Privacy Policy

 

This Privacy Policy describes how SIA TORANS (Registration number: 40003613318, hereinafter referred to as the "Company", "we", "us", or "our") collects, uses, stores, and protects personal data of individuals ("Customer", "you") in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Personal Data Processing Law of Latvia, and other applicable legislation.

By using our website, placing an order, or contacting us, you consent to the practices described in this Privacy Policy.

1. Data Controller

SIA TORANS
Registration number: 40003613318
Brīvības gatve 232-2, Riga, LV-1039, Latvija
Email: info@lorande.com

We are the controller of your personal data and responsible for ensuring that it is processed lawfully, fairly, and transparently.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification data: name, surname, company name (if applicable).
• Contact details: email address, phone number, billing address, delivery address.
• Order details: purchased products, order number, purchase history.
• Payment information: payment method, transaction details (processed securely via third-party payment providers; we do not store card details).
• Technical data: IP address, browser type, operating system, device information, and cookies.
• Communication data: emails, messages, or other correspondence between you and us.

3. Legal Basis for Processing

We process personal data on the following legal grounds:

• Contract performance: to process and deliver your orders.
• Legal obligations: to comply with accounting, taxation, and consumer protection laws.
• Legitimate interests: to improve our services, prevent fraud, and protect our rights.
• Consent: for marketing communications, newsletters, and promotional offers (only if you have given explicit consent).

4. Purpose of Processing

We process your personal data for the following purposes:

• To fulfil and deliver your orders.
• To provide customer support and handle inquiries.
• To issue invoices and comply with accounting obligations.
• To send transactional communications (order confirmations, delivery updates).
• To send marketing communications (only with your consent).
• To maintain website security and prevent fraud.

5. Data Retention

We will retain your personal data only as long as necessary for the purposes for which it was collected or to comply with legal requirements.

• Order and billing data: 10 years (in compliance with Latvian accounting law).
• Marketing data: until you withdraw your consent.
• Technical and security logs: up to 1 year, unless longer retention is necessary for legal proceedings.

6. Data Sharing

We may share your data with:

• Delivery and courier companies for order shipment.
• Payment service providers for processing payments.
• IT and hosting service providers for website operation.
• State authorities if required by law.

All third-party partners are required to ensure the confidentiality and security of your data in compliance with GDPR.

7. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we will ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights under GDPR

You have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Restrict processing in certain circumstances.
• Object to processing for direct marketing purposes.
• Withdraw consent for data processing (where applicable).
• Data portability: request your data in a structured, machine-readable format.
• Lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv) if you believe your rights have been violated.

To exercise your rights, please contact us at info@lorande.com.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Improve website functionality.
• Remember your preferences.
• Analyze traffic and usage patterns.
• Provide relevant advertising (if consent is given).

You can manage or disable cookies via your browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction, including:

• Encrypted connections (SSL/TLS).
• Secure data storage.
• Restricted access to personal data.
• Regular security audits.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, our practices, or our services.