Skip to content
TwoBro
Contacts

Privacy policy

1. General provisions

1.1. This privacy policy describes how SIA "Two Bro", reg. No. 40203468069, Saules iela 2-115, Piņķi, Babītes pag., Mārupes nov., LV-2107 (the “Controller”), obtains, processes and stores the personal data it receives from its customers and from people who visit the website www.twobro.lv (the “Data Subject” or “you”).

1.2. Personal data is any information relating to an identified or identifiable natural person, i.e. the Data Subject. Processing is any operation performed on personal data, such as collection, recording, alteration, use, consultation, erasure or destruction.

1.3. The Controller follows the data processing principles laid down by law and processes personal data in accordance with the legislation in force.

2. Obtaining, processing and storing personal data

2.1. The Controller obtains, processes and stores information identifying a person mainly through the website and by e-mail.

2.2. By visiting the website and using the services offered on it, you agree that any information you provide is used and managed for the purposes set out in this privacy policy.

2.3. The Data Subject is responsible for the personal data provided being correct, accurate and complete, and must inform the Controller without delay of any change to it.

2.4. The Controller is not liable for damage caused to the Data Subject or third parties as a result of incorrect personal data being provided.

3. Processing of customers’ personal data

3.1. The Controller may process the following personal data:

  • first name and surname;

  • contact details (e-mail address and/or phone number);

  • transaction data (shipments, delivery address, price, payment information, etc.);

  • other information provided when using the services offered on the website or when contacting us.

3.2. The Controller has the right to check the accuracy of the data provided against publicly available registers.

3.3. The legal basis for processing personal data is Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation: the data subject’s consent; the performance of a contract or steps taken at the data subject’s request before entering into one; compliance with a legal obligation of the Controller; and the legitimate interests of the Controller or a third party, except where they are overridden by the interests or fundamental rights of the data subject.

3.4. The Controller stores and processes personal data for as long as it is needed for the purposes for which it was obtained; as long as the Controller or the Data Subject may pursue their legitimate interests as provided by law; as long as there is a legal obligation to keep the data (for example under the Accounting Law); or as long as the Data Subject’s consent is in force. Once these conditions end, the personal data is deleted or anonymised.

3.5. To meet its obligations, the Controller may pass personal data to partners and processors acting on its behalf, such as accountants and courier services. On request, personal data may be passed to public and law enforcement authorities, and used to defend the Controller’s legal interests.

3.6. When processing and storing personal data, the Controller takes organisational and technical measures to protect it against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.

4. Rights of the data subject

4.1. Under the General Data Protection Regulation and the laws of the Republic of Latvia, you have the right to:

  • access your personal data, receive information about its processing and request a copy in electronic form, and data portability;

  • request the correction of incorrect, inaccurate or incomplete personal data;

  • request the erasure of your personal data, except where the law requires it to be kept;

  • withdraw consent you have given to the processing of personal data;

  • request that the processing of your data be restricted;

  • lodge a complaint with the Data State Inspectorate.

4.2. You can submit a request to exercise your rights in person at the SIA "Two Bro" office or electronically by writing to info@twobro.lv.

5. Final provisions

5.1. This privacy policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and the laws in force in the Republic of Latvia and the European Union.

5.2. The Controller may change or supplement this privacy policy at any time. Changes take effect once published on www.twobro.lv.