PRIVACY POLICY

PRIVACY POLICY
Please read and accept the following information before using the site www.levendome.eu

1. INTRODUCTION
The website www.lavendome.eu (the “Website” or the “Site”) is operated by SIA “GRATECO”, registered in the Republic of Latvia (hereinafter referred to as “GRATECO”, “we”, “us”), and this GRATECO Privacy Policy (hereinafter the “Privacy Policy”) gives you all the information regarding the processing (e.g. collection, use, recording, storage or transfer) of any personal data that GRATECO may collect through our online platforms (website, applications, social networks) (hereinafter the “GRATECO Platforms”) or when you fill out the GRATECO or Levendome Client Form (hereinafter the “Client Form”) in our boutiques or customer service centers, when we organize an event, or through any other form of interaction.
This Policy does not apply to the personal data collected by other third-party websites or applications that may provide links to or be accessible from any of the GRATECO Platforms. We are not responsible or liable for the privacy policies and practices of third-party websites and applications.

2. THE COLLECTION OF YOUR PERSONAL DATA
We may collect personal information about you (as an identified natural person) or which allows us to identify you (hereinafter your “Personal Data”) in various ways and circumstances:
• when you are visiting any of our GRATECO Platforms, particularly when you fill out our Contact Us Form;
• when you are visiting our boutique or office;
• when you are purchasing a third parties product from GRATECO or request customer service;
• when you are interacting with us via email or telephone;
• when you fill out any forms in our boutique or during GRATECO organized events, including the Client Form (printed or electronic);
Depending on the way you’ve chosen to interact with us, we may collect information (that may constitute Personal Data) which you actively give us, such as:
• information about your identity (first name, surname, gender, date of birth);
• contact information (mailing address, email address and telephone number);
• information about your civil status (title);
• other personal information, including information regarding your preferences and personal and/or professional interests, demographic category, your experiences with products we promote and contact preferences, your professional situation, your interests and lifestyle
• Customer service information (such as customer service requests, comments, feedback and complaints)
We may also collect other types of information (that may constitute Personal Data) by automated means, or indirectly from you or from third parties (websites or social networks) such as:
• information relating to the use of GRATECO Platforms, including your IP address and other browsing data (including the browser and type of device used) through the use of cookies or similar technology installed on your device. Certain cookies are needed to ensure that GRATECO Platforms function properly, and others are used for analytic purposes, which help us to provide you with more customized services and a better digital experience. For more information about cookies and how to change your preferences, please consult our COOKIES POLICY;
• images taken through our video surveillance system in GRATECO boutiques or offices;
• information that you share publicly on social networks as part of your interaction or not with GRATECO.
We guarantee that we process your Personal Data only if and to the extent that at least one of the following legal provisions applies:
• You have given us consent to process some of your Personal Data for one or more specific purposes (e.g. so that you can use our GRATECO websites, receive newsletters, or be contacted through the “Contact Us” form);
• Processing is necessary for the performance of a contract (related to any services) or in order to take steps at your request prior to providing any services;
• Processing is necessary for compliance with a legal obligation to which we are subject;
• Processing is necessary for the purposes of the legitimate interests that we pursue (e.g. security purposes, personalized maintenance advices, personalized services and products offers).

3. THE USE OF YOUR PERSONAL DATA BY GRATECO
We use your personal data for the following purposes:
3.1. Sending you personal invitations to GRATECO events;
3.2. Sending you company communications including content and news about the GRATECO) and marketing communications (advertising offers including custom audiences on social media, gifts) adapted to your interests and personal preferences;
3.3. Sending you the GRATECO e-newsletter so that you will be the first to know about our creations, events, initiatives and personalized services adapted to your interests and personal preferences.
3.4. Targeted advertising - to adapt our communications and advertising offers to your interests and personal preferences and manage the effectiveness of our marketing strategy.
We can also create custom audiences (comprised of people who filled in the Client Form, visited our website or connected to the GRATECO Platforms) on platforms used by third-party applications and/or social networks (Google, Facebook, Instagram) through cookies or by converting your email address (as well as other information communicated in our Client Form) into a unique value (anonymized) that can be matched by third-party applications and/or social networks with a user on their platform. This process is used to post targeted advertising of our products and services, intended for you and depending on your interests and personal preferences, on these platforms.
You can choose to not receive these types of advertisements by accessing the cookie control tool and de-selecting the category “cookies for a targeted advertisement”. However, we do not control third-party targeting technologies even if they are associated with the GRATECO Platforms or our advertisements. We suggest that you consult the general use terms and conditions, usage policies, privacy policies and other practices of the third-party applications and social networks with regards to the collection, storage and sharing of your Personal Data.
3.5. Providing you with customer service;
3.6. Providing you with information about our GRATECO Platforms, products and services;
3.7. Answering your requests;
3.8. Managing, maintaining, and optimizing our GRATECO Platforms, providing support and security services;
3.9. Preventing fraud and other prohibited or illegal activities and guaranteeing the safety and security of our GRATECO platforms, boutiques and complying with legal or regulatory obligations (e.g. anti-money laundering obligations).

Unless required by law or because of security imperative for another time period, we may store or otherwise process your Personal Data as long as it is necessary to satisfy the purposes described hereinabove and insofar as you do not withdraw your consent for its processing (either for one or several purposes) nor exercise your right to be forgotten before the expiration of any of these time periods (by any of the means described below under the “How can you contact us?” section). Your Personal Data will be stored according to legal obligations and available technology.

We may only share your Personal Data within the GRATECO Group and with third parties in the few following cases:
• service providers supporting us in our business operations (e.g to send our GRATECO e-newsletter, to support, manage and maintain our GRATECO Platforms, mitigate risk, help prevent fraud and promote trust and safety);
• third parties, courts or regulators or any other third parties if it is required by law or in connection with a legal claim or proceeding or to combat fraud.
We expect all these third parties to provide necessary guarantees of confidentiality and security and to take appropriate organizational and technical measures in compliance with the applicable laws. Our service providers may only process the Personal Data we share with them according to and within the limits of our instructions.

When we share your Personal Data under the circumstances described hereinabove, we may transfer it to a destination outside the European Union. In any case, such transfers will be only executed if the competent authorities have confirmed the adequacy of the country's level of protection or if we can offer you other appropriate safeguards. You can obtain additional information on the appropriate safeguards by contacting us (see the section “How can you contact us?” below).

4. YOUR RIGHTS
4.1. The right of access: You have the right to know what Personal Data has been collected about you and how such Personal Data has been processed.
4.2. The right to rectification: You have the right to request changes to inaccurate Personal Data.
4.3. The right to object: You may declare that you do not want your Personal Data processed (in whole or in part) at any time.
4.4. The right to be forgotten: You may exercise this right particularly when you no longer consent to the processing of your Personal Data. You have the right to withdraw your consent anytime (by any of the means described below under the “How can you contact us?” section). The right to be forgotten is not an absolute right and only applies in certain circumstances.
4.5. The right to limit the processing of your Personal Data, i.e., limit the way we use your Personal Data. This is an alternative to exercising your right to be forgotten. This right is not an absolute right and only applies in certain circumstances.
4.6. The right to obtain all information regarding the processing of your Personal Data that is clear, correct, comprehensive and easy to access.
4.7. The right not to be subject to a decision based solely on automated processing, such as profiling.
4.8. The right to complaint that you may have with a supervisory authority.

These rights may be subject to exceptions or limitations (e.g., when your Personal Data has been processed for security purposes or stored for legal or contractual obligations) and must account for available technology and the cost of implementation.
In certain cases, we will need to verify your identity before processing a request you may have based on the above-mentioned rights.

All Personal Data collected by GRATECO is controlled by us. As a controller, we determine the purposes and means of the processing of your Personal Data.

Specifically, GRATECO’s controller is the company SIA “GRATECO” reg.no LV40203028857, address Elizabetes iela 69 - 22, Riga, Latvia

If you would like to exercise any of your rights as described in this Privacy Policy or if you have any question or concerns about this Privacy Policy, please contact us (see below).

You can contact us and withdraw any of permissions:
• Through the “Contact Us” form (www.levendome.eu/contact.html)
• By writing to the GRATECO Data Protection specialist either by email (info@levendome.eu or by posted letter (Elizabetes iela 69 - 22, Rīga, Latvija);
• By signing the consent withdrawal in the Client Form (only to withdraw your consent). Please request the form by email: info@levendome.eu

We use the appropriate technical, organizational and administrative security measures to protect any Personal Data we process from loss, misuse, unauthorized access, disclosure, alteration and destruction. Nevertheless, even if we strive to protect your Personal Data, we cannot guarantee the security of the information you transmit on our GRATECO Platforms when transferred over the Internet on unsecure networks.
We will not knowingly collect or otherwise process (particularly through our GRATECO Website) any Personal Data from anyone under the age of 18. If you are under age of 18, please do not submit any of your Personal Data to us. Should we discover or be informed that we have mistakenly collected your Personal Data, we will immediately delete such information from our records.

5. CHANGES TO THIS PRIVACY POLICY
We reserve our right to change this Privacy Policy at any time. A notification regarding any substantial changes to this Privacy Policy will be posted on our GRATECO Platforms. Notwithstanding, it is your responsibility to stay abreast of any changes made to our Privacy Policy.

This Privacy Policy was last updated on March 1st, 2023.