Privacy Policy

1. General Provisions

1.1. This Privacy Policy describes how SIA “Pixie Garden”, Reg. No. 40203615533, registered address: Vītolu Street 8–20, Salaspils, LV–2169 (hereinafter referred to as the “Data Controller”), collects, processes, and stores personal data obtained by the online store www.pixiegarden.eu (http://www.pixiegarden.eu/)
from its customers and visitors (hereinafter referred to as the “Data Subject” or “You”).

1.2. Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, such as collection, recording, organization, use, viewing, deletion, or destruction.

1.3. The Data Controller complies with all data protection principles and confirms that personal data is processed in accordance with the applicable legislation of the Republic of Latvia and the European Union.

2. Collection, Processing, and Storage of Personal Data

2.1. Personally identifiable information is collected, processed, and stored by the Data Controller primarily through the website www.pixiegarden.eu (http://www.pixiegarden.eu/)
and by e-mail.

2.2. By visiting and using the services offered on our website, you agree that any information you provide will be used and processed according to this Privacy Policy.

2.3. The Data Subject is responsible for ensuring that the submitted personal data is accurate and complete. Knowingly providing false information constitutes a violation of this Privacy Policy. The Data Subject must promptly inform the Data Controller of any changes to the submitted personal data.

2.4. The Data Controller is not responsible for any losses incurred by the Data Subject or third parties due to the submission of false or inaccurate personal data.

3. Processing of Customer Personal Data

3.1. The Data Controller may process the following types of personal data:

Name and surname

Contact information (e-mail address and/or phone number)

Delivery address

Transaction data (purchased products, price, payment information, etc.)

Any other information submitted when using the services offered on the website or when contacting us

3.2. The Data Controller may verify the accuracy of the provided data using publicly available registers.

3.3. The legal basis for processing personal data is Article 6(1) (a), (b), (c), and (f) of the General Data Protection Regulation (GDPR).

3.4. The Data Controller stores and processes the personal data of the Data Subject as long as at least one of the following conditions applies:

The data is necessary for the purpose for which it was collected;

The Data Controller or Data Subject may pursue their legitimate interests in accordance with the law;

There is a legal obligation to store the data (for example, under the Accounting Law);

The Data Subject’s consent to the processing of personal data is valid.

Once these conditions cease to exist, all related personal data is permanently deleted or anonymized.

3.5. To fulfill its obligations, the Data Controller may share your personal data with cooperation partners and data processors performing tasks on behalf of the Data Controller (for example, accountants, courier services, etc.).
Payment processing is provided by the payment platform makecommerce.lv; therefore, our company transfers the personal data necessary for payment execution to the platform owner – Maksekeskus AS.
Upon request, personal data may also be transferred to state and law enforcement authorities to protect legal interests.

3.6. The Data Controller implements organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, or any other illegal processing.

4. Rights of the Data Subject

4.1. According to the General Data Protection Regulation (GDPR) and Latvian legislation, you have the right to:

Access your personal data and receive information about its processing;

Request correction of inaccurate or incomplete personal data;

Request deletion of your personal data (“right to be forgotten”), except where data retention is required

by law;

Withdraw your previously given consent;

Restrict the processing of your personal data;

File a complaint with the Data State Inspectorate (Datu valsts inspekcija).

Requests related to your rights can be submitted electronically by writing to pixiegardenbaltic@gmail.com (http://www.pixiegarden.eu/)
.

5. Final Provisions

5.1. This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the laws of the Republic of Latvia.

5.2. SIA “Pixie Garden” reserves the right to amend this Privacy Policy at any time without prior notice.
Any updates take effect upon publication on www.pixiegarden.eu
.

contact the Consumer Rights Protection Centre or the EU Online Dispute Resolution platform at https://ec.europa.eu/consumers/odr
.