General terms for the processing of personal data
Certes processes and protects personal data in accordance with the existing laws and regulations in the Republic of Latvia, including Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Certes confirms that it has taken the necessary measures to ensure the protection of personal data and to prevent possible access by third parties. Certes regularly monitors and improves data protection processes.
Your rights regarding the processing of personal data
You have the right to request access to and the correction or erasure of your personal data or to restrict data processing, as well as the right to object to the processing.
Erasure of data on request may not be possible in cases where a purchase has already been made in the Online Store (in this case the data is processed for the purchase and within a certain period after execution). Erasure of data is also not possible in cases when regulatory enactments stipulate Certes’ obligation to process data.
You have the right to data portability: to receive personal data about yourself that you have submitted to Certes in a structured, widely used, and machine-readable format. You also have the right to transfer that data to another controller. You have the right to transfer personal data directly from Certes to another controller you specify, if technically possible. You can also copy and transfer your data to your own user account, if one has been created.
You have the right to make a claim to the data protection authority concerning Certes’ breaches in the processing and protection of personal data: Date State Inspectorate of the Republic of Latvia.
Acquisition of personal data; the purposes and legal basis for processing
Certes receives your data, including personal data, in the following way:
If you visit the Online Store and make a country selection available in the Online Store (information about the country of delivery may be required to use the Online Store, in order to tailor the display of certain items and prices).
If you fill in the contact form in the Online Store or contact Certes in another way using the contact information provided in the Online Store.
If you visit the Online Store and submit data for registration (creating a user account); in this case, the submission of data shall be deemed to be your consent to the data processing. When registering, certain fields will specify mandatory information, including your name, surname, e-mail address and phone number, without which registration cannot be performed.
If you make a purchase in the Online Store. If you have registered (created a user account) before making a purchase, you may not be required to resubmit your data.If a buyer is a natural person, the submission of personal data is a precondition for making a purchase in the Online Store; the submission of any additional representative data is not mandatory in this case. If a potential buyer is not a natural person, the precondition for making a purchase agreement possible in the Online Store is the submission of the name and surname of the natural person representing the buyer; the submission of any additional representative data is not mandatory in this case.
Your phone conversations and correspondence with Certes representatives can be recorded and saved for the purposes of purchase execution, customer service quality control and improvement.
Certes can obtain data from publicly available registers.
Certes processes your data for the following purposes:
To correctly display the goods and prices, the data of an available and selected country in the Online Store is processed (the content of the Online Store may differ depending on the specified country). You cannot be identified by the data of a selected country mentioned in this paragraph.
To answer your questions, if you have filled in the contact form in the Online Store or contacted Certes in another way using the contact information provided in the Online Store.
To register (create a user account) in the Online Store for further purchases and send you confirmation of registration in the Online Store.
To send you a reminder about an incomplete purchase if the purchase in the Online Store has not been completed (this is necessary to enable you to complete the purchase if there were technical problems during the purchase). The reminder is sent within 72 hours from the moment of termination of the purchase process.
To execute a purchase made in the Online Store, including:
send you confirmation of purchase in the Online Store;
send you information about the performance of the purchase and delivery of goods;
issue an appropriate invoice;
deliver the goods;
perform product warranty service and damage prevention.
To notify you about offers and promotions of other Certes services – however, only in cases when you have made your consent to the processing of personal data for this purpose when making a purchase in the Online Store.
To control and improve the quality of customer service, as specified in Paragraph 4.1.5.
To fulfil the legal obligations applicable to Certes, if such are stipulated by regulatory enactments.
Certes is not responsible for the protection of your data, including non-disclosure to third parties, if you have published the data in the comments or feedback section of the online store (if the online store includes such options).
Categories of recipients of data
Your data may be transferred to third parties for the following purposes:
To Certes’ cooperation partners for the execution of the purchase, including administration, record-keeping, accounting, and legal service providers.
Your data may be transferred to Certes’ cooperation partners for the execution of the purchase guarantee and repair work, including the processing of your applications – for example, the processing of damage claims, repair of damage, etc.
Debt collection service providers and submission in court, if you have not made timely payments for the purchase in the Online Store. Certes has the right to transfer your data to third parties for the purpose of debt recovery, as well as to create a debt history database.
Data may be transferred to third parties in the cases provided by law for the purpose of fulfilling the obligations imposed by regulatory enactments.
The period for which personal data is stored
The period of storage of personal data for the purposes specified in Paragraph 4.2.6 – to notify you about offers and promotions of other goods and Certes services – is 5 (five) years.
The period of storage of personal data for the purposes specified in Paragraph 4.2.8 – to fulfil the legal obligations applicable to Certes – shall be determined in accordance with the regulatory enactments according to which the specified legal obligation is applicable to Certes.
In other cases, the period of storage of personal data shall be determined by taking into account the purposes of the data processing, not exceeding the term specified in regulatory enactments if such is specified. Certes is entitled to amend the aforementioned terms, not exceeding the data storage period specified in regulatory enactments, if such is specified.
In order to provide services and assess the need to improve the Online Store, Certes has the right to process information regarding the Online Store visitors contained in Online Store access files – for example, IP address, type of web browser used, previous website from which the visitor reached the Online Store, internet service provider, time of visit, viewed sections of the Online Store, etc.
In the case of questions about the processing of personal data, Certes can be contacted using the following contact details: