Privacy Policy

This privacy policy determines how SIA Amber Cloud (hereinafter - the Controller) processes personal data obtained through the online store www.ekokrasas.lv . This policy has been prepared in accordance with the requirements of the General Data Protection Regulation (GDPR) and other applicable laws to ensure the protection and confidentiality of your data.

1. Manager and its contact information

1.1. Controller of personal data:
SIA Amber Cloud, single registration number: 40203546908, legal address: Ieroču iela 14 - 4, Riga, LV-1013, Latvia.

1.2. Contact information regarding the processing of personal data in related matters:
 E-mail: info@ekokrasas.lv
Phone: +371 286 862 84

Any question related to the processing of your personal data can be sent to the above-mentioned e-mail or expressed in person at the office of SIA Amber Cloud.

2. Purposes and legal basis of personal data processing

2.1. Purposes of personal data processing:
 The manager processes personal data only to the extent necessary to fulfill contractual obligations, ensure commercial activity, provide services and comply with applicable laws. Personal data may be processed for the following purposes:

  • For the fulfillment of product orders, payment processing and delivery arrangements;
  • To provide customer support, including communication about orders or the quality of services provided;
  • To send news, advertising materials or special offers (with the consent of the Buyer);
  • For the preparation of accounting documents, in accordance with the requirements of the Law "On Accounting";
  • To process and respond to your requests;
  • To ensure the security of the company and prevent fraud.

2.2. Legal basis for personal data processing:

  • Fulfillment of contractual obligations (for example, processing and delivery of product orders);
  • Your consent (for example, to receive newsletters or use cookies);
  • Legal obligations (eg preparation of accounting and tax documents);
  • Legitimate interests (for example, the security of the company's operations and improving the quality of customer service).

3. Categories of personal data

3.1. Personal data processed may include, but are not limited to:

  • Identification data: Name, surname;
  • Contact information: Address, email address, phone number;
  • Financial data: Bank account information, payment card data (if applicable);
  • Transaction information: Order number, goods, payment method and data on goods delivery.
4. Personal data storage terms

    4.1. Personal data will be stored only as long as necessary to achieve a specific purpose and will be deleted when no longer needed. The retention periods are:

    • Until full fulfillment of contractual obligations and another 5 years in accordance with accounting and tax requirements;
    • Until withdrawal of consent, if the data is processed on the basis of consent (e.g. sending out newsletters);
    • Until the deadline for claims arising from legislation (for example, for the submission of claims or legal proceedings).

    4.2. After the expiration of the specified periods or withdrawal of consent, the personal data will be permanently deleted, unless it is required for other legal or contractual obligations.

    5. Transfer of personal data to third parties

      5.1. In order to fulfill obligations towards you, the Manager may transfer personal data to third parties who provide services:

      • Courier service providers for delivery of goods;
      • Payment platforms (such as Paysera) that process payments on our behalf;
      • IT infrastructure service providers that ensure the operation of our online store;
      • Accounting service providers to ensure compliance with the requirements set forth in regulatory acts.

      5.2. Third parties only process your personal data in accordance with our instructions based on data processing agreements that define your data protection requirements.

      5.3. Personal data is not sent to countries outside the European Union or the European Economic Area, except when it is necessary for the fulfillment of contractual obligations, and such cases are provided with an appropriate level of protection.

      6. Your rights in relation to personal data

        6.1. As a data subject, you have the following rights:

        • Right of access: You have the right to request information about what personal data about you is being processed and for what purposes.
        • Right of rectification: You have the right to request the correction of inaccurate or incomplete personal data.
        • Right to erasure: You have the right to request the erasure of your personal data if it is no longer necessary for the purposes for which it was processed or if you withdraw your consent.
        • Right to object: You have the right to object to data processing based on our legitimate interests.
        • Right to data portability: You have the right to receive your personal data in a structured and machine-readable format and transfer it to another controller.

        6.2. To exercise your rights, contact us by e-mail: info@ekokrasas.lv. We will process your request within one month of receipt.

        7. Safety and Security

          7.1. SIA Amber Cloud undertakes to ensure the protection of your personal data using the most modern technologies and organizational measures. Such security measures include data encryption, firewalls, access controls and other measures to prevent unauthorized access to personal data.

          7.2. Personal Data Security Incident: In the event of a data security breach that poses a serious threat to your rights and freedoms, we will notify you immediately and take the necessary steps to minimize potential risks.

          8. Cookies

            8.1. Our website uses cookies to ensure website functionality and improve user experience. More detailed information on the use of cookies can be found in our Cookie Policy .

            9. Changes to Privacy Policy

              9.1. Amber Cloud SIA reserves the right to make changes to this privacy policy. If material changes are made, we will notify you via our website or other communication channels.

              9.2. This privacy policy is effective from the moment of its publication and applies to all personal data processing that takes place after the date of its publication.

              10. Dispute Resolution

                10.1. If you have a claim or concern regarding the processing of your personal data, you can contact us using the contact information provided in this policy.

                10.2. If we cannot resolve the dispute, you have the right to submit a complaint to the Data State Inspectorate ( www.dvi.gov.lv ).