Controller
SIA VTLSHOP, registration No. 50203793041, Bērzu iela 3-30, Ropāži, LV-2135, Latvia, siavtlshop@outlook.com.
What we process and why
- Order data (name, delivery address, email, phone, items, payment status): to perform the contract and deliver your order (GDPR Art. 6(1)(b)).
- Payment data: processed by the payment provider you choose at checkout. We do not store card numbers.
- Accounting data: invoices and order records kept for 5 years under Latvian accounting law (Art. 6(1)(c)).
- Support messages: to answer your questions (Art. 6(1)(b) and (f)).
- Technical data (IP address, browser, pages visited): for security and to run the site (Art. 6(1)(f)). We use only cookies necessary for the shop to work unless you consent to others.
Recipients
Hosting provider (Hostinger, EU data centre), courier companies for delivery, payment providers, and our accountant. We do not sell personal data.
Retention
Order and invoice data: 5 years. Support emails: 2 years. Technical logs: up to 12 months.
Your rights
You may request access, rectification, erasure, restriction, portability and object to processing by writing to siavtlshop@outlook.com. You may lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv) or your local authority.