Privacy Policy

This Privacy Policy provides information on how we collect, use, store, and process your personal data. Therefore, please read this Privacy Policy carefully before you start using the services of SIA “KnK Mefab.”

By registering or otherwise using the SIA “KnK Mefab” website, you will need to confirm that you have read and understood this Privacy Policy.

Definitions Used:

– Personal Data: Any information relating to an identified or identifiable natural person.
– Data Subject: An identified or identifiable natural person (hereinafter referred to as the Client).
– Profiling: Automated processing of personal data, which involves using personal data to evaluate certain personal aspects related to a natural person.
– Controller: SIA “KnK Mefab.”
– Processor: A natural or legal person who processes personal data on behalf of the controller SIA “KnK Mefab.”
– Third Party: A natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons authorized to process personal data under the direct authority of the controller or processor.
– Data Subject’s (Client’s) Consent: A freely given, specific, informed, and unambiguous indication by the Client, expressed in a statement or clear affirmative action, signifying agreement to the processing of their personal data.
– Cookies: Text files stored on the user’s device to customize the usability of the SIA “KnK Mefab” website for each specific user.

General Provisions

1.1. SIA “KnK Mefab” is committed to protecting and respecting your privacy. We do our utmost to ensure that our processing of personal data complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1.2. Your personal data controller is SIA “KnK Mefab,” unified registration number: 41203051814, legal address: Jaunkūlu iela 21, Ādaži, LV-2164, phone number: +371 25549027.

1.3. Your personal data processors are legal entities that process personal data on behalf of SIA “KnK Mefab” in accordance with its instructions and are committed to complying with regulatory requirements in the field of data processing.

1.4.1. In processing personal data, the Controller:

1.4.1. Ensures the lawfulness and fairness of personal data processing;
1.4.2. Respects the rights of the Client;
1.4.3. Provides transparent information to the Client that their personal data is collected, used, viewed, or otherwise processed, and to what extent the personal data is or will be processed, specifying the specific purposes of processing;
1.4.4. Ensures that personal data is adequate, relevant, and necessary for the purposes for which it is processed. The Controller processes only such data and to such an extent that corresponds to the Controller’s economic activity to ensure the provision of services/product sales.
1.4.5. Ensures that personal data is not stored longer than necessary, i.e., as long as the contract with the Client is in force, as long as the Controller or the Client can exercise their legitimate interests in accordance with external regulatory acts, as long as one of the parties has a legal obligation to store the data, or as long as the Client’s consent to the relevant processing of personal data is valid, unless there is another legitimate basis for data processing. After the personal data retention period has expired, the personal data is irreversibly deleted.
1.4.6. Ensures that personal data is accurate, ensuring that inaccurate personal data is corrected or deleted.
1.4.7. Ensures that personal data is processed in a manner that ensures adequate security and confidentiality, including preventing unauthorized access to or unauthorized use of personal data and unauthorized access to systems and equipment used for data processing.
1.4.8. Ensures that personal data is not transferred without secure and adequate protection.

Legal Bases for Personal Data Processing

2.1. Your personal data is processed based on the following legal grounds:

– Article 6(1)(a) of the General Data Protection Regulation – when your consent has been obtained;
– Article 6(1)(b) of the General Data Protection Regulation – to fulfill a contract;
– Article 6(1)(c) of the General Data Protection Regulation – to ensure compliance with a legal obligation;
– Article 6(1)(f) of the General Data Protection Regulation – to protect our or third parties’ legitimate interests.

2.2. If you choose not to provide personal data in part or withdraw your consent in full or in part (for specific provided data), SIA “KnK Mefab” will not be able to provide the Client with the services that require the respective personal data.

Personal Data and Their Processing Purposes

3.1. The Controller processes personal data for the following purposes:

– 3.1.1. Client identification;
– 3.1.2. Preparation and conclusion of a contract;
– 3.1.3. Delivery of goods and provision of services (contract performance);
– 3.1.4. Advertising and distribution of services for commercial purposes;
– 3.1.5. Client service;
– 3.1.6. Creation and management of the Client’s profile;
– 3.1.7. Handling and processing of complaints;
– 3.1.8. Improving the operation of the website;
– 3.1.9. Statistics and market research;
– 3.1.10. Ensuring security.

3.2. The Controller processes the following personal data:

– 3.2.1. Registration data processing – name, surname, email, password.
– 3.2.2. Delivery data processing – name, surname, email, mobile phone, address.
– 3.2.3. Cookies – Client’s browsing history and behavior on the Controller’s website.
– 3.2.4. Accounting data processing – order history, payment information, delivery information.
– 3.2.5. Marketing information – name, surname, phone number, email address, device identification number.
– 3.2.6. Claims rights – name, surname, contact information, order and delivery information.

3.3. The processing of personal data for commercial purposes is carried out only if the Client has freely given, specific, informed, and unambiguous consent to such actions. The Client may object to receiving commercial communications in accordance with legal requirements, by not giving their consent to receive commercial communications (for more information about commercial communications, see Section 6 of the Rules).

3.4. Personal data processing may be carried out in an automated manner, including profiling the Client to provide new, special, individual offers from the Controller to a specific client, considering the information obtained by the Controller and automatically compiled from the personal data provided by the client and previous purchases on the Controller’s website, if the client has agreed to this.

3.5. The Controller may make automated decisions regarding the Client if the Client has freely given, specific, informed, and unambiguous consent to such actions. The Client may object to automated decision-making in accordance with legal requirements by not giving their consent to the automated processing of personal data.

3.6. The Controller makes automated decisions, for example, to prepare and place commercial communications (pop-up banners) on the website to advertise products available on the website and help Clients make their choices from the offered products, including based on the information provided in commercial communications (pop-up banners) about preferred products. By agreeing to the automated processing of personal data for this purpose, the Client agrees that the Controller will use information about the products purchased on the website to place commercial communications (pop-up banners) on the website, which will indicate the following data: information about the purchased product, the product image from the website, and anonymized information about the person who purchased the specific product, indicating, for example: “A customer from Riga just purchased… (information about the product according to the above).”

3.7. The Controller makes automated decisions to send the Client a reminder about the products placed in the shopping cart on the website in the Client’s profile.

3.8. The Controller makes automated decisions to request the Client to submit a review of a product, which is included in the statistics on product evaluation without identifying the Client.

3.9. Opting out of receiving commercial communications does not have legal consequences for the Client and does not limit the Client’s rights to purchase goods and services on the website.

3.10. Opting out of automated data processing for the purposes mentioned in the rules does not have legal consequences for the Client and does not limit the Client’s rights to purchase goods and services on the website.

Personal Data We Share with Third Parties

4.1. We may share the Client’s personal data with the following categories of data recipients:

– 4.1.1. Financial operations related to the purchase of goods on the website may be processed by the Controller’s payment service providers. We disclose the Client’s financial transaction data to the payment service providers to the extent necessary to process payment transactions, refund money, and handle complaints.
– 4.1.2. To provide specific services, we may share the Client’s personal data with other service providers, such as website hosting service providers, courier services, server and technical maintenance service providers, email service providers, and accounting service providers.

4.2. We may share the Client’s personal data not only in the cases mentioned above but also to fulfill our legal obligations, as well as if it becomes necessary to protect the interests of the Client or other persons, for example, by going to court or public authorities.

4.3. We may share the Client’s personal data with public authorities in accordance with the applicable laws of the Republic of Latvia, in the manner and extent prescribed by the regulations.

4.4. For direct marketing purposes, with the Client’s consent, we may share personal data with our partners who provide us with marketing services.

4.5. We will only engage service providers who have implemented appropriate technical and organizational measures to ensure an adequate level of data processing security that ensures the procedures specified in the regulations – a level of personal data processing and protection equivalent to the requirements set by the General Data Protection Regulation.

4.6. In certain cases, in accordance with regulatory requirements, personal data may be accessed by partners of the Controller located in third countries (i.e., countries outside the European Union and the European Economic Area) as processors of personal data.

4.7. In the cases mentioned in point 4.6, the Controller’s partners in third countries ensure a level of data protection equivalent to that ensured by the Controller.

Cookies

5.1. The website may use cookies. The cookie usage policy is available here.

Commercial Communications

6.1. A commercial communication is any electronic communication intended for the direct or indirect promotion of goods or services or the image of a merchant, organization, or person engaged in commercial, economic, or regulated professional activities. Information that allows direct access to general information about the service provider and its activities (domain name or email address) is not considered a commercial communication.

6.2. To provide information about services, promotions, and other activities offered on www.knk.lv, the Controller may use personal data.

6.3. By using www.knk.lv, you can subscribe (give your consent) to receive commercial communications.

6.4. The Client’s consent to receive commercial communications remains valid until it is withdrawn (including after the termination of the service agreement). The Client can unsubscribe from receiving further commercial communications in one of the following ways:

– 6.4.1. By making the appropriate mark in your user profile on www.knk.lv;
– 6.4.2. By sending an email to info@mefab.lv;
– 6.4.3. In person at the point of sale;
– 6.4.4. By using the automated option provided in the commercial communication to opt out of receiving further communications by clicking the unsubscribe link at the end of the respective commercial communication (email).

6.5. SIA “KnK Mefab” will stop sending commercial communications as soon as the Client’s request is processed. Processing the request depends on technological capabilities, which may take up to three days.

Your Rights

7.1. The right to receive information about personal data processing;
7.2. The right to access your personal data that we hold;
7.3. The right to request the correction of your personal data that we hold (most of which you can correct by logging into your account);
7.4. The right to request the deletion of your personal data (“the right to be forgotten”);
7.5. The right to restrict the processing of your personal data;
7.6. The right to object to the processing of your personal data;
7.7. The right to object to the processing of your personal data for direct marketing purposes;
7.8. The right to object to automated processing of your personal data;
7.9. The right to data portability;
7.10. The right to withdraw your consent to the processing of your personal data;
7.11. The right to file a complaint with a supervisory authority;
7.12. If you wish to exercise your rights or have any questions about personal data processing or the exercise of your rights, please contact us by email.

7.13. If you believe that by processing your personal data, we are violating the laws governing personal data protection, you have the right to file a complaint with the Data State Inspectorate at Elijas iela 17, Riga, LV-1050, https://www.dvi.gov.lv/lv/. In all cases, please contact us first to find a suitable solution together.

Consent and Changes to the Privacy Policy

8.1. By using the online store www.knk.lv and/or participating in www.knk.lv activities, the Client confirms their consent to the processing of personal data.

8.2. The withdrawal of consent does not affect data processing carried out during the time when the Client’s consent was valid.

8.3. Withdrawal of consent cannot terminate data processing based on other legal grounds.

8.4. Upon receiving a Client’s request to exercise their rights, the Controller verifies the Client’s identity, evaluates the request, and fulfills it in accordance with the regulations.

8.5. The Controller sends a response to the Client by mail to their provided contact address via registered letter or by electronically signed response via email upon the Client’s request, taking into account the Client’s preferred method of receiving the response.

8.6. The Controller ensures compliance with data processing and protection requirements in accordance with the regulations, and in the event of a Client’s objection, takes appropriate actions to resolve the objection. However, if this is unsuccessful, the Client has the right to approach the supervisory authority.

8.7. The Controller reserves the right to unilaterally change and supplement the Privacy Policy at any time without prior notice, by publishing the changes in the Privacy Policy section on www.knk.lv.

Contacting Us

9.1. To improve the quality of our services, we always want to hear feedback from our clients and are ready to answer any questions that may arise.

9.2. You can contact us using any convenient method listed in the Privacy Policy or in the Contact section on the website www.knk.lv.