The administrator of personal data is Floway SIA based in Briežu iela 25 - 2, Lapsas, Babītes pag., Mārupes nov., LV-2107, Tax ID: LV50203539151, Business ID: 50203539151, hereinafter referred to as the "Company". Contact with the administrator is possible at the email address: floway@inbox.lv.
1. Scope of collected data
- Data provided voluntarily by the user (name, surname, address, email, phone number) for order fulfillment.
- Transaction data (payment information handled by the payment operator).
- Technical data (IP address, browser information, cookies).
2. Purposes and legal basis for data processing
- Execution of the sales contract and order handling – Art. 6(1)(b) GDPR.
- Fulfillment of legal obligations (accounting, tax) – Art. 6(1)(c) GDPR.
- Own marketing (newsletter, if consent was given) – Art. 6(1)(a) GDPR.
- Legitimate interest of the administrator (e.g. pursuing claims) – Art. 6(1)(f) GDPR.
3. Data retention period
- Data related to contract execution – for the duration of the contract and until the expiry of claims (usually 6 years).
- Data required by tax regulations – for 5 years from the end of the tax year.
- Data processed on the basis of marketing consent – until consent is withdrawn.
- Technical data (e.g. logs, cookies) – up to 30 days or until anonymized.
4. User rights
Data subjects have the following rights:
- access to data,
- rectification of data,
- erasure of data ("right to be forgotten"),
- restriction of processing,
- data portability,
- object to data processing,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
- lodge a complaint with the President of the Personal Data Protection Office (PUODO).
5. Right to be forgotten
The user has the right to request the deletion of their personal data if:
- the data are no longer needed for the purposes for which they were collected,
- consent for processing has been withdrawn,
- an objection to processing has been raised,
- the data were processed unlawfully.
Data deletion may be limited if legal regulations require the administrator to retain them (e.g. accounting documentation).
6. Data recipients
- Courier companies and parcel locker operators – for order delivery.
- Payment operator – for online payment processing.
- IT and hosting service providers – for technical support of the store.
7. Cookies
The store uses cookies to ensure proper website operation, analyze traffic, and personalize content. Cookies can be blocked or deleted in browser settings, but this may affect site functionality.
8. Data security
Personal data are protected by appropriate technical and organizational measures ensuring security and confidentiality of processing.
9. Changes to the privacy policy
The administrator reserves the right to make changes to this Privacy Policy. The new version will be published on the Store's website in advance.