Privacy Policy

About Us

Controller: SIA "GUMI", Reg. No. 40203148445, (hereinafter – the Company).

In this Privacy Policy, any use of the words "you," "your," or similar expressions refers to any visitor of gumi.lv (hereinafter – the website). Terms such as "we," "our," or similar expressions refer to the Company.

Personal Data

Personal data is any information that can be used to identify an individual.

When processing personal data, the Company complies with the requirements of the General Data Protection Regulation No. 2016/679 and the Personal Data Processing Law, as well as other applicable legal requirements in Latvia to ensure the protection of personal data.

This privacy policy explains how the Company processes personal data of individuals, the procedure for exercising data subject rights, and issues related to personal data protection. The Company's privacy policy applies to personal data processing carried out by the Company on the specified website and in relation to ensuring the operation of this website. Buyers who purchase goods on the website are also subject to additional terms specified in the distance contract and the e-shop usage terms.

What Categories of Personal Data Do We Collect and Why?

• Sale of Goods

When selling goods, personal data related to the order, concluded purchase agreement, order execution, and accounting is processed (including order processing, invoicing, and payment administration). Also, in cases where you wish to exercise consumer withdrawal rights, have questions or complaints about the purchased goods, or in cases where commercial guarantee situations have arisen, the processing of relevant personal data will be necessary to resolve these situations. Without this data, the Company would not be able to properly carry out the sale of goods and related activities.

In the sale of goods, buyer data will mostly be used to contact the buyer and clarify the order before its final confirmation.

• Reminder about an Unfinished Purchase

If we detect unfinished order processing, we may send a technical support email or contact you by phone if the buyer has not completed the purchase in the e-shop available on the website. This is necessary to ensure that the buyer has not encountered technical problems during the purchase process and to cancel the reservation of the goods, or to agree on order confirmation from the buyer's side. Such communication may occur if the person placing the order (buyer) has provided their email or phone number and it has been appropriately recorded in the e-shop system.

Investigation and Prevention of Unlawful Actions Against Us

To detect and prevent unlawful and dishonest actions against the Company (e.g., investigate and prevent hacking or unauthorized editing of the website or disruption of access to the website, as well as in cases of attempted fraud of goods), we may collect and process available data, including transferring it to law enforcement agencies or information technology security incident prevention institutions.

• Direct Marketing, Advertising, and Informational Materials

With your consent, we inform you about various news and updates related to our and our partners' services, promotions, and offers. If you wish to receive our news, you must indicate this on our website or subscribe in another offered way.

Profiling is the automated segmentation of buyers (customers) to evaluate certain aspects related to an individual, to apply customized marketing offers or predict aspects related to the buyer's personal preferences and interests. In marketing, we use profiles to send you messages that we believe are most relevant to you, with your consent, and to avoid sending or displaying irrelevant messages. Based on the seller's legitimate interest in promoting the sale of goods, we may perform statistical (i.e., not related to a specific person (buyer)) profiling and analysis of buyer habits using anonymized, aggregated profiling results. 

In profiling, users are segmented based on the goods they are interested in to provide a more user-friendly experience. The user may receive personalized offers. Profiling may take into account interested product groups, previous purchases (purchase history), data generated by you when using the website (visited sections, actions taken, duration of stay, purchase amount, number of orders), information you have provided to us, and other information we have obtained to select offers that may best suit your interests and needs. You have the right to object to direct marketing based on such profiling by sending a message to the Company.

• Data You Provide When Communicating with Us

When you contact us (including to review applications and complaints) or we need to respond to you or send information, we may use the contact information available to us. Such information will also be used to review and respond to complaints.

• Customer Loyalty Program

We may implement and carry out various customer loyalty programs, within which personal data processing may also occur. For specific types of personal data processing within a particular loyalty program, please refer to the loyalty program's terms or contact us. Generally used personal data for implementing and carrying out customer loyalty programs:

• Lotteries, Draws, and Promotions

In relation to our offered goods and services, we may occasionally organize promotions, draws, contests, offers, and lotteries. Participation in them is voluntary and depends on your expressed acceptance. If you wish to participate in such events, personal data processing may also be necessary (e.g., to register for a lottery or draw, to ensure the conduct of such a lottery). Specific rules may stipulate more precise requirements for the necessary data categories.

From What Sources Do We Obtain Personal Data, and How Accurate Is It?

We obtain personal data from you. We collect information we receive when you visit and use the website, provide us with data (including data you provide us before ordering goods or filling out information fields on the website), as well as data you provide when communicating with us. We may receive data from service providers who ensure the operation of the website, including its activity statistics services, counterattack, security, and intrusion protection services.

If your data that you have provided to us has changed (e.g., contact information for receiving news), you must inform us immediately by correcting incorrect or inaccurate data.

To Whom Do We Transfer Your Personal Data?

- Service Providers and Partners

To fulfill our obligations to you, ensure the operation of the website, and provide Company services, we transfer your personal data to companies and institutions that provide services to us, such as payment service providers, goods delivery service providers, and service providers related to website maintenance and operation. Similarly, the Company's operational providers (IT maintenance and data storage service provider - WebDev) may, in certain cases, be considered your personal data processors.

In the course of regular business, your data is transferred to the payment service provider, and data will be transferred to the selected delivery service provider. However, considering the order and payment process, other service providers may be used, which you will see in the respective purchase step.

We and our partners who ensure the operation of the website process and receive cookies, collect and analyze your activity on the website.

If you use any information exchange option or tool on the website, your data may be transferred to the respective partner associated with your chosen information exchange or transfer option, as well as message sending service providers.

We make reasonable efforts to verify all service providers who process your personal data on our behalf and instruction. Service providers are not entitled to use your personal data for any other purposes.

- Law Enforcement Agencies, State and Municipal Institutions

To fulfill obligations stipulated by laws, we may transfer your personal data to law enforcement agencies (e.g., police), state and municipal institutions upon their request (e.g., supervisory authority responsible for personal data protection). We may transfer your personal data to law enforcement agencies (e.g., courts) and state and municipal institutions also to defend our legitimate interests by drafting, submitting, and defending claims, complaints, and submissions.

• Cookies

Use of Cookies

This website, like many others, uses cookies to help improve the user experience and ensure its excellent operation. We invite you to familiarize yourself with the principles of cookie use.

During the use of cookies, personal data may be processed. By using this website, you agree to the method of cookie use described here (unless your browser is set to not accept cookies). Please note that if you choose to disable strictly necessary cookies, the website may not function fully.

Information About Cookies

This website is accessed through one of the browsers, such as Chrome, Firefox, Safari, Edge, or others.

Cookies are information that this browser obtains and stores when you use our site. The next time you visit our website again, the browser will remember your actions and perform some of them on your behalf, such as choosing the working language or controlling the display of the cookie notification. With the help of cookies, the website gains the ability to save the user's individual settings, recognize them, and respond accordingly.

Types of Cookies and Their Purpose

There are two types of cookies—session cookies and persistent cookies. Cookies are also divided into first-party or third-party cookies. The following text explains these terms so that you can better understand the nature of cookies and why we use them.

Session cookies allow you to be recognized when you visit a particular website, remembering any changes or selections made on that site so that they persist across other pages. These cookies allow you to quickly and easily use multiple pages of one website, avoiding the need to process each visited page. Session cookies are not permanent—their operation ends when you close the web browser or end the session on a particular website.

Persistent cookies are cookies that remain stored on your computer for a certain time after the web browsing session ends; therefore, they allow saving user choices or actions on the site and using them the next time the user visits a website that uses these cookies.

First-party cookies are maintained by structures administered by the website operator, in this case, us. Third-party cookies are maintained by other domains that do not belong to us. Third-party cookies may be stored on your device (computer, phone, or tablet) when you browse our website.

Categories of Cookies According to Their Function

In the aforementioned types of cookies, the following cookie categories are distinguished:

- Strictly Necessary Cookies (short-term, first-party): These cookies are essential for you to browse various websites and use their functionality. They are necessary to provide basic site functions, such as placing goods in the shopping cart, ensuring the purchase process, and displaying a specific version of the page. Without these cookies, you will not be able to receive the necessary services, and the full functionality of the website will not be possible.

- Performance Cookies (long-term, first-party and third-party): These cookies collect information about how visitors use websites, such as which sites they visit most often. The information collected using cookies is mostly aggregated, so direct identification is almost impossible. The information is used only to ensure better website operation. Sometimes such cookies may be called analytics cookies because they help gather more information—for example, how a visitor uses the website and which links they use. The cookie maintainer may use it to create your interest profile and display relevant ads on other sites. Analytics cookies mostly work by identifying your browser and device.

- Functional Cookies (long-term, first-party and third-party): These cookies allow a specific web page to remember your choices and offer you better, more modern features. These cookies are not mandatory but allow the website to provide enhanced features and improve the user experience—allowing websites to save information you have entered as a web page user (e.g., user ID, language selection, user's location, personal data security settings). The purpose of these cookies is to offer all users enhanced, personalized features. Functional cookies are also used to allow the use of some desired features, such as video playback. These cookies cannot track your browsing activities on other websites.

- Advertising Cookies (long-term, first-party and third-party): These cookies are used as an advertising source that contains information important to you and matches your interests. They are also used to limit the number of times you see an ad and as an additional tool for measuring the effectiveness of advertising campaigns. They are usually placed by advertising systems with the permission of the network operator.

List of Cookies Used on the Website

The usage (validity) terms of cookies used on our website are indicated as maximum, and you can delete cookies yourself sooner.

How Do We Use Cookies?

   To Save Personal Settings

These cookies allow our site to remember information that changes the way the website behaves or looks. For example, your preferred language or the region you are in. These cookies can also help you change text size, font, and other web page elements that can be personalized. Cookies also help use the e-shop, ensuring convenient shopping, order processing, and payment for the ordered goods.

   To Ensure Security

We use cookies to authenticate users, prevent fraudulent use of login credentials, and protect user data from unauthorized access.

   For Statistics Recording, Measuring Visitor Flow, and Network Security

Whenever you visit our website, analytical software anonymously saves cookies. They help us know how many users revisit our site. This way, we better understand our visitors' behavior on the website, what they prefer, and what interests them. This information is not associated with other information in any way. For example, we know that several people revisit a particular section monthly, but we do not know who they are.

   Our recorded data can also be used to protect our network and prevent attacks.

   To Save Registration Information

For registered users or repeat buyers, we save login or logout information in cookies and help fill in text input fields provided in website forms.

   For Advertising Purposes

We also use cookies to increase the attractiveness of ads to you as a user and offer better advertising conditions to advertisers. Cookies are usually used to select ads based on what is relevant to users (remarketing), improve campaign performance reports, and prevent users from seeing ads they have already seen. We use remarketing data only for visitor segmentation to help provide relevant advertising content. Segments are created based on some general visitor behavior patterns and the content of the pages they visit.

 If we have your consent for personal data processing for marketing purposes, including profiling, we may link these cookies intended for this purpose with other your personal data and, using automated processing, create individual profiles that are later used for personalized advertising purposes.

How to Adjust Cookie Usage

In most cases, there is no defined way to disable cookies without limiting the full or partial functionality of the website. If you are not sure whether cookies are necessary to fully utilize the provided services, we recommend keeping their settings. 

Cookie customization and disabling is possible using the tool provided on the website when you first open this website.

You can delete cookies in your browser—usually, this option is available in "Browsing History." 

Browsers also allow you to block cookies on your computer, for example, by enabling the "Enable Do Not Track" feature. Please note that in this case, the functionality of our website may be limited. For information on how to set cookies in the browser, visit the respective browser's website.

Transfer of Personal Data Outside the European Union and European Economic Area (EU/EEA)

We always strive to process your personal data within the European Union and European Economic Area (EU/EEA). Regarding data processing carried out in the sale of goods, data transfer outside the EU/EEA is not generally anticipated.

In certain cases, our engaged processors may be located outside the EU/EEA; however, in such cases, we always pay attention to ensure that processors are reliable and that the requirements of the General Data Protection Regulation regarding preconditions and protective measures for such data transfer are met (e.g., by entering into standard data protection clauses).

How Long Is Your Personal Data Stored?

All personal data obtained from you is stored as long as you use our services (including goods delivery, ensuring product conformity obligations), or until you withdraw your consent if your personal data is processed based on it. Usually, additional information related to the order is stored in accordance with the specified accounting document retention period. A longer personal data retention period is permissible to comply with legal requirements regarding the minimum document or information retention period or to protect our legitimate interests.

When this period ends, we will securely delete your personal data or make it inaccessible (archiving), or make it unidentifiable so that it can no longer be linked to you.

We reserve the right to delete or irreversibly anonymize your data sooner if the legal basis for its use has ceased or it is not necessary for further service provision.

You are responsible for storing and deleting data located on your end device (use the appropriate settings of your web browser to delete cache and cookies).

How Do We Protect Your Personal Data?

We ensure, constantly review, and improve protective measures to protect your personal data from unauthorized access, accidental loss, disclosure, or destruction. To implement this, we use modern technologies, technical and organizational measures, including firewalls, updated software, and data encryption.

What Are Your Rights?

The data subject has general rights provided by the General Data Protection Regulation and other applicable laws, including:

- Access to Personal Data

You have the right to request confirmation from us whether we process personal data related to you, and in such cases, request access to this personal data or provide information about the personal data if direct access is not provided.

- Rectification of Personal Data

If you believe that the information about you is incorrect or incomplete, you have the right to ask us to correct or supplement it.

- Withdrawal of Consent

To the extent that we process your personal data based on your consent, you have the right to withdraw your consent to personal data processing at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal, as well as in cases where data processing is carried out in accordance with another legal basis.

- Objection to Data Processing for Direct Marketing Purposes

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

- Objection to Processing Based on Legitimate Interests

You have the right to object to the processing of personal data that we process based on our legitimate interests; however, we will continue to process your data even if you have objected if we have justified reasons to continue processing your personal data. To exercise the aforementioned rights, please submit a written application to us.

- Erasure

In certain circumstances, you have the right to request that we delete your personal data; however, this does not apply in cases where the law requires us to retain data. To exercise the aforementioned rights, please submit a written application to us.

- Restriction of Processing

In certain circumstances, you have the right to restrict the processing of your personal data. Please note that if you request that your data processing be restricted, it may affect your ability to receive our services and purchase goods. To exercise the aforementioned rights, please submit a written application to us.

- Data Portability

You have the right to receive or transfer your personal data to another controller. This right only includes the data you have provided to us based on your consent or contract, and if the processing is carried out by automated means. To exercise the aforementioned rights, please submit a written application to us.

What Law Governs the Operation of the Website?

The operation of the website, as well as all relations between you and the Company, are governed by the laws of the Republic of Latvia, as well as the relevant applicable European Union laws.

Whom Can I Contact If I Have Any Questions?

If you have any questions, comments, or requests regarding the privacy policy or the processing of your personal data, please contact the Company.

If you are not satisfied with the response received, you have the right to submit a complaint to the supervisory authority – Data State Inspectorate (www.dvi.gov.lv).

- Controller's Contact Information

To contact us, you can write an email to info@gumi.lv or to the postal address: SIA "GUMI", address: Tīraines iela 15A, Riga, LV-1058, phone: (+371) 28086999.

Update date: 15.11.2024.