Privacy policy
Last Updated: 26/07/2026
Lana Tauriņa undertakes to ensure the protection and privacy of your personal data in accordance with:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) requirements (hereinafter – General Data Protection Regulation);
other regulatory enactments in force in the Republic of Latvia in the field of personal data processing and privacy;
in accordance with this Privacy Policy.
With this Privacy Policy, Lana Tauriņa provides you with information regarding the principles, types, purposes, volumes, conditions, and terms of personal data processing carried out by it, as well as regarding your rights in connection with the personal data processing carried out by us.
Definitions used:
Personal data – any information relating to an identified or identifiable natural person.
Data subject – an identified or identifiable natural person (hereinafter – the Client).
Profiling – automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person.
Controller – Lana Tauriņa
Processor – a natural or legal person who processes personal data on behalf of the controller.
Third party – a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Data subject's (client's) consent – any freely given, specific, informed, and unambiguous indication of the Client's wishes by which the Client, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Cookies – text files stored on the device used by the user in order to individualize the usability of Lana Tauriņa's website for each specific website user.
1. General Provisions
1.1. The controller of your personal data is Lana Tauriņa, registration number: 21039711700, address: Turaidas iela 6, Riga, LV-1039.
1.2. Processors of your personal data are legal entities that process personal data on behalf of Lana Tauriņa and in accordance with the instructions of Lana Tauriņa, and who have undertaken to comply with the requirements of regulatory enactments in the field of data processing.
1.3. When carrying out personal data processing, the Controller:
1.3.1. ensures the legality and fairness of personal data processing;
1.3.2. respects the rights of the Client;
1.3.3. provides transparent information to the Client that their personal data is collected, used, viewed, or otherwise processed, and the extent to which personal data is or will be processed, specifying the particular processing purposes;
1.3.4. ensures that personal data is adequate, relevant, and necessary for the purposes for which it is processed. The Controller processes only such data and to such an extent that corresponds to the Controller's economic activity in order to ensure the provision of services / sale of goods.
1.3.5. ensures that Personal Data is not stored longer than necessary, i.e., while the contract concluded with the Client is in force, while the Controller or the Client can pursue their legitimate interests in accordance with the procedure specified in external regulatory enactments, while either party has a legal obligation to store the data, while the Client's consent for the relevant processing of personal data is in force, provided there is no other legal basis for data processing. After the personal data retention period expires, personal data is permanently deleted.
1.3.6. ensures that Personal Data is accurate, and ensures that inaccurate personal data is rectified or deleted.
1.3.7. ensures that Personal Data is processed in a manner that ensures appropriate security and confidentiality of personal data, including protection against unauthorized access to Personal Data or unauthorized use thereof and unauthorized access to systems and equipment used for data processing.
1.3.8. ensures that Personal Data is not transferred without secure and adequate protection.
2. Legal bases for personal data processing
2.1. Your personal data is processed based on the following legal bases:
Point (a) of Article 6(1) of the General Data Protection Regulation – when your consent has been received;
Point (b) of Article 6(1) of the General Data Protection Regulation – to ensure performance of a contract;
Point (c) of Article 6(1) of the General Data Protection Regulation – to ensure compliance with a legal obligation;
Point (f) of Article 6(1) of the General Data Protection Regulation – for the protection of our legitimate interests or the legitimate interests of third parties;
2.2. By choosing not to provide personal data in any part or by withdrawing consent fully or in part (with regard to specific provided data), Lana Tauriņa will not be able to provide the client with those services for the provision of which the relevant personal data is required.
3. Personal data and purposes of processing
3.1. The Controller processes personal data for the following purposes:
3.1.1. Client identification;
3.1.2. preparation and conclusion of a contract;
3.1.3. delivery of goods and provision of services (performance of contractual obligations);
3.1.4. advertising and distribution of goods/services or for commercial purposes;
3.1.5. customer service; 3.1.6. handling and processing of objections;
3.1.7. administration of settlements; 3.1.8. improvement of website operation;
3.1.9. statistics and market research;
3.1.10. ensuring security.
3.2. The Controller carries out the following processing of personal data:
3.2.1. processing of registration data – name, surname, email address, phone number.
3.2.2. cookies – Client's browsing history and behavior on the Controller's website.
3.2.3. processing of accounting data – order history, payment information, delivery information.
3.2.3. marketing information – name, surname, phone number, email address, device identification number.
3.2.4. right of claim – name, surname, contact information, order and delivery information.
3.3. The processing of personal data for commercial purposes is carried out only if a freely given, specific, informed, and unambiguous indication from the Client has been received confirming that the Client agrees to such actions. The Client may object to receiving commercial communications in accordance with legal acts by withholding consent to receive commercial communications.
3.4. Refusal to receive commercial communications does not entail legal consequences for the Client and does not restrict the Client's rights to purchase goods and services on the website.
4. What personal data do we transfer to third parties
4.1. We may transfer the Client's personal data to the categories of data recipients specified below:
4.1.1. Financial operations related to the purchase of goods on the website may be processed by the Controller's payment service providers. We disclose the Client's financial transaction data to the Controller's payment service providers to the extent necessary for carrying out payment transactions, issuing refunds, and reviewing complaints.
4.1.2. For the purpose of providing specific services, we may transfer the Client's personal data to other service providers, for example, website hosting providers, courier services, server and technical maintenance service providers, email service providers, accounting service providers.
4.2. We may transfer the Client's personal data not only in the cases specified above, but also in fulfilling our legal obligations, as well as, if necessary, to protect the interests of the Client or other persons, for example, by applying to a court or state institutions.
4.3. We may transfer the Client's personal data to state institutions in accordance with the regulatory enactments in force in the Republic of Latvia, within the procedure and scope specified in regulatory enactments.
4.4. For direct marketing purposes, with the Client's consent, we may transfer personal data to our partners who provide marketing services to us.
4.5. We will engage only those service providers who have implemented appropriate technical and organizational measures that ensure an adequate level of data processing security, complying with the procedures specified in regulatory enactments – a level of personal data processing and protection equivalent to the requirements set out in the General Data Protection Regulation.
5. Cookies
5.1. The website may use cookies. The terms of cookie usage are available here.
6. Commercial communications
6.1. A commercial communication is any communication in electronic form intended for the direct or indirect promotion of goods or services, or for the promotion of the image of a merchant, organization, or person engaged in commercial, economic, or regulated professional activity. Information enabling direct access to general information about the service provider and its activity (domain name or electronic mail address) is not considered a commercial communication.
6.2. In order to provide information about the services, promotions, and other activities offered on www.skaistiemmatiem.lv, the Controller may use personal data.
6.3. By using www.skaistiemmatiem.lv, one can sign up (give consent) to receive commercial communications.
6.4. The consent given by the Client to receive commercial communications remains valid until its withdrawal (including after the termination of the service agreement). The Client may opt out of receiving further commercial communications at any time in one of the following ways:
6.4.1. by sending an email to skaistiem.matiem@gmail.com;
6.4.2. by using the automated option to opt out of receiving further communications provided in the commercial communication, by clicking on the unsubscribe link at the end of the relevant commercial communication (email).
6.5. Lana Tauriņa ceases sending commercial communications as soon as the Client's request is processed. Request processing depends on technological capabilities and may take up to three days.
7. Your rights
7.1. Right to receive information about personal data processing.
7.2. Right to access your personal data stored by us.
7.3. Right to request the rectification of your personal data stored by us.
7.4. Right to request us to erase your personal data (“right to be forgotten”).
7.5. Right to restriction of processing of your personal data.
7.6. Right to object to the processing of your personal data.
7.7. Right to object to your personal data being processed for direct marketing purposes.
7.8. Right to data portability.
7.9. Right to withdraw consent regarding the processing of your personal data.
7.10. Right to lodge a complaint with a supervisory authority.
7.11. If you wish to exercise your rights, or in case you have questions regarding the processing of personal data or the exercise of rights, contact us by email: skaistiem.matiem@gmail.com.
7.12. If you believe that in processing your personal data we are violating the legal enactments governing personal data protection, you have the right to lodge a complaint with the Data State Inspectorate, address: Elijas iela 17, Riga, LV-1050, https://www.dvi.gov.lv/lv/.
8. Consent and Privacy Policy changes
8.1. By using the website www.skaistiemmatiem.lv and/or participating in the activities of www.skaistiemmatiem.lv, the Client confirms consent to personal data processing.
8.2. Withdrawal of consent does not affect data processing carried out during the time the Client's consent was in force.
8.3. Upon withdrawal of consent, data processing carried out on other legal bases cannot be terminated.
8.4. Upon receiving a Client's request regarding the exercise of their rights, the Controller verifies the Client's identity, evaluates the request, and executes it in accordance with regulatory enactments.
8.5. The Controller sends the response to the Client by mail to their specified contact address via registered letter, or as an electronically signed response by email upon the client's request, taking into account the response receipt method specified by the Client as far as possible.
8.6. The Controller ensures compliance with data processing and protection requirements in accordance with regulatory enactments and, in case of a Client's objection, takes reasonable actions to resolve the objection. However, if this fails, the Client has the right to apply to the supervisory authority.
8.7. The Controller reserves the right to unilaterally amend and supplement the Privacy Policy at any time without notice, publishing the changes on www.skaistiemmatiem.lv under the “Privacy Policy” section.
9. Contact us
9.1. In order to improve the quality of our services, we are always eager to hear feedback from our clients, and we are ready to answer any questions that may arise.
9.2. To contact us, you can use any communication channel most convenient for you, as specified in the Privacy Policy or on the website www.skaistiemmatiem.lv in the “Contacts” section.