{"id":38,"date":"2026-10-31T00:48:27","date_gmt":"2026-10-30T22:48:27","guid":{"rendered":"https:\/\/kolos.lv\/shop\/privacy\/"},"modified":"2026-10-31T00:48:27","modified_gmt":"2026-10-30T22:48:27","slug":"privacy","status":"publish","type":"page","link":"https:\/\/kolos.lv\/shop\/privacy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<div class=\"kolos-policy\" data-no-translation><h2>Who is responsible<\/h2><p>SIA KOLOS MEDIA, registration 40203014132, Nomet\u0146u iela 53\u20138, R\u012bga, LV-1002, Latvija, is the controller of personal data processed for this shop. Contact us about privacy at <a href=\"mailto:heating@kolos.lv\">heating@kolos.lv<\/a> \u00b7 <a href=\"tel:+37126022778\">+371 26022778<\/a>. This policy concerns the shop at kolos.lv, not the separate services at other KOLOS subdomains.<\/p><h2>What we need and why<\/h2><p>For a purchase, we process your name, email, ordered goods, quantities, prices, payment status and transaction references. We process a phone number and selected parcel locker or delivery address as needed for delivery, and billing information required for the transaction or invoice. We process correspondence needed for support, returns and complaints. The legal bases are steps requested before a contract and performance of the contract (GDPR Article 6(1)(b)), legal obligations such as accounting and consumer protection (6(1)(c)), and legitimate interests in security and defending legal claims (6(1)(f)). We do not ask for a date of birth or personal identification number for ordinary consumer purchases. Required fields are identified at checkout; without necessary details, we cannot fulfil the order.<\/p><h2>Guest checkout and payment information<\/h2><p>You do not need a customer account. Guest checkout still creates an order record containing the information needed to process your purchase. Paysera and your bank process payment authentication. We do not store full card numbers or card security codes in the shop. Payment references and payment status are retained as part of the order and accounting records. If a refund cannot be returned using the original method, we request only the additional details necessary to arrange it.<\/p><h2>Service providers and recipients<\/h2><p>Relevant data is provided to Paysera for payment processing and Omniva for delivery, and to hosting, email, IT-support and accounting providers as necessary for their services. Authorities may receive information where legally required. Providers may act as processors or as independent controllers depending on their role. We do not sell customer data. Paysera and Omniva publish their own privacy notices. Where a provider transfers data outside the EEA, the applicable lawful transfer mechanism, such as an adequacy decision or standard contractual clauses, must be identified before that provider is used for such a transfer.<\/p><h2>Retention<\/h2><p>We retain order and invoice records in the webshop for the periods required by accounting law and for handling returns, warranty claims and legal disputes. Records needed to substantiate accounting entries are normally kept for at least five years, or longer where another legal requirement applies. Other personal information is retained only while needed for its purpose. Retention is reviewed before records are deleted or anonymised; completed orders are not automatically erased. A request for erasure is assessed against these legal obligations. Backup copies may retain information until they are replaced in the hosting provider\u2019s backup cycle.<\/p><h2>Security, browser storage and marketing<\/h2><p>Technical information such as IP addresses, request times and browser details may be processed in server and security logs to operate and protect the site. Access to order records is limited to people who need it for their work. The <a href=\"\/shop\/cookies\/\">Cookie policy<\/a> describes essential cart storage. The site has no advertising pixels or visitor analytics and sends no marketing messages without a separate lawful basis. We do not use solely automated decisions that produce legal or similarly significant effects on customers.<\/p><h2>Your rights<\/h2><p>You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. A deletion request does not override necessary accounting retention or other legal duties. We may request proportionate information to verify your identity. We normally respond within one month; any permitted extension will be explained. You can complain to Latvia\u2019s <a href=\"https:\/\/www.dvi.gov.lv\/\">Data State Inspectorate<\/a> or another competent supervisory authority.<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-38","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/kolos.lv\/shop\/wp-json\/wp\/v2\/pages\/38","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kolos.lv\/shop\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kolos.lv\/shop\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/kolos.lv\/shop\/wp-json\/wp\/v2\/comments?post=38"}],"version-history":[{"count":0,"href":"https:\/\/kolos.lv\/shop\/wp-json\/wp\/v2\/pages\/38\/revisions"}],"wp:attachment":[{"href":"https:\/\/kolos.lv\/shop\/wp-json\/wp\/v2\/media?parent=38"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}