Privacy policy

1. Controller of Personal Data Processing:

The Controller of Personal Data Processing is SIA "Pearls Box", Reg. No. 40203011916, legal address Robežu iela 8, Ikšķile, LV-5052, phone +371 67311706, email info@lolamasan.com (hereinafter referred to as “Pearls Box”), website https://lolitamasan.com.

2. Processor of Personal Data:

The Processor of Personal Data is SIA "Pearls Box", Reg. No. 40203011916, Robežu iela 8, Ikšķile. Following the instructions of “Pearls Box” and using technical and organizational data protection measures, it processes the Client’s personal data to the extent and in the manner required and permitted by the laws of the Republic of Latvia and the European Union. Other processors of personal data for “Pearls Box” may also receive and process the Client’s data.

3. Applicable Legislation:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (27 April 2016).
  • The Personal Data Protection Law.

4. What is the Privacy Policy?

4.1. The Privacy Policy (hereinafter referred to as the “Policy”) provides information on how “Pearls Box” collects, processes, stores, shares, deletes, and protects the Client’s personal data, ensuring that the Client’s personal data is processed lawfully, fairly, and transparently. The Policy applies to the Client’s personal data, any processing of natural persons’ data, and the services provided to the Client. 4.2. If “Pearls Box” updates this policy, all changes will be published on the “Pearls Box” website https://lolitamasan.com. under the section “Customer Support – Privacy Policy”. 4.3. To offer better and more suitable products and services, as well as to ensure, maintain, protect, and improve existing products and services, “Pearls Box” processes data collected from the provision of services.

5. What Personal Data Does “Pearls Box” Process?

5.1. The categories of personal data processed by “Pearls Box” depend on the products and services used by the Client. “Pearls Box” has the right to process the following categories of personal data for the purposes indicated in clause 7 of this Policy:

  • Name, surname, correspondence address, telephone number, and email address;
  • Communication data – email, letter, or other information related to the Client’s communication with “Pearls Box”;
  • Data provided by the Client to “Pearls Box”. 5.2. “Pearls Box” processes the following data on the use of products and services for the purposes indicated in clause 7 of this Policy:
  • Client’s IP address information;
  • Cookies (web browsing data) – data about visits to the “Pearls Box” website (https://lolitamasan.com.) (hereinafter referred to as the ““Pearls Box” website”);
  • Date, time, and volume of internet browsing, location during browsing;
  • Other personal data depending on the type of service provided to the Client, informing the Client in advance.

6. What is the Basis for the Processing of Client’s Personal Data?

6.1. Client’s consent – The Client, as the data subject, gives consent for the collection and processing of personal data for specific purposes. The Client’s consent for direct marketing purposes to offer new and individual offers will apply to “Pearls Box” activities after the entry into force of the E-Privacy Regulation. The Client’s consent is their free will and independent decision, which can be given at any time, thus allowing “Pearls Box” to process personal data for the specified purposes. The Client’s consent is binding if given in writing (by filling out a form in the “Pearls Box” store, sending an electronic request to info@lolamasan.com). The Client has the right to withdraw their previously given consent at any time, using the specified communication channels with “Pearls Box”. The requested changes will take effect within three working days. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. 6.2. Contract conclusion and performance – To conclude and perform a contract with the Client, providing quality services and customer support, “Pearls Box” needs to collect and process certain personal data, which are collected before the conclusion of the contract with “Pearls Box” or during an already concluded contract. 6.3. Legitimate interests of “Pearls Box” – Considering the interests of “Pearls Box”, which are based on providing quality services and timely support to the Client, “Pearls Box” has the right to process the Client’s personal data to the extent that is objectively necessary and sufficient for the purposes indicated in clauses 7.1.-7.2. of this Policy. Legitimate interests of “Pearls Box” are considered to be the processing of personal data for direct marketing, resulting in new and/or individual offers of “Pearls Box” products and services to the Client (see also clauses 8.2. and 8.3. of this Policy). 6.4. Legal obligations – “Pearls Box” is entitled to process personal data to comply with the requirements of normative acts and to respond to lawful requests from state and municipal authorities.

7. For What Purposes Does “Pearls Box” Process Client’s Personal Data?

7.1. “Pearls Box” processes personal data to ensure quality, timely, and convenient customer service during the validity of the contractual relationship with “Pearls Box”:

  • Managing Client relationships (including remotely), ensuring the conclusion and execution of contracts, as well as the implementation of related processes;
  • Handling Client complaints and providing support (including technical support) related to the services provided;
  • Informing the Client about products and services of other companies; 7.2. “Pearls Box” processes personal data to promote industry development and offer new services to Clients, including:
  • Creating new products and offering proposals for them;
  • Conducting market analysis and developing business models through the processing of statistical data of “Pearls Box” clients. 7.3. “Pearls Box” processes personal data to create and maintain internal processes, ensure document circulation, and other internal processes (e.g., archiving contracts and other documents) to the necessary and sufficient extent. 7.4. “Pearls Box” is entitled to process data for the purposes indicated below, upon receiving the Client’s freely given and unequivocal consent:
  • Promoting the image of “Pearls Box” in the market, sending the Client nice wishes, awarding bonuses, conducting surveys to improve existing products and services, and creating new products.

8. Does the Client Have the Right to Restrict the Processing of Their Data?

8.1. Profiling of Client’s personal data as data processing:

  • Profiling is any form of automated processing of personal data, which involves the use of personal data to evaluate certain personal aspects related to a natural person, particularly to analyze or predict aspects related to that natural person’s personal preferences, interests, reliability, behavior, location, or movements;
  • When processing the Client’s personal data, “Pearls Box” may perform profiling to send nice wishes, gifts, award bonuses, and make and express individual offers. Automated individual decisions are made only for business purposes and will not have legal effects on the Client. The Client has the right to object to automated decision-making and not be subject to such a decision at any time by informing “Pearls Box” (see also the provisions of clause 8.3. of this Policy). 8.2. Direct marketing and the basis for sending commercial communications to the Client: “Pearls Box” conducts direct marketing, distributing commercial communications to the Client so that the Client is always informed about new, modern, and/or specifically created products, services, as well as special contract terms (e.g., discounts) in accordance with the basis for personal data processing indicated in clause 6.3. of this Policy. The Client has the right to refuse commercial communications at any time and free of charge by informing “Pearls Box” (see also the provisions of clause 8.3. of this Policy). 8.3. The Client has the right to object to the profiling of their personal data (see clause 8.1) or refuse commercial communications (see clause 8.2) at any time by informing “Pearls Box” in writing (sending an electronic request to info@lolamasan.com, signed with a secure electronic signature, or writing to info@lolamasan.com). Changes will not affect the lawfulness of personal data processing before the objections and/or refusal indicated in this clause.

9. What are Cookies and How Can “Pearls Box” Process Them?

9.1. Cookies are small text files created and stored on the Client’s device (computer, tablet, mobile phone, etc.) when visiting “Pearls Box” websites. Cookies “remember” the user’s experience and basic information, thus improving the ease of use of the “Pearls Box” website. 9.2. Using cookies, aggregate user habits and website usage history are processed, problems and shortcomings in website operation are diagnosed, user habit statistics are collected, and full and convenient use of website functionality is ensured. 9.3. If the Client does not wish to allow the use of cookies, the Client can do so in their browser settings; however, in such a case, the use of the website may be significantly hindered. Stored cookies can be deleted in the browser settings section of the device by deleting the stored cookie history. 9.4. Websites maintained by “Pearls Box” use functional, analytical, advertising, and mandatory cookies.

10. How Does “Pearls Box” Obtain the Client’s Personal Data?

10.1. “Pearls Box” obtains the Client’s personal data when the Client:

  • Purchases and uses “Pearls Box” products or services (in “Pearls Box” stores or remotely);
  • Subscribes to receive news or other services from “Pearls Box”;
  • Inquires about more information regarding the product used by the Client or the service connected to the Client or contacts “Pearls Box” regarding complaints or information requests, identifying the Client;
  • Participates in contests, lotteries, or surveys;
  • Visits or browses the “Pearls Box” website; 10.2. “Pearls Box” may process personal data received from third parties if the Client has consented. 10.3. “Pearls Box” may process personal data about the Client from other companies and partner companies (see the provisions of clause 12 of this Policy), upon receiving prior consent from the Client.

11. What is the Duration of the Processing of Client’s Personal Data?

“Pearls Box” will process the Client’s personal data as long as at least one of the following conditions exists:

  • There is a valid contract between the Client and “Pearls Box”;
  • The retention period for personal data is specified or derived from the laws of the Republic of Latvia and the European Union;
  • As long as it is necessary for the realization and protection of “Pearls Box” legitimate interests;
  • Until the Client’s consent to personal data processing is withdrawn.

12. Sharing of Client’s Personal Data

12.1. To provide services to the Client, “Pearls Box” may share the Client’s personal data with:

  • Partners or agents involved in providing the products and services ordered or used by the Client; 12.2. “Pearls Box” is obligated to provide information about personal data to the following institutions and services:
  • Law enforcement agencies, courts, or other state and municipal institutions if it derives from the laws or a legitimate request from the respective institution; 12.3. “Pearls Box” will disclose the Client’s personal data only to the necessary and sufficient extent in accordance with the requirements of normative acts and the objective circumstances of the specific situation.

13. How Does “Pearls Box” Protect the Client’s Personal Data?

13.1. “Pearls Box” ensures, continuously reviews, and improves protection measures to safeguard the Client’s personal data from unauthorized access, accidental loss, disclosure, or destruction. To achieve this, “Pearls Box” employs modern technologies, technical and organizational requirements, including the use of firewalls, intrusion detection, and analysis software. 13.2. “Pearls Box” carefully examines all service providers processing the Client’s personal data on behalf and in the name of “Pearls Box”, and assesses whether cooperation partners (data processors) apply appropriate security measures to ensure the processing of the Client’s personal data complies with the delegation of “Pearls Box” and the requirements of normative acts. Cooperation partners are not allowed to process the Client’s personal data for their own purposes. 13.3. “Pearls Box” does not assume responsibility for any unauthorized access to personal data and/or personal data loss if it is not dependent on “Pearls Box”, for example, due to the Client’s fault and/or negligence. 13.4. In case of a threat to the Client’s personal data, “Pearls Box” will notify the DVI and, if necessary, the Client.

14. What Are the Client’s Rights?

14.1. Contact “Pearls Box” (writing to info@lolamasan.com) to receive a copy of the personal data held by “Pearls Box”. 14.2. Correct any personal data held by “Pearls Box” about themselves by submitting changes in writing to info@lolamasan.com. 14.3. The Client has the right to obtain information about physical or legal persons who have received information about the Client from “Pearls Box” within a specified period. “Pearls Box” will not provide information about state institutions that are criminal investigation leaders, operational activity subjects, or other institutions for which the law prohibits disclosing such information. 14.4. Request the deletion or restriction of personal data processing that is no longer necessary according to the purposes for which it was collected and processed (the right to “be forgotten”). 14.5. The Client has the right to data portability if the processing is carried out automatically by submitting a written request.

As of 25 May 2018, the Client is entitled to:

  • Object to the processing of personal data processed by “Pearls Box” based on legitimate interests. However, “Pearls Box” will continue to process the data if there are compelling legitimate reasons to continue processing. To exercise the above rights, the Client must submit a written request to “Pearls Box” by writing to info@lolamasan.com;
  • In certain circumstances, the Client has the right to request the deletion of personal data, except in cases where the law requires the data to be retained. To exercise the above rights, the Client must submit a written request to “Pearls Box” by writing to info@lolamasan.com;
  • In certain circumstances, the Client has the right to restrict the processing of their personal data. Please note that if the Client requests to restrict data processing, it may affect order fulfillment. To exercise the above rights, the Client must submit a written request to info@lolamasan.com;
  • The Client has the right to receive or transfer their personal data to another data controller (“data portability”). This right includes only the data provided by the Client to “Pearls Box” based on their consent or contract and if the processing is carried out automatically. To exercise the above rights, the Client must submit a written request to info@lolamasan.com.

14.6. Contact “Pearls Box” or the data protection supervisory authority (Data State Inspectorate, www.dvi.gov.lv) regarding questions about personal data processing. 14.7. Contact “Pearls Box” by writing to info@lolamasan.com for information about the processing and protection of the Client’s personal data.