1. Controller and its contact information

• The controller of personal data processing is SIA "ATAR" (unified registration No. 40003850212, legal address: "Gatves" 5, Madliena, Madliena parish, Ogre municipality, LV-5045, actual address: Visvalža street 7, Riga, LV-1050), which owns the online store "www.atarserviss.lv, hereinafter – "ATAR".
• ATAR contact information regarding personal data processing issues: via email kafija@atar.lv or by visiting ATAR's actual address.

2. Purpose of the Privacy Policy

The purpose of the Privacy Policy is to provide information on the purpose, scope, protection, and processing terms of personal data processing.

• Personal data is any information relating to an identified or identifiable natural person, i.e., an ATAR customer, such as: name and surname, personal identification number, residential or delivery address, personal phone number, personal email, occupation, services received, billing information, telephone and electronic communication information, and other information applicable to a natural person - an ATAR customer.

3. Scope of application

The Privacy Policy is applied to ensure privacy and personal data protection for natural persons or data subjects (hereinafter – Customers):

• potential, former, and current ATAR customers and buyers;
• visitors of the ATAR online store;
• visitors of ATAR stores, offices, and other premises, including those subject to video surveillance;
• The Privacy Policy applies to data processing regardless of the form or environment in which the Customer provides personal data (in the ATAR online store, mobile applications, paper format, or electronically) and in which systems or paper form they are processed.

4. Purposes of personal data processing:

ATAR processes personal data in accordance with data processing purposes and legal bases.

• for the sale, lease of goods, and provision of commercial activities:
• for customer identification and service;
• for the preparation of a waybill or invoice;
• for the delivery of goods;
• for the return or exchange of goods;
• for the refund of the purchase amount;
• for the fulfillment of warranty obligations;
• for the improvement of goods, development of new goods;
• for commercial purposes – advertising and distribution of goods;
• for reviewing and processing customer complaints;
• for customer retention;
• for increasing loyalty or granting benefits (discounts) to regular customers;
• for payment administration and report preparation;
• for the maintenance and improvement of the website and mobile applications;
• for business analysis and planning;
• for compiling statistics, improving the quality of the website and services;
• for creating customized content for customers using advertising;
• for providing information to state or municipal authorities in the cases and scope specified in external regulatory enactments.

5. Legal basis for personal data processing

The legal bases for the processing of the Customer's personal data performed by ATAR are as follows:

• Customer's application or order – to fulfill the Customer's order (purchase), deliver goods to the Customer, return goods or money, exchange goods, review a Customer complaint, fulfill warranty obligations, etc.;
• for the execution of regulatory enactments (laws) – to fulfill obligations specified in regulatory enactments (laws) binding on ATAR;
• Customer's consent;
• legitimate interests – to implement ATAR's legitimate interests arising from regulatory enactments (laws) or from obligations existing between ATAR and the Customer.

ATAR's legitimate interests are:

• to conduct commercial activities;
• to trade and lease goods;
• to ensure the fulfillment of contractual obligations;
• to save Customer reservations and applications for the purchase of goods, other applications and submissions, notes on them, including those made verbally by calling service phones, or on the website;
• to analyze the operation of the ATAR online store, develop and implement their improvements;
• to administer the Customer's account in the ATAR online store;
• to take actions for customer retention;
• to segment the customer database for more efficient sales of goods;
• to develop the product assortment;
• to advertise its goods by sending commercial notifications;
• to send other messages about the progress of order or obligation fulfillment and conditions essential for fulfillment;
• to ensure financial and business accounting and analytics;
• to ensure and promote the efficiency of sales and delivery of goods;
• to administer payments and outstanding payments;
• to turn to state or municipal institutions and courts for the protection of its legal interests, as well as for legal assistance;

6. Personal data processing

• ATAR processes personal data in accordance with data processing purposes and legal bases.
• ATAR processes Customer data using modern technological capabilities, taking into account existing privacy risks and ATAR's reasonably available organizational, financial, and technical resources.
• The Customer's refusal to provide ATAR with personal data that is absolutely necessary for the performance of specified actions creates obstacles for the Customer to receive, and ATAR to perform, specified actions, for example: buying/selling a product in the ATAR online store, ordering product delivery/delivering a product, returning a product, receiving/refunding money for a purchase, receiving/granting loyalty points, etc.
• Regarding the Customer, ATAR can perform automated decision-making, i.e., based solely on automated processing, which takes place using technological means and without human intervention. The Customer can object to automated decision-making; in some cases, this may limit the Customer's ability to use or receive available options (for example, applying for a product return and purchase refund).
• For high-quality and prompt fulfillment of Customer orders (reservations), ATAR may authorize third parties or its cooperation partners to perform separate delivery activities, such as delivery of leased goods, sending invoices, etc. If, for the performance of these tasks, third parties or cooperation partners process Customer personal data available to ATAR, the respective third parties or cooperation partners are considered processors, and ATAR has the right to transfer to them the Customer's personal data necessary for the performance of the task to the extent necessary for specific actions.

7. Transfer of personal data to third parties and third-country subjects

ATAR does not disclose to third parties and does not transfer Customer personal data or any other information about the Customer for processing outside the European Union and the European Economic Area, except:

• if the data must be transferred to the relevant third party within the framework of a concluded agreement to perform a function necessary for the performance of the agreement or delegated by law (for example, to a bank – within settlements, or to provide a service, for example, to deliver goods by courier or parcel locker);
•  
• Online payment processing is provided by the payment platform makecommerce.lv, therefore our company transfers the personal data necessary for payment execution to the platform owner Maksekeskus AS.
• according to the explicit and voluntary consent of the Customer;
• to persons specified in regulatory enactments (law), in specified cases, procedures, and scope;
• for the protection of ATAR's legitimate interests, for example, by turning to a court or other state institutions against a person who has infringed ATAR's legitimate interests.

8. Personal data protection

ATAR protects Customer data using modern technological capabilities, taking into account existing privacy risks and ATAR's reasonably available organizational, financial, and technical resources, including using the following security measures:

• Data encryption when transmitting data (SSL encryption);
• Intrusion protection and detection programs;
• Other protective measures according to current technical development possibilities.

9. Duration of personal data storage

ATAR stores and processes Customer personal data as long as one of the following grounds exists:

• while ATAR or the Customer can realize their legal interests in accordance with the procedures specified in regulatory enactments (law) (for example, submit objections or bring or conduct a lawsuit in court);
• while ATAR has a legal obligation to store the data specified in regulatory enactments (law);
• while the Customer's consent to the respective personal data processing is valid, if there is no other legal basis for data processing.
• When the circumstances mentioned here expire, the Customer's personal data is deleted.

10. Access to personal data and other Customer rights

The Customer has the right:

• to receive information specified in regulatory enactments related to the processing of their data. ATAR online store Customer information is placed and available in the private cabinet www.atarserviss.lv/pirceja-profils, where the Customer can check the correctness of their data and correct them.
• in accordance with regulatory enactments, to request ATAR access to their personal data,
• to request ATAR to supplement, correct, or delete personal data, or restrict processing in relation to the Customer,
• to object to processing (including the processing of personal data carried out on the basis of ATAR's legitimate interests),
• to data portability.

These rights are exercisable as far as data processing does not result from ATAR's obligations imposed on it by valid external regulatory enactments, and which are carried out in the public interest.

The Customer may submit a request for the exercise of their rights:

• in written form in person at ATAR's legal address, presenting an identity document;
• by electronic mail, signed with a secure electronic signature;
• in the private cabinet on the website www.atarserviss.lv/pirceja-profils

11. Cookie processing

• A cookie is a string of information containing only text that our web server sends to the browser's cookie file on your computer's hard drive. This allows our website to remember who you are when a connection between the web server and the web browser is established. The main purpose of a cookie is to identify users and allow our web server to provide you with customized web pages, which makes a visit to the SIA ATAR website more personal and relevant to your individual needs.
• The ATAR website (online store) may use cookies and other technologies, such as web beacons and pixel tags.
• When visiting the ATAR website (www.atarserviss.lv), the user is presented with a window containing a message that cookies are used on the website. By closing this message window, the user confirms that they have read the information about cookies and agree to them. In the security settings of any web browser, cookie restriction and deletion is possible.
• Cookies are used in the ATAR online store (website), identifying users as unique but anonymous persons. Using cookies helps ATAR improve the services provided, for example, by saving the list of items viewed by the Customer. Using cookies helps ATAR record the number of visitors and collect statistics and information about viewed items or reservations. All these data are collected anonymously, meaning we cannot connect the data to an individual user or an authenticated user who logged into the site with our online authentication service.

12. Use of cookies

ATAR and our partners also use cookies and other technologies to remember personal information when you use our website, applications, and online services. This happens, for example, by remembering information you previously provided in a web form. This website uses two types of cookies:

• Session cookies: these are temporary cookies that remain in your browser's cookie file until you leave our website. The cookie will disappear if you do not access the site for some time.
• Persistent cookies: this type of cookie remains in your browser's cookie file for a longer time. This time depends on the choice you make when configuring your internet browser. Persistent cookies allow information to be passed to the web server every time someone visits the site. Persistent cookies are also known as tracking cookies. These cookies may store, for example, but not limited to, the Site's language settings to remember the Site language to be used during the next visit.

13. Third-party cookies

• ATAR may at any time use third-party advertising providers, visitor traffic analytics service providers, and others to provide advertising and track our communication with the Site user. Third parties may use cookies to evaluate the effectiveness of ads and personalize ad content. Information that third-party advertising providers may collect can include data such as geographic location or contact information, such as an email address.
• Links to third-party websites may be placed on the ATAR website (www.atarserviss.lv), which have their own usage and personal data protection terms, for which ATAR is not responsible.

14. Allowing and blocking cookies

• You can allow or block cookies by changing your internet browser settings. Please see your browser instructions to learn more about how to change your browser settings.
• Please note that if cookies are blocked, certain features of the ATAR website will not be available.

15. Amendments to the Privacy Policy

ATAR has the right to unilaterally amend the Privacy Policy, making its current version available to the Customer. The current version of the Privacy Policy can be found on the ATAR website www.atarserviss.lv/privatuma-politika.