Contents:
1. Objective and data protection officer, general provisions
2. Terms and definitions
3. For what purposes the Company may process personal data?
4. What personal data does the Company process?
5. What is the legal basis of data processing?
6. Whom information on personal data may be transferred to?
7. From what sources can the Company receive information on personal data?
8. Can information on personal data be transferred to third countries?
9. For how long is personal data stored?
10. What are the rights of Data Subjects during the personal data processing period?
11. What are the Company’s guarantees about personal data security?
12. Whom Data Subjects can contact?
1. Objective and data protection officer, general provisions
The purpose of this Privacy Policy is to provide the natural person or the Data Subject with information on the purposes, scope, security, and period of personal data processing during data collection and processing of personal data. This Privacy Policy applies to all the information placed on the website www.rozewines.com, which SIA Hermes Invest can obtain on the User during using of the Internet store, programmes and products.
Data Controller is SIA Hermes Invest (hereinafter—the Company), registration No. 42103078050, legal address: Jūras iela 12, Liepāja.
All questions related to personal data processing shall be sent to: [email protected].
If the User does not agree to this Privacy Policy, the User shall discontinue using the Internet store.
Privacy Policy only applies to the Internet store of www.rozewines.com. The store shall not control and shall not be held liable for any related third party sites that the User can visit directly from the Internet Store.
Administration of the site shall not verify the truthfulness of personal data provided by the User of Internet store.
2. Terms and definitions
Terms used in the Privacy Policy:
Administration of the Internet Store (hereinafter—the Site Administration) are employees who are authorised to supervise the Site, and who work on the behalf of SIA Hermes Invest, and who organise and/or carry out processing of personal data, and who specify the purpose of personal data processing, what kind of personal data is processed, what activities (operations) are performed when handling personal data.
Personal Data is any information that is directly or indirectly related to any specific or identifiable natural or legal person.
Personal Data Processing is any activity (operation) or a set of activities (operations) that is performed with personal data using automatic tools or without them, including collection, recording, systematization, accumulation, storage, clarification (updates, changes), extraction, usage, transfer (dissemination, introduction to, access), generalization, blocking, removal, destruction.
Confidentiality of Personal Data must be observed by the processor and any other party who has access to Personal Data that may not be disseminated without the consent of Data Subject or any other legal basis.
User of the Internet Store (hereinafter—the User) is a person with access to the store and who uses the store via Internet.
3. For what purposes the Company may process personal data? It is necessary for the Company to collect and process personal data in the course of performing its economic activity, including for the following purposes:
- identification of the User, who is registered on the Internet Store, to execute an order remotely and/or conclude a purchase contract with Noble Wine;
- allow User’s access to personalized Internet Store resources;
- establishment of mutual connections with the User, including sending of notifications, requests that are related to the use of the Internet Store, performing services, processing User’s requests and statements;
- establishment of User’s location to ensure safety and prevent fraud;
- verification of the truthfulness and completeness of the personal data submitted by the User;
- making purchase records if the User consents to such recording;
- notification sent to the User by the Internet Store regarding making an order;
- receipt and processing of payments, confirming taxes or tax allowances, contesting payment, establishment of User’s right to use a credit line;
- provision of efficient customer and technical support, if any problems related to the use of the Internet Store emerge;
- delivery of communications related to new products, special offers, information on prices, news and other information to the User on the behalf of the Internet Store or its partners, based on the User’s consent;
- advertising activities if agreed by the User;
- administration of the Internet Store;
- accounting records;
- bookkeeping records;
- provision of customer service and other services, selling of goods;
- other purposes of personal data processing when a person uses, has used or has expressed willingness to use the Company’s services or is connected with the Company’s services in any other way;
- answering your questions that have been addressed to the e-mail [email protected] or asked using our contact form on the website www.rozewines.com, and providing you with the necessary information;
- obtaining of statistical data on the number of website visits, no persons are identified in the statistical data.
4. What personal data does the Company process?
The Company process those categories of personal data that are specified in the Company’s Data Processing Register.
The Company’s Data Processing Register holds information on Data Subjects, categories, data processing purposes, legal basis of such processing, sources of personal data, recipients of personal data, duration of personal data storage.
Personal data is collected from both the Data Subject and external sources. The Company obtains, collects and processes the following categories of personal data, but the list is not exhaustive:
- identification data: name, surname, personal identity number, date of birth, position;
- payment details: bank, account number;
- contact information: address, telephone, e-mail;
- User data: IP address, information from cookies, information on the browser (or any program that allows showing advertisements), time of access, pages whit advertising banner, address, address of the previous site;
- other personal data depending on the type of the service provided and the information provided by the Data Subject.
5. What is the legal basis of data processing?
The Company only processes personal data when there is legal basis to do that.
Key legal basis for personal data processing are:
- execution of Company’s functions, performance of the obligations imposed by regulatory enactments. When leaning on this legal basis, the Company does not have full freedom of action in respect of the obligations imposed;
- performance of a contract or taking of a measure before concluding a contract, pursuant to the Data Subject’s request;
- legitimate interests of the Company.
6. Whom information on personal data may be transferred to?
The Company may transfer personal data to other persons, like providers of courier services, mail organisation, electrical network operators if it is related to the execution of a User’s order that is put on the Internet Store www.rozewines.com, including purchase delivery, municipalities and public institutions and organisations only for the specified purpose and in the amount necessary, as well as when prescribed by the regulatory enactments of the Republic of Latvia, and other service providers (accounting services, maintenance of the IT system).
7. From what sources can the Company receive information on personal data?
The Company can obtain data and information on personal data from the person itself. The Company only cooperates with the institutions and organisations that are able to guarantee compliance with the regulatory requirements regarding correct storage and protection of personal data.
8. Can information on personal data be transferred to third countries?
Personal data is not transferred to countries outside the economic area of the European Union.
9. For how long is personal data stored?
The Company stores personal data as long as it is necessary to perform its functions, for example as long as the Data Subject uses the Company’s services or until the Data Subject withdraws their consent, if personal data was processed based on a consent. In some cases, the period of storing personal data is set by regulatory enactments. The period of storing personal data depends on the purpose for which this data was collected.
10. What are the rights of Data Subjects during the personal data processing period?
Pursuant to the legal framework for data protection, Data Subject has right to affect data processing by contacting the Company and sending e-mail to the address: [email protected].
Data Subject may:
- obtain information on whether the Company has processed any personal information of the Data Subject;
- access the processed personal information, receive its copy for free (except in cases of repeated or excessive requests) and, except if stipulated otherwise by data protection laws, receive information on:
purpose of data processing;
categories of personal data that are processed;
recipients of personal data or categories of personal data recipients, especially regarding recipients located outside the European Union or the European Economic Area;
planned period of data storage;
- ask to correct or delete data;
- ask that processing of Data Subject’s data is limited. In some cases, the Data Subject has the right to request limited processing of data, for example when Data Subject questions the accuracy of personal data or when data is no longer necessary for processing but necessary for the Data Subject to bring a claim, for example. In such case, the Company shall not process the respective personal data any longer;
- object to data processing, including to object to use of personal data for profiling, i.e. automatic processing of personal data, if commenced by the Company;
- revoke their consent, such revocation does not affect the lawfulness of the processing performed before the revocation of Data Subject’s consent;
- submit a complain to a competent Data State Inspectorate;
- receive a compensation for a damage caused to the person in the result of such data processing that violates the General Data Protection Regulation and this Privacy Policy.
11. What are the Company’s guarantees about personal data security?
The Company undertakes to ensure and constantly improve protection measures to protect personal data from unauthorised access, accidental loss, dissemination, disclosure or destruction.
To be able to work with data, especially personal data, the Company has introduced technical and organisational measures that are suited for the needs of personal data protection, for example it uses secure antivirus programs and certified software only, organises training of all the employees engaged in personal data processing, checks regular backing up of server, ensures safety of passwords, ensures regular changing of User passwords; regularly installs software updates.
The Company guarantees that personal data is processed lawfully, in good faith and in a transparent manner and that only data that is necessary for the processing purposes is being collected
The Company shall collect the personal data for specific, clear and legitimate purposes and shall not further process the data if the manner of such processing does not fit the purpose.
The Company’s employees who process personal data shall ensure that such information remain confidential. The Company’s obligation to maintain the confidentiality of personal data of natural persons is open-ended and continues also after termination of labour legal relations.
12. Whom Data Subjects can contact?
In case of any questions about personal data or in case of any doubts about the safety of personal data, contact the Data Protection Officer by sending an e-mail to the address [email protected] or by writing to our legal address: SIA Hermes Invest, Jūras iela 12, Liepāja, LV-3401, Latvia.
If the Data Subject is not satisfied with the answer, the Data Subject has the right to submit a complaint to the Data State Inspectorate (Blaumaņa iela 11/13, Riga, LV-1011).
Regulations and right of withdrawal
The seller shall only deliver goods to a customer who is at least 18 years old and has presented a document verifying their age.
Right of withdrawal:
A customer may request return of money or replacement of goods for the following reasons: if the wine is spoiled (damaged); in such case, the goods shall be delivered to our store at Kuršu iela 10, Liepāja, LV-3401, where our sommelier can assess the quality of the wine.
Right of withdrawal expires 14 days after the moment when the customer who placed the order receives the goods.
To exercise the right of withdrawal, the customer must inform SIA Hermes Invest on their intention to refuse the goods by writing to Jūras iela 12, Liepāja, LV-3401, Latvia, or the e-mail address [email protected].
Procedure of withdrawal:
A customer may request return of money or replacement of goods for the following reasons: if the wine is spoiled (damaged); in such case, the goods shall be delivered to our store at Kuršu iela 10, Liepāja, LV-3401, where our sommelier can assess the quality of the wine. Another reason is that wrong product was delivered. In case of withdrawal, SIA Hermes Invest shall return all payments performed by the customer, except for delivery expenses, without any undue delay and, in any case, not later than within 14 days from the receipt of withdrawal note; the goods shall be sent or have delivered to the store of SIA Hermes Invest at Kuršu iela 10, Liepāja, LV-3401, Latvia, without any undue delay and, in any case, not later than within 14 days from the moment the customer informed SIA Hermes Invest on their decision to withdraw from the order; SIA Hermes Invest shall not accept goods that are sent by mail since it is not possible in such case to assess the visual appearance, defects and assemblage of the goods in the presence of both parties. When sending goods to the store of SIA Hermes Invest with a courier, the customer agrees to the deed of receipt specifying the visual appearance and assemblage as executed individually by SIA Hermes Invest. Customer’s further objections regarding the condition of the goods shall be regarded as unfounded; if the customer chooses to return the goods using a courier service, such delivery shall be paid by the customer.
Cases not covered by the procedure of withdrawal:
The cases specified in Paragraph 22 of the Cabinet Regulation No. 255 (20.05.2014) Regulations Regarding Distance Contracts, including if:
the price of goods depends on fluctuations in the financial market which the trader provider cannot control and which may occur during the right of withdrawal period;
the goods are made to the consumer’s specifications or are clearly personalised;
the goods are liable to deteriorate or expire rapidly;
the consumer has unsealed the packaging for goods which are not suitable for return due to health protection or hygiene reasons;
the goods are, after delivery, according to their nature, inseparably mixed with other items;
the consumer has specifically requested a visit from the trader or service provider for the purpose of carrying out urgent repairs or maintenance. If the trader or the service provider, when arriving to the consumer premises, provides additional services or delivers goods that are not the spare parts required for carrying out the repairs or maintenance tasks, the right of withdrawal shall apply also to these additional services or goods;
the goods are damaged mechanically and/or externally, affecting its value and causing it not suitable for selling any more.
Other provisions:
To add information to the order or to correct mistakes made during placing of the order, the customer can contact SIA Hermes Invest by calling +371 ____________ or by writing to the e-mail address [email protected].
Images of goods on the Internet Store www.rozewines.com may slightly differ from the actual goods. To specify description of the goods and to eliminate inaccuracies related to the order, contact us at wwww.rozewines.com or by writing to the e-mail address [email protected] or by calling +371 _________ to avoid any unpleasant surprises.
ALCOHOL HAS DETRIMENTAL IMPACT ON HEALTH. IT IS FORBIDDEN TO SELL, PURCHASE AND TRANSFER ALCOHOLIC BEVERAGES TO MINORS. IT IS FORBIDDEN TO DELIVER (HAND OVER) ALCOHOLIC BEVERAGES FROM 22.00 UNTIL 8.00.