PowerHouse Latvia

Privacy policy

1. GENERAL TERMS

1.1. The privacy policy (hereinafter - the Policy) describes the procedure by which SIA "PowerHouse Latvia", registration No. 40203483068, legal address: Roberta Hirša iela 1, Rīga, LV-1045 (hereinafter - the Company), processes the Customer's personal data. Implementing Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation ), the company ensures transparent and fair processing of personal data, as well as takes care of the privacy of customers and the security of personal data. In this Policy, You can find all the information about what data the Company collects and processes, what it is used for, how long it is stored, etc. This information is important, so we invite You to carefully familiarize yourself with the provisions of this Policy before you provide the Company with information about your personal data. The Controller of the Customer's personal data is the Company on whose behalf Customer's personal data are processed and which is responsible for the processing of the Customer's personal data.

1.2. The Customer/You is any natural person who uses, has used or has expressed a wish to use any of the Company's services, including visitors to the Company's website www.powerhouselatvia.com (hereinafter - the Website) who wish to place orders.

1.3. The policy is applicable if the Customer uses, has used or has expressed a desire to use the services provided by the Company.

1.4. The company ensures the confidentiality of personal data within the framework of applicable laws and regulations and has implemented appropriate technical and organizational measures to protect personal data from unauthorized access, illegal processing or disclosure, accidental loss, alteration or destruction.

1.5. Personal data processing is any activity performed with personal data (including collection, recording, storage, modification, access, making requests, transfer, deletion, etc.).

1.6. Information obtained from and about Customers is processed and protected in accordance with this Policy, the documents developed by the Company and the requirements of regulatory acts.

2. PERSONAL DATA PROCESSING

2.1. Placement of orders

On the Company's websit www.powerhouselatvia.com it is possible to fill out the Company's order form (hereinafter - Order) of confectionery products (hereinafter - Product), after completing which the Company contacts the Customer to clarify the details of the Order. The company does not take responsibility for inaccurate, incomplete or erroneously submitted personal data, if You have provided data of another person, then in case of claims, the company reserves the right to appeal to you with a recourse claim. The Company collects personal data from Website visitors who fill out the Order form on the Website, after which the Company contacts the Customer. Data processing is carried out because the Company needs:

• to ensure the delivery of the Goods in accordance with the Order;
• to implement the Company's legitimate interests, for example, to prove the Order request in case of disputes.

Data categories – name, telephone number, e-mail address. Categories of data subjects – visitors to the Company's website who wish to place an Order. Purpose of data processing:

• to provide a service, namely, deliver the Product to the Customer;
• to contact the Customer when it is necessary to clarify the details of the Order.

Transfer of personal data - personal data is collected solely and exclusively in order to be able to communicate with the Customer in connection with the Order made or partially made by the Customer, therefore the only possible recipients of the data are IT service providers, as well as persons provided for in external regulatory acts upon their justified request, in accordance with the procedures and to the extent specified in external regulatory acts.

2.2. Social networks and online reviews

The Company may process the Customer's personal data obtained through social networking platforms (e.g. Facebook, Instagram) in connection with the services provided by the Company in order to:

• respond to Your questions or complaints;
• monitor the Company's reputation;
• improve the Company's services.

Categories of personal data processed - any personal data that You choose to share or that is published in social networks or other online feedback. Categories of data subject – Customer who has used or wants to use the Company's services. Data processing is carried out because the Company needs to implement the Company's legitimate interests, namely, to improve the quality of the services provided and so that the Company can understand the guests' wishes and consumer habits.

3. DURATION OF DATA STORAGE

The Company stores and processes the Customer's personal data as long as at least one of the following criteria is met:

• only as long as the personal data is necessary for the execution of the Order/s;
• as long as the Company or the Customer can realize their legitimate interests (for example, submit objections) in accordance with the procedures set out in external regulatory acts;
• while the Customer's consent to the relevant personal data processing is valid, if there is no other legal basis for data processing.

When the aforementioned circumstances cease, the Customer's personal data is deleted.

4. RIGHTS OF THE CUSTOMER AS A DATA SUBJECT

In accordance with data protection legislation, including the General Data Protection Regulation, a natural person whose personal data is processed by the Company has the following rights in relation to the processing by the Company:

1. obtain additional information about the processing of the personal data of the data subject by the Company, request a copy of the personal data of the data subject held by the Company, as well as obtain information about receiving a copy of the personal data;
2. ask to correct the personal data of the data subject (if it is established that the information about the data subject at the Company's disposal is incorrect or incomplete, the data subject has the right to ask the Company to correct it);
3. withdraw the given consent to the processing of personal data carried out by the Company;
4. request the deletion of personal data of the data subject;
5. request to limit the processing of personal data of the data subject (marking of personal data held by the Company with the aim of limiting their processing in the future);
6. request portability of personal data (possibility to receive data subject's personal data information in a machine-readable format);
7. opposes the processing of personal data based on the legitimate interests of the Company.

The mentioned rights of the data subject are not absolute and their execution may be limited. For example, the Company has the right to refuse to stop the processing of personal data if the Company indicates compelling legitimate reasons for processing that are more important than the interests, rights and freedoms of the data subject, or to implement or defend the Company's legal claims. In order to exercise the data subject's rights or to obtain additional information about the processing carried out by the Company, the data subject or other persons should contact the Company using the Company's contact information specified in this Policy.

The company's activities regarding the protection of personal data are monitored by the Data State Inspectorate. In order to resolve any disagreements or misunderstandings as soon as possible, we ask You to contact the Company first. If You are not satisfied with the answer received, as well as in other cases, he has the right to file a complaint with the Data State Inspectorate (address: Elijas iela 17, Rīga, LV-1050; e-mail: info@dvi.gov.lv; phone: 67223131 ).

5. OBLIGATIONS OF THE CUSTOMER AS A DATA SUBJECT

5.1. The Customer is responsible for providing true, valid and complete data both when ordering the service and during service provision.

5.2. The Customer, as a data subject, in case of personal data changes, is obliged to immediately inform the Company about it by sending written information to the electronic mail address mentioned in Clause 8 of this Policy or to the Company's legal address.

6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES:

The company does not transfer the obtained personal data outside the European Union/European Economic Area.

7. POLICY AMENDMENTS

The Company reserves the right to unilaterally amend this Policy at any time in accordance with applicable law, providing that the current Policy will be posted on the Company's Website.

8. CONTACT INFORMATION

The Customer can contact the Company in matters of personal data protection, including withdrawal of consent, requests, exercise of the data subject's rights and complaints about the processing of personal data. Contact information of the person responsible for personal data protection: e-mail: info info@powerhouselatvia.com, Roberta Hirša iela 1, Riga, Latvia, LV-1045.