Privacy Policy

Owner and its contact information

The controller of personal data processing is SIA "SPA & VERANDAS", registration number: 40103804135, legal address: Cēsu iela 31 k-3, Rīga, LV-1012, (hereinafter - SPA & VERANDAS).

The contact information of SPA & VERANDAS in matters related to the processing of personal data is: spa@verandas.lv. Using this contact information or contacting the legal address of SPA & VERANDAS, you can ask a question about personal data processing. A request for the exercise of one's rights can be submitted in accordance with the procedures set out here.

Scope of application of the document

Personal data is any information about an identified or identifiable natural person - SPA & VERANDAS name, surname, social security number, residence of clients, cooperation partners or their employees, job candidates place address, personal phone number, personal e-mail, occupation, amount of income, received services, billing information, telephone and electronic communication information and other information, attributable to a natural person.

The privacy policy applies to ensure the protection of privacy and personal data regarding:

• for natural persons - customers and other service users (including potential, former and existing ones), as well as to third parties who, in connection with the provision of services to a natural person (customer, user) receives or transfers to SPA & VERANDAS any information (including contacts, payers, etc.);
• SPA & VERANDAS shop;
• For visitors of websites and mobile apps maintained by SPA & VERANDAS (hereinafter - Customers).

SPA & VERANDAS takes care of Clients' privacy and personal data protection, respects Clients' rights to the legality of personal data processing in accordance with the applicable legal acts - the laws of the Republic of Latvia and subordinate legislation, Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on physical protection of persons regarding the processing of personal data and free circulation of such data (Regulation) and others applicable laws in the field of privacy and data processing. The privacy policy applies to data processing, regardless of the form and/or medium provided by the Customer personal data (on the SPA & VERANDAS website, mobile apps, in paper format or electronically) and in which company systems or paper form they are processed.

Purposes of personal data processing

SPA & VERANDAS processes personal data for the following purposes:

1. For providing services and selling goods:

• to identify the customer;
• for the preparation and conclusion of the contract;
• for the delivery of goods and provision of warranty services (fulfilment of contractual obligations);
• for ensuring / maintaining the operation of services;
• guarantees for fulfillment of obligations;
• for the improvement of goods and services, development of new goods and services;
• to promote the use of the service;
• for advertising and distribution of services or for commercial purposes;
• for customer service; for consideration and processing of objections;
• for retaining customers, building loyalty, measuring satisfaction;
• for billing administration;
• for debt recovery and collection;
• for maintaining and improving the operation of homepages and mobile applications.

2. For business planning and analytics:

• for statistics and business analysis;
• for planning and accounting; for measuring efficiency;
• for data quality assurance;
• for conducting market and public opinion research;
• for the preparation of reports;
• for customer surveys;
• within risk management activities.

3. For the provision of information to state administrative institutions and subjects of operational activity in external regulations in the cases and to the extent specified in the acts.

4. SPA & VERANDAS for security of property and persons, prevention of theft and fraudulent activities SPA & VERANDAS in the office and shops, for recording a criminal offense, for identifying potential offenders Video within the scope of observation. As part of video surveillance, data is stored for up to 30 days. After this period expires SPA & VERANDAS ensures complete automatic deletion of data if the data has not been previously requested or detected criminal offences. If the data has previously been requested from competent state or local government institutions or is criminal offenses are detected, the data is stored as necessary.

5. For other specific purposes, about which the Customer is informed at the time when he provides the relevant data SPA & VERANDAS.

Legal basis for personal data processing

SPA & VERANDAS processes the Customer's personal data based on the following legal bases:

• for the conclusion and execution of the contract - to conclude the contract at the Customer's request and ensure its execution;
• for the fulfillment of regulatory acts - to fulfill SPA & VERANDAS binding external regulatory acts obligations;
• in accordance with the consent of the Client - data subject;
• in legal (legitimate) interests - to realize the existing relationships between SPA & VERANDAS and the Client obligations or the legitimate (lawful) interests of SPA & VERANDAS resulting from the concluded contract or the law.

The legal (legitimate) interests of SPA & VERANDAS are:

• carry out commercial activity;
• offer quality and proven IT products and solutions;
• verify the identity of the Client before concluding the contract;
• ensure fulfillment of contractual obligations;
• prevent unjustified financial risks for your commercial activity (including performing a credit risk assessment before during the sale of goods and services and performance of the contract);
• save Customer applications and submissions for the purchase of goods and provision of services, other applications and submissions, notes about them, including those made verbally, by calling and on internet websites;
• analyze the operation of SPA & VERANDAS homepages, websites and mobile applications, develop and implement it improvements; administer the Client's account on SPA & VERANDAS websites, websites and mobile applications;
• perform actions to retain customers; segment the customer database for more efficient provision of services; design and develop goods and services; advertise your goods and services by sending commercial messages;
• send other reports on the progress of contract execution and events relevant to contract execution, as well as carry out Customer surveys about goods and services and their experience of using them; prevent fraud;
• provide corporate governance, financial and business accounting and analytics;
• ensure effective company management processes;
• efficiency of service provision and sale of goods, and delivery; ensure and improve the quality of services;
• administer payments;
• administer outstanding payments;
• apply to state administration and operational institutions and to the court for the protection of your legal interests;
• to inform the public about their activities.

Processing of personal data

SPA & VERANDAS processes the Customer's data using the capabilities of modern technologies, taking into account the existing ones privacy risks and SPA & VERANDAS reasonably available organizational, financial and technical resources.

SPA & VERANDAS can make automated decisions regarding the Customer. Customer for such SPA & VERANDAS activities are informed separately in accordance with regulatory enactments. The customer can opposes the adoption of automated decisions in accordance with the law, however, aware that in some in some cases, it may limit the Customer's right to use certain options potentially available to him (e.g. receive commercial offers).

SPA & VERANDAS can provide high-quality and prompt performance of the obligations of the contract concluded with the Client to authorize SPA & VERANDAS group companies, their cooperation partners to make individual deliveries of goods or service provision activities, such as delivery of goods, performance of warranty service, sending invoices and the like. If performing these tasks, SPA & VERANDAS group companies or collaborations partners process the Client's personal data held by SPA & VERANDAS, the respective SPA & VERANDAS groups companies or cooperation partners are considered SPA & VERANDAS data processors and SPA & VERANDAS has the right to transfer SPA & VERANDAS group companies and cooperation partners the Customer's personal data required for the performance of these activities to the extent necessary for the performance of these activities.

SPA & VERANDAS cooperation partners and SPA & VERANDAS group companies (in the capacity of personal data processor) will ensure the fulfillment of personal data processing and protection requirements in accordance with SPA & VERANDAS requirements and laws, and will not use personal data for purposes other than the obligation of the contract concluded with the Customer for execution in the SPA & VERANDAS task.

Personal data protection

SPA & VERANDAS protects the Client's data using the capabilities of modern technologies, taking into account the existing ones privacy risks and the organizational, financial and technical resources reasonably available to SPA & VERANDAS, including using the following security measures:

• Pseudonymization of data;
• Firewalls;
• Intrusion protection and detection programs;
• Other protective measures in accordance with current technical development possibilities.

Categories of recipients of personal data

SPA & VERANDAS does not disclose the Customer's personal data or any service provision and contract to third parties obtain information during operation, except for:

• if the data must be transferred to the relevant third party within the framework of the concluded contract, in order to perform something for the fulfillment of the contract necessary or legally delegated function (e.g. for the bank within the settlement or guarantee service as part of the service, goods for which the SPA & VERANDAS service is not authorized for repair are delivered at the authorized service center of the corresponding manufacturer);
• in accordance with the clear and unequivocal consent of the Client;
• for the persons provided for in the external regulatory enactments, upon their justified request, in the external regulatory enactments in the prescribed manner and to the extent;
• for the protection of the legal interests of SPA & VERANDAS in cases specified in external regulatory acts, e.g. going to court or other public institutions against the person who has violated these SPA & VERANDAS legitimate interests.

Access to personal data by third country entities

SPA & VERANDAS personal data cannot be accessed in third countries (that is, countries outside the European Union and European Economic Area) existing developers or service providers (in the sense of the Regulation - sending to third countries) in the status of data processor (operator).

Duration of personal data storage

SPA & VERANDAS stores and processes the Customer's personal data as long as at least one of the following criteria is met:

• only as long as the contract concluded with the Customer is valid;
• as long as SPA & VERANDAS or the Client can realize their own according to the procedures specified in external regulatory acts legitimate interests (for example, to submit objections or bring or bring a lawsuit);
• as long as one of the parties has a legal obligation to store the data;
• as long as the Customer's consent to the relevant personal data processing is valid, if there is no other data processing legal basis.

When the above circumstances cease, the Customer's personal data is deleted.

Access to personal data and other Customer rights

The customer has the right to receive the information stipulated in the regulatory acts in connection with the processing of his data, to make sure about the correctness of your data and to correct them.

The customer also has the right to request access to SPA & VERANDAS for his/her persons in accordance with the laws and regulations data, as well as request SPA & VERANDAS to perform their addition, correction or deletion, or processing restriction regarding the Customer, or the right to object to the processing (including the processing of personal data, carried out on the basis of the legal (legitimate) interests of SPA & VERANDAS), as well as the right to data portability. These rights are enforceable as long as the data processing does not result from the obligations of SPA & VERANDAS are imposed by the current regulatory enactments, and which are carried out in the public interest.

The client can submit a request for the exercise of his rights:

• in writing in person at the SPA & VERANDAS office/store, presenting an identity document;
• as long as SPA & VERANDAS or the Client can realize their own according to the procedures specified in external regulatory acts legitimate interests (for example, to submit objections or bring or bring a lawsuit);
• in the form of electronic mail, signing with a secure electronic signature.

Upon receiving the Client's request for the exercise of his rights, SPA & VERANDAS verifies the Client's identity, evaluates the request and fulfills it in accordance with the regulatory enactments.

The response of SPA & VERANDAS is sent to the Customer by mail to the contact address specified by him in a registered letter, after options, taking into account the way of receiving the response indicated by the Customer.

SPA & VERANDAS ensures compliance with data processing and protection requirements in accordance with regulatory enactments and In case of customer objections, appropriate actions are taken to resolve the objection. However, if this fails, The client has the right to apply to the supervisory authority - the Data State Inspectorate.

Customer consent to data processing and the right to withdraw it

The client can give consent to the processing of personal data, the legal basis of which is consent, to SPA & VERANDAS in service portals/apps, SPA & VERANDAS and other internet pages (e.g. loyalty programs and newsletter registration forms), or in person at the SPA & VERANDAS office/shop.

The customer has the right to withdraw the consent given to data processing at any time in the same way as it was given, or by sending a relevant notification to spa@verandas.lv and in that case further data processing based on the previously given consent for the specific purpose will not be carried out in the future.

Withdrawal of consent does not affect data processing carried out at the time when the Client's consent was valid.

Withdrawal of consent cannot stop data processing carried out on other legal bases.

Communication with the Client

SPA & VERANDAS communicates with the Client using the contact information provided by the Client (phone number, e-mail address, postal address, as well as using sms notifications from the service).

SPA & VERANDAS communicates about the performance of contractual obligations on the basis of the concluded contract (e.g. goods coordination of delivery or service performance times, information on invoices, planned works, changes services, etc.).

Commercial announcements

Communication about commercial announcements about SPA & VERANDAS and/or third party services and others with direct provision of contracted services for non-related communications (eg customer surveys) SPA & VERANDAS performed in accordance with external regulatory acts or in accordance with the Client's consent.

The client can give his consent to receive commercial notifications from SPA & VERANDAS and/or its cooperation partners and other internet pages (for example, newsletter sign-up forms).

The consent given by the client to receive commercial notifications is valid until it is revoked (even after the service contract termination). The customer may at any time opt out of receiving further commercial communications in any of the following types:

• by sending an e-mail to the address spa@verandas.lv;
• in person at the SPA & VERANDAS office/shop;
• using the automated opt-out option provided in the commercial notice receipt by clicking on the opt-out link at the end of the relevant commercial communication (e-mail).

SPA & VERANDAS stops sending commercial communications as soon as the Customer's request to withdraw is processed consent to commercial announcements.

Terms of use of cookies

Cookies are small text files that a web browser (e.g. Google Chrome, Microsoft Edge, Firefox, Safari etc.) stored on the user's terminal device (computer, mobile phone, tablet) at the time the user visits the website website to identify the browser or store information or settings in the browser. Thus, with with the help of cookies, the website acquires the ability to save the user's individual settings, recognize him and respond accordingly, with the aim of improving the website user experience. The user can disable or restrict cookies use, but without cookies it will not be possible to fully use all website functions.

Depending on the functions to be performed and the purpose of use, SPA & VERANDAS uses mandatory cookies, functional cookies, analytical cookies and targeting (advertising) cookies.

Mandatory cookies are required so that the user can freely visit and browse the website and use them offered options, including obtaining information about services and purchasing them. These cookies identify user's device, but does not reveal the user's identity, nor does it collect or aggregate information. Without these for cookies, the website will not be able to function fully, for example, to provide the user with the necessary information, provide the requested services in the e-store. These cookies are stored on the user's device until the web browser closes.

Functional cookies remember the settings chosen by the user and the choices made, so that the user can be more comfortable use the site. These cookies are stored permanently on the user's device.

Analytical cookies collect information on how the user uses the website, identify the most frequently visited sections, including content that the user selects while browsing the site. The information is used for analysis purposes to find out what interests the website users and could improve the functionality of the website, make it more convenient usable. Analytical cookies only identify the user's device, but do not reveal the user's identity. In some cases, some of the analytical cookies instead of the website owner, according to its instructions and only managed by third-party data processors (operators) for the specified purposes, e.g. Google AdWords.

Target (advertising) cookies are used to collect information about the websites visited by the user and would offer or address services of our or cooperation partners' interest directly to a specific user offers corresponding to the interest shown by the particular user. Usually these cookies are with the website owner permission is placed by third parties, such as Google Adwords, according to the stated purposes. Target cookies are permanently stored in the user's terminal.

SPA & VERANDAS uses cookies to improve the experience of using websites and homepages:

• ensure the functionality of the homepage;
• adjust the functionality of the website to the user's usage habits - including language, search for requests, previously reviewed content;
• obtained statistical data on the number of visitors to the page's visitor flow, the time spent on the page, etc.;
• for user authentication;
• in case the user is a client of SPA & VERANDAS services, to display customized to the user's needs offers.

Unless otherwise specified, cookies are stored while the activity for which they were collected is performed, and after they are deleted.

Cookie information is not transferred for processing outside the European Union and the EEA.

Accepting and disabling cookies

When visiting SPA & VERANDAS websites and homepages, a window is displayed to the user with a message that the web the website uses cookies. By closing this message window, the user confirms that he is familiar with information about cookies, the purposes of their use, cases when their information is transferred to a third party person and agrees to them. Accordingly, the legal basis for the use of cookies is user consent. Yes using the website or homepage, the user enters into a contract - the processing of cookies requires a contract with the user for performance, or for SPA & VERANDAS to fulfill its legal obligation or pursue legitimate interests.

Restriction and deletion of cookies is possible in the security settings of every web browser. However, it should be taken take into account that you cannot refuse the use of mandatory and functional cookies, because without them websites and homepages ensuring full use is not possible.

For the best user experience and full functionality of the website, we recommend saving cookies.

If you have questions about the use of cookies, please contact us by email: spa@verandas.lv

Other terms

SPA & VERANDAS websites may contain links to websites of third parties that have their own terms of use and personal data protection, for which SPA & VERANDAS is not responsible.

SPA & VERANDAS has the right to make additions to the Privacy Policy, making available to the Client its current content by placing the version on the SPA & VERANDAS website.