Privacy Policy

Last updated: 16 October 2026

1. General Information

This Privacy Policy describes how SIA Viola Farma processes personal data when the online shop violafarma.lv is used and when interacting with customers in connection with the sale of goods and the handling of orders.

Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR), the Latvian Personal Data Processing Law (Fizisko personu datu apstrādes likums) and other applicable laws and regulations.

2. Data Controller

SIA Viola Farma is the data controller.

Registration number: 40003367731
Registered address: Viskaļu iela 26, Rīga, LV-1026
Email: [email protected]
Telephone: +371 67373435

3. What Personal Data We Process

Depending on how you interact with us, we may process:

first and last name;
email address;
telephone number;
delivery address and, where necessary, billing address;
information about orders and purchased goods;
account data, if registration is available on the website;
the content of customer enquiries and other information provided when communicating with us;
technical data such as IP address, browser and device information, and website usage data;
cookie and similar technology data in accordance with the separate Cookie Policy.

We process only the personal data necessary to achieve a specific processing purpose.

4. Processing Purposes, Data, Legal Basis and Retention

Personal data is used only for specific purposes. The main types of processing are listed below.

Processing purpose	Data processed	Legal basis	Retention period
Order placement and fulfilment	Name, surname, email, telephone, delivery/billing address, order details	Performance of a contract	The period necessary to perform the contract and the period required by law
Order delivery	Name, surname, telephone, delivery address, order details	Performance of a contract	The period necessary to fulfil the order and the period required by law
Accounting and tax records	Purchase and payment data	Legal obligation	The period prescribed by law
Handling questions and enquiries	Name, email, telephone and enquiry content	Depending on the circumstances: customer request, contract or legitimate interest	The period necessary to handle the enquiry
Marketing communications	Email and/or telephone	user consent (Article 6(1)(a) GDPR)	Until consent is withdrawn or the mailing is discontinued; evidence of consent is retained for as long as necessary to demonstrate that consent was obtained and to meet applicable legal requirements.
Analytics and website improvement	Technical data, cookies and similar identifiers	user consent where required for the analytics tools used; otherwise, the controller’s legitimate interests where an appropriate basis exists.	In accordance with the settings of the analytics tools used and their specified data retention periods.

5. Where We Obtain Data

We mainly obtain personal data directly from the customer when placing an order, registering, completing a contact form or contacting us. Technical data may be collected automatically when the website is used.

6. Who May Receive Personal Data

To fulfil orders and operate the website, personal data may be made available to the following categories of recipients:

delivery service providers and courier companies;
payment service providers;
IT, hosting and technical service providers;
service providers supporting the website, communications, analytics or marketing, where such services are used;
accounting and other professional service providers;
state and municipal authorities where disclosure is required by law.

Providers processing data on behalf of SIA Viola Farma have access only to the data and to the extent necessary for the relevant service.

SIA Viola Farma does not sell customers’ personal data to third parties.

7. Customer Rights

Customers have the following rights regarding their personal data, subject to the circumstances and conditions set out in the General Data Protection Regulation (GDPR):

Right of access: to obtain information about the processing of their personal data and a copy of those data.
Right to rectification: to request correction of inaccurate or completion of incomplete personal data.
Right to erasure: to request erasure of personal data where the grounds provided by law apply.
Right to restriction: to request restriction of personal data processing in the cases provided by law.
Right to object: to object to the processing of personal data in the cases provided by the GDPR.
Right to data portability: to receive personal data in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.
Right to withdraw consent: to withdraw previously given consent to personal data processing at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint: to contact the Latvian Data State Inspectorate (Datu valsts inspekcija) if the customer believes that the processing of their personal data violates legal requirements.

To exercise their rights, customers may send a request to SIA Viola Farma at [email protected].

SIA Viola Farma handles requests and provides information about the measures taken without undue delay and generally within one month of receiving the request. In cases provided for by the GDPR, this period may be extended by a further two months; the customer will be informed of the extension and the reasons for it within the first month.

Where there are reasonable doubts about the requester’s identity, SIA Viola Farma may request additional information needed to verify it.

These rights are exercised subject to the conditions and restrictions set out in the GDPR. Personal data will not be erased to the extent that continued retention is required by law.

8. Personal Data Security

SIA Viola Farma implements appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage.

9. Cookies

9.1. What Are Cookies

Cookies are small text files that a website stores on a user’s device when the user visits the website. They help the site function, remember user settings and, depending on their purpose, analyse website usage or deliver personalised advertising.

In addition to cookies, the website may use similar technologies to store information on and access information from a user’s device.

9.2. What Cookies Are Used For

Depending on the technologies actually used, cookies may serve the following purposes:

Strictly necessary cookies — support core website functions, including the shopping cart, order placement, security and storage of settings needed for the website to operate.
Functional cookies — remember user choices and settings to make the website more convenient to use.
Analytics cookies — help gather statistical information about website usage, identify errors and improve website performance.
Marketing cookies — may be used to measure advertising effectiveness, build advertising audiences and show ads based on user interests.

The website uses only those categories of cookies and similar technologies that are actually enabled and necessary for the relevant purposes.

9.3. Legal Basis for Using Cookies

Cookies that are strictly necessary to provide a service explicitly requested by the user may be used without prior consent.

For optional cookies requiring consent under applicable law, user consent is requested before the cookies are placed or activated.

Refusing optional cookies should not prevent use of the website’s core functions that do not require them.

9.4. Cookie Retention Period

Cookies may be session or persistent cookies.

Session cookies are usually deleted when the browser is closed. Persistent cookies remain for a specified period or until deleted by the user.

Specific retention periods depend on the purpose of the cookies and the technologies used. They are determined by the website settings and, where used, the settings of third-party services.

9.5. Third-Party Cookies

If the website uses third-party services, such as web analytics tools, advertising platforms, embedded videos or social media plugins, those services may place their own cookies or use similar technologies.

Where required by law, these technologies are activated only after the user has given consent.

Data processing by third-party services may also be governed by their own privacy policies.

9.6. Managing Cookies and Withdrawing Consent

When visiting the website, users may accept or reject optional cookies and select the cookie categories they consent to, if the website provides this option.

Users may change their choice or withdraw previously given consent through the cookie settings available on the website.

Users can also delete or block cookies through their browser settings. Some website functions may not work properly if cookies required for those functions are blocked.

Withdrawal of consent does not affect the lawfulness of cookie use before consent was withdrawn.

9.7. Contact Information

For questions about the use of cookies and the processing of personal data, users may contact SIA Viola Farma at [email protected].

Further information about personal data processing, users’ rights and how to submit requests is provided in this Privacy Policy.

10. Requirement to Provide Data

To place and fulfil an order, customers must provide the data needed to contact them, process the order and deliver it. If the required data is not provided, SIA Viola Farma may be unable to accept or fulfil the order.

11. Changes to the Privacy Policy

SIA Viola Farma may update this Privacy Policy in response to changes in legislation, services, technology or personal data processing practices. The current version is published on the website.

Last updated: 16 October 2026