Privacy policy
Controller and contact details
Personal data controller: SIA Healthy, unified registration No. LV42103099620 (hereinafter: the Controller or the Company), address: Mazā Gāles iela 1, Sigulda, LV-2150, Latvia, tel. +371 254 64 855.
SIA Healthy’s contact details for matters relating to the processing of personal data: info@oxybeet.eu.
When SIA Healthy processes your personal data, you have the right to ask questions about the processing of your personal data by sending a request using the contact details provided.
When you use the services offered by SIA Healthy on oxybeet.eu, your data is processed for the purposes set out below and stored for as long as any of the specified criteria apply. SIA Healthy undertakes to process only personal data necessary to fulfil contractual obligations, conduct business and comply with legal requirements.
You will also be asked to give clear and unambiguous consent to the collection of information using cookies and similar technologies. See the Cookie policy. The website is owned and operated by SIA Healthy.
What personal data we collect and why
Oxybeet.eu collects only the data needed to fulfil your order and communicate with you:
- First name and surname: to process your order, issue an invoice and let Omniva know who should receive the parcel.
- Email address: for your order confirmation, invoice, delivery notifications and replies to your questions. We send news only with your separate consent.
- Mobile phone number: Omniva sends the parcel locker door code by text message, and we can contact you if there is a problem with delivery.
- Your chosen Omniva parcel locker: to deliver the parcel where you want to receive it. We do not ask for your home address.
- Order contents, amount, date and payment status: to fulfil your order, provide warranty and withdrawal rights, and comply with the Accounting Law. We do not see or store payment card details. These are processed only by the payment platform.
- Company name, registration number, VAT number and registered address: only if you request an invoice for a company.
- Communication content: the content of emails and calls when you write or call us, so we can respond and resolve your enquiry.
- Technical data (IP address, browser type, pages visited, cookie identifiers): for website operation and security and, only with your consent, for visitor statistics and advertising measurement. See the Cookie policy for more details.
Purposes of personal data processing
When processing personal data, SIA Healthy complies with the laws and regulations in force in the Republic of Latvia, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation, hereinafter: the Regulation), and other laws and regulations concerning privacy and the processing of personal data.
SIA Healthy processes personal data received directly from the data subject (the person who has provided the personal data) or indirectly through corporate clients. Personal data received indirectly is processed only when necessary to provide a service under contractual obligations.
The purposes for which SIA Healthy processes personal data are:
- To provide services under contractual obligations (placing an order on oxybeet.eu, sending an invoice, communication, delivery of goods and other data processing necessary for the purchase of goods). Legal basis for processing: performance of a contract (Article 6(1)(b) of the Regulation).
- To process information submitted when subscribing to Oxybeet.eu email news. You may unsubscribe at any time using the unsubscribe option provided in the email or by writing to info@oxybeet.eu. Legal basis for processing: consent of the data subject (Article 6(1)(a) of the Regulation).
- To process information about questions you ask when contacting us by email or telephone. SIA Healthy processes the data you provide voluntarily (first name, surname, telephone number, email address and other information provided) only to contact you and answer your questions. Legal basis for processing: consent of the data subject (Article 6(1)(a) of the Regulation) and the legitimate interests of the Controller (Article 6(1)(f) of the Regulation).
- To process transaction data in accordance with the Accounting Law. Legal basis for processing: compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).
- To improve the quality of customer service, so that SIA Healthy can assess your objections or comments about the service and prevent similar cases from occurring in the future. Legal basis for processing: the legitimate interests of the Controller (Article 6(1)(f) of the Regulation).
- To provide information to public authorities in the cases and to the extent required by applicable laws and regulations. Legal basis for processing: compliance with a legal obligation (Article 6(1)(c) of the Regulation).
To protect data subjects’ right to privacy, SIA Healthy observes confidentiality principles and strictly limits the disclosure of personal data. Only persons authorised by SIA Healthy are entitled to modify and process personal data.
Reminder about an incomplete purchase
If you do not complete a purchase on oxybeet.eu, we may send you a reminder email within 72 hours to check whether you experienced any technical problems during checkout. We only send this email if you provided your email address during the purchase.
Personal data retention period
SIA Healthy retains and processes personal data while at least one of the following criteria applies:
- until contractual obligations have been fully performed;
- until consent is withdrawn, but no longer than 1 year from the date consent was given;
- until the expiry of the data retention period prescribed by applicable laws and regulations or the period during which the data subject may exercise their legitimate interests and rights (for example, to submit objections or bring a claim in court);
- while there is a legal obligation to retain the data (for example, under the Accounting Law or the Consumer Rights Protection Law);
- while the data subject's consent to the relevant processing of personal data remains valid, if there is no other lawful basis for processing.
Once none of these circumstances applies, the data subject's personal data is deleted.
Transfer of personal data
To fulfil our obligations to you, we may transfer your personal data to our partners and data processors who carry out the processing necessary to fulfil contractual obligations: SIA Omniva, registration no. 40103527192 (delivery), Maksekeskus AS Latvian branch, registration no. 40203388134 (payments), SIA Finance and Accounting Services, registration no. 50003917511 (accounting), as well as website hosting and email delivery service providers. These companies are required by law and by our agreements with them to protect your personal data and process it only for the purposes we specify.
Payment processing is provided by the payment platform https://makecommerce.lv/, so our company transfers the personal data required to process payments to the platform's owner, Maksekeskus AS.
Once your shipment has been handed over for delivery, we transfer your name, email address and order number to the review platform Trustpilot A/S (Denmark) so that it can send you one invitation to review your purchase. The legal basis for processing is our legitimate interest (Article 6(1)(f) of the Regulation) in learning what customers think. You can opt out of the invitation at any time by writing to info@oxybeet.eu.
Personal data is not transferred to third countries (countries outside the European Union and the European Economic Area), except where the service provider provides safeguards that comply with the Regulation.
Children
SIA Healthy does not provide services to minors. If SIA Healthy discovers that it has collected and processed a minor's personal data, appropriate steps will be taken to delete that personal data.
Data subject rights
Data subject rights apply to every natural person whose personal data is processed by SIA Healthy, regardless of how the personal data was provided: on the oxybeet.eu website, by email or by telephone. The data subject has the following rights:
- to contact us with questions about the processing of your data by writing to info@oxybeet.eu or by post to Mazā Gāles iela 1, Sigulda, LV-2150, Latvija;
- the right to access your data. If we process your data, we are obliged to provide information about its processing free of charge. Before providing this information, we are obliged to verify your identity;
- the right to request correction of incomplete or inaccurate personal data;
- the right to object to the processing of personal data by SIA Healthy if there is no longer an obligation to retain it;
- the right to request the deletion of data, restrict the processing of data and receive a copy of your data in electronic format.
You can request to exercise these rights by writing to info@oxybeet.eu. We will fulfil your request to the extent that it complies with applicable laws and regulations.
Changes to the policy
SIA Healthy may revise this privacy policy at any time. We will inform you of any significant changes to the processing of personal data through an appropriate communication channel.
Policy and validity
If you have any questions or comments about the processing of your personal data, please write to info@oxybeet.eu. You will receive a response within one month of receipt of your email. If the matter is complex, we will inform you that more time is needed to resolve it, but no more than three months.
You have the right to lodge a complaint with the supervisory authority, the Data State Inspectorate (www.dvi.gov.lv).
Security
SIA Healthy protects data subjects' data using modern technologies, taking into account existing privacy risks and reasonably available organisational, financial and technical resources, such as data encryption, firewalls and other security measures.
In the event of a personal data breach that is likely to result in a high risk to a data subject's rights and freedoms, SIA Healthy will notify the relevant data subject or publish information on oxybeet.eu.