Privacy policy
We, Kemern, highly value our Customers and the data entrusted to us when shopping in our online store.
We care about both the safety of our products and the security of the shopping process. In this Privacy Policy, we explain how and for what purposes our Customers’ data are processed.
Please note that certain sections of the Privacy Policy may not apply to the specific Service the Customer receives.
1. WHAT PERSONAL DATA DOES KEMERN PROCESS?
KEMERN primarily processes Personal Data necessary for fulfilling the Contract (information contained in the Invoice). We process the Personal Data that the Customer provides to us through various online or offline sources, including when the Customer uses the Website or our Application, communicates with us via social networks, participates in loyalty programs, and in other ways.
Personal Data required for concluding and fulfilling the Contract includes data specified in the Contract and Invoice, which may include, for example, the Customer’s name, surname, contact details, payment information, Contract details (purchased Products, their quantity, price, and purchase date), as well as communication between the Customer and KEMERN related to the Order.
2. WHERE AND HOW DOES KEMERN USE PERSONAL DATA?
This section of the Privacy Policy describes the purposes of processing the Customer’s Personal Data and provides other related information.
2.1. USE OF COOKIES
We use cookies on the Website, through which technical data are processed, including the Customer’s internet network server address, domain name, browser used, IP address, selected settings, actions performed on the Website or Application, for the purpose of service provision and maintenance of the Website and Application.
Cookies are small text files that a web browser (e.g., Internet Explorer, Google Chrome, Firefox, or Safari) saves on the Customer’s computer or mobile phone. A cookie does not directly contain personal information about the Customer and cannot be used to directly identify individual users, but it can provide information about the Customer’s habits and preferences. Cookies may be considered as a way for a website to “remember” a user, allowing it to recognize them and respond accordingly.
Most browsers allow Customers to specify that they do not wish to receive cookies at all or only from a specific website. All modern browsers allow changes to cookie settings, usually available in the options or preferences menu.
We use Google Analytics services. Customers can opt out of their use by downloading and installing the Google Analytics Opt-out Browser Add-on.
2.2. USE OF PERSONAL DATA FOR SERVICE PROVISION
2.2.1. Contract conclusion and performance
To provide the Service, under which a Contract with the Customer is concluded and fulfilled, we process the Personal Data necessary for concluding and performing the Contract, including information needed to resolve any issues that may arise during its execution.
Personal Data processing is based on contract conclusion, performance, and the protection of both parties’ (Customer’s and KEMERN’s) interests and rights in the event of a dispute, as well as ensuring compliance with commercial and accounting obligations.
If the Customer does not provide their Personal Data in cases where processing is required for Contract conclusion and execution or in accordance with the law, we cannot provide the Service.
2.3. USE OF PERSONAL DATA FOR MARKETING PURPOSES
We may send Customers marketing messages containing information about our promotions, news, and other information not related to the Contract execution or Service provision, by email, based on the Customer’s consent, which can be withdrawn at any time.
When preparing marketing messages, we use profiling to prepare the most suitable offer for the Customer, based on Service data – namely, which of our Services the Customer has previously used and/or which Products they have purchased.
We process the Customer’s Personal Data until the Customer withdraws consent to receive marketing materials, or until the need to retain proof of received consent ends. If the Customer withdraws consent, we will no longer send messages, but we may keep evidence that such consent was given.
Withdrawal of consent for receiving marketing messages does not affect consent to process information obtained via cookies.
3. TO WHOM MAY KEMERN TRANSFER PERSONAL DATA?
Any information the Customer provides is not accessible to Third Parties unless there is a legal basis for such disclosure. We may transfer Customer Personal Data to Third Parties that provide, for example, postal services, delivery, accounting, and IT services. In some cases, we may be obliged to disclose Customer Personal Data to Competent Authorities in accordance with a justified request regulated by Latvian law.
For all processing purposes, Customer Personal Data are received and processed by KEMERN and our cooperation partners who, in addition to the above, provide communication, banking, legal, and other services. As stated earlier, in cases provided by law, KEMERN is obliged to disclose Customer Personal Data to Competent Authorities.
We emphasize that we do not transfer Customer Personal Data to state institutions or Third Parties without a legal basis. KEMERN guarantees that any processors of Customer Personal Data engaged by KEMERN comply with security standards not lower than those established by us.
4. HOW LONG DOES KEMERN STORE PERSONAL DATA?
All information related to the Customer is retained as proof of Customer identity, Contract conclusion, Service provision, and stored until the Contract is fulfilled, the Personal Data are no longer necessary, or until the retention period specified in applicable laws expires.
To preserve proof of Contract conclusion and execution, we store Customer Personal Data for at least 3 (three) years from the moment of Contract completion or termination. Certain data may be stored longer to comply with other legal obligations or to exercise our rights.
For accounting purposes, we store Customer Personal Data related to concluded and fulfilled Contracts and Service provision for at least 5 (five) years after the Contract completion or Service date.
Information about Customer consent for Personal Data processing is stored as proof for at least 5 (five) years from the moment of withdrawal, in accordance with the Personal Data Processing Law.
5. WHERE AND HOW ARE MY PERSONAL DATA STORED?
We store Personal Data within the European Economic Area (EEA), which is considered a safe area that ensures an adequate level of protection in accordance with our standards. All information provided by the Customer is securely stored on our or our controlled servers. This information is encrypted and protected with technical measures, thereby enhancing data security.
We ensure that access to the Customer’s personal information is allowed only to persons directly involved in Contract execution or Service provision, and only to the extent necessary for fulfilling their duties. This is ensured through technical solutions, physical access rights, and appropriate training and education of employees implementing these security measures.
6. WHAT ARE MY RIGHTS?
The Customer may submit a request in accordance with this section. After receiving the request, we will review it and provide a response within 1 (one) month.
To exercise these rights, the Customer can submit a request by:
-
sending a securely electronically signed request to info@kemern.lv;
-
sending a letter to the legal address: Garkalnes 1, Jūrmala, LV-2011.
We reserve the right to request additional information to verify identity and protect Personal Data from disclosure to unauthorized persons. The Customer has the right to access their Personal Data free of charge.
The Customer has the right to request deletion of their Personal Data, but we reserve the right to refuse deletion if there is a legal basis, e.g., compliance with a legal obligation, defense of legal claims, or statistical purposes under adequate security measures.
The Customer has the right to request restriction of processing, if there is a legal basis. In such cases, KEMERN processes Personal Data only with consent, to defend legal claims, to protect the rights of other persons, or due to important KEMERN interests. This does not apply to data storage.
The Customer has the right to object to processing related to direct marketing or processing based on our legitimate interests, considering their specific situation or important reasons.
The Customer has the right to request that we transfer their Personal Data to them or another data controller. This applies to data provided based on consent or a Contract, and processed by automated means. This also applies to activity history or Website usage data but not to data generated by us, such as Customer profiles created from analysis.
The Customer has the right to withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal. These rights apply to receiving marketing messages.
In case of concerns regarding Personal Data processing, the Customer can contact us, and we will try to resolve the issue. If the Customer believes we cannot provide a solution, they have the right to file a complaint with the national data protection authority.
Latvian Data State Inspectorate:
Datu Valsts Inspekcija, Blaumaņa iela 11/13-15, Rīga LV-1011, Latvia,
Tel.: +371 67223131,
Email: info@dvi.gov.lv.
Customers can contact us at any time to receive additional information about processing activities.
Contact details:
Email: info@kemern.lv
7. WHAT ARE KEMERN’S RIGHTS REGARDING THE PRIVACY POLICY?
We have the right to amend the Privacy Policy at any time by publishing it on the Website. Any version of the Privacy Policy published on the Website replaces all previous versions and takes effect immediately upon publication.
