1. Data controller
The data controller and owner of the online store is IK “LEDFRAMES”, registration number 40002225320, address: Cietokšņa iela 55A-21, Daugavpils, LV-5401, Latvia. Email: info@ledframes.eu, phone / WhatsApp: +371 25547706.
2. Data we process
- name, surname, email, phone number, company and recipient details;
- delivery and billing address;
- order contents, prices, discounts, statuses and interaction history;
- text, logos, images, designs and previews;
- payment identifiers, amount and status supplied by Stripe;
- correspondence, complaints, photographs and videos;
- technical logs, IP address to the extent technically necessary, device information and pseudonymised statistics;
- consents and settings for marketing communications and cookies.
3. Purposes and legal bases
Order placement, payment, production and delivery: performance of a contract or steps taken before entering into a contract.
Accounting and tax records: compliance with a legal obligation.
Support, complaints, fraud prevention and protection of legal rights: performance of a contract, legal obligations and the Seller’s legitimate interests.
Website security and technical operation: legitimate interests and, where required, consent.
Marketing communications and optional analytics: consent where no other legal basis is permitted by law.
4. Required information
Information marked as required during checkout is necessary to enter into and perform the contract. Without it, the Seller may be unable to accept payment, produce or deliver the order. Optional information does not have to be provided.
5. Recipients
Data may be shared only to the extent necessary with hosting and database providers, Stripe, carriers, email service providers, IT support providers, accountants, lawyers, insurers and public authorities where a lawful basis exists.
6. International transfers
Some providers may process data outside the European Economic Area. In that case, GDPR transfer mechanisms are used, including an adequacy decision, Standard Contractual Clauses or another lawful basis. Information about the applicable mechanism may be requested from the controller.
7. Retention periods
- order data and accounting records - for the period required by tax and accounting law;
- correspondence and complaint materials - until the matter is completed and thereafter for the period necessary to protect legal claims;
- designs and production files - for as long as necessary to fulfil the order, reproduce the product, handle complaints and protect legal rights;
- technical security logs - for a limited period necessary to investigate incidents;
- marketing data - until consent is withdrawn or an objection is made, unless retention is required to demonstrate previously obtained consent.
After the applicable period ends, data is deleted, anonymised or retained only where required by law.
8. Data subject rights
Where provided by the GDPR, a person may request access, correction, deletion, restriction of processing and data portability, object to processing based on legitimate interests and withdraw consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
9. Identity verification and response time
To protect personal data, the controller may request reasonable information to verify identity. A response is provided without undue delay and normally within one month unless the GDPR permits an extension.
10. Automated decision-making
LEDFRAMES does not make decisions producing legal or similarly significant effects solely through automated processing unless this is expressly disclosed before such processing.
11. Security
Reasonable organisational and technical measures are used, including access restrictions, secure connections, control of administrative sessions and use of a specialised payment provider. No method of transmission or storage can guarantee absolute security.
12. Complaints
You may first contact info@ledframes.eu. A data subject also has the right to lodge a complaint with Datu valsts inspekcija or another competent EU supervisory authority.
13. Changes to this policy
This policy may be updated when operations, providers or legislation change. The current revision date is shown at the top of the page.