Privacy Policy

This Privacy Policy is developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as applicable legislation of the Republic of Latvia. It describes how the online store shop.mellstroy.lv (hereinafter referred to as the “Online Store”) collects, uses, stores, and protects users’ personal data.

1. Data Controller
The Data Controller is:
SIA Mellstroy
Registration Number: 40003348177
Taxpayer Number: LV40003348177
Legal Address: Olaines nov., Olaine, Kūdras iela 12 - 2, LV-2114
Contact Email: info@mellstroy.lv
Contact Phone: +371 26 530 851
If you have any questions regarding the processing of your personal data, you can contact us using the details provided above.

2. What Personal Data We Collect
We may collect and process the following categories of personal data:
• Identification Data: first name, last name.
• Contact Data: email address, phone number, delivery address.
• Transaction Data: information about orders and payments, including bank card details (processed by the payment provider).
• Technical Data: IP address, browser type, device information, cookies, and website usage data (e.g., viewed pages, time spent on the site).
• Account Data: login, password (encrypted), order history, preferences.
• Voluntarily Provided Data: reviews, customer support requests, information provided during registration or in forms.
We do not collect special categories of personal data (e.g., health, religious beliefs, etc.) unless required for order fulfillment and provided voluntarily by you.

3. Purposes and Legal Bases for Processing Data
We process personal data based on the following legal grounds:
• Performance of a Contract (Article 6(1)(b) GDPR): to process orders, deliver goods, provide services, and support customers.
• Consent (Article 6(1)(a) GDPR): to send marketing materials, such as newsletters, if you have given your consent.
• Legitimate Interests (Article 6(1)(f) GDPR): to analyze site usage, improve services, prevent fraud, and ensure security.
• Legal Obligation (Article 6(1)(c) GDPR): to comply with tax laws, accounting requirements, and other legal obligations.

4. How We Use Your Data
We use personal data for the following purposes:
• Processing and fulfilling orders, including delivery and returns.
• Managing user accounts and providing personalized services.
• Sending notifications about order status, promotions, or news (with your consent).
• Analyzing and improving the functionality of the Online Store, including content personalization.
• Ensuring site security and preventing fraud.
• Fulfilling legal obligations (e.g., tax reporting).

5. Sharing of Personal Data
We may share your data with the following parties:
• Service Providers: courier services, payment processors, IT providers, acting as data processors and bound by data processing agreements (DPAs) compliant with GDPR.
• Public Authorities: when required by law (e.g., tax authorities).
• Marketing Partners: only with your consent, for newsletters or advertising campaigns. We do not transfer your data outside the European Economic Area (EEA) unless it complies with GDPR requirements (e.g., standard contractual clauses).

6. Storage of Personal Data
• Data is stored only for the time necessary to achieve the processing purposes or as required by law.
• Order-related data is stored for 5 years to comply with tax obligations.
• Account data is stored until the account is deleted or consent is withdrawn.
• Technical data (e.g., cookies) is stored as per settings outlined in the “Cookies” section. After the retention period, data is deleted or anonymized unless further storage is required by law.

7. Your Rights Under GDPR
Under GDPR, you have the following rights:
• Right of Access: request information about the data we process.
• Right to Rectification: correct inaccurate or outdated data.
• Right to Erasure (“right to be forgotten”): request deletion of your data if it is no longer needed for processing purposes.
• Right to Restriction of Processing: restrict data use in certain cases.
• Right to Data Portability: obtain your data in a structured format or transfer it to another controller.
• Right to Object: object to data processing based on legitimate interests (e.g., marketing).
• Right to Withdraw Consent: withdraw consent for data processing at any time.
To exercise your rights, contact us at: info@mellstroy.lv. We will respond within 30 days. If you believe your rights have been violated, you may file a complaint with the State Data Protection Inspectorate of the Republic of Latvia (Datu valsts inspekcija).

8. Cookies
We use cookies to ensure site functionality, analytics, and personalization. Cookie categories:
• Essential: for site operation (e.g., cart, login).
• Analytical: to analyze user behavior (e.g., Google Analytics with IP anonymization).
• Marketing: for personalized advertising (only with your consent).
You can manage cookie settings via the site’s cookie banner or your browser settings. Details are in our Cookie Policy.

9. Data Security
We implement technical and organizational measures to protect your data:
• Data encryption (SSL/TLS) on shop.mellstroy.lv.
• Access to data restricted to authorized personnel only.
• Regular updates to security systems and monitoring.
In case of a data breach, we will notify you and the State Data Protection Inspectorate within 72 hours, as required by GDPR.

10. Changes to the Privacy Policy
We may update this Policy due to changes in legislation or our processes. The updated version will be published on shop.mellstroy.lv with the effective date. For significant changes, we will notify you via email (if provided).

11. Contact Information
For any questions related to this Privacy Policy or data processing, contact us:
SIA Mellstroy
Email: info@mellstroy.lv
Phone: +371 26 530 851
Address: Olaines nov., Olaine, Kūdras iela 12 - 2, LV-2114