Personal Data Processing Policy

1. GENERAL PROVISIONS

1.1. This Personal Data Processing Policy has been prepared in accordance with the requirements of the General Data Protection Regulation (GDPR) and defines the procedure for processing personal data and the measures taken by LILO KIDS (hereinafter referred to as the “Operator”) to ensure its security.
1.2. The Operator conducts its activities at the following address:
Rīga, LV-1001, Tērbatas iela 72, Centra rajons, Latvia.
1.3. The Operator aims to ensure respect for human rights and freedoms when processing personal data.
1.4. This Policy applies to all information that the Operator may receive about users of the website: https://lilokids.lv.

2. KEY TERMS USED IN THIS POLICY

2.1. Personal data — any information relating to an identified or identifiable natural person.
2.2. Personal data processing — any operation performed on personal data, including collection, storage, use, transfer, and deletion.
2.3. Operator (Data Controller) — LILO KIDS, which determines the purposes of personal data processing.
2.4. User — any visitor to the website.
2.5. Automated processing — processing carried out using information technologies.
2.6. Anonymization — actions that make it impossible to identify the data subject.
2.7. Cookies — files stored on the User’s device.

3. MAIN RIGHTS AND OBLIGATIONS OF THE OPERATOR

3.1. The Operator has the right to:
— receive accurate information from the User;
— process data without consent where necessary for the performance of a contract;
— process data on the basis of legitimate interests;
— determine measures for protecting personal data.
3.2. The Operator is obliged to:
— comply with GDPR requirements;
— ensure the security of personal data;
— provide Users with information about data processing;
— respond to User requests;
— delete or correct data where necessary;
— publish an up-to-date version of this Policy.

4. RIGHTS OF PERSONAL DATA SUBJECTS

4.1. The User has the right to:
— access their personal data;
— request correction of their personal data;
— request deletion of their personal data;
— restrict processing;
— withdraw consent;
— receive their data in a portable format;
— lodge a complaint with an EU supervisory authority.
4.2. The User is obliged to:
— provide accurate information;
— update it when necessary.

5. PRINCIPLES OF PERSONAL DATA PROCESSING

5.1. Personal data is processed lawfully and transparently.
5.2. Data is collected only for specific purposes.
5.3. Only the data necessary for the stated purposes is processed.
5.4. Personal data must be accurate and kept up to date.
5.5. Personal data is stored only for a limited period.
5.6. Appropriate data protection measures are implemented.

6. PURPOSES OF PERSONAL DATA PROCESSING

6.1. The Operator processes personal data for the following purposes:
— processing requests and applications;
— communicating with the User;
— performing contractual obligations;
— sending notifications and information;
— analyzing website performance.
6.2. Personal data processed includes:
— name;
— telephone number;
— email address.
6.3. Legal grounds for processing:
— the User’s consent;
— performance of a contract;
— the Operator’s legitimate interests.

7. CONDITIONS FOR PERSONAL DATA PROCESSING

7.1. Personal data is processed in accordance with the GDPR.
7.2. Processing is permitted:
— with the User’s consent;
— where necessary for the performance of a contract;
— where legitimate interests exist;
— where necessary to comply with legal obligations.
7.3. Special categories of personal data are not processed.

8. PROCEDURE FOR COLLECTION, STORAGE, AND TRANSFER OF DATA

8.1. The Operator takes appropriate measures to protect personal data.
8.2. Personal data may be transferred to third parties, including:
— payment service providers;
— analytics services;
— technical service providers and contractors.
8.3. Data is transferred only where necessary.
8.4. Cross-border transfers of personal data may take place subject to compliance with GDPR requirements.
8.5. The User may submit a request to amend or delete their personal data at:
lilokidslv@gmail.com
8.6. The retention period is determined by the purposes for which the data is processed.

9. OPERATIONS PERFORMED WITH PERSONAL DATA

9.1. The Operator performs the following operations:
— collection;
— storage;
— use;
— transfer;
— deletion of personal data.
9.2. Processing may be automated.

10. COOKIES AND ANALYTICS

10.1. The website uses cookies and analytics systems, including:
— Google Analytics
— Google Tag Manager
— Yandex.Metrica
10.2. These services are used for:
— analyzing User behavior;
— improving website performance;
— evaluating marketing effectiveness.
10.3. Data may be transferred to third-party servers, including servers located outside the European Union.
10.4. The User may disable cookies in their browser settings.

11. CONFIDENTIALITY OF PERSONAL DATA

11.1. The Operator does not disclose personal data to third parties without a lawful basis.
11.2. Access to personal data is granted only to authorized persons.

12. FINAL PROVISIONS

12.1. For any questions, the User may contact:
lilokidslv@gmail.com
12.2. This Policy remains in effect indefinitely until replaced by a new version.
12.3. The current version of the Policy is available on the website:
https://lilokids.lv