Privacy policy

SIA "Zibenszeļļi"
Reg. No. 42103039994
Address: Zemarāji, Kapsēde, Medze parish, South Kurzeme municipality, LV-3461

1. Introduction
SIA "Zibenszeļļi" (hereinafter – the Controller), on the website www.firewoods.lv (hereinafter – the Website), processes personal data obtained from the data subject – the Website user (hereinafter – the User).

The Controller cares about the User's privacy and the protection of personal data, respecting the User's right to the lawfulness of personal data processing in accordance with applicable laws – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation) and other applicable laws in the field of privacy and data processing.

In view of the above, the Controller has developed this privacy policy to provide the User with the information required by the Regulation.

The privacy policy applies to data processing regardless of the form and/or environment in which the User provides personal data (on the Website, in paper format, in person, or by telephone).

The Controller reserves the right to change these terms at any time. It is the responsibility of the Website visitor to independently check the content of the Website to stay informed about changes to the terms.

2. Identity and Contact Information of the Controller

The Controller is SIA "Zibenszeļļi", Reg. No. 42103039994. The Controller's address is Zemarāji, Kapsēde, Medze parish, South Kurzeme municipality, LV-3461.
Website: www.firewoods.lv
E-mail: info@firewoods.lv, Phone: +371 27 193 353

3. Purposes and Legal Basis for Personal Data Processing
If the User submits their personal data to the Controller by phone, via Website contact forms, e-mail, or other mail, we store and use this information to fulfill or conclude a relevant service agreement, including:

Customer identification;
Preparation and conclusion of the agreement;
Provision of services (fulfillment of contractual obligations);
Customer service;
Review and processing of objections;
Increasing customer loyalty;
Administration of payments and settlements;
Debt recovery and collection;
Proving facts;
Website maintenance and operational improvement;
Business planning and analytics;
Planning and accounting.

Additionally, we will process this data to provide information to state administration authorities and subjects of operational activities in cases and to the extent specified in external regulatory acts.

The legal bases for data processing are: the conclusion and execution of a contract, compliance with regulatory acts, the consent of the Client (data subject), and our legitimate interests (e.g., to verify the Client's identity before concluding a contract; to ensure the fulfillment of contractual obligations; to analyze Website activity and ensure service efficiency, etc.).

4. Categories of Personal Data
Categories of personal data include: name, surname, personal identification code, e-mail or postal address, IP address, phone number, content of a message or letter, etc.

5. Categories of Personal Data Recipients
Data is disclosed to those employees of the Controller who require it for the performance of their direct duties in order to fulfill or conclude the relevant service agreement.

In obtaining and using personal data, we partially use the services of external service providers who, according to the agreement, strictly follow our instructions and whom we constantly monitor before and during the use of the service.

6. Categories of Data Subjects
Categories of data subjects include the Controller's current, former, and potential customers, as well as other persons expressing a desire to contact the Controller.

7. Data Transfer Outside Latvia
The received data is not planned to be transferred outside of Latvia, the European Union, or the European Economic Area, nor will it be transferred to any international organization. At the same time, given that the Website is linked to Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.

8. Data Storage Duration
We process and store the User's personal data as long as there is a legal obligation for either party to store the data.
After these circumstances cease, and unless otherwise stated in the data protection instructions, we delete personal data no later than three months after the original reason for data retention is no longer valid, except in cases where we have a legal obligation to continue storing this data (e.g., but not limited to, for accounting or litigation purposes).

9. Data Subject's Access to Personal Data
The data subject has the right to receive access to their personal data within one month from the date of submission of the relevant request.
The User may submit a request for the exercise of their rights in writing: in person at the Controller's legal address (presenting an identification document), by post, or via e-mail signed with a secure electronic signature.
Upon receiving the User's request, the Controller verifies the User's identity, evaluates the request, and fulfills it in accordance with regulatory acts.

The User has the right to receive information specified in regulatory acts regarding the processing of their data, the right to request access to their personal data, as well as to request the Controller to supplement, correct, or delete it, restrict processing, or the right to object to processing, provided these rights do not conflict with the purpose of data processing (conclusion or fulfillment of contracts).
The data subject does not have the right to receive information if its disclosure is prohibited by law in the fields of national security, state defense, public safety, or criminal law, or for the purpose of ensuring state financial interests in tax matters or the supervision of financial market participants and macroeconomic analysis.

10. Cookie Processing
The Website collects data about visitors, enabling the Website maintainer to evaluate the usefulness of the Website and how it could be improved.
The Controller constantly improves the Website to enhance its usability; therefore, the Controller needs to know what information is important to visitors, how often they visit, what devices and browsers they use, what region they come from, and what content they prefer to read.

The Controller uses Google Analytics, which allows for the analysis of visitor behavior. Information on Google Analytics' principles is available on the Google website. The Controller uses the collected data in its legitimate interests to improve the understanding of visitor needs and accessibility of information. Visitors can opt-out of Google Analytics data collection at any time.

The server hosting the Website may record requests sent by the visitor (device used, browser, IP address, date and time of access). This data is used for technical purposes: to ensure the proper functioning and security of the Website and to investigate potential security incidents. The basis for collecting this data is the Controller's legitimate interest in ensuring technical availability and integrity.

Cookies are small files stored on the visitor's computer by the browser. Some cookies are used to select and apply information and advertisements based on previously viewed content, making the Website simple and individually tailored. Further information on cookies and their management can be found at www.aboutcookies.org.

The Website uses cookies to collect User IP addresses and browsing information, allowing the Website to remember visitor choices. This helps the Controller track data flow and interaction, using this data to analyze behavior and improve the Website. The legal basis for cookies is the legitimate interest in ensuring functionality and integrity.

Visitors can control and/or delete cookies at their discretion. Most browsers can be set to block cookies. If blocked, the visitor may have to manually adjust settings upon every visit, and some services or functions may not work.
Statistical data is only accessible to employees responsible for data analysis. Unless otherwise specified, cookies are stored until the purpose for which they were collected is fulfilled, then deleted.
If the Website provides forum or comment options, the IP address and data provided by the visitor are stored. Cookies containing this data may be stored for one year for convenience.

11. Third-Party Websites
We may cooperate with third parties authorized to place third-party cookies on our sites or in our services, apps, and tools with your consent. These providers help us ensure a better, faster, and safer experience. Note that third-party cookies are subject to third-party privacy policies; we assume no responsibility for them.
The Website uses the "Facebook pixel" tool to tailor content and ads for Facebook users. More information on Facebook's privacy policy can be found on their website, where you can also change your ad settings.

12. Right to File a Complaint with a Supervisory Authority
The data subject has the right to file a complaint with the supervisory authority (Data State Inspectorate). Documents are accepted by post at Elijas iela 17, Rīga, LV-1050, or via e-mail at pasts@dvi.gov.lv.

13. Validity of the Privacy Policy
We reserve the right to periodically change and supplement the content of this privacy policy to clarify the description of how we process your data.
Therefore, we invite you to regularly review this privacy policy to stay informed about the processing of your personal data on the Website.