Privacy policy
Table of Contents: 1. Introduction · 2. Personal Data · 3. Purpose & Scope · 4. Legislation · 5. Data Collection · 6. What We Process · 7. Email Marketing · 8. Cookies · 9. User Accounts · 10. VIN & Vehicles · 11. B2B Representatives · 12. Payments · 13. Delivery · 14. Communication · 15. Events · 16. Video Surveillance · 17. Recruitment · 18. Recipients · 19. Data Transfers · 20. Security · 21. Retention Periods · 22. Your Rights · 23. Requests · 24. Amendments · 25. Contact
1. Introduction and Controller Identification
This Privacy Policy (hereinafter — Policy) explains how LVPARTS SIA processes personal data when providing e-commerce, automotive parts and accessories retail services to private individuals (B2C) and legal entities (B2B), as well as handling order processing, warehouse picking, delivery via courier or parcel locker, customer support, marketing and website operations.
The purpose of this Policy is, in accordance with Articles 13 and 14 of the General Data Protection Regulation, to provide data subjects with clear and comprehensive information about the purposes of personal data processing, legal bases, data categories, retention periods, recipients, security measures and data subject rights.
If LVPARTS SIA in a specific case acts jointly with another controller or as a processor on behalf of another controller, data subjects are informed of this in the specific service, contract or request context.
2. Personal Data and Data Subject Categories
Personal data is any information about an identified or identifiable natural person. In the context of e-commerce and automotive parts retail, personal data may include not only name, surname and contact information, but also order history, delivery information, IP address, cookie identifiers, customer account information, vehicle data and in certain cases a VIN number, if it can be used to identify a specific natural person or a vehicle user linked to them.
- B2C customers — private individuals purchasing goods for personal use.
- B2B customer contact persons — representatives, authorised persons, employees or other contact persons of legal entities.
- Website visitors and registered users.
- Goods recipients, if the order is placed by another person.
- Persons who contact LVPARTS SIA by email, phone, social media or other communication channels.
- Persons who visit LVPARTS SIA premises, office, warehouse, goods collection point or the surrounding area.
- Job applicants who apply for vacancies or submit CVs.
3. Purpose and Scope of Privacy Policy
The Policy applies to personal data processing regardless of the form in which data is provided or obtained: on the website, by phone, electronically, in person, by post, on social media, using cookies or other technologies, as well as in LVPARTS SIA's internal systems, such as the e-commerce platform, warehouse management system, customer service system, accounting system, delivery integrations, video surveillance system and email system.
The Policy applies when a data subject:
- places an order, registers an account, subscribes to newsletters or submits a parts compatibility enquiry;
- provides a VIN or vehicle information;
- receives goods by courier or parcel locker;
- submits a cancellation, warranty or quality complaint;
- contacts LVPARTS SIA or visits LVPARTS premises;
- participates in LVPARTS-organised events.
4. Applicable Legislation
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation / GDPR).
- Personal Data Processing Law of the Republic of Latvia.
- Information Society Services Law and e-privacy regulations, insofar as they apply to commercial communications and cookies.
- Consumer Rights Protection Law and related regulations, insofar as they apply to distance contracts, right of withdrawal, warranty and complaints.
- Accounting Law, tax and supporting document retention regulations.
- Other applicable laws and regulations of the Republic of Latvia and the European Union.
5. How We Collect Personal Data
- The data subject provides data themselves when placing an order, registering an account, completing a contact form, subscribing to newsletters or submitting an enquiry.
- The data subject contacts LVPARTS SIA by phone, email, social media or other communication channels.
- Data arises during order fulfilment (order status, picking, delivery, invoice, return, warranty).
- Data is obtained from payment service providers, delivery partners or parcel locker operators.
- Data is collected automatically when visiting the website (server logs, cookies, analytics and security tools).
- Data may be obtained from a legal entity that specifies its representative or goods recipient within B2B cooperation.
- Data may be obtained in person at LVPARTS premises, warehouse or goods collection point where video surveillance is conducted.
LVPARTS SIA does not verify the identity of every person at the time of an everyday e-commerce purchase, unless required by law or the nature of the specific service. However, LVPARTS SIA may request additional information or proof of identity if required for processing a data subject rights request, fraud prevention, goods handover, dispute resolution or fulfilment of a legal obligation.
6. What Personal Data We Process and Why
The table below sets out the main personal data processing purposes, data categories, legal bases and indicative retention periods.
| Processing Purpose | Data Categories | Legal Basis | Retention Period |
|---|---|---|---|
| Order acceptance and fulfilment | Name, address, email, phone, order data | Contract performance (GDPR 6(1)(b)) | 10 years |
| Invoicing and accounting | Payment data, invoice data, tax information | Legal obligation (GDPR 6(1)(c)) | 10 years |
| Delivery | Recipient's name, address, phone, email | Contract performance (GDPR 6(1)(b)) | Until order completion + limitation period |
| Customer service and support | Communication history, enquiry content | Legitimate interests (GDPR 6(1)(f)) | 3 years after last contact |
| Email marketing | Email address, preferences | Consent (GDPR 6(1)(a)) or legitimate interests | Until withdrawal of consent |
| Website operations and security | IP address, cookies, session data | Legitimate interests (GDPR 6(1)(f)) | Up to 13 months |
| VIN / vehicle data | Vehicle make, model, VIN, registration number | Contract performance or legitimate interests | Order + warranty period + limitation period |
| Video surveillance | Video image, visit time and location | Legitimate interests (GDPR 6(1)(f)) | Up to 30 days |
If personal data is required for the performance of a contract or fulfilment of a legal obligation, failure to provide data may prevent LVPARTS SIA from accepting an order, issuing an invoice, providing delivery, handling a complaint or providing the specific service.
7. Email Marketing and Commercial Communications
7.1. Consent-Based Marketing
If the data subject has given consent, LVPARTS SIA may send email newsletters, promotional offers, information about automotive parts, accessories, seasonal offers and other information related to LVPARTS products. Consent is voluntary, and withholding it does not affect the ability to make a purchase.
Consent may be withdrawn at any time using the unsubscribe link in the email notification or by writing to sales@lvparts.lv. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
7.2. Existing Customer Notifications on Similar Products (Soft Opt-In)
If a customer has purchased goods from the LVPARTS website, LVPARTS SIA may send information about similar products or services based on legitimate interests in maintaining relationships with existing customers and the possibility provided for in e-privacy regulations to communicate about similar products, provided that the customer is offered a clear and free-of-charge opt-out option in each notification. Such communications are limited to LVPARTS products and services that are similar to previously purchased items or automotive parts categories reasonably expected by the customer.
7.3. Personalised Advertising and Social Media
If the data subject has consented to marketing cookies, LVPARTS SIA may use advertising platforms (Google Ads, Meta (Facebook/Instagram), Criteo, TikTok, LinkedIn, etc.) to show personalised advertisements and measure advertising effectiveness. Such processing takes place only with consent. The aforementioned platforms may act as joint controllers in relation to personal data processing for advertising purposes — we encourage you to review each platform's own privacy terms.
8. Cookies and Similar Technologies
A cookie is a small text file stored on the user's device when visiting a website. The LVPARTS website uses cookies, local storage, pixels, tags and similar technologies to ensure website functionality, save user preferences, maintain the shopping cart, prevent fraud, analyse website usage and provide marketing functions.
Essential cookies are used to ensure website functionality and are based on LVPARTS SIA's legitimate interests in maintaining a secure and functional website. Analytics and marketing cookies are activated only after user consent.
Users can change their cookie preferences in the website's cookie settings tool or in browser settings. If a user declines optional cookies, the website's basic functions generally remain accessible, but certain features, personalisation or advertising measurement may not work fully. Cookie settings can be changed at any time using the Cookie Settings link in the footer.
9. Loyalty Customer and User Account Data Processing
If registration, a loyalty programme, a B2B customer profile or special pricing is offered on the LVPARTS website, LVPARTS SIA processes the customer's or legal entity representative's data to create and maintain an account, provide order history, delivery addresses, invoice information, discounts, individual offers and customer service.
- Data processed: name, surname, email, phone, password hash, delivery addresses, order history, company data, B2B status, discounts and cooperation terms.
- Legal basis: contract performance, pre-contractual measures, legitimate interests and in certain cases consent.
- Retention period: until account deletion, end of cooperation or longer if data is required for accounting, complaints, warranty or protection of legal interests.
10. Auto Parts Selection, VIN and Vehicle Data
LVPARTS SIA specialises in automotive parts and accessories retail. To assist customers in selecting the correct part, LVPARTS SIA may request or receive vehicle information such as make, model, year of manufacture, engine, body type, registration number or VIN number.
A VIN number does not always directly identify a natural person; however, in certain cases it may be linked to the vehicle owner, keeper or user, so LVPARTS SIA processes it as potential personal data and applies appropriate protection measures.
- Purpose: identifying the correct part, preventing incorrect orders, consultations, warranty or complaint handling.
- Legal basis: contract performance or pre-contractual measures; legitimate interest in providing quality service.
- Retention: only as long as necessary for order, consultation, warranty, complaint or limitation period purposes.
11. Legal Entity Representatives' Personal Data Processing
In B2B cooperation, LVPARTS SIA processes personal data of legal entity representatives, contact persons, authorised persons and goods recipients. Legal entity data in itself is not personal data, but a contact person's name, surname, position, email, phone, signature, authorisation data and communication history constitute personal data.
- Purpose: entering into and performing contracts, order processing, invoicing, delivery, goods handover, credit limit and pricing administration, communication and dispute resolution.
- Legal basis: contract performance or pre-contractual measures, legitimate interests and fulfilment of legal obligations.
- Retention: during cooperation and thereafter to the extent required by applicable regulations or limitation periods.
12. Payments, Invoices and Accounting
When making a purchase or receiving an invoice, LVPARTS SIA processes transaction and payment data required for payment processing, invoice preparation, accounting, tax calculation, right of withdrawal, warranty or complaint handling.
If a customer requests inclusion of personal data (name, surname, personal identification number, address) in an invoice or supporting document, this data is processed for document preparation and retained for the period prescribed by applicable regulations. Full payment card data is not stored by LVPARTS SIA — payments are processed through certified payment service providers (Stripe, PayPal, etc.).
13. Delivery, Warehouse, Couriers and Parcel Lockers
To fulfil an order, LVPARTS SIA processes order data in the warehouse, picks goods, hands over the shipment to a delivery partner, and receives or processes delivery status information. Data required for delivery is transferred only to the extent necessary for the specific delivery.
- Data typically transferred to a courier: recipient's name, surname, phone, email, delivery address, tracking number.
- Data typically transferred to a parcel locker operator: recipient's name, phone, email, selected parcel locker, tracking number.
- Warehouse process data: order number, product list, picking status, product availability, dispatch or shipping confirmation.
14. Communication and Customer Support
When a data subject contacts LVPARTS SIA by email, phone, social media or other channels, LVPARTS SIA processes the enquiry content, contact information, communication history and order or vehicle data related to the enquiry. This processing is necessary to respond to questions, provide consultations, resolve technical or delivery issues, process cancellations, warranty or complaint claims and protect LVPARTS SIA's legal interests.
If a data subject contacts LVPARTS SIA through social media platforms, the respective platform may process additional data in accordance with its own privacy terms. LVPARTS SIA advises against sending sensitive information via social media messages and recommends using the official email sales@lvparts.lv instead.
15. Events, Photos and Video Materials
If LVPARTS SIA organises or participates in public events, customer days, partner events, industry exhibitions or other activities, photography or filming may take place during the event to showcase the event on the LVPARTS website, social media or informational materials.
- Data processed: person's image in photos or videos, event time and location, and in certain cases name, surname or position if required for publication.
- Legal basis: LVPARTS SIA's legitimate interest in promoting company and brand awareness; in certain cases — consent.
- Retention: materials may be kept as long as they are relevant for communication purposes, unless a data subject reasonably objects.
LVPARTS SIA avoids using images that could harm a person's dignity, honour or privacy. A data subject may object to the use of a specific photo or video by writing to sales@lvparts.lv.
16. Video Surveillance
LVPARTS SIA premises, warehouse, goods collection areas, entrances/exits, building perimeter and other security-sensitive locations may be subject to video surveillance. Video surveillance is not conducted in areas where persons reasonably expect enhanced privacy (changing rooms, rest rooms, sanitary facilities).
- Purpose: protection of persons, property, goods and third-party legal interests; prevention and detection of criminal offences or violations; provision of evidence in incident cases.
- Legal basis: GDPR Art. 6(1)(f) — legitimate interests of LVPARTS SIA and third parties.
- Retention: generally no more than 30 days, unless a recording is required for an incident, investigation or dispute.
Information signs with basic details about the controller, purpose and contact information are placed in video surveillance areas.
17. Recruitment
If a person applies for a vacancy at LVPARTS SIA or submits a CV, LVPARTS SIA processes the candidate's personal data for the purpose of conducting the recruitment process. Data processed may include name, surname, contact information, work experience, education, language skills, skills description, desired salary, photograph, references and other data voluntarily submitted by the candidate.
- Purpose: assessing the candidate's suitability, communicating about the recruitment process, organising interviews.
- Legal basis: pre-contractual measures at the candidate's request; legitimate interests; with the candidate's consent — retention for future vacancies.
- Retention: generally up to 6 months after the end of the recruitment process; longer with the candidate's consent or in the event of a dispute.
18. Personal Data Recipients and Processors
Personal data may be disclosed only where there is a legal basis and it is necessary for achieving the specific purpose. LVPARTS SIA engages processors and cooperation partners who process data on LVPARTS SIA's behalf or provide services necessary for order fulfilment, payments, delivery, IT maintenance, marketing, accounting or legal protection:
- E-commerce platform and IT infrastructure (Odoo / Odoo.sh — EU data centres);
- Payment service providers (Stripe, PayPal, etc.);
- Delivery and courier services (Omniva, Venipak, DPD Latvia, etc.);
- Accounting and tax services;
- Marketing and analytics platforms (with consent);
- Legal and debt collection service providers (where necessary);
- Public authorities and law enforcement agencies (in cases provided for by applicable regulations).
Data processing agreements are concluded with processors who process personal data on LVPARTS SIA's behalf, in accordance with the requirements of GDPR Article 28.
19. Data Transfers Outside EU/EEA
LVPARTS SIA endeavours to process personal data within the European Union and European Economic Area. However, certain IT, analytics, advertising or communications service providers may process data outside the EU/EEA, for example when using international cloud services or advertising platforms.
If personal data is transferred outside the EU/EEA to a country for which the European Commission has not issued an adequacy decision, LVPARTS SIA uses appropriate safeguards, such as Standard Contractual Clauses (SCC) adopted by the European Commission. Information about specific safeguards is available upon request by writing to sales@lvparts.lv.
20. Data Security
LVPARTS SIA implements and regularly reviews technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction:
- SSL/TLS encryption for data transmission on the website;
- access rights management on a need-to-know basis;
- secure password storage and access controls for administrative systems;
- payment data processing through certified payment service providers;
- regular system maintenance, updates and security checks;
- employee confidentiality obligations and internal procedures;
- data minimisation, retention period monitoring and periodic data deletion or anonymisation.
In the event of a personal data breach, LVPARTS SIA acts in accordance with GDPR requirements, assesses the risk to data subjects' rights and freedoms, notifies the Data State Inspectorate within 72 hours where necessary, and, if the breach is likely to result in a high risk, also informs the affected data subjects.
21. Data Retention Periods
LVPARTS SIA retains personal data no longer than necessary for achieving the relevant purpose, fulfilling a legal obligation or protecting legal interests. When determining the retention period, LVPARTS SIA takes into account periods prescribed by applicable regulations, contract performance requirements, warranty and right of withdrawal periods, limitation periods, dispute risks, validity of consent and data subject rights.
After the retention period has expired, personal data is deleted, anonymised or archived if required by applicable regulations. Specific retention periods are set out in the table in Section 6.
22. Data Subject Rights
In accordance with the GDPR, a data subject has the following rights:
- 🔍 Right of access — to receive information about whether and how LVPARTS SIA processes personal data and to obtain a copy of the data.
- ✏️ Right to rectification — to request correction or supplementation of inaccurate or incomplete data.
- 🗑️ Right to erasure — to request deletion of data where there is no legal basis for further processing.
- ⏸️ Right to restriction of processing — to request restriction of processing in certain cases provided for under the GDPR.
- 🚫 Right to object — to object to processing based on legitimate interests, including direct marketing.
- 📦 Right to data portability — to receive data in a structured, commonly used and machine-readable format, where applicable.
- ↩️ Right to withdraw consent — to withdraw consent at any time where processing is based on consent.
- 🏛️ Right to lodge a complaint — with the Data State Inspectorate (www.dvi.gov.lv).
Deletion of data or restriction of processing may not be fully possible if data is required for fulfilment of a legal obligation, accounting, dispute resolution or on other grounds provided for under the GDPR.
23. Request Submission and Review Procedure
A data subject may submit a request to exercise their rights by writing to sales@lvparts.lv, sending a request by post to LVPARTS SIA's registered address or submitting it in person.
To protect personal data, LVPARTS SIA may ask the data subject to identify themselves or provide additional information necessary for processing the request, for example an order number, approximate date of contact, email address or, in the case of video surveillance, the time and location of the visit.
LVPARTS SIA responds to a request no later than one month from receipt of the request. If the request is complex or a large number of requests have been received, the deadline may be extended by a further two months, with the data subject being informed accordingly.
If a data subject considers that LVPARTS SIA is processing personal data unlawfully, they may contact:
Data State Inspectorate
📍 Elijas iela 17, Rīga, LV-1050
📧 pasts@dvi.gov.lv
📞 +371 67223131
🌐 www.dvi.gov.lv
LVPARTS SIA encourages data subjects to contact us first so that the matter can be resolved as quickly as possible.
24. Policy Amendments
LVPARTS SIA may amend this Policy to reflect changes in personal data processing practices, service providers used, technologies or applicable regulations. The current version of the Policy is published on the website www.lvparts.lv under "Privacy Policy".
In the event of material changes, LVPARTS SIA may inform data subjects through a prominent notice on the website or another appropriate means of communication, where necessary and reasonably practicable.
25. Contact Information
This Policy has been prepared for LVPARTS SIA's automotive parts and accessories e-commerce operations, covering B2C and B2B sales, warehouse processes, delivery by couriers and parcel lockers, vehicle/VIN data processing, cookies, marketing, video surveillance and recruitment.
LVPARTS SIA
Registration number: 40203099262
Registered address: Augusta Deglava iela 66, Riga, Latvia
Email: sales@lvparts.lv
Phone: +371 22007781
Website: www.lvparts.lv
Version 3.0 · Effective from 16.05.2026 · LVPARTS SIA
Table of Contents: 1. Introduction · 2. Personal Data · 3. Purpose & Scope · 4. Legislation · 5. Data Collection · 6. What We Process · 7. Email Marketing · 8. Cookies · 9. User Accounts · 10. VIN & Vehicles · 11. B2B Representatives · 12. Payments · 13. Delivery · 14. Communication · 15. Events · 16. Video Surveillance · 17. Recruitment · 18. Recipients · 19. Data Transfers · 20. Security · 21. Retention Periods · 22. Your Rights · 23. Requests · 24. Amendments · 25. Contact
1. Introduction and Controller Identification
This Privacy Policy (hereinafter — Policy) explains how LVPARTS SIA processes personal data when providing e-commerce, automotive parts and accessories retail services to private individuals (B2C) and legal entities (B2B), as well as handling order processing, warehouse picking, delivery via courier or parcel locker, customer support, marketing and website operations.
The purpose of this Policy is, in accordance with Articles 13 and 14 of the General Data Protection Regulation, to provide data subjects with clear and comprehensive information about the purposes of personal data processing, legal bases, data categories, retention periods, recipients, security measures and data subject rights.
If LVPARTS SIA in a specific case acts jointly with another controller or as a processor on behalf of another controller, data subjects are informed of this in the specific service, contract or request context.
2. Personal Data and Data Subject Categories
Personal data is any information about an identified or identifiable natural person. In the context of e-commerce and automotive parts retail, personal data may include not only name, surname and contact information, but also order history, delivery information, IP address, cookie identifiers, customer account information, vehicle data and in certain cases a VIN number, if it can be used to identify a specific natural person or a vehicle user linked to them.
- B2C customers — private individuals purchasing goods for personal use.
- B2B customer contact persons — representatives, authorised persons, employees or other contact persons of legal entities.
- Website visitors and registered users.
- Goods recipients, if the order is placed by another person.
- Persons who contact LVPARTS SIA by email, phone, social media or other communication channels.
- Persons who visit LVPARTS SIA premises, office, warehouse, goods collection point or the surrounding area.
- Job applicants who apply for vacancies or submit CVs.
3. Purpose and Scope of Privacy Policy
The Policy applies to personal data processing regardless of the form in which data is provided or obtained: on the website, by phone, electronically, in person, by post, on social media, using cookies or other technologies, as well as in LVPARTS SIA's internal systems, such as the e-commerce platform, warehouse management system, customer service system, accounting system, delivery integrations, video surveillance system and email system.
The Policy applies when a data subject:
- places an order, registers an account, subscribes to newsletters or submits a parts compatibility enquiry;
- provides a VIN or vehicle information;
- receives goods by courier or parcel locker;
- submits a cancellation, warranty or quality complaint;
- contacts LVPARTS SIA or visits LVPARTS premises;
- participates in LVPARTS-organised events.
4. Applicable Legislation
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation / GDPR).
- Personal Data Processing Law of the Republic of Latvia.
- Information Society Services Law and e-privacy regulations, insofar as they apply to commercial communications and cookies.
- Consumer Rights Protection Law and related regulations, insofar as they apply to distance contracts, right of withdrawal, warranty and complaints.
- Accounting Law, tax and supporting document retention regulations.
- Other applicable laws and regulations of the Republic of Latvia and the European Union.
5. How We Collect Personal Data
- The data subject provides data themselves when placing an order, registering an account, completing a contact form, subscribing to newsletters or submitting an enquiry.
- The data subject contacts LVPARTS SIA by phone, email, social media or other communication channels.
- Data arises during order fulfilment (order status, picking, delivery, invoice, return, warranty).
- Data is obtained from payment service providers, delivery partners or parcel locker operators.
- Data is collected automatically when visiting the website (server logs, cookies, analytics and security tools).
- Data may be obtained from a legal entity that specifies its representative or goods recipient within B2B cooperation.
- Data may be obtained in person at LVPARTS premises, warehouse or goods collection point where video surveillance is conducted.
LVPARTS SIA does not verify the identity of every person at the time of an everyday e-commerce purchase, unless required by law or the nature of the specific service. However, LVPARTS SIA may request additional information or proof of identity if required for processing a data subject rights request, fraud prevention, goods handover, dispute resolution or fulfilment of a legal obligation.
6. What Personal Data We Process and Why
The table below sets out the main personal data processing purposes, data categories, legal bases and indicative retention periods.
| Processing Purpose | Data Categories | Legal Basis | Retention Period |
|---|---|---|---|
| Order acceptance and fulfilment | Name, address, email, phone, order data | Contract performance (GDPR 6(1)(b)) | 10 years |
| Invoicing and accounting | Payment data, invoice data, tax information | Legal obligation (GDPR 6(1)(c)) | 10 years |
| Delivery | Recipient's name, address, phone, email | Contract performance (GDPR 6(1)(b)) | Until order completion + limitation period |
| Customer service and support | Communication history, enquiry content | Legitimate interests (GDPR 6(1)(f)) | 3 years after last contact |
| Email marketing | Email address, preferences | Consent (GDPR 6(1)(a)) or legitimate interests | Until withdrawal of consent |
| Website operations and security | IP address, cookies, session data | Legitimate interests (GDPR 6(1)(f)) | Up to 13 months |
| VIN / vehicle data | Vehicle make, model, VIN, registration number | Contract performance or legitimate interests | Order + warranty period + limitation period |
| Video surveillance | Video image, visit time and location | Legitimate interests (GDPR 6(1)(f)) | Up to 30 days |
If personal data is required for the performance of a contract or fulfilment of a legal obligation, failure to provide data may prevent LVPARTS SIA from accepting an order, issuing an invoice, providing delivery, handling a complaint or providing the specific service.
7. Email Marketing and Commercial Communications
7.1. Consent-Based Marketing
If the data subject has given consent, LVPARTS SIA may send email newsletters, promotional offers, information about automotive parts, accessories, seasonal offers and other information related to LVPARTS products. Consent is voluntary, and withholding it does not affect the ability to make a purchase.
Consent may be withdrawn at any time using the unsubscribe link in the email notification or by writing to sales@lvparts.lv. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
7.2. Existing Customer Notifications on Similar Products (Soft Opt-In)
If a customer has purchased goods from the LVPARTS website, LVPARTS SIA may send information about similar products or services based on legitimate interests in maintaining relationships with existing customers and the possibility provided for in e-privacy regulations to communicate about similar products, provided that the customer is offered a clear and free-of-charge opt-out option in each notification. Such communications are limited to LVPARTS products and services that are similar to previously purchased items or automotive parts categories reasonably expected by the customer.
7.3. Personalised Advertising and Social Media
If the data subject has consented to marketing cookies, LVPARTS SIA may use advertising platforms (Google Ads, Meta (Facebook/Instagram), Criteo, TikTok, LinkedIn, etc.) to show personalised advertisements and measure advertising effectiveness. Such processing takes place only with consent. The aforementioned platforms may act as joint controllers in relation to personal data processing for advertising purposes — we encourage you to review each platform's own privacy terms.
8. Cookies and Similar Technologies
A cookie is a small text file stored on the user's device when visiting a website. The LVPARTS website uses cookies, local storage, pixels, tags and similar technologies to ensure website functionality, save user preferences, maintain the shopping cart, prevent fraud, analyse website usage and provide marketing functions.
Essential cookies are used to ensure website functionality and are based on LVPARTS SIA's legitimate interests in maintaining a secure and functional website. Analytics and marketing cookies are activated only after user consent.
Users can change their cookie preferences in the website's cookie settings tool or in browser settings. If a user declines optional cookies, the website's basic functions generally remain accessible, but certain features, personalisation or advertising measurement may not work fully. Cookie settings can be changed at any time using the Cookie Settings link in the footer.
9. Loyalty Customer and User Account Data Processing
If registration, a loyalty programme, a B2B customer profile or special pricing is offered on the LVPARTS website, LVPARTS SIA processes the customer's or legal entity representative's data to create and maintain an account, provide order history, delivery addresses, invoice information, discounts, individual offers and customer service.
- Data processed: name, surname, email, phone, password hash, delivery addresses, order history, company data, B2B status, discounts and cooperation terms.
- Legal basis: contract performance, pre-contractual measures, legitimate interests and in certain cases consent.
- Retention period: until account deletion, end of cooperation or longer if data is required for accounting, complaints, warranty or protection of legal interests.
10. Auto Parts Selection, VIN and Vehicle Data
LVPARTS SIA specialises in automotive parts and accessories retail. To assist customers in selecting the correct part, LVPARTS SIA may request or receive vehicle information such as make, model, year of manufacture, engine, body type, registration number or VIN number.
A VIN number does not always directly identify a natural person; however, in certain cases it may be linked to the vehicle owner, keeper or user, so LVPARTS SIA processes it as potential personal data and applies appropriate protection measures.
- Purpose: identifying the correct part, preventing incorrect orders, consultations, warranty or complaint handling.
- Legal basis: contract performance or pre-contractual measures; legitimate interest in providing quality service.
- Retention: only as long as necessary for order, consultation, warranty, complaint or limitation period purposes.
11. Legal Entity Representatives' Personal Data Processing
In B2B cooperation, LVPARTS SIA processes personal data of legal entity representatives, contact persons, authorised persons and goods recipients. Legal entity data in itself is not personal data, but a contact person's name, surname, position, email, phone, signature, authorisation data and communication history constitute personal data.
- Purpose: entering into and performing contracts, order processing, invoicing, delivery, goods handover, credit limit and pricing administration, communication and dispute resolution.
- Legal basis: contract performance or pre-contractual measures, legitimate interests and fulfilment of legal obligations.
- Retention: during cooperation and thereafter to the extent required by applicable regulations or limitation periods.
12. Payments, Invoices and Accounting
When making a purchase or receiving an invoice, LVPARTS SIA processes transaction and payment data required for payment processing, invoice preparation, accounting, tax calculation, right of withdrawal, warranty or complaint handling.
If a customer requests inclusion of personal data (name, surname, personal identification number, address) in an invoice or supporting document, this data is processed for document preparation and retained for the period prescribed by applicable regulations. Full payment card data is not stored by LVPARTS SIA — payments are processed through certified payment service providers (Stripe, PayPal, etc.).
13. Delivery, Warehouse, Couriers and Parcel Lockers
To fulfil an order, LVPARTS SIA processes order data in the warehouse, picks goods, hands over the shipment to a delivery partner, and receives or processes delivery status information. Data required for delivery is transferred only to the extent necessary for the specific delivery.
- Data typically transferred to a courier: recipient's name, surname, phone, email, delivery address, tracking number.
- Data typically transferred to a parcel locker operator: recipient's name, phone, email, selected parcel locker, tracking number.
- Warehouse process data: order number, product list, picking status, product availability, dispatch or shipping confirmation.
14. Communication and Customer Support
When a data subject contacts LVPARTS SIA by email, phone, social media or other channels, LVPARTS SIA processes the enquiry content, contact information, communication history and order or vehicle data related to the enquiry. This processing is necessary to respond to questions, provide consultations, resolve technical or delivery issues, process cancellations, warranty or complaint claims and protect LVPARTS SIA's legal interests.
If a data subject contacts LVPARTS SIA through social media platforms, the respective platform may process additional data in accordance with its own privacy terms. LVPARTS SIA advises against sending sensitive information via social media messages and recommends using the official email sales@lvparts.lv instead.
15. Events, Photos and Video Materials
If LVPARTS SIA organises or participates in public events, customer days, partner events, industry exhibitions or other activities, photography or filming may take place during the event to showcase the event on the LVPARTS website, social media or informational materials.
- Data processed: person's image in photos or videos, event time and location, and in certain cases name, surname or position if required for publication.
- Legal basis: LVPARTS SIA's legitimate interest in promoting company and brand awareness; in certain cases — consent.
- Retention: materials may be kept as long as they are relevant for communication purposes, unless a data subject reasonably objects.
LVPARTS SIA avoids using images that could harm a person's dignity, honour or privacy. A data subject may object to the use of a specific photo or video by writing to sales@lvparts.lv.
16. Video Surveillance
LVPARTS SIA premises, warehouse, goods collection areas, entrances/exits, building perimeter and other security-sensitive locations may be subject to video surveillance. Video surveillance is not conducted in areas where persons reasonably expect enhanced privacy (changing rooms, rest rooms, sanitary facilities).
- Purpose: protection of persons, property, goods and third-party legal interests; prevention and detection of criminal offences or violations; provision of evidence in incident cases.
- Legal basis: GDPR Art. 6(1)(f) — legitimate interests of LVPARTS SIA and third parties.
- Retention: generally no more than 30 days, unless a recording is required for an incident, investigation or dispute.
Information signs with basic details about the controller, purpose and contact information are placed in video surveillance areas.
17. Recruitment
If a person applies for a vacancy at LVPARTS SIA or submits a CV, LVPARTS SIA processes the candidate's personal data for the purpose of conducting the recruitment process. Data processed may include name, surname, contact information, work experience, education, language skills, skills description, desired salary, photograph, references and other data voluntarily submitted by the candidate.
- Purpose: assessing the candidate's suitability, communicating about the recruitment process, organising interviews.
- Legal basis: pre-contractual measures at the candidate's request; legitimate interests; with the candidate's consent — retention for future vacancies.
- Retention: generally up to 6 months after the end of the recruitment process; longer with the candidate's consent or in the event of a dispute.
18. Personal Data Recipients and Processors
Personal data may be disclosed only where there is a legal basis and it is necessary for achieving the specific purpose. LVPARTS SIA engages processors and cooperation partners who process data on LVPARTS SIA's behalf or provide services necessary for order fulfilment, payments, delivery, IT maintenance, marketing, accounting or legal protection:
- E-commerce platform and IT infrastructure (Odoo / Odoo.sh — EU data centres);
- Payment service providers (Stripe, PayPal, etc.);
- Delivery and courier services (Omniva, Venipak, DPD Latvia, etc.);
- Accounting and tax services;
- Marketing and analytics platforms (with consent);
- Legal and debt collection service providers (where necessary);
- Public authorities and law enforcement agencies (in cases provided for by applicable regulations).
Data processing agreements are concluded with processors who process personal data on LVPARTS SIA's behalf, in accordance with the requirements of GDPR Article 28.
19. Data Transfers Outside EU/EEA
LVPARTS SIA endeavours to process personal data within the European Union and European Economic Area. However, certain IT, analytics, advertising or communications service providers may process data outside the EU/EEA, for example when using international cloud services or advertising platforms.
If personal data is transferred outside the EU/EEA to a country for which the European Commission has not issued an adequacy decision, LVPARTS SIA uses appropriate safeguards, such as Standard Contractual Clauses (SCC) adopted by the European Commission. Information about specific safeguards is available upon request by writing to sales@lvparts.lv.
20. Data Security
LVPARTS SIA implements and regularly reviews technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction:
- SSL/TLS encryption for data transmission on the website;
- access rights management on a need-to-know basis;
- secure password storage and access controls for administrative systems;
- payment data processing through certified payment service providers;
- regular system maintenance, updates and security checks;
- employee confidentiality obligations and internal procedures;
- data minimisation, retention period monitoring and periodic data deletion or anonymisation.
In the event of a personal data breach, LVPARTS SIA acts in accordance with GDPR requirements, assesses the risk to data subjects' rights and freedoms, notifies the Data State Inspectorate within 72 hours where necessary, and, if the breach is likely to result in a high risk, also informs the affected data subjects.
21. Data Retention Periods
LVPARTS SIA retains personal data no longer than necessary for achieving the relevant purpose, fulfilling a legal obligation or protecting legal interests. When determining the retention period, LVPARTS SIA takes into account periods prescribed by applicable regulations, contract performance requirements, warranty and right of withdrawal periods, limitation periods, dispute risks, validity of consent and data subject rights.
After the retention period has expired, personal data is deleted, anonymised or archived if required by applicable regulations. Specific retention periods are set out in the table in Section 6.
22. Data Subject Rights
In accordance with the GDPR, a data subject has the following rights:
- 🔍 Right of access — to receive information about whether and how LVPARTS SIA processes personal data and to obtain a copy of the data.
- ✏️ Right to rectification — to request correction or supplementation of inaccurate or incomplete data.
- 🗑️ Right to erasure — to request deletion of data where there is no legal basis for further processing.
- ⏸️ Right to restriction of processing — to request restriction of processing in certain cases provided for under the GDPR.
- 🚫 Right to object — to object to processing based on legitimate interests, including direct marketing.
- 📦 Right to data portability — to receive data in a structured, commonly used and machine-readable format, where applicable.
- ↩️ Right to withdraw consent — to withdraw consent at any time where processing is based on consent.
- 🏛️ Right to lodge a complaint — with the Data State Inspectorate (www.dvi.gov.lv).
Deletion of data or restriction of processing may not be fully possible if data is required for fulfilment of a legal obligation, accounting, dispute resolution or on other grounds provided for under the GDPR.
23. Request Submission and Review Procedure
A data subject may submit a request to exercise their rights by writing to sales@lvparts.lv, sending a request by post to LVPARTS SIA's registered address or submitting it in person.
To protect personal data, LVPARTS SIA may ask the data subject to identify themselves or provide additional information necessary for processing the request, for example an order number, approximate date of contact, email address or, in the case of video surveillance, the time and location of the visit.
LVPARTS SIA responds to a request no later than one month from receipt of the request. If the request is complex or a large number of requests have been received, the deadline may be extended by a further two months, with the data subject being informed accordingly.
If a data subject considers that LVPARTS SIA is processing personal data unlawfully, they may contact:
Data State Inspectorate
📍 Elijas iela 17, Rīga, LV-1050
📧 pasts@dvi.gov.lv
📞 +371 67223131
🌐 www.dvi.gov.lv
LVPARTS SIA encourages data subjects to contact us first so that the matter can be resolved as quickly as possible.
24. Policy Amendments
LVPARTS SIA may amend this Policy to reflect changes in personal data processing practices, service providers used, technologies or applicable regulations. The current version of the Policy is published on the website www.lvparts.lv under "Privacy Policy".
In the event of material changes, LVPARTS SIA may inform data subjects through a prominent notice on the website or another appropriate means of communication, where necessary and reasonably practicable.
25. Contact Information
This Policy has been prepared for LVPARTS SIA's automotive parts and accessories e-commerce operations, covering B2C and B2B sales, warehouse processes, delivery by couriers and parcel lockers, vehicle/VIN data processing, cookies, marketing, video surveillance and recruitment.
LVPARTS SIA
Registration number: 40203099262
Registered address: Augusta Deglava iela 66, Riga, Latvia
Email: sales@lvparts.lv
Phone: +371 22007781
Website: www.lvparts.lv
Version 3.0 · Effective from 16.05.2026 · LVPARTS SIA