Privacy Policy

About us

Owner: SIA “Madam Bonbon”, registration nr. 40003958005, legal address K. Barona iela 14-9i, Rīga, LV-1050.

In this Privacy Policy, any use of the word “you”, “your” or similar refers to any visitor, newsletter subscriber or service user of website www.bonbonshoes.eu (hereafter – “the Website”). Such concepts as “we”, “our” or similar refers to SIA MADAM BONBON.

This privacy policy explains how we process personal data, the procedure for exercising the data subject’s rights, and issues related to the protection of personal data. Our privacy policy applies to our processing of personal data.

When processing personal data, we comply with the General Data Protection Regulation no. 2016/679 and the requirements of the Law on Data Processing of Natural Persons, as well as other requirements of legal acts in force in the Republic of Latvia.

Your privacy

Our goal is to inform you as clearly and comprehensibly as possible about how and why we use your personal information, and to make you feel safe when disclosing your personal data to us. Personal data is any information that can be used to identify an individual.

We take appropriate measures to ensure that your personal data is always safe with us and that the processing of your personal data takes place in accordance with applicable data protection laws and our internal policies and procedures. The privacy policy lets you know what data we can get about you and how we will use it. We will provide information about your rights and how you can contact us.

What categories of personal data do we collect and why?

• Direct marketing, advertising and promotional materials

Upon receiving your consent, we inform you about various news and current events related to our services and operations. If you want to receive our newsletter, you should indicate this desire in the application form of the Website or by applying in another way. If you wish to exercise your right to opt out of receiving newsletters (by withdrawing your consent), you can use the link provided in the emails or notify us in some other way.

• Cookies

Cookies are used when accessing the Website. Please see information about the use of cookies here: Use of cookies on the Website

• Data you provide when communicating with us

When you contact us or we need to inform you to reply to your request, process your submission, or contact you in the cases specified in the applicable law, we can identify you and contact you using the contact information available to us (phone number, e-mail address, postal address), ask for additional identifiable information if it is necessary to adequately protect privacy or to fulfil our duty, and to inform our partners to respond better to your wishes or improve our products and services. We can store mutual communications and your requests to ensure our legitimate interests (including to ensure proper customer service, to ensure efficient company management processes, to ensure and improve the quality of service, and to protect Madam Bonbon’s interest in claims or requirements), as well as on your initiative to enter into a contract and take the measures necessary for the conclusion of the contract.

• Video surveillance

We have video surveillance at the Madam Bonbon showroom (Krišjāņa Barona iela 14-9i, Riga) and process your personal data when you are in our store. Video surveillance is carried out for safety and for the purposes of theft prevention; it helps control access to rooms, helps ensure the safety of infrastructure, staff and visitors, helps to prevent, detect and investigate theft of equipment or personal belongings (of the manager or visitors), and help prevent or detect physical threats to staff and visitors. The data obtained in the video surveillance record is stored so that it cannot be accessed by third parties.

Video surveillance records in our systems are stored for up to 30 days. When receiving a legal request from a law enforcement agency or data subject, as well as by order of a board member of the Management Board, a separate video (or part thereof) may be stored for a longer period, but not longer than necessary (e.g. for the incident’s investigation).

More information on video surveillance and processing related data is available in our office or by contacting the manager.

• Investigation and prevention of unlawful actions directed at us

In order to detect and prevent illegal activities against us (for example, to investigate and prevent violations, protect and improve our information technology systems, prevent attacks, intrusions or unauthorised editing of the Website or to disrupt access to the Website, and to prevent spamming, phishing or other unauthorised activities), we may collect and process the data available to us, including by transferring it to law enforcement authorities or information technology security incident prevention authorities.

From what sources do we obtain personal data, and how accurate is it?

We obtain personal data from you. We collect the information we receive when you visit and use the Website by providing us with data (including data that you provide to us before receiving our service and data that you provide to us when signing up for newsletters or filling in information fields on the Website or in questionnaires), as well as the data you provide when contacting us. We may receive data from service providers that operate the Website, including statistical services, anti-attack, security and intrusion protection services, and we may also receive data from security service providers and from collaboration partners that promote opt-in opportunities for receiving our newsletters.

If your data that you have provided to us has changed (for example, contact information for receiving newsletters), you must inform us as soon as possible.

Who do we transfer your personal data to?

Service providers and cooperation partners

In order to fulfil our obligations to you, to ensure the website and our operation, we transfer your personal data to companies and institutions that provide services to us, such as services related to the maintenance and operation of the Website, or to send direct marketing messages, as well as security provision of services.

We make reasonable efforts to verify all service providers who process your personal data on our behalf. We evaluate whether cooperation partners (personal data processors) apply appropriate security measures so that the processing of your personal data takes place in accordance with our tasks, instructions and the requirements of regulatory acts. These companies are not entitled to use your personal data for any other purpose(s).

Law enforcement institutions, state and local government institutions

In order to fulfil the obligations set out in the legislation, we may transfer your personal data to law enforcement authorities (e.g. the police), state and municipal authorities upon their request. We may transfer your personal data to legal protection institutions (for example, courts), as well as state and local government institutions, legal service providers, including in order to defend our legitimate interests by drafting, submitting and defending claims, complaints and submissions.

Transfer of personal data outside the European Union and the European Economic Area (EU/EEA)

We always try to process your personal data in the territory of the European Union and the European Economic Area (EU/EEA).

The transfer and processing of personal data outside the EU/EEA may take place if there is a legal basis for this and adequate security measures have been taken so that the processing of personal data can be considered reasonably secure, taking into account the nature of the processing activities and the regulation established by law.

How long are your personal data stored?

All personal data obtained from you is stored as long as you use our services, or until you withdraw your consent if your personal data is processed on this basis. A longer period of storage of personal data is permitted to meet legal requirements for the minimum period of storage of documents or information or to protect our legitimate interests.

When this period is over, we will securely delete your personal data or make it inaccessible (archiving) or de-identifiable so that it can no longer be linked to you.

We reserve the right to delete or permanently anonymise your data sooner if the legal basis for its use has disappeared or if it is no longer necessary for the provision of the service or our operation.

You are responsible for storing and deleting the data on your end device (use the relevant settings of your internet browser to delete the cache and cookies).

How do we protect your personal data?

We provide, constantly review, and constantly improve security measures to protect your personal data from unauthorised access, accidental loss, disclosure or destruction. To implement this, we apply modern technologies, technical and organisational requirements, and data encryption.

However, we recommend that you comply with the general security rules for computer and internet use, as well as the requirements for the protection and storage of your private data, and we will not take responsibility for unauthorised access to your personal data and/or data loss, if it has happened due to your fault or negligence.

What are your rights?

As a data subject, you have general rights provided by the General Data Protection Regulation and other applicable laws, including:

Access to personal data

You have the right to request confirmation from us about whether we are processing personal data related to you, and in such cases to request access to this personal data or that we provide information about personal data if direct access is not provided.

Correction of personal data

If you believe that the information about you is incorrect or incomplete, you have the right to ask us to correct or supplement it.

Withdrawal of Consent

To the extent that we process your personal data based on your consent, you have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent will not affect the legality of the processing based on the consent given before the withdrawal, or in cases where the data processing is carried out according to another legal basis.

Objection to data processing for the purpose of delivering the addressed information

You have the right to object at any time to the processing of your personal data for the purposes of direct marketing or the delivery of targeted information.

Objection to processing based on legitimate interests

You have the right to object to the processing of personal data that we process based on our legitimate interests, however, we will continue to process your data even if you have objected if we have valid reasons to continue processing your personal data. To exercise the aforementioned rights, please submit a written application to us.

Deletion

Under certain circumstances, you have the right to ask us to delete your personal data, however, this does not apply to cases where the law requires us to keep the data. To exercise the aforementioned rights, please submit a written application to us.

Limitation of processing

Under certain circumstances, you have the right to restrict the processing of your personal data. Please note that if you request that the processing of your data be restricted, this may affect your ability to receive our services. To exercise the aforementioned rights, please submit a written application to us.

Data transfer

You have the right to receive or transfer your personal data to another data controller. This right only includes data that you have provided to us based on your consent or contract, and where the processing is automated. To exercise the aforementioned rights, please submit a written application to us.

What law governs the website?

The operation of the website, as well as all relations between you and SIA “Madam Bonbon”, are governed by the laws of the Republic of Latvia, as well as the applicable laws of the European Union.

Can the privacy policy change?

This privacy policy may be changed or supplemented at any time. The current privacy policy will be published on the Website. Any version of the Privacy Policy posted on the Website supersedes all previous versions of the Privacy Policy and is effective immediately upon posting.

Who regulates data processing on other linked websites?

Our website may contain links to third-party websites (homepages) that have their own terms of use and personal data protection, for which we are not responsible.

Who can I contact if I have any questions?

If you have any questions, comments or requests related to the privacy policy or the processing of your personal data, contact us.

If you are not satisfied with the answer you received, you have the right to file a complaint with the supervisory authority – Data State Inspectorate (www.dvi.gov.lv).

Contact information of the owner and data protection officer

To contact us, you can write to [email protected] or SIA “Madam Bonbon”, K. Barona iela 14-9i, Riga, Latvia, LV-1050, phone: +371 2022 2235

Version 1.1, 30.12.2022.