PRIVACY POLICY WWW.SEXYU.LV
3.1. The Data Controller may process the following personal data:
3.1.1. First name, last name
3.1.2. Date of birth
3.1.3. Contact information (email address and/or phone number)
3.1.4. Transaction data (purchased goods, delivery address, price, payment information, etc.)
3.1.5. Any other information submitted to us when purchasing goods or services offered on the website or when contacting us.
3.2. In addition to the above, the Data Controller has the right to verify the accuracy of submitted data using publicly available registers.
3.3. The legal basis for personal data processing is Article 6(1)(a), (b), (c), and (f) of the General Data Protection Regulation (GDPR):
a) The Data Subject has given consent for the processing of their personal data for one or more specific purposes;
b) Processing is necessary for the performance of a contract to which the Data Subject is a party, or to take steps at the request of the Data Subject prior to entering into a contract;
c) Processing is necessary for compliance with a legal obligation to which the controller is subject;
f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject, in particular if the Data Subject is a child.
3.4. The Data Controller stores and processes the Data Subject’s personal data as long as at least one of the following criteria applies:
3.4.1. The personal data is necessary for the purposes for which it was received;
3.4.2. As long as, in accordance with external regulatory enactments, the Data Controller and/or the Data Subject can exercise their legitimate interests, such as submitting objections or raising or defending claims in court;
3.4.3. As long as there is a legal obligation to store data, such as under the Accounting Law;
3.4.4. As long as the Data Subject’s consent for the specific processing of personal data is valid, unless another lawful basis for data processing exists.
When the circumstances mentioned in this point cease to exist, the retention period of the personal data also ends, and all relevant personal data is permanently deleted from computer systems and electronic and/or paper documents containing such data, or those documents are anonymized.
3.5. To fulfill its obligations to You, the Data Controller has the right to transfer your personal data to cooperation partners, data processors who perform necessary processing on our behalf, such as accountants, courier services, etc. A data processor is a personal data controller. Payment processing is ensured by the payment platform makecommerce.lv, therefore our company transfers necessary personal data for payment execution to the platform owner Maksekeskus AS.
Upon request, we may transfer your personal data to state and law enforcement authorities, if necessary, to defend our legal interests by preparing, submitting, and defending legal claims.
3.6. When processing and storing personal data, the Data Controller implements organizational and technical measures to protect personal data from accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.