Privacy Policy
1. General information
This Privacy Policy explains how SIA Archive Room processes personal data when a person uses the website archiveroom.online, places an order, contacts us, or uses our services.
Data controller:
SIA Archive Room
Registration No.: 40203722850
Legal address: Indrānu iela 8 – 28, Rīga, LV-1012
Business address: Vaļņu iela 1, Rīga, LV-1050
Email: info@archiveroom.online
2. What personal data is processed?
Archive Room may process the following personal data:
- first and last name;
- email address;
- phone number;
- delivery address;
- billing information;
- order information;
- content of communications with customer support;
- IP address, device and browser information;
- cookie and similar technology data.
Archive Room does not store full payment card details when payment processing is provided by an independent payment service provider.
3. Purposes of processing personal data
Personal data is processed for the following purposes:
- accepting and fulfilling orders;
- processing payments;
- arranging delivery of goods;
- communicating with the buyer about their order;
- providing customer support;
- fulfilling accounting and tax obligations;
- ensuring the operation, security and improvement of the website;
- preventing fraud and protecting legal interests;
- sending marketing communications, where the person has consented.
4. Legal basis for processing personal data
Personal data is processed on the basis of one or more of the following legal grounds:
- performance of a contract or steps taken prior to entering into a contract;
- compliance with a legal obligation;
- Archive Room's legitimate interests, such as website security, customer service and the protection of legal interests;
- the person's consent, for example for marketing communications or certain cookies.
5. Who may personal data be disclosed to?
Personal data may only be disclosed where necessary to achieve the relevant purpose or to comply with legal requirements. Data may be disclosed to:
- payment service providers;
- delivery and courier service providers;
- IT and website hosting/maintenance service providers;
- accounting, legal or other professional service providers;
- public authorities, where required by law.
Archive Room does not disclose personal data to third parties for their own independent marketing purposes without the person's consent.
6. Data retention period
Personal data is retained for as long as necessary to achieve the relevant purpose, perform the contract, comply with legal obligations, or protect legal interests.
Accounting and transaction-related documents are retained for the period required by law.
Data processed on the basis of consent is retained until consent is withdrawn, unless there is another legal basis for its continued processing.
7. Your rights
You have the right to:
- request access to your personal data;
- request correction of your personal data;
- request deletion of your personal data;
- request restriction of processing of your personal data;
- object to the processing of your personal data;
- request data portability, where applicable;
- withdraw consent, where processing is based on consent;
- lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija).
To exercise your rights, please contact Archive Room at info@archiveroom.online.
8. Data security
Archive Room implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, destruction or other unlawful processing.
9. Transfers outside the European Economic Area
Where personal data is transferred outside the European Economic Area, Archive Room ensures that such a transfer takes place in accordance with applicable data protection law and using appropriate safeguards.
10. Changes to this Privacy Policy
Archive Room may update this Privacy Policy from time to time. The current version is always available at archiveroom.online.