Privatumo strategija
The limited liability company Murrr SIA undertakes to ensure the protection and privacy of your personal data in accordance with:
• the requirements of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation);
• other regulatory enactments in force in the Republic of Latvia in the field of personal data processing and privacy;
• in accordance with this Privacy Policy.
With this Privacy Policy, Murrr Limited Company provides you with information about the principles, types, purposes, amounts, conditions and terms of its processing of personal data, as well as your rights regarding the processing of personal data by us.
1. Definitions
1.1. Personal data - any information relating to an identified or identifiable natural person.
1.2. Data subject - an identified or identifiable natural person (hereinafter - customer).
1.3. Profiling - automated processing of personal data in the form of the use of personal data for the purpose of evaluating certain personal aspects related to a natural person.
1.4. Manager - Murrr Limited Liability Company (hereinafter also - the Company).
1.5. Processor: a natural or legal person whose controller (Company) processes personal data on behalf of.
1.6. Third party - a natural or legal person, public authority, agency or body that is not a data subject, controller, processor and persons whose controller or processor is authorized to process personal data directly.
1.7. Consent of the data subject (customer) - a freely provided, specific, deliberate and unambiguous indication of the Customer in the form of a statement or a clearly confirmatory action that the Customer agrees to the processing of his / her personal data.
1.8. Cookies - Text files stored on the device used by the user to personalize Company the usability of the website for each specific user of the website.
2. Controller and processor of personal data
2.1. The controller is a limited liability company Murrr, reg. No. 45403053195, legal address: Avotu 2-2, Riga, LV-1011.
2.2. Processors of personal data are legal entities which: Company on behalf of and accordingly Company process personal data in accordance with the instructions, and who have undertaken to comply with the requirements of regulatory enactments in the field of data processing.
3. Categories and types of personal data of customers under processing
3.1. Company The categories of personal data processed by customers differ depending on which Company the customer wants to use the services.
3.2. Company The categories of personal data of the processed customers are divided as follows:
3.2.1. processing of customer personal data Company issuance of customer cards and other related activities;
3.2.2. processing of customer personal data for registration Company e-shop and other related activities;
3.2.3. processing of customer personal data Company to send news in the form of e-mail or SMS;
3.2.4. processing of personal data of the customer for security purposes;
3.2.5. processing of customer personal data for other marketing purposes (publicity measures).
3.3. To ensure the issuance of customer cards and the provision of related marketing offers The company according to the amount of information provided by the customer at his / her choice, the following personal data of the customer may be processed: name, surname or username; gender; birth data (date of birth, month and year of choice); addresses; Mobile phone number; e-mail.
3.4. For customer registration Company in the e-shop The company according to the amount of information provided by the client, the following personal data of the client may be processed: name, surname or username; gender; birth data (date of birth, month, year); addresses; Mobile phone number; e-mail, address.
3.5. Company for the execution of transactions performed in the e-store - for the delivery of goods - The company may process the following personal data of the customer depending on the type of delivery of goods selected by the customer: e-mail, name, surname; addresses; Mobile phone number.
3.5. Company to send news in the form of e-mail or SMS, The company according to the amount and purpose of the information provided by the customer, the following personal data of the customer may be processed: e-mail, telephone number, address.
3.6. Company The following personal data of the customer is processed for the protection of property: a video image obtained from Company camcorder recordings in the store.
3.7. Company promoting publicity Company during publicity events (presentations, store opening events, etc.) The company can process the following customer personal data: photo.
4. Purposes of personal data processing
4.1. The company the obtained personal data of customers shall be processed only in accordance with the following purposes (purposes), observing the requirements of legal acts regulating the processing of personal data and depending on the amount of personal data provided by the customer and giving consent for specific processing purposes.
4.2. The company the obtained personal data of customers are processed for the following specific purposes:
4.2.1. name, surname or username - to identify the customer Company in the store, providing the customer with the opportunity to use the customer's card without presenting it; as well as customer registration Company e-shop and access Company to provide an e-shop;
4.2.2. birth data (date of birth, month, year) - for granting discounts in the month of the customer's birthday;
4.2.3. address - for sending informative materials and invitations by mail to the customer, as well as Company for the delivery of goods ordered in the e-store, if it is necessary to indicate the address for the delivery of the goods to the customer for the type of delivery selected by the customer;
4.2.4. mobile phone number - for SMS transmissions about current share offers and invitations to events; as well as if the customer has provided a phone number for ordering goods Company in the e-shop during registration - for communication about questions about Company delivery of goods ordered in the e-shop;
4.2.5. e-mail - Company sending a newsletter in electronic form; access Company to provide an e-shop for the customer; notice required Company for the provision of ordering, payment and delivery information to the customer in the e-store, if the customer orders the goods Company e-shop;
4.2.6. video image - video surveillance Company store premises to protect Company property, prevent theft Company in the store, open Company in the store the thefts committed, identify the perpetrators and ensure the protection of the vital interests, including life and health, of the persons;
4.2.7. photo - Company to promote publicity during the publicity events it organizes.
4.3. The company informs that part of 4.2. may be implemented in an automated manner, including through customer profiling, to provide new, specific, individual Company offers to a specific customer, taking into account Company information obtained and automatically collected from personal data provided by the customer and previous purchases Company in the store, if the customer has agreed.
5. Basis and term of personal data processing
5.1. Company the processing of personal data may be carried out only on one of the following grounds:
5.1.1. Customer's consent - the customer's personal, freely provided specific and informed indication that the customer agrees to the processing of his / her personal data. For each type of personal data to be provided The company has specified one of the 4.2. for the purposes which the customer may choose to provide For the company consent to the processing of your personal data. By providing his personal data in person, the customer confirms his consent to the processing of his personal data.
Sending invitations to Company publicity events organized by Company photography is planned to promote publicity, The company the invitation shall include a reference to photography at the event. Upon arrival at the event, the customer expresses his or her active, informed consent that the customer's personal data - the photo - may be processed.
5.1.2. Fulfillment of a legal (legal) obligation - if it arises from legal acts or administrative acts issued by state institutions or lawful requests, The company is entitled to process the data received from the customer to the extent necessary to comply with the relevant legal or administrative requirements or to respond to official lawful requests from public authorities.
5.1.3. Respect for legitimate interests - The company is entitled to process customers' personal data in order to ensure the protection of its legitimate interests, in particular, but not limited to, the protection and security of property Company vital interests of persons, including the protection of life and health (video surveillance) and the investigation or prosecution of criminal offenses Company in the store; bringing claims, defending against claims in court, etc.).
In case of video surveillance The company always clearly informs the customer about the video surveillance performed in the store by placing a special sticker at the entrance to the store. If the customer does not want to get into the video surveillance area, the customer can take the opportunity to shop Company in the e-shop.
5.2. The company process the personal data provided by the customer for as long as the consent of the customer to the processing of the data is valid, or as long as Company it is necessary to protect its legitimate interests or to fulfill the legal obligations imposed on it and until the purpose of the processing of personal data has been achieved. Video surveillance material is stored for a maximum of four weeks. If the specific video surveillance material is necessary for the detection, investigation, punishment or Company protection of legitimate interests, it shall be kept until those objectives have been achieved.
6. Recipients of personal data
6.1. The company, process customers' personal data with strict confidentiality and provide protection against unauthorized access to personal data, accidental loss or destruction of personal data by third parties. On a legal basis, The company exceptionally, personal data of customers may also be transferred to the following persons:
6.1.1. public administration institutions, law enforcement institutions, at the lawful request of these institutions;
6.1.2. persons who provided For the company services, such as lawyers, if there is a legal basis for the transfer of personal data to service providers.
6.2. The company transfers the personal data required for making and executing payments to the authorized processor, Omniva checkout service provider, Maksekeskus AS (Estonian registration number: 12268475, legal address: Niine 11, Tallinn 10143, Estonia). Maksekeskus AS privacy policy - https://makecommerce.lv/wp-content/uploads/2019/02/MK-privatuma-politika-25052018_LV.pdf. Available on page https://makecommerce.lv/noteikumi/.
6.3. The Company transfers the personal data required for the delivery of goods to Omniva SIA (registration number: 40103527192, legal address: Baltā 1B, Rīga, LV-1055, Latvia). Omniva customer data processing principles - https://www.omniva.lv/public/files/failid/Principles%20of%20Processing%20Customer%20Data%20AS%20Eesti%20Post_LAT.pdf. Available on page https://www.omniva.lv/privats/palidzet/noteikumi_un_cenas.
7. Company cookie policy
7.1. Company The website uses cookies, which store information about the activities of the website user, such as the IP address used by the user, the domain name, the type of web browser and operating system used, the duration of the website visit and the information searched on the website.
7.2. The company use cookies only on the basis of the explicit consent of the users of the website to use them. This condition does not apply to cookies that are required Company for the smooth operation of the website, but which do not keep information about the activities performed by the user for a long time Company Homepage.
8. Customer's rights in connection with Company processing of personal data
8.1. The customer has the right to choose to what extent and what data to provide For the company, as well as to withdraw consent to the processing of all or part of your personal data upon request For the company terminate the processing of all or part of the customer data. Withdrawal of consent does not affect the lawfulness of the processing of the customer's personal data prior to the withdrawal.
8.2. By choosing not to provide personal data in part or by withdrawing consent in whole or in part (for specific data provided), The company will not be able to provide the customer with the services for the provision of which the relevant personal data is required.
8.3. Given that For the company it is necessary to unambiguously identify the customer who fully or partially withdraws consent to the processing of personal data, the customer may send a refusal For the company in the following ways:
8.3.1. If the customer has been assigned a customer card - by sending a recall to Company email from the email the customer provided Company in the customer questionnaire issued at the point of sale for the receipt of the customer card or which has been indicated upon registration Company in the e-shop. In this case, the customer must indicate in the revocation e-mail the name, surname or username (if the customer has chosen to do so) and the customer's card number (if the customer has been granted such a card), as well as the extent to which consent is revoked.
8.3.2. Sending a recall to Company an e-mail signed with a secure electronic signature, indicating the customer's name, surname or username (if the customer has chosen one) and the customer's card number (if the customer has been granted a customer card), as well as the extent to which consent is revoked.
8.3.3. Sending a revocation by mail to Company legal address: Avotu 2-2, Riga, LV-1011, indicating the client's name, surname or username (if the client has chosen such) and the client's card number (if the client has been granted a client card), as well as the extent to which consent is revoked. The client may also submit a handwritten withdrawal of consent Company in the store.
8.4. The customer has the right to object at any time Company processing of personal data carried out by the For the company take certain actions in relation to the customer's personal data by sending a request For the company in one of the ways specified in 8.3.1.-8.3.3. point. The customer is entitled to claim For the company:
8.4.1. to issue Company the personal data at the disposal of the customer;
8.4.2. to correct, delete or supplement personal data in accordance with the client's instructions, substantiating his / her request;
8.4.3. restrict (temporarily suspend) the processing of a certain type or all of the customer's data;
8.4.4. stop automated processing of customer data (automated individual decision-making regarding the customer), including profiling;
8.4.5. to transfer personal data to another controller - to the extent and in the form in which the data are Company action.
8.5 The Customer has the right to obtain from Company information on the fact of transfer of personal data to third parties and on the persons (natural or legal) and / or public authorities to whom The company has provided any information relating to the personal data of a particular client, unless such information is provided at the request of the subject of the operational activity or another competent authority in the context of criminal proceedings or in other cases where the law directly prohibits the disclosure of the relevant information.
8.7. In the event of a dispute concerning Company the customer has the right to submit a complaint to the supervisory authority - the Data State Inspectorate.
9. Changes to the Privacy Policy
9.1. The company may make changes to its privacy policy at any time and in its sole discretion if such changes comply with the requirements of regulatory enactments in the field of personal data protection. Amendments shall take effect upon publication Company Homepage. It is your responsibility to review this Privacy Policy periodically to ensure that you are aware of the changes