Privacy Policy

SIA ARVO, registration number 40103192786, registered address Ziedu 12, Ādaži, Ādažu Novads, LV-2164, email info@vinsarstastu.lv, telephone +371 25566236 (hereinafter referred to as Seller), which operates the website vinsarstastu.lv (hereinafter referred to as the Website), undertakes to protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and current regulations of the Republic of Latvia.

This Privacy Policy (hereinafter referred to as the Policy) explains type of personal data the Seller collects, purposes of their use, your rights and how you can exercise them.

1. Processed personal data categories

1.1. Identification data: name, surname, email address, phone number.
1.2. Purchase data: delivery address, order details (goods, amount), payment information (only transaction ID, not full card details).
1.3. Technical data: IP address, browser type, cookie data (for more information, see our Cookie Policy).
1.4. Age verification data: document number or e-identity verification (via eID Easy) to ensure legal purchase of alcoholic goods (18+).
1.5. The Seller does not summarise any special categories of data (sensitive data), unless required by statutory regulations.

2. Personal data processing purposes and legal basis

2.1. Order processing – Enable purchasing, delivering and invoicing (legal basis: performance of the agreement).
2.2. Payment processing – For payment processing, data are transferred to the payment platform MakeCommerce (Maksekeskus AS) (legal basis: performance of the agreement and legitimate interest).
2.3. Age verification – Ensuring compliance with regulations governing sale of alcohol (legal basis: legal obligation).
2.4. Marketing and Communication – sending informative messages about products, news or events (legal basis: consent). Consent can be withdrawn at any time.
2.5. Website improvement – Analysis of usage data and UX optimization (legal basis: legitimate interest).

The Seller stores personal data only for as long as necessary for the specific purpose. For example, purchase data – for 5 years for tax purposes.

3. Data Disclosure

3.1. Data are transferred only to the extent necessary for the provision of services:

• to delivery partners ( Omniva , Venipak );
  
• to the payment processor (Maksekeskus AS);
  
• to state institutions, if required by law.

3.2. All data recipients are obliged to comply with the data security and processing regulations.

4. Data Subject Rights

As a data subject, you have the right to:

• to access their data;
  
• rectify inaccurate data;
  
• to request erasure of data (“right to be forgotten”) if there is no legal basis for further storage;
  
• to restrict data processing;
  
• to receive data in a portable format;
  
• to object to data processing for marketing purposes;
  
• to lodge a complaint with the State Data Inspectorate (http://www.dvi.gov.lv).
  

To exercise your rights, contact: info@vinsarstastu.lv. We will respond within 1 month.

5. Cookies

The use of cookies is described in a separate Cookie Policy.

6. Data Security

The Seller applies SSL encryption, firewalls, and regular security checks to protect personal data.

7. Policy changes

The Seller has the right to update this Policy by publishing a new version on the Website.

This Policy comes into effect on September 16, 2025.
Last updated: September 16, 2025.