Privacy Policy
1. General terms and conditions.
1.1. This Privacy Policy describes how SIA "GREEN DISTRIBUTION" reg. No. 50203345391, legal address: Uriekstes Street 2a-13, Riga, LV-1005, e-mail for contact info@greendistribution.eu (hereinafter also referred to as "Data Controller") collects, processes and stores personal data collected from its customers and persons visiting the website: www.meltshop.eu, (hereinafter referred to as "Data Subject" or "You").
1.2. Personal Data means any information relating to an identified or identifiable natural person, i.e. the Data Subject. Processing means any operation relating to Personal Data, such as obtaining, recording, modifying, using, viewing, deleting or destroying it.
1.3. The Data Controller shall comply with the principles of data processing provided for in the regulatory enactments and shall confirm that personal data are processed in accordance with the requirements of the applicable regulatory enactments.
2. Collection, processing and storage of personal data.
2.1. Personally identifiable information is collected, processed and stored by the Data Controller through the online store website www.meltshop.eu, (hereinafter referred to as the "Online Store") and/or by e-mail:
2.1.1. by the Data Subject entering into a contract with the Data Controller;;
2.1.2. by the Data Subject communicating with the Data Controller, by email, by calling the Data Controller;
2.1.3. by the Data Subject authorising in the Online Store;
2.1.4. by the Data Subject visiting the website www.meltshop.eu, using cookies.
2.2. By visiting and using the services provided by the Online Store, the Data Subject agrees that any information provided is used and managed in accordance with the purposes set out in the Privacy Policy.
2.3. The Data Subject is responsible for ensuring that the personal data provided is correct, accurate and complete. Knowingly providing false information is considered a violation of the Privacy Policy. The Data Subject is obliged to notify the Data Controller immediately of any changes to the personal data provided.
2.4. The Data Controller shall not be liable for damages suffered by the Data Subject or third parties as a result of incorrect or unlawful submission of personal data.
3. Processing of Customer personal data
3.1. The Data Controller may process the following personal data:
3.1.1. name, surname,
3.1.2. date of birth,
3.1.3. contact information (e-mail address and/or telephone number, place of residence),
3.1.4. transaction data (goods purchased, delivery address, price, payment details, etc.),
3.1.5. any other information provided by the Data Subject to the Data Controller.
3.2. Use of cookies when visiting the Online Store:
3.2.1. Functional cookies. These cookies are necessary to enable the Data Subject to navigate the website and use its functions. Without these cookies, the Data Controller cannot provide the requested services, such as the shopping cart functionality,
-
Google Analytics cookies. These cookies are used to obtain statistics about visits to the Online Store. The Data Controller uses this information to improve the operation of the website and promotional activities,
-
Targeted advertising tool cookies. These cookies are used to increase the effectiveness of advertising and to show ads that are most likely to be of interest to Data Subjects,
-
Third party service provider cookies. The Data Controller is not responsible for third party cookies that may be used to track the Data Subject's activities on other websites, as they are not set on the Data Controller's Online Store website.
To opt-out of receiving cookies, the Data Subject may use the private browsing mode provided by most browsers. Any cookies that are created while in private browsing mode are deleted as soon as you close all browser windows.
3.3. In addition to the above, the Data Controller shall have the right to verify the accuracy of the data submitted using publicly accessible registers.
3.4. The Data Controller may use the personal data collected to:
-
provide services and information requested by the Data Subject,
-
process the Data Subject's orders and execute the necessary documents,
-
provide effective customer support to the Data Subject,
-
assist in the prevention of threats or fraudulent activities,
-
send the Data Subject informational messages if the Data Subject has expressly consented to receive such messages,
-
comply with the requirements of laws and regulations.
3.5. The legal basis for processing personal data is:
3.5.1. the Data Subject has given consent to the processing of his or her personal data for one or more specified purposes;
3.5.2. the processing is necessary for the performance of a contract to which the Data Subject is a party or for the performance of measures at the request of the Data Subject prior to entering into the contract;
3.5.3. processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
3.5.4. processing is necessary for the pursuit of the legitimate interests of the Data Controller or of a third party, unless the interests or fundamental rights and freedoms of the Data Subject which require the protection of personal data override such interests.
The provision of personal data of the Data Subject is necessary to comply with a legal or contractual requirement, or is necessary for entering into a contract with the Data Controller or to receive goods requested by the Data Subject, or is simply voluntary on the part of the Data Subject.
Failure to provide personal data may cause inconvenience to the Data Subject, such as not being able to receive the goods. However, unless otherwise stated, the Data Subject will not suffer any legal consequences as a result of the non-provision of personal data.
3.6. Storage of personal data of the Data Subject
3.6.1. Your personal data shall be stored for as long as its storage is necessary for the relevant purpose of processing personal data, in accordance with the requirements of regulatory enactments (e.g. laws on accounting, prevention of money laundering, statute of limitations, etc.).
3.6.2. When assessing the duration of the retention of personal data, the Data Controller shall take into account the applicable legal and regulatory requirements, the performance of contractual obligations, your instructions (e.g. in the case of consent), as well as our legitimate interests.
3.6.3. If your personal data is no longer necessary for the stated purposes, the Data Controller will delete or destroy it.
3.6.4. Below, the Data Controller indicates the most common retention periods for personal data:
a) personal data relating to the provision of our services will be held by us until the end of your business relationship, unless there is another valid reason for retaining the personal data for longer;
b) personal data necessary for the performance of contractual obligations will be kept by the Data Controller at least until the performance of contractual obligations, subject to other, externally imposed, retention periods;
c) personal data required to be kept to comply with the requirements of regulatory enactments will be stored by the Data Controller in accordance with the time limits set out in regulatory enactments, e.g. the Accounting Law provides that supporting documents must be stored until the date they are necessary to establish the beginning of each economic transaction and to trace its progress, but not for less than 5 years;
d) personal data necessary to prove the fulfilment of its obligations will be stored by the Data Controller in accordance with the general limitation periods (e.g. 10 years under the Civil Law, 3 years under the Commercial Law), taking into account also the time limits for bringing actions under the Civil Procedure Law.
e) personal data necessary to prove the identification and investigation of the Customer in accordance with the requirements of the Law on Prevention of Money Laundering and Terrorist Financing will be stored by the Data Controller for 5 years after the termination of the business relationship;
f) if the personal data is processed for marketing purposes, the data will be stored for as long as the Data Subject's consent is valid.
3.7. In order to fulfil its obligations towards the Data Subject, the Data Controller has the right to transfer the Data Subject's personal data to cooperation partners, data processors who carry out the necessary data processing to provide the Data Subject with the performance of the service ordered, such as courier services indicated in the relevant section of the Online Store.
3.8. When processing and storing personal data, the Data Controller shall implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.
4. Rights of the Data Subject
4.1. In accordance with the provisions of laws and regulations, the Data Subject has the right to:
4.1.1. to have access to his/her personal data, to receive information on their processing,
4.1.2. to request the rectification of incorrect, inaccurate or incomplete personal data,
4.1.3. to delete his/her personal data ("to be forgotten"), except in cases where the data are required to be retained by laws and regulations,
4.1.4. to withdraw his/her prior consent to the processing of personal data,
4.1.5. restrict the processing of his/her data - the right to request that the Data Controller temporarily cease processing all personal data of the Data Subject, except where the laws and regulations require the processing to continue,
4.1.6. to apply to the State Data Inspectorate.
You can make a request to exercise your rights by sending an electronic request to
5. Final provisions
5.1. This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as well as the applicable laws and regulations of the Republic of Latvia and the European Union.
5.2. The Data Controller shall have the right to make changes or additions to the Privacy Policy at any time and without prior notice. Amendments shall become effective upon their publication on the webs