Privacy policy of the online store of natural cosmetics ZAptieka
The purpose of this privacy policy of ZAptieka SIA (Limited Liability Company), hereinafter referred to as Zaptieka (hereinafter referred to as We or the Company) is to provide you (the data subject) with information on the legal and factual basis for processing your personal data, respectively, information about the purpose, scope, protection of the processing of personal data, as well as other information about the processing of personal data (hereinafter referred to as the Policy). We ask you to carefully read this Policy and if you have any additional questions, we encourage you to contact us using the contact information provided in this Policy.
We draw your attention to the fact that this Policy can be changed, supplemented, updated, about which We will inform you by posting this information on our website.
We respect your privacy, so protecting your personal data is our priority. We use appropriate organizational and technical means to ensure the continued protection of your personal data and the compliance of data processing with the current data processing regulatory enactments, as well as with the requirements of our internal rules.
We comply with the requirements of the current regulatory enactments on the protection of personal data and during each subsequent data processing, we try to collect only the information that is necessary to comply with the specific purposes in this Policy. We comply with the principle of minimizing personal data, which means that we ask you to provide only the amount of personal data that is necessary for us to provide the best quality services, and only the amount of personal data that you agree to provide to us.
We make every effort to ensure that your personal data entrusted to us are protected. Our goal is to ensure the protection of your data and personal information in accordance with the highest standards for the protection of confidential data.
GENERAL PROVISIONS
By deciding to make a purchase on a public website promoting the distribution of goods www.zaptieka.com, hereinafter referred to as the online shop, you entrust us with your data and allow us to process them in accordance with this Policy and these rules and procedures of the online pharmacy, hereinafter referred to as the Rules.
In order to be able to provide you with services and sell goods in the online shop, we need to process personal data in the ways specified in this Policy. If you do not agree with these Rules, this Policy or any part of this Policy, we ask you not to provide your personal information. In this case, unfortunately, we will not be able to provide you with the opportunity to use the services of the Zaptieka website.
DEFINITIONS USED IN THIS POLICY
Purchase history data – information about your purchases/orders made in the online pharmacy. These data include the specific goods you purchased, including information about the goods purchased, their quantity, total price, and other information related to the purchase transaction.
Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Other terms used in this Policy, unless otherwise specified in the Policy, coincide with the terms used in these Rules (available at the legal address of Zaptieka, Terbatas iela 59/61 , LV-1001, Riga, Latvia and on the website www.zaptieka.com).
1. CONTROLLER AND ITS CONTACT INFORMATION
1.1.Personal data controller is ZAptieka Limited Liability Company, legal address Terbatas iela 59/61 , LV-1001, Riga, Latvia, email: This email address is being protected from spambots. You need JavaScript enabled to view it., telephone: +371 296 27 092
1.2.Contact details of the data protection officer: tel. +371 296 27 092, e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.. Please be informed that the mentioned e-mail address is not provided for requests for information as an exercise of your rights as a data subject, in this case you need to write to the address: Terbatas iela 59/61 , LV-1001, Riga, Latvia.
2.WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?
Below is a list of personal data that We may collect and process. You can familiarize yourself with the purposes and type of personal data that we process in your specific case by reading the following list. In certain cases, We may process special categories of your personal data related to your health (for example, data on your purchase history and data that you provide to us when you receive pharmaceutical services from us).
2.1.ORDERING GOODS
Using the services of the ZAptieka website without registration and agreeing to these Rules and the Policy, you can provide us with the data shown in the following table. The provision of certain data in the online pharmacy is mandatory, and if such data are not provided, We will not be able to provide you with the services of the ZAptieka website. By registering, you confirm that the personal data you provided are accurate and correct, and that you have reached the age of 16.
The data are provided when ordering goods and fulfilling the order. | |
|---|---|
The data provided when ordering goods, hereinafter referred to as the Goods delivery data. |
When choosing home delivery:
When choosing in-shop delivery: the shop from the list. All fields are required to be completed for fulfilment of your orders. Without providing this information, you will not be able to purchase goods. |
Information about the placement and fulfilment of orders for the Goods. |
|
Other information | Information on the payment and the goods that you or third parties provide to us, such as a bank account number. |
Legal basis for processing | Your consent to use the ZAptieka online shop in accordance with these provisions of the Rules and the Policy. |
Information on the placement and fulfilment of orders for the Goods must be processed in order to conclude and fulfil the terms of the transaction, to draw up the primary document. | |
It is necessary to process the data in accordance with the legitimate interests of the Company. | |
Processing time | When using the services of the online shop ZAptieka – up to 5 years from the day of receipt of your order. We can store the consent accepted from you, as well as other personal data, if necessary, for a longer time in the cases specified by the current regulatory enactments in order to protect Us from the stated claims against us. |
HOW AND FOR WHAT PURPOSES DO WE USE THE INFORMATION ON PLACEMENT AND FULFILMENT OF YOUR ORDER?
According to the information you provide when making purchases, you give us the opportunity to make sure that your order will be successfully placed and fulfilled.
We also use the contact information you provided (e-mail, telephone number) to contact you, including to answer your questions, comments, fulfil an order, as well as provide you with important information about the ZAptieka online shop, its rules and/or making changes to this Policy, to communicate with you and provide adequate quality services, pharmaceutical services, etc.
In order to accept and fulfil your order, We process the previously mentioned personal data about you.
It is very important that the data provided by you during registration, purchase without registration and other specified data are accurate and correct. If you specify incorrect information, forget or do not update the changed data, we may have problems with providing the full package of services of the online shop, as well as there may also be delays in your receipt of available discounts or in the exercise of your rights.
To update your registration data, familiarize yourself with Clause 6.2 of this Policy.
We will not be able to verify the accuracy and reliability of the information you provide. By accepting your purchase without registration, We will assume that your data are accurate and correct and that your consent was given by you voluntarily after familiarization with this Policy and the Rules.
2.2.PROCESSING OF PURCHASE HISTORY DATA
By providing you with the opportunity to take advantage of the ZAptieka online shop in accordance with the concluded sales contracts referred to in these Rules (for the proper fulfilment of your orders), We process your purchase history data.
Purchase history data: | |
|---|---|
Data | Date and time of your purchase, names of goods (including information about purchased medicines), quantity, total purchase price (after all discounts), amount of included discounts, order status, type of payment, your customer status (for example, a new customer). |
Legal basis for processing | Your consent to use the ZAptieka online shop in accordance with these provisions of the Rules and the Policy. To comply with the legitimate interests of ZAptieka, by providing the most suitable offers for you, according to your needs. The rationale for processing special categories of personal data is set out in Article 9 (2) (a) of the Regulation. |
Processing time | Three months from the date of purchase with or without registration. We can store the consent accepted from you, as well as other personal data, if necessary, for a longer time in the cases specified by the current regulatory enactments in order to protect Us from the stated claims against us. |
HOW DO WE USE YOUR PURCHASE HISTORY DATA?
- PROCESSING OF PURCHASE HISTORY DATA
We process your purchase history data when administering the online shop in order to correctly fulfil your orders or other types of requests related to ordered goods (for example, returning goods, checking the correct delivery of goods, etc.).
In the event that you make purchases in the online shop without registration, We process and administer the data of your purchase history within the previously mentioned processing time to ensure the proper fulfilment of orders.
- SERVICE OF CUSTOMER REQUESTS, COMPLAINTS, QUESTIONS AND ANSWERS
By sending us inquiries, complaints, requests or responses by telephone, e-mail or through the website (hereinafter referred to as the Request), you also provide us with the personal data contained in the request.
Data of requests | |
|---|---|
Data | Your identification information provided by you:
Content of your Request. Other documents submitted with the Request, and/or data: for example, the number of the purchase receipt, images, data about your health or the products used, if you specify them, etc. |
Legal basis for processing | Your consent provided to us when making the Request. The rationale for processing special categories of personal data is set out in Article 9 (2) (a) of the Regulation. After receiving your e-mail or online correspondence, if its content is not related to the protection of personal data, ZAptieka has a legitimate interest in processing the e-mail or online correspondence received from you in order to evaluate the information contained therein and provide you with an answer. In the event of a dispute, the information obtained in the process of providing information (response) can be used to represent the facts provided and the content of the response of the relevant person in the trial. After receiving your e-mail or online correspondence, if its content is directly related to the protection of personal data, ZAptieka undertakes to fulfil the legal obligations of the controller, that is, to provide a reasonable and well-reasoned response to the request of the data subject by exercising the rights of the data subject. In the event of a dispute, the information obtained in the process of providing information (response) can be used to represent the facts provided and the content of the response of the relevant person in the trial. |
Processing time | All information obtained in the process of providing information (response), if such information is related to the protection of personal data, will be stored for no more than three months from the day of the response in order to protect the interests of ZAptieka. ZAptieka undertakes to delete the relevant information in accordance with the principle of data minimization after reaching a legitimate interest. In the event that ZAptieka receives complaints about the process of providing specific information (response), all information processed in this process will be retained until the date of entry into force of the final decision on the consideration of the complaint in the competent authority, unless the decision was appealed or contested within the procedure and the period established by the current regulatory enactments, or until the entry into force of the final court decision. |
HOW DO WE USE YOUR DATA TO PROCESS INQUIRIES, COMPLAINTS, REQUESTS AND ANSWERS?
We use the personal data specified when submitting a request only in order to objectively and properly process your request, provide you with the necessary information, answer your questions, requests or requirements. The request data can also be used to protect our legitimate interests (in the event of disputes with our customers, etc.). We may also analyse the request data in order to improve our activities and the quality of the services provided to you based on your opinions and suggestions.
HOW DO WE USE YOUR DATA RECORDED DURING THE PROVISION OF SERVICES?
We store and process your personal data recorded during the provision of services to the extent and within the scope that, in accordance with the requirements of the current legal acts, we can prove that by performing a specific service, you are provided with a service.
3. FROM WHAT SOURCES DO WE OBTAIN YOUR PERSONAL DATA?
We process the personal data that we receive from you: for example, when sending requests; data that you provide during a conversation as part of receiving a service; purchase history data provided by you when purchasing goods in the online shop.
4. IN WHICH CASES AND TO WHICH RECIPIENTS OF DATA DO WE DISCLOSE YOUR
PERSONAL DATA?
We may transfer your personal data to data recipients who help us to provide the services and benefits of the ZAptieka online store, to develop the functionality of the online shop platform. Such persons may be database and software providers, database administration service providers, data centre, hosting and network cloud providers, direct marketing providers, web analytics service providers, online advertising service providers (for example Google, Facebook), call centre service, business analytics service providers, people who help us deliver your orders, organize and run lotteries and games, provide guarantees or other services for the goods you purchase, etc. In each case, We provide the processor with only the amount of personal data that is necessary to achieve a specific purpose in the processing of the relevant personal data.
Data can also be provided to the competent State authorities or law enforcement authorities in accordance with the cases and in the manner prescribed by the current regulatory enactments, for example, data related to the provision of pharmaceutical services can be transferred to the State Agency of Medicines, the Health Inspectorate, etc.
5. IN WHICH TERRITORIES AND IN WHICH JURISDICTIONS DO WE PROCESS YOUR
PERSONAL DATA?
Some of software used in our online shop (for example, e-mail software) may have been created by entities both inside and outside the EU. In particular, since we use the functionality and services of this software, then, accordingly, your data may be available not only for EU entities. We remind you that entities outside the EU may apply less protection to personal data than the EU, however, We will carefully assess the conditions under which such your personal data will be processed and stored after they are transferred to the entities mentioned above.
6. WHAT RIGHTS DO YOU HAVE UNDER DATA PROTECTION LAW AND HOW
CAN YOU EXERCISE THEM?
Data protection regulatory enactments give you rights that you can freely use, in turn it is our responsibility to provide you with this opportunity. We have provided information on your specific rights and the types of exercise of these rights below and we urge you to familiarize yourself with them.
6.1.RIGHT TO FAMILIARIZATION WITH YOUR PERSONAL DATA
TO BE PROCESSED
You have the right to receive our confirmation that We are processing your personal data, as well as you also have the right to familiarize yourself with your processed personal data and information about the purposes of data processing, categories of processed data, categories of data providers, period of data processing, sources of data collection, as well as the significance of the processing and the consequences for you.
Most of this information is provided to you in this Policy, and We hope you find it useful.
6.2.RIGHT TO CORRECTION OF PERSONAL DATA
If you believe that the personal data processed by us are inaccurate or incorrect, you have the right to demand changes, clarification or correction of these data.
You can make changes and adjustments to your data by writing an e-mail in your account. To exercise this right, you can contact us in the ways specified in Sections 1 and 7 of this Policy.
6.3.RIGHT OF WITHDRAWAL OF CONFIRMATION
If We process your personal data on the basis of your consent, you have the right to withdraw your consent at any time, and the processing of data based on your consent will cease.
Upon the expiration of your consent or in case of cancellation or deletion of consent, with your consent, We delete the processed data or make them anonymous.
We reserve the right to store your consent and confirmation of consent for a longer period of time, if necessary, in order to defend against the stated claims and complaints against us.
6.4.RIGHT TO OBJECT TO DATA PROCESSING
You have the right to object to the processing of personal data if the processing of personal data is based on your consent and our legitimate interests.
To exercise the right set forth in this section, please submit your application to ZAptieka using the contacts specified in Sections 1 and 7 of this Policy.
6.5.RIGHT TO SUBMIT A COMPLAINT
If you believe that your data are being processed by us in violation of the requirements of the current data protection regulatory enactments, we urge you to contact us first. We believe that we will succeed in diligent efforts to dispel all your doubts, satisfy requirements and correct the errors caused by us, if any were found.
If you are not satisfied with the solution to the problem we have proposed or We, after your request, do not take the necessary actions, you have the right to file a complaint with the supervisory authority, in the Republic of Latvia it is the State Data Inspectorate (for more information – http://www.dvi.gov.lv/lv/).
Before filing a formal complaint, we urge you to contact us and resolve the dispute and complaints through negotiations.
6.6.RIGHT TO DELETE DATA (RIGHT TO BE FORGOTTEN)
Taking into account the conditions mentioned in the current regulatory enactments (in the event that personal data are processed unlawfully, there are no grounds for data processing, etc.), you have the right to request that we delete your data. To exercise this right, we urge you to submit a written request to us using the contact information specified in Sections 1 and 7 of this Policy.
6.7.RIGHT TO RESTRICTION OF DATA PROCESSING
Taking into account the conditions mentioned in the current regulatory enactments (in the event that personal data are processed unlawfully, you dispute the accuracy of the data, you object to data processing based on our legitimate interests, etc.), in addition, you have the right to restrict processing your data. However, we emphasize that due to the restriction of data processing and the period of such restriction, it may not be possible for us to provide you with access to the services of the ZAptieka online shop.
6.8.RIGHT TO DATA PORTABILITY
You have the right to transfer data, which we process in accordance with your consent and the processing of which takes place using automated means, to another controller. For the transfer of your requested data, We use a simple and easy-to-read format built into our system, however, upon your request, if technically feasible, We will send the data directly to another controller specified by you.
6.9.PROCEDURE FOR CONSIDERATION OF CLAIMS
Upon receipt of your request for the provision of data or the exercise of your other rights, we will need to verify your identity, therefore the request of the data subject must be in writing or in a form that, in accordance with the current regulatory enactments, can be considered a written format, for example, an electronic document signed with secure electronic signature, and all personal identification criteria referred to in the current regulatory enactments, for example, name, surname, address, signature, must be indicated.
Upon receipt of your request for the exercise of any of your rights and the successful completion of the previously mentioned verification procedure (identification of your identity), We undertake immediately, without any reason, but in any case no later than one month from the day of receipt of your request and completion of the verification procedure, to provide you with information about the actions that we have taken in relation to your request. Taking into account the complexity, nature of the issue and the amount of information provided or the number of your requests, We may extend this period for another two months, informing you about this before the expiration of the first month, indicating the reasons for this extension.
In the event that your request is submitted using electronic means of communication, we will also respond to you using electronic means of communication, unless this is impossible (for example, due to the large amount of information) or you request a response in a different form.
We will refuse to comply with your request, giving a reasoned answer in the event of the occurrence of the circumstances referred to in the current regulatory enactments, about which we will inform you in writing.
7. HOW CAN YOU CONTACT US?
If you have any questions or want to exercise your rights, please contact us using the contact information below.
General contact information:
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telephone: +371 296 27 092
Website: www.zaptieka.com
Contact formation of the data protection officer:
E-mail address – This email address is being protected from spambots. You need JavaScript enabled to view it.
Tel.: +371 296 27 092
Our controller details:
ZAptieka, SIA registration number – 40203331703
Legal address: Terbatas iela 59/61 , LV-1001, Riga, Latvia
8.HOW ARE YOUR DATA PROTECTED?
We use a number of security technologies and procedures to protect the personal data provided by you from unauthorized access, use and disclosure. Our suppliers and partners are carefully selected. Despite this, security cannot be guaranteed at the time of transmission of information via the Internet or mobile communications, and you assume all risks during any transmission of information in the ways mentioned above.
9.DATA STORAGE FOR A LONGER PERIOD OF TIME
After the expiration of the processing and storage of your data in accordance with the terms of this Policy, We delete your data and, in the cases mentioned in this Policy, reliably and irrevocably delete the data as quickly as possible, within a reasonable timeframe necessary for this procedure.
Your personal data may only be stored longer than specified in this Policy:
- if necessary, so that We can defend our rights related to the receipt of claims and complaints;
- if there are suspicions of illegal actions;
- for backup, secure copying and other similar purposes related to the activities, administration and security of our information systems;
- in other cases provided for by the current regulatory enactments.
10. COOKIES
We use cookies on our website. With the cookies, We can link your purchase history and other data collected during your use of the ZAptieka online shop.
There are also third-party cookies on our website. These cookies are used to create a browsing history for each visitor, so that We can show targeted ads to you and provide the best experience when browsing our website. In case your browser allows the recording of third party cookies, our chosen partner has the option of recording their own cookies in your browser.
For more information on cookies, how to use and refuse them, see the Cookie Policy (www.zaptieka.com).
11. DURATION AND CHANGES OF THIS POLICY
This policy is effective from 07.december 2021. In case of changes to this Policy, We will publish an updated and the current version of the Policy on our website www.zaptieka.com and, if necessary, inform you about the changes in other ways.
Tērbatas iela 59/61 , LV-1001, Rīga , Latvija
+371 29 627 092
