PRIVACY POLICY
The limited liability company “Global Medicus” (hereinafter — SIA “Global Medicus”) undertakes to ensure the protection and privacy of your personal data in accordance with:
the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
other laws and regulations in force in the Republic of Latvia concerning personal data processing and privacy;
this Privacy Policy.
Through this Privacy Policy, the limited liability company “Global Medicus” provides you with information about the principles, types, purposes, scope, conditions and duration of its personal data processing, as well as your rights in relation to our processing of personal data.
This Privacy Policy sets out the rules for processing information in connection with our loyalty programme, the website https://siberikashop.lv/ and other services we provide to customers (collectively referred to below as the “Services”).
Data controller
The controller of your personal data is the limited liability company “Global Medicus”, registration No. 40203110038, registered address: Kandavas iela 39, Rīga, LV-1083.
In this Privacy Policy, “we”, “us” and “our” refer to SIA “Global Medicus”.
Data controller contact details
If you have any questions about how we collect, store and use your personal data, please contact us in one of the following ways:
email address: [email protected];
postal address (marked “Privacy”): the limited liability company “Global Medicus”, Kandavas iela 39, Rīga, LV-1083.
Scope of personal data processing
Providing your personal data to us is voluntary. However, if you do not provide it, we will be unable to provide the Services and achieve the purposes specified in this Privacy Policy.
The personal data processed may include your first name, surname, email address, telephone number, delivery and billing addresses, and other information you provide to us.
Purposes of personal data processing
We process personal data to:
- register you in our loyalty (customer) programme and administer your participation;
- identify you in our stores so that you can use your customer card;
- register you in our online store and provide access to it;
- enable you to place orders in our online store;
- deliver goods ordered from our online store;
- contact you about goods ordered from our online store and their delivery;
- apply the customer card discount in physical stores and, where there is an appropriate legal basis, send information about special offers and products;
- protect our property, prevent and detect theft in our stores, identify individuals who commit theft, and protect individuals’ vital interests, including life and health;
- handle your claims, complaints, suggestions and other enquiries, including feedback on our products;
- collect statistical data and conduct market research.
We process only the personal data necessary to achieve the relevant purpose.
The 10% discount applies only in physical stores on presentation of a customer card. It cannot be combined with promotional discounts. The card number is used in physical stores to verify eligibility for the discount. This website does not profile customers to select personalised offers or carry out automated decision-making that produces legal or similarly significant effects.
You may opt out of the commercial communications, or direct marketing messages, we send you at any time. You can do so by contacting [email protected] or using the unsubscribe link in the email sent to you.
The website currently operates as a catalogue with a shopping list and an estimated total. The website does not request customer card numbers or calculate customer card discounts. The shopping list and selected parcel locker are held only in the memory of the open page; they are not sent to the server or saved in the browser’s persistent storage. Reloading the page deletes this information. Orders are not open yet.
To protect your privacy and security, we implement appropriate technical and organisational measures to verify your identity, for example by requesting a password and user identifier before providing access to your personal data. We take reasonable measures to protect personal data; however, no method of transmitting data over the internet or storing it electronically can guarantee absolute security.
Legal basis and duration of personal data processing
We process personal data only on one of the following grounds:
1) Customer consent — a freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they agree to the processing of their personal data for one or more specific purposes;
2) Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the data subject’s request before entering into a contract;
3) Compliance with a legal obligation — where processing arises from applicable laws and regulations or lawful requests from competent public authorities, personal data is processed to the extent necessary to comply with the relevant legal requirements or respond to such requests;
4) The controller’s legitimate interests — processing is necessary to pursue the controller’s legitimate interests, including, but not limited to, protecting property and ensuring security, protecting individuals’ vital interests (including life and health), and establishing, exercising or defending potential claims (for example, video surveillance).
Where video surveillance is in operation, we always clearly inform customers about video surveillance in the store by displaying a specific notice sticker.
We process personal data provided by customers for as long as their consent to processing remains valid, or for as long as we need to protect our legitimate interests or comply with our legal obligations, and while the purpose of processing has not yet been achieved. Video surveillance footage is retained for no longer than 10 days. If a particular recording is needed to detect or investigate theft, hold the person responsible for theft accountable, or protect other legitimate interests, it is retained until the relevant purposes have been achieved.
Recipients of personal data
When processing customers’ personal data, we maintain confidentiality and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or alteration.
Where there is a lawful basis, personal data may be disclosed to the following categories of persons:
1) data processors who process personal data on our behalf and in accordance with our instructions (for example, service providers who inform customers about offers);
2) national and local authorities, as well as law enforcement authorities, on the basis of a lawful request provided for by applicable laws and regulations;
3) providers of services related to our business activities (for example, credit institutions and payment service providers, delivery service providers, accountants, auditors, lawyers, insurers and others), where there is a lawful basis for the disclosure of personal data;
If third-party services are used to deliver an order, a limited amount of personal data may be disclosed to the relevant partners, who in such cases act as data processors or independent controllers.
4) persons who acquire or may acquire control of our business in the event of a reorganisation, merger, division or disposal of the business or part of it.
SIA “Global Medicus” processes personal data within the European Union (EU) and the European Economic Area (EEA) wherever possible. However, in certain cases, for example to compile website traffic statistics and for marketing purposes, SIA “Global Medicus” may use third-party cookies (such as those from Google or Meta). Information generated by these cookies may be transferred to and stored on servers outside the EU/EEA, including in countries for which the European Commission has not adopted a decision recognising an adequate level of personal data protection. In such cases, depending on the circumstances, SIA “Global Medicus” applies one or more safeguards provided for in Regulation (EU) 2016/679, such as standard contractual clauses approved by the European Commission.
Customer rights
Customers have the right to choose which data to provide to SIA “Global Medicus” and to what extent, and to withdraw consent to the processing of their personal data in full or in part by requesting that processing of all or a specified part of their data cease. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
If you choose not to provide personal data or withdraw consent to processing in full or in part, we will be unable to provide those services for which the relevant personal data is necessary.
As we need to clearly identify the customer who is withdrawing consent to personal data processing in full or in part, customers may submit their withdrawal of consent in the following ways:
1) If the customer has been issued a customer card, by emailing the withdrawal to [email protected] from the email address provided in the customer card application form or when registering in the online store.
2) By emailing the withdrawal, signed with a secure electronic signature, to [email protected].
3) By posting the withdrawal to our registered address: Kandavas iela 39, Rīga, LV-1083.
4) Customers may also submit a withdrawal of consent bearing their handwritten signature at any of our stores.
The withdrawal of consent must state the customer’s first name and surname or username (if one has been chosen), customer card number (if a card has been issued), and the extent to which consent is being withdrawn.
Customers may object at any time to the processing of their personal data by SIA “Global Medicus” and request that SIA “Global Medicus” take specific action in relation to their personal data by submitting a request in one of the ways listed above in this section.
Customers have the right to:
1) receive information about the personal data SIA “Global Medicus” holds about them, and a copy of that data;
2) request rectification of inaccurate personal data and, in cases provided for by applicable laws and regulations, erasure or completion of personal data, with appropriate reasons for the request;
3) request restriction of personal data processing in cases provided for by applicable laws and regulations;
4) object to the processing of personal data, including profiling, and, within the meaning of Article 22 of Regulation (EU) 2016/679, not be subject to automated decision-making that produces legal effects concerning them or significantly affects them;
5) receive personal data in a structured, commonly used and machine-readable format and transmit it to another controller, to the extent provided for in Article 20 of Regulation (EU) 2016/679 and where technically feasible.
Customers have the right to obtain information from SIA “Global Medicus” about the disclosure of their personal data to third parties and about the persons (natural or legal) and/or public authorities to whom SIA “Global Medicus” has provided any information relating to that customer’s personal data. Exceptions apply where information was provided at the request of an authority conducting operational investigative activities or another competent authority in criminal proceedings, or where the law otherwise expressly prohibits disclosure of the information.
In the event of a dispute relating to the processing of personal data by SIA “Global Medicus”, customers have the right to lodge a complaint with the supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), at Elijas iela 17, Rīga, LV-1050, https://www.dvi.gov.lv/lv/, email: [email protected].
Our cookie policy
Information about cookies and similar technologies used on this website, including saving the language preference in the browser, is provided in the “Cookie policy” section.
Cookies that are not strictly necessary to provide a service requested by the user require the user’s consent before they are used. Continuing to browse the website does not in itself constitute consent.
We have prepared a separate cookie policy, available on our website at https://siberikashop.lv/
Changes to the Privacy Policy
SIA “Global Medicus” may amend this Privacy Policy at any time and at its discretion, provided that the changes comply with the requirements of laws and regulations concerning personal data protection. Amendments take effect upon publication on the SIA “Global Medicus” website at https://siberikashop.lv/.