Privacy Policy

1. General Provisions

This Privacy Policy describes how SIA NordF, registration number 50203736551, VAT number LV50203736551, registered address Vesetas iela 24-45, Riga, LV-1013, Latvia (the Data Controller), obtains, processes, and stores personal data collected by the Zelez Bottle online store from customers and website visitors. Personal data means any information relating to an identified or identifiable natural person, and the Data Controller processes it in accordance with applicable law.

2. Collection, Processing, and Storage

We obtain, process, and store identifying information mainly through the online store website, order form, and email. By using the website and our services, you acknowledge that the information you provide may be used for the purposes described in this policy. You are responsible for ensuring that the personal data you provide is correct, accurate, and complete, and for informing us promptly about any changes.

3. Customer Personal Data

The Data Controller may process the following personal data: name and surname, contact details such as email address and telephone number, transaction data including purchased goods, delivery address, price and payment information, and any other information you provide when purchasing goods or contacting us. Date of birth is processed only if it is necessary in a specific case to comply with a legal obligation or provide a service.

4. Legal Basis

The legal basis for processing personal data is Article 6(1)(a), (b), (c), and (f) of the General Data Protection Regulation: your consent, performance of a contract or pre-contractual steps at your request, compliance with a legal obligation applicable to the controller, and the controller's or a third party's legitimate interests where your interests or fundamental rights do not override those interests.

5. Retention Period

The Data Controller stores and processes personal data for as long as it is necessary for the purposes for which it was received, for as long as we may exercise legitimate interests under applicable law, for as long as there is a legal obligation to retain the data, for example under accounting law, or for as long as your consent remains valid if there is no other lawful basis. After these circumstances end, the data is deleted or anonymised.

6. Sharing With Partners

To fulfil our obligations to you, the Data Controller may transfer personal data to cooperation partners and processors acting on our behalf, such as accounting, delivery, courier, and parcel-machine service providers. Payment processing is provided by the makecommerce.lv payment platform, so we transfer the personal data required for payment execution to the platform owner Maksekeskus AS. Upon request, we may transfer personal data to state and law-enforcement authorities to protect our legal interests.

7. Data Security

When processing and storing personal data, the Data Controller implements organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.

8. Your Rights

Under the GDPR and Latvian law, you have the right to access your personal data, receive information about its processing, request a copy and portability of the data, correct inaccurate or incomplete data, delete data, withdraw consent, restrict processing, and contact the Latvian Data State Inspectorate. You may submit a request by writing to support@zelezbottle.com or to SIA NordF at Vesetas iela 24-45, Riga, LV-1013, Latvia.

9. Final Provisions

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, as well as the applicable laws of Latvia and the European Union. The Data Controller may amend or supplement this Privacy Policy at any time. Amendments take effect after publication on the Zelez Bottle website.