Privacy Policy

SIA "Smalora," registration number: 40203405792, legal address: Ogre Municipality, Ogre, Jaunatnes iela 6, LV-5001 (hereinafter referred to as "Smalora"), has undertaken the responsibility to protect the privacy of its clients.  

In accordance with this, we have prepared the principles of the Privacy Policy, which relate to the acquisition, use, disclosure, transfer, and storage of client personal data.  

Our activities on the internet are carried out in accordance with the laws of the Republic of Latvia, as well as relevant European Union legislation. Please take a few minutes to familiarize yourself with our Privacy Policy principles.  

Legal basis for processing personal data  

Smalora processes Client's personal data based on the following legal grounds:  

• for the conclusion and execution of contracts - to conclude a contract upon the Client's application and ensure its execution;  

• for compliance with regulatory requirements - to fulfill obligations specified in binding external regulatory acts;  

• with the consent of the Client - the data subject's consent;  

• in the legitimate interests - to realize existing obligations between Smalora and the Client, or legitimate interests derived from the contract or law of Smalora.  

Smalora's legitimate interests are:  

• to conduct commercial activities;  

• to verify the Client's identity before concluding a contract;  

• to ensure the performance of contractual obligations;  

• to retain records of Client orders for goods and services, as well as notes on them (e.g., verbal or written);  

• to analyze the operation of Smalora's website;  

• to administer the Client's account with Smalora;  

• to advertise its goods and services by sending commercial communications;  

• to send messages about the progress of applications and purchase contracts;  

• to prevent fraud;  

• to administer purchases, payments, and orders;  

• to inform the public about its activities.  

Purposes of processing personal data  

3. Smalora processes personal data for the following purposes:  

to identify the client;  

for the preparation and conclusion of contracts;  

for the delivery of goods and the provision of services (fulfillment of contractual obligations);  

for advertising and distribution of goods for commercial purposes;  

for customer service;  

for handling and processing objections;  

for managing settlements;  

for improving website performance.  

Data processing  

4. Smalora processes Client data using modern technology capabilities, taking into account existing privacy risks and available organizational, financial, and technical resources.  

In order to ensure the qualitative and operational fulfillment of obligations under the contract concluded with the Client, Smalora may authorize its partners to perform certain activities related to the delivery of goods or provision of services, such as delivery of goods, leasing services, sending commercial messages, and the like. In carrying out these tasks, Smalora's partners process the Client's personal data and are considered data processors on behalf of Smalora (processors), and Smalora has the right to transfer to its partners the Client's personal data necessary for the performance of these activities.  

Smalora's partners (in the status of data processors) ensure compliance with the requirements for the processing and protection of personal data in accordance with the concluded Data Processing Agreement and legislation, and do not use personal data for purposes other than the performance of obligations under the contract concluded with the Client on behalf of Smalora.  

Smalora does not disclose the Client's personal data to third parties except in the following cases:  

• if the data need to be transferred to the relevant third party within the framework of a concluded contract (e.g., for the delivery of goods);  

• if the Client has given clear and unambiguous consent;  

• to persons specified in external regulatory acts upon their reasonable request, in the manner and to the extent specified in external regulatory acts;  

• in cases specified in external regulatory acts for the protection of Smalora's legitimate interests.  

Storage of personal data occurs for as long as:  

• the contract concluded with the Client is in force;  

• in accordance with external regulatory acts, Smalora or the Client may realize their legitimate interests;  

• there is a legal obligation to retain data;  

• the Client's consent to the relevant processing of personal data is in force, if there is no other lawful basis for data processing.  

Access to personal data and other Client rights  

8. The Client has the right to request the cessation of processing of his personal data, request information about the purposes for which his personal data are used, as well as request the transfer of his personal data in a widely used format to himself or third parties. To prevent misuse of client data and rights, the application can only be submitted in a form that allows identification of the persons submitting the application, identity (the application must be digitally signed or submitted in person to Smalora). We have the right to respond to such applications within 30 days.  

A request to cease data processing is considered as an application for termination of the permanent client contract.  

Communication with the Client and commercial notifications  

9. Smalora communicates with the Client using the contact information provided by the Client (telephone number, email address).  

Communication regarding the fulfillment of service contract obligations is carried out by Smalora on the basis of the concluded contract (e.g., coordination of delivery times, information about purchases and invoices, status of leasing applications, etc.).  

Website visits and cookie processing  

11. Smalora's website uses cookies.  

Links to third-party websites with their own terms of use and personal data protection rules may be placed on Smalora's websites, for which Smalora is not responsible.  

Other provisions  

We assume that before using our website or filling out a request to become a permanent client, you have read our Privacy Policy principles and terms and have accepted them. We reserve the right to make changes to the main conditions of the Privacy Policy, informing all permanent clients about it. However, we make every effort to ensure that the Privacy Policy is always updated and available to you on our website.  

For any questions or problems related to the Privacy Policy or data processing, as well as in cases where a client wishes to opt-out of receiving commercial communications or completely delete their data from their profile, please contact us using the email address: [email protected] 

You have the right to contact the Data Protection Inspectorate or the court at any time for the protection of your data. The Data Protection Inspectorate is a state authority where you can also seek advice or assistance regarding the protection of personal data.