Terms and Conditions
The legislation of the Republic of Latvia stipulates that the owner of an online store must specify the terms of delivery and return of goods, as well as the right of withdrawal. Such a provision is called a distance contract (Cabinet Regulations).
Distance contract
The seller of the goods offered in this online store, hereinafter referred to as the Seller, and the person placing the order, hereinafter referred to as the Buyer, conclude the following Agreement:
The Seller undertakes to sell and deliver the goods to the Buyer in accordance with the Buyer's order.Order and Payment Procedure
The Buyer places an order for goods through this website, indicating the type and quantity of goods to be ordered. The Buyer can pay for the goods using the payment tools integrated into the online store (payment is made via MAKSEKESKUS or by paying the invoice prepared by the Seller and sent to the Buyer by email. The invoice is prepared electronically and is valid without a signature.
The Seller ensures delivery of the goods within 20 days after payment for the goods has been received, coordinating the delivery time with the Buyer.Right of Withdrawal
The Buyer has the right to withdraw from the goods within 14 calendar days from the moment of receipt of the goods by sending a withdrawal letter to the Seller. The Seller sends the withdrawal letter form to the Buyer by email upon the Buyer's request.The Buyer is obliged to return the goods to the Seller within 7 days after sending the withdrawal letter. All expenses related to returning the goods to the Seller are covered by the Buyer.
The Buyer cannot exercise the right of withdrawal if:
- the ordered goods, due to their nature, cannot be returned, or they deteriorate quickly or are quickly consumed;
- the ordered goods are made specifically for the Buyer according to an individual order;
- the Buyer has opened the packaging of an audio or video recording, or computer software.
Section 12, Paragraph 6 of the Latvian Consumer Rights Protection Law states that "the consumer is responsible for maintaining the quality and safety of the goods during the period of exercising the right of withdrawal." The Seller reserves the right to refuse the Buyer the right of withdrawal or to withhold compensation if the goods are damaged, carelessly used during use, or instructions are not followed, if the original packaging of the goods is lost or if the packaging is significantly damaged.
Data Processing
By entering the necessary information when placing an order, the Buyer confirms that they have read and agree that the data provided will be used so that the Seller can accept the Buyer's order and deliver the goods in accordance with the requirements of Latvian legislation. By entering information, the Buyer agrees that notifications related to the processing of the Buyer's order will be sent to the specified email address.
PRIVACY POLICY
SIA “Komforta Tehnoloģijas”, unified registration number: 40003772990 (hereinafter – the Company), the privacy statement determines how the Company processes personal data.
The purpose of the privacy policy is to provide information about the purpose, scope, protection, and retention periods of personal data processing.
This privacy policy provides general information about how the Company processes personal data. More detailed information about personal data processing is provided in contracts and other documents related to the services provided by the Company.
[1] Terms Used
Processor – a cooperation partner of the Company (either a natural or legal person) who processes personal data held by the Company on behalf of and in the interests of the Company.
Data subject – a client of the Company, economic operators, potential clients, beneficial owners, related persons, guarantors, employees, candidates, cooperation partners – natural persons, authorized persons, and any other identified or identifiable person who is a natural person and whose data is processed by the Company.
Controller – the Company, on whose behalf and in whose interests the personal data of the data subject is processed and who is responsible for the processing of personal data.
Personal data – any information relating to an identified or identifiable data subject. Data means any information that provides any details about an identifiable data subject, including objectively recorded information (for example, name, surname, personal identification number, address, phone number, account number, and account information, including payments and turnover), as well as any information recorded in any form, i.e., in written paper format, electronic format, audio and video recordings, photos, or recorded as biometric data.
Profiling – any form of automated processing of personal data that consists of using personal data to evaluate certain personal aspects related to the data subject, in particular to analyze or predict aspects concerning that data subject’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
[2] Personal Data Controller
The personal data controller is the Company.
We confirm that all personal data obtained by the Company will be processed in accordance with the requirements of the European Union and the Republic of Latvia’s personal data protection laws, ensuring that personal data will be processed lawfully, fairly, and in a transparent manner for the data subject (“lawfulness, fairness, and transparency”).
[3] Personal data will be:
1) collected for specific, clear, and legitimate purposes, and not further processed in a manner incompatible with those purposes;
2) collected adequately, appropriately, and limited to what is necessary for the purposes of processing (“data minimization”);
3) collected accurately and, where necessary, kept up to date, taking all reasonable steps to ensure that inaccurate personal data, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);
4) stored in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
5) processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (“integrity and confidentiality”).
[4] Purpose of Personal Data Processing
Conclusion and performance of a contract – so that the Company can conclude and perform a contract, for the provision of a service, by collecting and processing certain personal data that is collected before the conclusion of the contract or during an already concluded contract.
Legitimate interests of the Company – considering the interests of the Company, which are based on the provision of quality service, the Company has the right to process the data subject’s personal data to the extent objectively necessary and sufficient for the implementation of the specified purposes.
Fulfillment of legal obligations – the Company is entitled to process personal data in order to comply with legal requirements, as well as to respond to lawful requests from state and local government authorities.
Consent – the data subject’s consent to the collection and processing of personal data for specific purposes. The data subject has the right to withdraw their previously given consent at any time by using the specified communication channels with the Company. The requested changes take effect within 3 (three) working days after receiving such a notification. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Protection of vital interests – the Company is entitled to process personal data to protect the vital interests of the data subject, the data subject’s representatives, the Company’s employees, or other natural persons, e.g., if processing is necessary for humanitarian purposes, monitoring of natural disasters and human-induced, especially epidemics and their spread, or in emergency humanitarian situations (terrorist acts, cybercrimes, technogenic disaster situations, etc.);
Performance of official authority or public interest – the Company is entitled to process personal data to perform a task carried out in the public interest or in the exercise of the Company’s lawfully assigned official authority. In such cases, the basis for personal data processing is included in legal acts.
[5] Categories of Personal Data
The Company mainly processes the following categories of personal data:
1) identification and contact information: name, surname, personal identification number, date of birth, address, phone number, email address, residence address;
2) data obtained during the provision of the service: name, surname, personal identification number, date of birth, address, phone number, email address, residence address;
3) data related to payment for services: payment status, diagnosis code, insurance policy number;
4) authorized persons’ data: data of authorized persons of data subjects – name, surname, personal identification number; phone number, email address, residence address.
[6] Method of Obtaining Personal Data
1) information provided by the data subject (including personal identification data contained in identity documents);
2) personal data obtained about the data subject during the provision of the service;
[7] Recipients of Personal Data
Personal data may be transferred only to the data subject, the data subject’s authorized persons, personal data processors who, without the status of controller, receive personal data from the Company and process them only for the specified purpose and to the extent necessary to ensure the performance of the contract concluded between the Company and the processor and guarantee their processing without allowing their dissemination in any form. The data subject has the right to specify the recipients of personal data by informing the Company during the provision of the service.
Separate cases when personal data is transferred to other recipients, only to the extent permitted by the data subject and the legal relationship of the Company or as provided by law.
[8] Territory of Personal Data Processing
Personal data is processed in the European Union/European Economic Area (EU/EEA), however, in certain cases, it may be transferred and processed in countries outside the EU/EEA.
The transfer and processing of personal data outside the EU/EEA may take place if there is a legal basis for this, namely, to fulfill a legal obligation, conclude or perform a contract, or in accordance with the data subject’s consent, and appropriate security measures have been taken. Appropriate security measures are, for example:
1) an agreement has been concluded, including EU standard contractual clauses or other approved provisions, codes of conduct, certification, etc., approved in accordance with the General Data Protection Regulation;
2) in a country outside the EU/EEA where the recipient is located, an adequate level of data protection is ensured according to the decision of the European Commission;
3) the recipient is certified according to the Privacy Shield (applies to recipients located in the United States of America).
[9] Data Retention Period
The personal data of the data subject is stored no longer than necessary for the purposes for which the personal data is processed and for the period determined by the Company, as well as in compliance with the European Union and the Republic of Latvia’s legal acts that determine personal data retention periods.
[10] Data Security
The personal data of the data subject will be processed by implementing the necessary technological and organizational measures to ensure maximum personal data security. The specialists involved in data processing are obliged to maintain confidentiality regarding the obtained information.
[11] Rights of the Data Subject
The data subject has the following rights regarding the processing of their data, which, in accordance with applicable legal acts, are classified as personal data:
1) to request the correction of their personal data if it is inappropriate, incomplete, or incorrect;
2) to object to the processing of their personal data if the processing is based on legitimate interests, including objecting to the profiling of personal data;
3) to request the deletion of their personal data, for example, if personal data is processed based on consent and the data subject has withdrawn their consent. These rights do not apply if the personal data requested to be deleted is also processed based on another legal ground, for example, a contract or obligations arising from relevant legal acts, or if their retention is required by applicable legal acts;
4) to restrict the processing of their personal data in accordance with applicable legal acts, for example, while the Company evaluates whether the data subject has the right to have their data deleted;
5) to receive information as to whether the Company processes the data subject’s personal data and, if so, to access them;
6) to receive their personal data, which the data subject has provided to the Company and which is processed on the basis of consent and contract performance, in writing or in one of the most commonly used electronic formats and, if possible, to transfer such data to another service provider (data portability);
7) to withdraw their consent to the processing of their personal data;
8) not to be subject to fully automated decision-making, including profiling, if such decision-making has legal consequences or similarly significantly affects the data subject;
9) to submit complaints about the use of personal data to the Data State Inspectorate (www.dvi.gov.lv), if the data subject believes that the processing of their personal data violates their rights and interests in accordance with applicable legal acts.
[12] Contact Information of the Company’s Data Protection Specialist
For questions related to personal data processing, please contact the Company by writing to the email address: [email protected] or by calling +371 27677680.