Privacy policy for the website www.mirabella.lv

1. Introduction

Limited Liability Company “MIRABELLA” (hereinafter – the Controller), on the website www.mirabella.lv (hereinafter – the Website) processes personal data obtained from the data subject – the Website user (hereinafter – the User).

The Controller respects the User’s privacy and personal data protection and observes the User’s rights to lawful processing of personal data in accordance with applicable legal acts – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation), as well as other applicable legislation in the field of privacy and data processing.

Considering the above, the Controller has developed this privacy policy in order to provide the User with the information required by the Regulation.

This privacy policy applies to data processing regardless of the form and/or environment in which the User provides personal data (on the Website, in paper format, in person or by telephone).

The Controller reserves the right to change these terms at any time. The visitor of the Website is responsible for independently checking the Website content to become aware of any changes to the terms.

2. Identity and Contact Information of the Controller

Limited Liability Company “MIRABELLA”
Registration No.: 40003270143

Address: Krišjāņa Valdemāra iela 33A - 9A, Riga, LV-1010, Latvia
Website: www.mirabella.lv
Email: info@mirabella.lv
Phone: (+371) 67631700

3. Purposes and Legal Basis for Personal Data Processing

If the User submits their personal data to the Controller by phone, through Website contact forms, email, or other mail, we store and use this information in order to perform or conclude a service contract, including:

customer identification
preparation and conclusion of contracts
provision of services (performance of contractual obligations)
customer service
processing of complaints and objections
improving customer loyalty
payment and settlement administration
debt recovery
proving facts
website maintenance and improvement
business planning and analytics
planning and accounting

Additionally, we may process these data to provide information to public authorities and operational authorities in cases and scope defined by applicable legal regulations.

The legal basis for data processing includes:

conclusion and performance of a contract
compliance with legal obligations
consent of the client (data subject)
our legitimate interests (for example verifying client identity before concluding a contract, ensuring contractual obligations, analyzing website usage, ensuring service efficiency, etc.).

4. Categories of Personal Data

Categories of personal data may include:

name and surname
personal identification number
email or postal address
IP address
phone number
content of messages or correspondence
and other information provided by the User.

5. Categories of Personal Data Recipients

Data are disclosed to employees of the Controller who require them to perform their direct duties related to the conclusion or execution of service contracts.

When collecting and using personal data, we partially use services of external service providers who strictly follow our instructions in accordance with contracts and are continuously monitored by us.

6. Categories of Data Subjects

Categories of data subjects include:

current clients
former clients
potential clients
other persons wishing to contact the Controller.

7. Transfer of Data Outside Latvia

The collected data are not intended to be transferred outside Latvia, the European Union or the European Economic Area, nor to any international organization.

However, as the Website uses Google and Facebook services, the Controller cannot guarantee that these companies will not transfer data outside the European Union or the European Economic Area.

8. Data Retention Period

We process and store the User’s personal data as long as either party has a legal obligation to retain them.

After these circumstances cease, and unless otherwise specified in data protection regulations, personal data will be deleted no later than three months after the original reason for storing them no longer applies, except where we have a legal obligation to retain them (for example accounting or legal proceedings).

9. Data Subject Access to Personal Data

The data subject has the right to access their personal data within one month from the date of submitting the request.

The User may submit a request in writing:

in person at the Controller’s legal address (presenting an identity document)
by post
by email signed with a secure electronic signature.

After receiving the request, the Controller verifies the User’s identity, evaluates the request and fulfills it according to legal requirements.

The User has the right to:

receive information regarding their data processing
request access to their personal data
request correction, supplementation or deletion
request restriction of processing
object to processing where applicable.

However, access may be restricted if disclosure is prohibited by law in cases involving national security, state defense, public safety, criminal law, taxation, financial supervision, or macroeconomic analysis.

10. Cookie Processing

The Website collects data about visitors, allowing the Website administrator to evaluate how useful the Website is and how it could be improved.

The Controller continuously improves the Website to enhance usability. Therefore it is necessary to know:

what information is important to visitors
how often they visit the Website
which devices and browsers they use
from which region visitors come
which content they read most.

The Controller uses Google Analytics to analyze how visitors use the Website.

More information about Google Analytics is available at:
https://support.google.com/analytics/answer/1012034

Visitors may disable Google Analytics data collection here:
https://tools.google.com/dlpage/gaoptout/

The server hosting the Website may record requests sent by the visitor, including:

device used
browser
IP address
date and time of access.

These data are used for technical purposes to ensure proper Website functionality and security and to investigate potential security incidents.

Cookies are small files stored by the browser on the visitor’s computer according to browser settings.

Cookies may be used to tailor information and advertisements based on previously viewed content.

More information about cookies is available at:
www.aboutcookies.org

Visitors can control or delete cookies. Blocking cookies may require manual adjustment of settings during each visit and some services may not function properly.

11. Third-Party Websites

We may cooperate with third parties authorized to place third-party cookies on our website with your consent.

These service providers help us provide a better, faster and safer website experience.

Third-party cookies are subject to the privacy policies of those third parties.

The Website uses the Facebook Pixel tool to customize content and advertising for Facebook users.

More information:
https://www.facebook.com/about/privacy/

Advertising settings can also be changed in your Facebook profile.

12. Right to File a Complaint with a Supervisory Authority

The data subject has the right to file a complaint with the supervisory authority – Data State Inspectorate of Latvia.

Documents may be submitted:

by post
by email with secure electronic signature
in person at Blaumaņa iela 11/13, Riga.

Email: info@dvi.gov.lv

13. Validity of the Privacy Policy

We reserve the right to modify and supplement this privacy policy from time to time to clarify how we process your data.

We recommend reviewing this privacy policy regularly to stay informed about the processing of your personal data on the Website.