.svg){kind=small}
Privacy Policy
In effect from 1 July 2026. Last updated on 1 July 2026.
This privacy policy explains how the online store Duuna.lv processes the personal data of natural persons, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and other applicable laws and regulations.
1. Controller
The controller of personal data processing is:
- Do Safe SIA (limited liability company)
- Registration No. 40203461874
- Registered address: Mazā Caunes iela 2A, Riga, LV-1006, Latvia
- Email: info@duuna.lv
- Phone: +371 27088885
2. What data we process
Depending on how you use our store, we may process the following categories of data:
- Identification and contact details: first name, surname, email address, phone number;
- Delivery and billing data: delivery and billing address, legal entity details (if applicable);
- Order data: purchased goods, order amount, payment method, order history;
- Communication data: correspondence with us, requests, complaints and reviews;
- Technical data: IP address, device and browser information, cookies and usage data (see the Cookie Policy).
3. Purposes and legal basis of processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Placing, fulfilling and delivering an order | Performance of a contract (Article 6(1)(b)) |
| Compliance with accounting and tax requirements | Compliance with a legal obligation (Article 6(1)(c)) |
| Customer service, communication, handling of complaints | Performance of a contract / legitimate interests (Article 6(1)(b) and (f)) |
| Sending news and offers (marketing) | Consent (Article 6(1)(a)) |
| Ensuring the operation of the store, security, fraud prevention | Legitimate interests (Article 6(1)(f)) |
4. Data retention periods
We retain personal data no longer than necessary to achieve the relevant purpose or as required by laws and regulations:
- Order and accounting data – in accordance with the requirements of accounting laws and regulations (generally up to 5 years, in certain cases longer);
- Customer account data – while the account is active or until the account is deleted;
- Marketing data – until consent is withdrawn;
- Communication data – for as long as necessary to handle the request and to secure any potential claims.
5. Data recipients
Personal data may be transferred to the following categories of recipients only to the extent necessary to provide the service:
- Delivery and courier service providers;
- Payment service providers and banks;
- IT, website maintenance and email service providers;
- Accounting service providers;
- State and municipal authorities, where required by laws and regulations.
Data processing agreements are concluded with service providers that process data on our behalf. Data is not transferred to third countries (outside the EU/EEA), except where this takes place in compliance with GDPR requirements and with appropriate safeguards.
6. Your rights
Under the GDPR, you have the right to:
- access your personal data and receive a copy of it;
- request the correction of inaccurate data;
- request the erasure of data (“right to be forgotten”);
- restrict the processing of data;
- object to processing based on legitimate interests;
- data portability;
- withdraw your consent at any time, where processing is based on consent.
To exercise your rights, please contact us by writing to info@duuna.lv. If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority – the Data State Inspectorate (Elijas iela 17, Riga, LV-1050, email: pasts@dvi.gov.lv, www.dvi.gov.lv).
7. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure.
8. Cookies
Our website uses cookies. More information is available in the Cookie Policy section.
9. Changes to the privacy policy
We reserve the right to update this privacy policy. The current version is always available in the Online Store.