Privacy policy

Privacy Policy

Internet website privacy policy

General information

SIA Gelsva (hereinafter referred to as "we" or "the Data Controller") is the operator of this website and the online shop accessible from www.vynoteka.lv operator. This Privacy Policy sets out and explains how your personal data is collected and how it will be processed in the future when you use this website, its online shop, purchase goods from the online shop and collect goods from the online shop. The terms set out in this Privacy Policy apply each time you wish to access our content and/or services, regardless of the device (computer, mobile phone, tablet, TV, etc.) you are using.

Details of the Data Controller:
SIA "Gelsva"
Reg. No.: 40103526407
Rīga, Biķernieku iela 21, LV-1039

Tel.: 371 22322707
E-mail: info@vynoteka.lv

We confirm that your data will be collected in compliance with the applicable requirements of the laws and regulations of the European Union and the Republic of Latvia and the instructions of the controlling authorities, and that all reasonable technical and administrative means will be applied to protect the data we collect about website visitors from loss, unauthorized use and/or alteration. The Data Controller's employees have committed in writing not to disclose or distribute to third parties information obtained in the workplace, including information about visitors of the website/social network accounts.

Persons under the age of 18 cannot provide any personal data through our website, online shop. 

The definitions used in the Terms and Conditions shall be understood as they are defined in the General Data Protection Regulation 2016/679 (EU).

These provisions apply when you visit the website, use the online shop, register, review and order the products offered, subscribe to the newsletter, participate in games, promotions, contact us by telephone or electronic communication channels, visit the goods collection point. These provisions do not apply when you browse other companies' websites or use third party services.

It is very important that you read these privacy terms carefully, as each time you visit this website you are agreeing to the terms described here. If you do not agree to these terms, please do not visit our website or use our content and/or services. Click on "find out more" in each section to find comprehensive information about the processing of your personal data and the specifics of our activities. These rules are subject to change, so please visit the website from time to time to read the latest version of the rules published there.

We have accounts on relevant social networks where we post information about ourselves and our activities. Account users are subject to the privacy policy and terms of the social network on which our account is hosted. This Privacy Policy applies to your accounts and the information contained in them when you visit our accounts to the extent set out in this Privacy Policy and to the extent that it reasonably covers the activities you undertake. 

We have the following social accounts: Facebook, Twitter, Youtube. 

How do we collect information about you?

We only collect and process personal data that is necessary for the purposes for which it is collected. Your personal data, i.e. any information about you that allows us to identify you, can be obtained in different ways:

• you can submit the information (personal data) yourself (by filling in the online registration form, ordering products from our online shop, ordering newsletters, calling us);
• information about you may be collected automatically (when you visit our website, social accounts, using our applications);
• where applicable, we obtain information about you from third parties and may collect information about you from publicly available sources (e.g. through social networks, your company website, etc.).

You can provide us with your personal data yourself. This is most often the case when you:

• register on our website;
• order goods from our online shop;
• install our software;
• subscribe to our newsletter or use other forms of communication;
• take part in surveys.

Information about you may be collected automatically. This is most often the case when you:

• submit requests through the registration system or our social media accounts;
• use the website (data collected by cookies and similar technologies. For more information on the cookies we use, please see below);
• make public posts on the social media platforms we follow.

By submitting personal data to us, you are responsible for its accuracy, comprehensiveness, timeliness. When you provide personal data about other persons (for example, by indicating a person who is authorized to collect goods), you are responsible for obtaining that person's consent to transfer their personal data to us. If there is a need to do so (e.g. a person asks us about personal data collection), we will identify you as the data provider.

To the extent permissible under applicable law, we may receive information about you from third parties. This may include information provided by our partners, marketing agencies, information from your publicly accessible profiles (Linkedin, Facebook, Twitter, Instagram). We may receive information about you from you, from public and commercial sources, and link it to other information we obtain from or about you.

We may also collect information about you in other circumstances not covered by this Privacy Policy. Should this happen, we will inform you further.

What information (personal data) do we collect about you?

Although we try to collect as little information about you as possible, we do collect the following information in order to carry out our activities:

• the information required for your registration in our online shop; 
• the information we need to offer and sell our products to you, including online sales;
• the information you provide in surveys;
• the information you provide when you call us;
• information about your hobbies and specific needs;
• information necessary to establish your identity;
• information about the equipment you use.

The information we collect directly from you will be based on the circumstances and context, and will be specified in the forms we ask you to fill in. For example:

• For the provision of the services, we process the following information about you: name, surname, place of residence, personal identification number, if you buy goods from our online shop. As well as other information that may be necessary during the provision of the services, such as your telephone number, post code or e-mail address for communication in case of ordering.
• information about your hobbies and specific needs;

The information we collect automatically is usually as follows:

• information about your use of our website (Device information: i.e. IP address, operating system version and parameters of the device you use to access content/goods; Login information: i.e., your session usage time and duration, the order terms you enter on our website and any information stored in cookies we set on your device (cookie policy set out below); location information: i.e. the GPS signal of your device or information about the nearest WiFi access point and mobile towers that may be passed to us when you use our website content.

The information we obtain from third parties or publicly available sources most often includes:

• your email address, name, special needs and hobbies.

When you register or provide other personal data we ask for, such as your delivery address, etc., we may mark some of the data as relevant. We need this data to be able to properly fulfil our obligations to you, such as verifying your age, delivering your order, etc. You may choose not to provide us with relevant information (e.g. information requested on a registration form or when ordering goods from an online shop), but you may be prevented from creating an account on our website or ordering goods if the information is necessary for the provision of further services. You can change and update the information you provide to us. In some cases, we need accurate information about you, so we may ask you periodically to confirm that the information we have about you is correct.

You pay for the goods you buy on our website through your bank's online banking system, which is then secured by the bank's server where you enter passwords and other information that only you know. When you pay online, the customer enters all the data into the bank's system, so this information is inaccessible to our staff.

Important! SIA Gelsva employees will never ask for your login details, bank card numbers, passwords or any other information in writing, over the phone or in any other way that could cause you financial or any other kind of loss.

Purposes and legal basis for data processing

The information above is applicable in pursuit of the following objectives:

• To allow you to register on our online shop.
• To offer and sell our products, including online sales.
• To provide you with information relating to our goods and services at your request.
• For marketing purposes*, e.g. to provide custom promotional communications and supporter content and to send promotional communications, to evaluate and analyze our market, customers, products and services (including collecting your views on products and services, conducting customer/partner surveys to the extent permitted by law).
• To find out how people use our online services so we can improve them and create new content, products and services.
• Defend your interests in court or before another authority.
• In other ways with your consent*.

* Please note that you have the right to opt-out of receiving direct marketing content sent by us at any time by clicking on the unsubscribe link at the bottom or by using the unsubscribe link at the very bottom of the newsletter.

Your personal data may be processed on the basis of one or more lawful processing grounds:

• Compliance with legislation;
• Performance of the contract concluded with you;
• Our legitimate interests, unless your private interests have higher priority;
• Where applicable, your consent.

The purposes for which we process your personal data with the relevant legal basis and the personal data to be processed are set out in the following table.

Purpose	Legal basis(s)	Personal data
Online shop registration	Performance of the contract concluded with you; Legal interests - the need to serve you and provide services properly	Login name, password, password change history, email address. If joining with a social networking account - profile photo, name, email address
To offer and sell our products, including online sales.	Performance of the contract concluded with you; Meeting regulatory requirements Legal interests - business visibility and prestige	Name, personal identification number, place of residence, other information that may be necessary for the provision of services, such as your telephone number or e-mail address for contact, information about your specific needs, your shopping basket and its history
To provide you with information relating to our goods and services at your request.	You need to provide this information because we have a legitimate interest in providing you with accurate information about our services, products, additional services, etc.	We may ask for your telephone number, email address or other contact details that are convenient for you in an effort to respond to your enquiries by telephone, email, social media and other means.
For marketing purposes, e.g. to deliver tailored promotional communications and supporter content, and to send promotional communications, organize games, evaluate and analyze your market, customers, products and services (including your views on product and service choices and customer surveys).	If you are our customer, we collect your personal data for this purpose in the legitimate interest of informing you about our services, events, news and provide other up-to-date information. If you are not our customer, you will only receive marketing information from us if we have your consent.	Name, social network account details, phone, email, address, hobbies.
To find out how people use our online services so we can prepare and create new content, products and services.	For this purpose, we process your personal data for the legitimate interest of tracking the quality of our services, creating and improving the content we provide, and ensuring the security of our website.	IP address, operating system version and parameters of the device you are using to access the content/items, the time and duration of your session, the timing of requests you make on our website and any information stored in cookies we set on your device, your device's GPS signal or information about the nearest WiFi access points and mobile towers that may be passed to us when you use our website content.
Defend our interests in court or before another authority.	Compliance with legislation. Legal interests - defending ourselves against claims and demands.	Depending on the claim or claim made, all of your personal data that we hold may be processed for this purpose as set out in this Privacy Policy.

In those cases where we cannot rely on one of the legal grounds set out in this table, we will seek your consent before processing your personal data (which will depend on the circumstances and context).

Where we process your personal data for purposes other than those set out in this Privacy Policy, we will inform you of this by providing you with a separate notice.

Who do we transfer your personal data to?

We may transfer your personal data:

• If you consent to the disclosure of your data,
• To companies that provide services at our request,
• To couriers delivering goods to buyers,
• To banks/companies assisting with settlement operations,
• To other responsibly selected business partners,
• To other parties where required to do so by law or as necessary to protect our legitimate interests.

If you wish to receive direct marketing offers from SIA Gelsva business partners, you will be asked for separate consent.

Other parties to whom we may disclose information about you, if necessary to protect our legal interests, include authorities, pre-trial investigation officials, courts, etc.

What do we do to protect your information?

We have put in place reasonable and appropriate physical and technical measures to protect the information we collect for the purposes of providing content/services. Please don't forget that while we take appropriate steps to protect your information, no website, online transaction, computer system or wireless connection is completely secure.

How long will we keep your personal data?

We will keep your personal data for as long as necessary to achieve the stated purpose. Upon achievement of the stated purpose, your personal data will be deleted, except in cases where we are obliged by law or regulation to protect the information for tax purposes or the data may be necessary for the purposes of a pre-trial investigation, but in any case the retention period will be no longer than 10 years. At the end of this period, the data will be deleted so that it cannot be retrieved.

As a general rule, personal data shall be kept for the following periods:

Personal data	Storage period
Online shop registration details	For the entire period of use [period] from the last date of login
Data on orders and purchases	For the entire shopping period and [the period] from the end of shopping
Payment details	10 years after the payment operation
Personal data used for marketing purposes	3 years after your last visit to the website
Data to be collected by video cameras	Up to 30 days
Website usage data	As set out in the Cookie Policy
IT system records (logs)	Up to a few months
Analytics data	This data is usually collected automatically via a website you use and anonymised/re-identified shortly after receipt
Analytics data	The entire period of the dispute and [the period] after the end of the dispute

Your rights

The data subject whose data is to be processed in the course of the Data Controller's activities shall, as the case may be, have the following rights:

• Right to know (be informed) about the processing of your data (right to know).
• Right to access your data and how it is processed (right of access).
• Right to request rectification or, taking into account the purposes of the processing of personal data, updating of non-exhaustive personal data (right to rectification).
• Right to delete your data (right to erasure and right to be forgotten).
• There is a right to request that the Data Controller restricts the processing of personal data for one of the following legitimate reasons (right to restrict).
• Right to data portability (right to portability).
• You have the right to object at any time to processing of your personal data where such processing is carried out for reasons of public interest or where processing is necessary to further the legitimate interests of the data controller or a third party. If the controller wishes to process personal data, it must demonstrate that the processing is necessary for compelling legitimate reasons which override the interests of the data subject. (right to object).
• File a complaint with the National Data Protection Inspectorate.

We give you the opportunity to exercise these rights in a convenient way. You can do this by calling +371 22322707 or by writing to us at info@vynoteka.lv, or by using the relevant instructions at the bottom of the promotional content material we provide. When making a data subject rights request, in order to better understand the content of your request, we may ask you to fill in the necessary forms and to provide a personal document or other information that will help us verify your identity. If you make a request by email, we may ask you to come to us or to put your request in writing, depending on the content of the email.

We may not create conditions for you to exercise the above-mentioned rights if, in the cases provided for by law, it is necessary to ensure the prevention, investigation and detection of criminal, official or professional misconduct, as well as the protection of the rights and freedoms of the data subject or other persons.

Your rights will be exercised by first confirming your identity in real life, with an electronic signature.

Your rights	Relevant restrictions
Right to know (be informed) about the processing of your data (right to know).	You have the right to receive information about the processing of your personal data in concise, plain and intelligible language before the processing begins.
Right to access your data and how it is processed (right of access).	This right means: Confirmation of whether we process your personal data, Submission of a list of your personal data being processed, Providing the purposes and legal basis for processing your data, Confirmation of whether we send data to third parties and, if so, what security measures we use Provision of the source of your personal data Information on applicable profiling Submission of data protection timelines We will provide you with the above information when establishing your identity, provided that it does not violate the rights and freedoms of others.
Right to request rectification or, taking into account the purposes of the processing of personal data, updating of non-exhaustive personal data (right to rectification).	Applicable if our existing information is incomplete or inaccurate
Delete your data (right to be forgotten);	Applicable if: the information we hold is not necessary to achieve the stated objectives we process the data on the basis of your consent and you have withdrawn your consent we process the data on the basis of a legitimate interest and, at your request, we determine that your private interests are overridden the information was obtained in an unlawful manner
The right to request that the Data Controller restricts the processing of personal data for one of the following legitimate reasons (right to restrict).	This right may be exercised for the period during which we analyze the situation, i.e: if you dispute the accuracy of the information if you do not consent to the processing of personal data when it is carried out on the basis of legitimate interests we are using the information unlawfully but you object to its deletion we do not need the information but you request that we keep it for the purposes of legal proceedings
Right to data portability	This right may be exercised if you change your data and we process it automatically on the basis of your consent or a contract we have with you.
Right to object	This right may be exercised where such processing is carried out for reasons of public interest or is necessary to further the legitimate interests of the data controller or a third party. If the controller wishes to process personal data, it has the burden of proving that the processing is necessary for compelling legitimate reasons which override the interests of the data subject. (right to object);
Right to withdraw consent	This right allows you to withdraw your consent if your personal data is processed on the basis of consent (for example, if you initially agreed to receive the newsletter but no longer want to receive it). See "Direct marketing, games and promotions" for details on how to use these rights.
Right to submit complaint to the National Data Protection Inspectorate.	If you believe that your rights have been violated, you can lodge a complaint with the Data Inspectorate (https://www.dvi.gov.lv). We aim to resolve all disputes promptly and amicably, so please first contact the contacts listed in our Privacy Policy.

 

Direct marketing, games and promotions

If you would like to receive our newsletters and offers, you can opt-in to receive direct marketing communications in two ways:

• By giving your consent at the time of registration in the online shop;
• By subscribing to our newsletters

If you agree to receive email newsletters, you will receive information and news about our products and offers. We will try not to abuse the right to share news with you. When we send a newsletter, we can collect information about the people who have received it, such as which notifications the person opened, which prompts they clicked, etc. This information is gathered in an effort to provide you with the most relevant and up-to-date news.

You can withdraw your consent to receive our newsletters at any time by clicking on the link in the email, changing the settings in your account, in the section or by contacting us using the contact details provided in the "Contact us" section. We will delete your email address immediately, but no later than within 5 working days. 

Your email address may be passed on to our partners/processors who provide newsletter services to us.

If you wish to participate in a competition, game or promotion that we run, you must provide the information that we provide, including personal data. You have the right to refuse at any time to participate in the games, competitions, promotions that we organize and implement and to withdraw your consent to the processing and use of your personal data for this purpose. You can do this by sending us an email in the "Contact us" section at the contact details provided. When you participate in games, competitions and promotions that we organize and run, we have the right to contact you using the contact details you provide and/or to publish information about you as a winner on our website, on our social media accounts.

Contact us

If you notice any non-compliance with this privacy policy, security gaps on our website or if you have other questions related to the processing of your personal data, please contact us in one of the ways that is most convenient for you:

SIA "Gelsva"
Reg. No.: 40103526407
Rīga, Biķernieku iela 21, LV-1039

Tel.: 371 22322707
E-mail: info@vynoteka.lv

Final provisions

We have the sole discretion to change the provisions of this Privacy Policy. We will notify you of changes on our website, by posting updated rules or through other usual means of communication. Amendments or changes to the Privacy Policy shall take effect from the renewal date specified in the Privacy Policy, unless another effective date is specified.

If you continue to use the website or online shop after the terms of these terms have changed, you must agree to the changed terms. 

Disagreements over the implementation of this Privacy Policy shall be settled by negotiation. In the event of disagreement, the disagreement shall be settled in accordance with the procedure established by the laws of the Republic of Lithuania.

 

The Privacy Policy was last revised on 18.05.2022.