1. Data Controller
The controller responsible for data processing on this website is:
SIA „Todex”
Ūnijas iela 28–63, LV-1084 Rīga, Latvia
Email: [email protected]
2. Data We Collect and Process
We process personal data only in accordance with applicable law (GDPR). When placing an order, the following data is collected and processed:
- First and last name
- Delivery address
- Email address
- Phone number (optional)
If a customer account is created, the password is stored in encrypted form.
The legal basis for processing is Art. 6(1)(b) GDPR (performance of a contract).
3. Payment Processing
Payments are processed by external payment service providers. We do not store payment data on our servers. The legal basis is Art. 6(1)(b) GDPR.
4. Shipping and Logistics
To fulfil your order, we share the following data with our logistics partners: name, delivery address, and where provided, phone number.
The legal basis is Art. 6(1)(b) GDPR.
5. Cookies and Tracking
This website uses cookies. Necessary cookies are required for the site to function. Non-essential cookies (analytics, marketing) are only set with your explicit consent.
Cookie preferences can be managed at any time through the cookie settings available on this website. The legal basis for non-essential cookies is Art. 6(1)(a) GDPR.
6. Analytics
This website may use web analytics services to understand how visitors use the site. Analytics data is processed only with your consent. IP addresses are anonymised within the European Union where applicable. You may withdraw consent at any time via the cookie settings.
Data may be transferred to third-party services outside the EU. Where applicable, such transfers are covered by standard contractual clauses or equivalent mechanisms recognised under EU law.
7. Data Retention
Personal data is retained only for as long as necessary to fulfil the relevant purpose or as required by applicable law.
8. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Request restriction of processing
- Object to processing
- Data portability
To exercise any of these rights, contact us at: [email protected]
9. Applicable Law
The law of the Republic of Latvia applies, in compliance with the GDPR and mandatory data protection provisions applicable in your country of residence.