’s consent to data processing remains valid, or for as long as we need to protect our legitimate interests or fulfill our legal obligations, and until the purpose of processing the personal data has been achieved.

4.3. The Seller does not carry out automated decision-making or profiling in the online store.

5. Recipients and transfer of personal data

5.1. When processing customers’ personal data, we maintain strict confidentiality and protect personal data against unauthorized access by third parties and accidental loss or destruction.
5.2. Customers’ personal data is disclosed only to those employees of the Seller who need it to perform their duties.
5.3.When collecting and using customers’ personal data, we use external service providers who, under contract, strictly follow our instructions and whom we assess before using their services and continue to monitor.

6. Customer consent to data processing and the right to withdraw it

6.1. The customer gives consent to the processing of personal data when shopping in the online store or when confirming an order.
6.2. The customer has the right to withdraw consent to data processing at any time in the same way it was given or by writing to [email protected]. In that case, no further processing based on the previously given consent will be carried out for the specific purpose.
6.3. If the customer no longer wishes to receive marketing communications from the online store, they may unsubscribe from such news and information at any time by notifying us by email at [email protected] or by clicking the interactive link at the bottom of the email received.
6.4. Withdrawal of consent does not affect data processing carried out while the customer’s consent was valid.
6.5. Withdrawal of consent does not stop data processing carried out on other legal bases.


7. Customers’ rights regarding our processing of personal data

Data protection laws give customers rights that they may exercise freely, and we are obliged to enable them  to do so. Customers have the following rights:

7.1. Right of access to processed personal data.
The customer has the right to obtain confirmation that we process their personal data and to access the personal data being processed, as well as information about the purposes of processing, the categories of data processed, the categories of data providers, the processing period, the sources of the data, and the significance and consequences of the processing for the customer. Most of this information is provided in this policy.


7.2. Right to rectify personal data.

If the customer believes that the personal data being processed is inaccurate or incorrect, they have the right to request that it be changed, clarified or corrected. The customer may request changes or corrections to their data by email or by contacting us through the other methods specified in this policy.


7.3. Right to object to data processing.
The customer has the right to object to the processing of personal data if it is processed on the basis of the customer’s consent or our legitimate interests. To exercise the rights set out in this section, please submit a request using the contact details provided in this policy.


7.4. Right to lodge a complaint.
If the customer believes that we are processing their data in breach of data protection laws, we encourage them to contact us first.  If the customer is not satisfied with our proposed solution, they have the right to lodge a complaint with the supervisory authority, which in the Republic of Latvia is the Data State Inspectorate. Before lodging a formal complaint, we encourage customers to contact us so that disputes and complaints can be resolved through discussion.


7.5. Right to erasure.
Under certain circumstances specified by law (for example, if personal data is processed unlawfully or the legal basis for processing no longer applies), the customer has the right to request that we erase their personal data. To exercise this right, please submit a written request using the contact information provided in this policy.


7.6. Right to restrict data processing.
Under certain circumstances specified by  law (for example, if personal data is processed unlawfully, the customer contests the accuracy of the data, or the customer objects to processing based on our legitimate interests), the customer also has the right to restrict the processing of their data. Please note, however, that during such a restriction, we may be unable to provide the customer with the online store’s services.


7.7. Right to data portability.
The customer has the right to transfer to another controller data that we process on the basis of their consent using automated means. We will provide the requested data in a simple, machine-readable format used by our systems and, at the customer’s request, send it directly to another controller designated by the customer if technically feasible.


8. Procedure for handling customer requests

8.1. When we receive a customer’s request for data or to exercise another right, we must verify the customer’s identity. The request must therefore be in writing or in a form that may be considered written under applicable law, such as an electronic document signed with a secure electronic signature, and must include all identifying details required by law, such as the customer’s first name, last name, address and signature.
8.2. Upon receiving a customer’s request to exercise any right and successfully completing the verification procedure described above (establishing the customer’s identity), we undertake to provide information about the actions taken in response to the request no later than one month after receiving the request and completing the verification procedure.


9. Validity of the privacy policy

9.1. The Seller may amend this privacy policy at any time at its discretion, provided that the amendments comply with legal requirements concerning the protection of personal data. Amendments take effect when published in the online store. We encourage you to review this privacy policy periodically.