Kondipak · SIA "DK LUX"

Privacy Policy

Processing and protection of personal data

Last updated: 15 June 2026

1. General information

SIA "DK LUX" (the Controller, we) understands how important the protection of your privacy is. This policy describes how we collect, use, store and protect personal data when you visit the kondipak.lv online store and use our services.

Data controller: SIA "DK LUX", Zemeņu iela 2C, Jelgava, LV-3001

E-mail for data protection matters: info@kondipak.lv

VAT reg. no.: LV40203307896

2. What data we process

We only process data necessary to provide the service:

  • Identification data — first name, last name, e-mail, phone;
  • Delivery and billing data — address, postcode, country, company name, registration number, VAT number (B2B);
  • Order data — purchased products, prices, payment and delivery information;
  • Account data — login information, saved delivery preferences (if an account is created);
  • Technical data — IP address, browser type, device information, cookies (see section 8);
  • Communication content — e-mails, complaints and support requests.

We deliberately do not collect special categories of personal data (health, biometrics etc.).

3. Purposes and legal basis of processing

  • Performance of a contract (GDPR Art. 6(1)(b)) — order processing, delivery, invoicing, account maintenance;
  • Legal obligation (Art. 6(1)(c)) — accounting, tax records, claim records;
  • Legitimate interests (Art. 6(1)(f)) — fraud prevention, Site security, anonymous statistics (with your consent where required);
  • Consent (Art. 6(1)(a)) — optional cookies, marketing communication (where applicable).

4. Recipients of data

We may share personal data with trusted processors only to the extent necessary:

  • Payment services — EveryPay (payment processing);
  • Delivery — SIA Venipak Latvija and other logistics partners;
  • IT infrastructure — server hosting, e-mail delivery, security services;
  • Accounting and legal advisors — in cases prescribed by law;
  • Public authorities — where required by law.

We conclude data processing agreements with processors and verify an adequate level of security. Transfers outside the EEA only take place with GDPR-compliant safeguards (e.g. EU Commission adequacy decisions or standard contractual clauses).

5. Retention periods

  • Order and billing data — at least for the periods set by accounting law (usually 5–10 years);
  • Account data — while the account is active, and after deletion — as long as necessary for legal obligations;
  • Support correspondence — up to 3 years after the matter is resolved;
  • Cookies — according to section 8 and your choice.

At the end of the period we delete or anonymise the data.

6. Security

We implement technical and organisational measures (HTTPS encryption, access control, backups, staff training) to protect data from unauthorised access, disclosure, alteration or destruction.

7. Your rights

Under the GDPR you have the right to:

  • request access to your data;
  • request rectification or erasure of data;
  • restrict processing or object to processing;
  • receive data in a structured format (data portability);
  • withdraw consent (where processing is based on consent);
  • lodge a complaint with the Latvian Data State Inspectorate.

To exercise your rights, write to info@kondipak.lv. We generally reply within 30 days.

8. Cookies

The Site uses cookies to provide core functionality and — with your consent — preferences and analytics. Detailed information about categories and management is available in the cookie banner ("Customise" / "Cookie settings" in the site footer).

  • Necessary — cart, authentication, security (always active);
  • Preferences — language choice and saved settings;
  • Analytics — anonymous visit statistics (only with consent).

You can change your choice at any time using the "Cookie settings" button in the footer.

9. Automated decision-making

We do not carry out automated decision-making that produces legal effects for you or similarly significantly affects you (profiling without human involvement).

10. Changes to this policy

We may update this policy. The latest version is always available on this page with the update date. For material changes we may notify you by e-mail or on the Site.

This document is provided for information and does not limit consumer rights under the laws of the Republic of Latvia. In case of any conflict between this text and applicable law, the law prevails. The distance contract enters into force when the Seller confirms the order.