Privacy Policy – Herboteka.lv

1. General Provisions
1.1. This Privacy Policy describes how Elīna Kroņkalne, reg. No. 09049811017 , legal address: Stiebru iela 7-19, Riga, LV-1015, Latvia (hereinafter referred to as – “Herbotēka”), obtains, processes and stores personal data that the online store Herboteka.lv obtains from its customers and persons visiting the website (hereinafter – “Data Subject” or “You”).

1.2. Personal data is any information relating to an identified or identifiable natural person (Data Subject).

Processing is any operation performed on personal data, such as collection, recording, storage, use, transmission, erasure or destruction.

1.3. The data controller complies with the data processing principles set out in regulatory enactments and ensures that personal data is processed lawfully, fairly and transparently in accordance with applicable law.

2. Acquisition, processing and storage of personal data
2.1. Herboteka acquires, processes and stores personally identifiable information using the online store www.herboteka.lv, e-mail and the MakeCommerce order processing system. Data may also be obtained by contacting by phone or through social network profiles.

2.2. By visiting the website and using the services provided by the e-store, you agree that the information you provide is used in accordance with this Privacy Policy.

2.3. The data subject is responsible for ensuring that the personal data submitted is correct, complete and up-to-date.
Deliberate provision of false information is considered a violation of this Privacy Policy. The data subject must immediately notify Herboteka of any changes to the submitted data.

2.4. Herboteka is not liable for any losses incurred by the Data Subject or third parties if they are caused by false information provided.

3. Processing of Customer Personal Data

3.1. Herboteka may process the following personal data:

  • First name, last name
  • Date of birth (if required for delivery or billing purposes)
  • Contact information (e-mail address and/or phone number)
  • Delivery and billing address
  • Purchase and payment information (e.g. bank payment, payment platform)
  • IP address and cookie data (for website operation and analysis)
  • Other data provided by the customer in communication with Herboteka (e.g. questions, comments or feedback)

3.2. The data controller has the right to verify the accuracy of the submitted data using publicly available registers.

3.3. The legal basis for the processing of personal data is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation:

(a) the consent of the data subject for a specific purpose;
(b) the processing is necessary for the performance of a contract or for steps prior to entering into a contract;
(c) the processing is necessary for compliance with a legal obligation;
(f) the processing is necessary for the legitimate interests of Herbotek or a third party, unless the rights of the data subject override these interests.

3.4. Data shall be stored as long as:

  • the data are necessary for the purposes for which they were obtained;
  • Herbotek or the Data Subject has the right to pursue its legitimate interests (e.g. in the event of complaints or claims);
  • there is a legal obligation to store the data (e.g. under the Accounting Act – 5 years);
  • the consent of the Data Subject is valid.
  • Upon the termination of the aforementioned circumstances, personal data shall be permanently deleted or anonymized.

3.5. In order to ensure the fulfillment of orders, Herboteka has the right to transfer your personal data to:

  • delivery partners (e.g. Omniva, Latvijas Pasts, DPD);
  • payment processing providers (Maksekeskus AS / makecommerce.lv);
  • accounting and IT maintenance service providers.

Upon request, data may also be transferred to state or law enforcement authorities if necessary to protect the legal interests of Herboteka.

3.6. Herboteka implements technical and organizational security measures to protect personal data against unlawful processing, disclosure or destruction.

4. Rights of the data subject

4.1. You have the right to:

  • access your personal data and receive a copy of it electronically;
  • request the correction of incorrect data;
  • request the deletion of your data (“right to be forgotten”), if there is no legal basis for its storage;
  • withdraw consent to processing (e.g. for marketing purposes);
  • restrict the processing of your data;
  • submit a complaint to the Data State Inspectorate (www.dvi.gov.lv).

A request for the exercise of your rights can be submitted by writing to the e-mail [email protected] or by mail to the legal address of Herboteka.

5. Final provisions
5.1. This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and the laws and regulations of the Republic of Latvia.

5.2. Herboteka reserves the right to make changes or additions to this Privacy Policy at any time without prior notice.
The current version is always published on the website https://www.herboteka.lv.