Privacy Policy
1. General Provisions
1.1. This Privacy Policy describes how SIA OIA, registration number 40203518707, VAT number LV40203518707, registered address “Urdziņa 65”, Ciemupe, Ogresgala Parish, Ogre Municipality, LV-5001, Latvia (hereinafter also referred to as the “Data Controller”), obtains, processes and stores personal data received by PickCarry.lv from its customers and persons visiting the website (hereinafter referred to as the “Data Subject” or “you”).
1.2. Personal data means any information relating to an identified or identifiable natural person, i.e. the Data Subject. Processing means any operation performed on personal data, such as collection, recording, modification, use, consultation, disclosure, deletion or destruction.
1.3. The Data Controller complies with the principles of personal data processing established by applicable legislation and is able to demonstrate that personal data is processed in accordance with applicable laws and regulations.
2. Collection, Processing and Storage of Personal Data
2.1. Personal information is collected, processed and stored by the Data Controller mainly through the PickCarry.lv online store, email communication and the information submitted by customers when placing orders or contacting us.
2.2. By visiting and using the services provided through the Online Store, you acknowledge that the information you provide may be used and managed in accordance with the purposes described in this Privacy Policy.
2.3. The Data Subject is responsible for ensuring that the personal data provided is correct, accurate and complete. Knowingly providing false information is considered a violation of this Privacy Policy. The Data Subject must notify the Data Controller without undue delay of any changes to the personal data previously provided.
2.4. The Data Controller is not responsible for losses suffered by the Data Subject or third parties where such losses have arisen as a result of incorrect or false personal data provided by the Data Subject.
3. Processing of Customer Personal Data
3.1. The Data Controller may process the following personal data:
3.1.1. First name and surname;
3.1.2. Contact information, including email address and/or telephone number;
3.1.3. Order and transaction information, including purchased products, order number, parcel locker or other delivery information, price and payment information;
3.1.4. Information provided when communicating with customer support, submitting a return request, complaint or other enquiry;
3.1.5. Any other information voluntarily submitted to us while using the services offered through the website or when communicating with us.
3.2. Where necessary and permitted by law, the Data Controller may verify the accuracy of submitted information using publicly available registers or other lawful sources.
3.3. The legal basis for the processing of personal data is Article 6(1)(a), (b), (c) and (f) of Regulation (EU) 2016/679, the General Data Protection Regulation:
a) the Data Subject has given consent to the processing of their personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the Data Subject is a party or in order to take steps at the request of the Data Subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
f) processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require protection of personal data, particularly where the Data Subject is a child.
3.4. The Data Controller stores and processes the Data Subject’s personal data for as long as at least one of the following conditions applies:
3.4.1. The personal data is necessary for the purposes for which it was collected;
3.4.2. The Data Controller and/or the Data Subject may exercise their legitimate interests in accordance with applicable laws and regulations, for example by submitting objections, claims or legal proceedings;
3.4.3. There is a legal obligation to retain the data, including obligations arising from accounting or tax legislation;
3.4.4. The Data Subject’s consent to the relevant processing remains valid, where no other lawful basis for processing applies.
When the circumstances referred to above cease to apply, the applicable retention period ends and the relevant personal data is deleted, anonymised or otherwise disposed of in accordance with applicable legislation.
3.5. In order to fulfil our obligations to you, the Data Controller may transfer your personal data to cooperation partners and service providers that process data on our behalf or where necessary to provide the requested service, including accounting service providers, parcel delivery providers, IT service providers and other service providers.
Payment processing is provided by the payment platform MakeCommerce, therefore our company transfers the personal data necessary for carrying out payments to the owner of the platform, Maksekeskus AS.
Where necessary and permitted by law, we may also transfer your personal data to state authorities, law enforcement authorities or other competent institutions in order to comply with legal obligations or protect our legal interests, including the preparation, submission and defence of legal claims.
3.6. When processing and storing personal data, the Data Controller implements appropriate organisational and technical measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, unauthorised access or any other unlawful processing.
4. Rights of the Data Subject
4.1. In accordance with the General Data Protection Regulation and the laws of the Republic of Latvia, you have the right to:
4.1.1. Access your personal data, receive information about its processing, request a copy of your personal data in electronic format and, where applicable, request the transfer of this data to another controller;
4.1.2. Request the correction of incorrect, inaccurate or incomplete personal data;
4.1.3. Request the deletion of your personal data (“right to be forgotten”), except where applicable law requires or permits us to retain the data;
4.1.4. Withdraw previously given consent to the processing of personal data where processing is based on consent;
4.1.5. Request restriction of the processing of your personal data in accordance with applicable law;
4.1.6. Object to the processing of personal data where applicable;
4.1.7. Lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija).
Requests concerning the exercise of your data protection rights may be submitted:
by email to support@pickcarry.lv
or in writing to:
SIA OIA
“Urdziņa 65”
Ciemupe, Ogresgala Parish
Ogre Municipality, LV-5001
Latvia
The Data Controller may request additional information where necessary to verify the identity of the person submitting the request.
5. Marketing Communications
5.1. If you have expressly agreed to receive marketing communications, including newsletters, information about products or promotional offers, we may process the email address or other contact information provided for this purpose.
5.2. You may withdraw your consent to marketing communications at any time by using the unsubscribe option included in the relevant communication or by contacting us at:
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Final Provisions
6.1. This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), as well as the applicable laws of the Republic of Latvia and the European Union.
6.2. The Data Controller has the right to amend or supplement this Privacy Policy when necessary. Any amendments become effective once the updated Privacy Policy is published on:
pickcarry.lv
6.3. If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
SIA OIA
Registration No.: 40203518707
VAT No.: LV40203518707
Registered address: “Urdziņa 65”, Ciemupe, Ogresgala Parish, Ogre Municipality, LV-5001, Latvia
Email: support@pickcarry.lv