The data controller that determines the purposes and means of processing your personal data is Ltd. "Graw Group", registration no. 44103121544, legal address: Selekcijas iela 6C - 7, Priekuļi, Priekuļu pagasts, Cēsu novads, LV-4126, phone: +371 29151559, e-mail: [email protected].

In this Privacy Policy, any use of the word "you", "your" or similar expressions means any visitor to www.grawfurniture.com (hereinafter referred to as the "website"). Terms such as "we", "our" or similar expressions mean Ltd. "Graw Group".

This Privacy Policy regulates the use of Ltd. "Graw Group" website and the information and services provided therein. When you visit the website for the first time, we will ask you to confirm the use of cookies in accordance with the terms of this notice.

We process your personal data in accordance with the General Data Protection Regulation and other laws governing the processing and protection of personal data.

1 Obtained personal data and their processing

1.1 We obtain and process the personal data you provide (hereinafter - personal data) when you place an order on the website, with the aim of processing the order, successfully implementing it and delivering it to you. Personal data may include your first name, last name, e-mail address, phone number, delivery address and other data that you provide when placing an order. If you place an individual order or choose to pay for your purchase by bank transfer based on an invoice prepared by us, you send your personal data to our e-mail address [email protected]. We process and use your personal data to communicate with you about your order, to successfully deliver your purchase, as well as to prepare the relevant payment and/or delivery documents in accordance with the law. We also process purchase history data from the personal data you provide on the website, so that in the case of repeated purchases, placing the order would be as quick as possible and more convenient for you. The legal basis for this processing is the performance of the mutual Distance Contract, as well as our legitimate interests, namely monitoring and improving our website and services.

1.4 You have the right at any time to object to the processing of your personal data, which takes place in accordance with your consent, but it should be noted that in such cases, without the mandatory information for processing the order, it is not possible to continue processing the order, and we have the right not to process the order further without further explanation.

2 Purposes of personal data processing

2.1 When making a purchase, in order to identify you as the buyer and recipient of the goods, to issue an appropriate invoice, ensure the delivery of the goods and fulfil other obligations resulting from the concluded contract, we process your name, surname, phone number, e-mail address, address of the place of delivery and payment information.

2.2 In order to send informative materials during the order processing and creation process, or to carry out adequate communication, for example, confirmation of the registration or purchase made, design coordination (in the case of a personalized order), a reminder of a pending purchase, or more detailed information about the development period and delivery of the product, we process your name, phone number and e-mail.

2.3 In order to provide answers to your questions, when you fill in the message section of our website on the Contacts page or when you contact our team directly by phone or electronically, we process the personal data you provide - name, surname and e-mail address, as well as other information provided. Your personal data will only be used to contact you and answer your questions, comments or suggestions.

2.4 In order to create a personalized product based on your expressed wishes and needs, we process the multimedia files and data (.jpg, .png , .cdr, .ai, .eps, .pdf, .svg, etc. similar file formats) that you voluntarily submit to for which you bear full responsibility. The submitted multimedia data is used for the purpose of visual material as a sample of ideas so that we can design and create a product according to your needs and wishes. All media files sent by you are used exclusively to fulfill your individualized order and are not used for third-party orders or for other illegal purposes.

3 Personal information that may be transferred to third parties

• to our insurers to manage risks or to file, enforce or provide defense in the event of claims;

• personal data related to your financial transactions, i.e. the purchase of goods on our website, which may be processed by our payment service providers - we share your transaction information with our payment service providers only to the extent necessary for your payment, refund and complaint purposes;

• to other service providers to provide specific services: our delivery partner companies, website servers and their maintenance service providers, e-mail and SMS service providers;

• in the case of engaging subcontractors, we will take all necessary measures to ensure the confidentiality of personal data processing.

4 Duration of storage of personal data

4.1 Your personal data is stored for as long as it is necessary to achieve the aforementioned processing purposes, unless longer storage is determined or permitted by applicable laws and regulations.

4.2 In any case, they are stored no longer than:

• personal data is stored no longer than 5 (five) years from your last order;

• purchase data will be stored no longer than 15 (fifteen) years after the end of service provision and/ or accompanying documents in accordance with the laws and regulations of the Republic of Latvia;

• multimedia data will be stored no longer than 5 (five) years from the last order.

4.3 We are entitled to retain your personal data if this is necessary to fulfill our legal obligations.

5 Acquaintance with your personal data that we process

5.1 You have the right to access and familiarize yourself with your personal data processed by the www.grawfurniture.com online store.

5.2 You can access your processed personal data by sending us a request to e-mail [email protected].

6 Your rights regarding your personal data that we process

6.1 You can prevent us from processing your personal data. If you prevent the processing of your personal data, we will not perform any actions with your personal data, except for the storage of your personal data.

6.2 You can prevent us from processing your personal data by sending us a request to e-mail [email protected].

6.3 You can withdraw your consent to the processing of your personal data at any time by sending us a request to e-mail [email protected].

6.4 You have the right to receive information about the personal data relating to you that you have provided to us in a structured, widely used and machine-readable format, and the right to transfer this data to another data controller.

6.5 You can request the transfer of your personal data by sending us a request to e-mail [email protected].

6.6 You have the right to request the deletion of your personal data from our databases by sending us a written request to e-mail [email protected].

6.7 Your personal data may not be deleted from our databases in the following cases:

• your personal data is necessary to achieve the purpose for which it was obtained/ processed;

• you have not withdrawn your consent to the processing of your personal data;

• data processing is necessary to fulfil our legitimate interests or obligations;

• we are obliged to process your personal data in accordance with the requirements of the European Union and local laws and regulations;

• your personal data must be processed for the purpose of filing a lawsuit, complying with court orders or responding to court orders.

6.8 We can only respond and provide information about your personal data and may not in any way provide you with any information about the personal data of any other person.

6.9 When submitting an application for any of the points mentioned above, you must provide a specific e-mail address to which personal data processing is applicable and on the basis of which we can identify you; accordingly, all submissions in this regard must be sent electronically from the same e-mail address. Otherwise, we cannot correct the information and personal data in our possession if the e-mail addresses of the requester do not match the requested.

7 Children's personal data

7.1 The services provided in the online store are intended for persons who have reached the age of 14.

7.2 If there are reasonable suspicions about the truthfulness of the person's stated age, the personal data of such persons will be deleted from the databases without further explanation.

8 Cookies and their use

8.1 Cookies are small text files that are sent to your device when you visit our website. Cookies help us recognize your device and help us improve the functioning of our website and make it easier for you to use it.

8.2 When visiting our website www.grawfurniture.com for the first time, we will ask you to confirm the use of cookies in accordance with the terms of this notice.

8.3 Cookies do not collect personally identifiable information and are not used to determine your identity.

8.4 Your personal information held by us may be linked to information obtained or stored by cookies.

8.5 You can refuse or delete cookies according to the Internet browser you use. The steps may vary depending on the browser and its version.

8.6 This website may set the following cookies:

• functional cookies - necessary so that you can navigate the website and use its functions. Without these cookies, we cannot provide the services you request, such as the shopping cart functionality;

• Google Analytics cookies - used to obtain visit statistics on our website. We use this information to improve website performance and advertising efforts;

• targeted advertising tool cookies - used to increase the effectiveness of advertising and show ads that are likely to be of most interest to you;

• Facebook Pixel - used to be able to measure, optimize and create Facebook advertising campaigns with the aim of directly introducing our products to an interested audience.

8.7 To refuse receiving cookies, you can use the private browsing mode provided by most browsers (private window, incognito window or InPrivate window). Any cookies created while in private browsing mode are deleted as soon as you close all browser windows.

9 Other conditions

9.1 We reserve the right to update, change or replace any section of this Privacy Policy on our website.

9.2 It is your responsibility to regularly check this page to ensure that no changes have been made to it and to familiarize yourself with the current information and processing of personal data by our company each time you place an order.

9.3 If you continue to use our website even after the changes published on it, you automatically agree to the relevant changes.

9.4 In the event that you do not agree to any of these amendments, corrections or updates, you must immediately stop using our website.

9.5 You can contact the persons responsible for the processing of personal data of our company by writing an e-mail to [email protected].