Privacy Policy

1. General provisions

1.1. This Privacy Policy describes how SIA Madonas karameles, reg. No. 45403040415, registered address: Rīgas iela 1, Madona, LV-4801 (hereinafter – the Controller) collects, processes and stores personal data obtained by the Madonas karameles online store (karameles.lv) from customers and website visitors (hereinafter – the Data Subject or You).

1.2. Personal data means any information relating to an identified or identifiable natural person. Processing means any operation on personal data, such as collection, recording, use, viewing or deletion.

1.3. The Controller complies with applicable data protection law, including the General Data Protection Regulation (GDPR).

2. Collection, processing and storage

2.1. Personal data is obtained mainly via the online store website, contact forms and e-mail.

2.2. By using the online store, You agree that the information You provide is used in accordance with this Privacy Policy.

2.3. The Data Subject is responsible for the accuracy and completeness of submitted data and must promptly notify the Controller of any changes.

2.4. The Controller is not liable for losses arising from incorrectly submitted personal data.

3. What data we process and for what purpose

3.1. The Controller may process:

name and surname;
contact details (e-mail, phone number);
delivery and billing address;
transaction data (purchased goods, price, payment information, order history);
technical data (IP address, cookies) as needed for website operation and statistics;
other information You provide when contacting us or placing an order.

3.2. Purposes: order fulfilment and delivery, customer service, accounting and legal obligations, website security and improvement, and marketing only with Your consent.

3.3. Legal bases: GDPR Article 6(1)(a), (b), (c) and (f) (consent, contract, legal obligation, legitimate interests).

3.4. Data is retained while needed for the stated purposes, while a legal obligation applies (e.g. Accounting Law), or while Your consent remains valid. Afterwards data is deleted or anonymised.

3.5. To fulfil obligations to You, the Controller may share data with processors such as accountants and delivery/courier providers. Payments are processed via the makecommerce.lv platform; therefore our company transfers personal data necessary for payment execution to the authorised processor Maksekeskus AS. Data may also be disclosed to public authorities where required by law.

3.6. The Controller applies organisational and technical measures to protect personal data.

4. Your rights and withdrawing consent

4.1. You have the right to:

access Your data and obtain a copy;
rectify inaccurate or incomplete data;
request erasure (“to be forgotten”) where permitted by law;
withdraw consent to personal data processing (withdrawal does not affect processing carried out before withdrawal);
restrict processing;
object to processing based on legitimate interests;
lodge a complaint with the Data State Inspectorate.

4.2. Requests to exercise Your rights or withdraw consent may be submitted in person at Rīgas iela 1, Madona, LV-4801, or by e-mail to linda@karameles.lv or arnis@karameles.lv.

5. Cookies

5.1. The website may use cookies for functionality, the shopping cart and, with Your consent, analytics. You can manage cookies in Your browser and via the site cookie banner.

6. Final provisions

6.1. This policy is prepared in accordance with Regulation (EU) 2016/679 (GDPR) and Latvian law.

6.2. The Controller may update this Privacy Policy. The new version takes effect upon publication at karameles.lv.