We at MARENCE greatly value our Customers and the data they entrust to us when they shop in our online shop.
We take care of both the safety of our products and the security of the shopping process. In this Privacy Policy you can read how, and for what purposes, our Customers’ data is processed.
The terms used in this Privacy Policy have the meanings given to them in the Terms, unless stated otherwise. Please note that certain sections of this Privacy Policy may not apply to the particular Service the Customer receives.
1. What personal data does MARENCE process?
MARENCE mainly processes two types of Personal Data: data needed to create a Profile, and data needed to perform the Contract (the information shown on the Invoice). We process the Personal Data that the Customer provides to us through various online or offline sources, including when the Customer uses the Website or the App we have created, contacts us via social networks, takes part in loyalty programmes or provides data in other ways.
The Personal Data needed to create and maintain a Profile is the data included in the Profile. It may include, for example, the Customer’s first name, surname, contact details, information about saved Products and the Customer’s interests.
The Personal Data needed to conclude and perform the Contract is the data included in the Contract and the Invoice. It may include, for example, the Customer’s first name, surname, contact details, payment information, Contract details (the Products purchased, their quantity, price and time of purchase), and communications between the Customer and MARENCE relating to the Order.
2. Where and how does MARENCE use personal data?
This section of the Privacy Policy describes the purposes for which the Customer’s Personal Data is processed and gives other information about that processing.
2.1. Use of cookies
We use cookies on the Website to process technical data for the purposes of providing services and maintaining the Website and the App. This data includes the address of the network server used by the Customer, the domain name, the browser used, the IP address, the settings selected and the actions taken on the Website or in the App.
Cookies are small text files that a web browser (for example, Internet Explorer, Google Chrome, Firefox or Safari) stores on the Customer’s computer or mobile phone. A cookie does not directly contain personal information about the Customer and cannot be used to identify individual users directly, but it may provide information about the Customer’s habits and preferences. Cookies can be seen as a way of giving a website a memory, which allows it to recognise the user and respond accordingly.
In most browsers, the Customer can indicate that they do not wish to receive any cookies, or that they do not wish to receive cookies from a particular website. All modern browsers allow cookie settings to be changed. These settings are usually found in the browser’s options or preferences menu.
We use Google Analytics services. The Customer can opt out of these services by downloading and installing the Google Analytics Opt-out Browser Add-on.
For general information about cookies and how to manage them, please visit www.aboutcookies.org.
2.2. Use of personal data to provide the Service
2.2.1. Entering into and performing the contract
To provide the Service under which the Contract with the Customer is concluded and performed, we process the Personal Data needed to conclude and perform the Contract, including information needed to resolve any problems that may arise in performing it.
The processing of Personal Data is based on the conclusion and performance of the Contract, on the protection of the interests and rights of both parties (the Customer and MARENCE) in the event of a dispute, and on the fulfilment of commercial and accounting obligations.
If the Customer does not provide their Personal Data where its processing is necessary to conclude and perform the Contract or is required by law, we cannot provide the Services.
2.2.2. Creating and maintaining the Profile
To create and maintain the Customer’s Profile on the Website, which is used as a channel of communication for providing the Services, we process the Personal Data needed for this purpose, including the products the Customer has saved and the interests they have indicated. When a Profile is created, the only mandatory information is the information needed to create the Profile, place an Order and conclude the Contract.
The processing of Personal Data is based on the conclusion and performance of the Contract and on the protection of the interests and rights of both parties (the Customer and MARENCE) in the event of a dispute. Profile data serves as confirmation of the actions the Customer has taken. Information that the Customer is not required to provide is processed on the basis of their consent, which they may withdraw at any time, including by deleting that information from the Profile.
2.3. Using personal data for marketing
On the basis of the Customer’s consent, which they may withdraw at any time, we may send the Customer marketing communications by email about our promotions, news and other matters not related to the performance of the Contract or the provision of the Services.
When preparing marketing communications, we use profiling to put together the offer best suited to the Customer, based on Service data, namely which of our Services the Customer has used before and/or which Products they have bought.
We process the Customer’s Personal Data until the Customer withdraws their consent to receive marketing materials, or until evidence of the consent received no longer needs to be kept. If the Customer withdraws consent, we stop sending them communications, but we may keep evidence that they gave consent.
Withdrawing consent to receive marketing communications does not affect consent to the processing of information obtained through cookies.
3. What data can MARENCE share with third parties?
Information that the Customer provides to us is not made available to Third Parties unless there is a legal basis for such disclosure. We may transfer the Customer’s Personal Data to Third Parties that provide, for example, postal, delivery, accounting and IT services. In certain cases we may be required to disclose the Customer’s Personal Data to Competent Authorities in response to a justified request made under the laws of the Republic of Latvia.
For all the purposes for which it is processed, the Customer’s Personal Data is received and processed by MARENCE and by our partners, which, in addition to those mentioned above, provide communication, banking, legal and other services. As stated above, in cases provided for by law MARENCE is obliged to disclose the Customer’s Personal Data to Competent Authorities.
We wish to stress that we do not transfer the Customer’s Personal Data to public authorities or Third Parties without an appropriate legal basis. MARENCE guarantees that the processors of the Customer’s Personal Data that it engages in providing the Services comply with security standards no lower than those we have set.
4. How long does MARENCE keep personal data?
All information relating to the Customer is kept as evidence of the Customer’s identity, the conclusion of the Contract and the provision of the Services, and is stored until the Contract has been performed, the Personal Data is no longer needed for providing the Services, the retention period for Personal Data laid down in the legislation applicable to MARENCE is reached.
To retain evidence of the conclusion and performance of the Contract, we keep the Customer’s Personal Data for at least 3 (three) years from the time the Contract is performed or terminated. We may keep certain Personal Data or information for longer in order to comply with other legal obligations imposed on us by Competent Authorities or to exercise our rights.
For accounting purposes, we keep the Customer’s Personal Data relating to the Contract concluded and performed and to the provision of the Services for at least 5 (five) years after the date on which the Contract was performed or the Service was provided.
We keep information about the Customer’s consent to the processing of Personal Data as evidence for at least 5 (five) years from the time the consent is withdrawn, in accordance with the Personal Data Processing Law.
5. Where and how is my personal data stored?
We store Personal Data in the European Economic Area (EEA), which is regarded as a safe location and provides a level of security that meets our standards. All information that the Customer has provided to us is stored securely on our servers or on servers under our control. This information is encrypted and protected by technical means, which makes the data more secure.
We ensure that access to the Customer’s personal information is granted only to persons directly involved in performing the Contract or providing the Services, and only to the extent necessary for them to perform their duties. This is achieved through technical solutions and physical access rights, and through appropriate training and instruction of our employees who carry out the relevant security measures.
6. What are my rights?
We respect the Customer’s rights to access, manage, rectify, control and erase the Personal Data that MARENCE processes about them. MARENCE allows the Customer to rectify certain Personal Data through the Website. In this way the Customer can rectify and delete the information held in their Profile. If the Customer does not wish to make changes to the Profile themselves, or wishes to rectify or erase Personal Data not linked to the Profile or exercise other rights in respect of it, the Customer may submit a request to us as described in this section.
When we receive a request from the Customer to exercise any of the rights listed below, we review it and respond without undue delay and in any event within 1 (one) month of receiving it.
If the Customer wishes to exercise any of the rights listed below, they may do so by submitting a request in one of the following ways:
- by sending a request signed with a secure electronic signature to [email protected];
- by sending a signed request to Dārznieku iela 42, Ķekava, Latvia, LV-2123.
We reserve the right to ask the Customer for additional information in order to verify their identity and to protect the Customer’s Personal Data from disclosure to unauthorised persons. The Customer is entitled to access their Personal Data free of charge.
The Customer has the right to obtain information on whether or not we process their Personal Data and, if we do, to request a copy of the Personal Data we hold about them, together with information on how the data is processed.
The Customer is entitled to ask us to rectify inaccurate or incorrect Personal Data about them. We allow the Customer to rectify their Personal Data on our Website, although not all Personal Data can be rectified in this way. We will check whether the rectified Personal Data is true and accurate.
The Customer has the right to ask us to erase their Personal Data; however, we reserve the right to refuse a request for erasure where there is a lawful reason for doing so, for example to comply with a specific legal obligation that requires the processing, to establish, exercise or defend legal claims, or for statistical purposes, subject to appropriate technical and organisational security measures.
The Customer is entitled to ask us to restrict processing where there are legal grounds for this. Where processing of the Customer’s Personal Data is restricted, MARENCE processes it only with the Customer’s consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons relating to important interests of MARENCE. This does not apply to the storage of Personal Data.
The Customer is entitled to object to the processing of Personal Data in connection with direct marketing, or to processing based on our legitimate interest where, in view of their particular situation and important reasons, the Customer wishes to object to such processing on the grounds of that particular situation or important reason.
The Customer is entitled to request that we receive the Customer’s Personal Data and transmit it to the Customer or to another controller. The Customer may exercise this right to the extent that they have provided the data on the basis of consent or the Contract and the processing is carried out by automated means. This right also covers data such as activity history and website usage history. However, it does not apply to data that we create, for example Customer profiles built by analysing data.
The Customer has the right to withdraw previously given consent at any time. However, this does not affect the lawfulness of processing carried out before the consent is withdrawn. This right applies to receiving marketing communications from us.
If anything about the processing of their Personal Data is unclear, the Customer may contact us, and we will try to answer or find a solution. However, if the Customer is convinced that we cannot find a solution, they are entitled to lodge a complaint with the national data protection authority about the data processing carried out by MARENCE.
Contact details of the national data protection authority of the Republic of Latvia:
Data State Inspectorate (Datu Valsts Inspekcija), Blaumaņa iela 11/13-15, Rīga LV-1011, Latvia, tel.: +371 67223131, email: [email protected].
The Customer may contact us at any time to obtain further information about the processing activities.
We can be contacted in any of the following ways:
- address: Dārznieku iela 42, Ķekava, Latvia, LV-2123;
- email address: [email protected].
7. What rights does MARENCE have regarding this privacy policy?
We have the right to amend the Privacy Policy at any time by publishing the changes on the Website. Any version of the Privacy Policy published on the Website replaces all previous versions and takes effect immediately on publication.
Current version: 10.11.2020.