The limited liability company “SIA RMEQ” undertakes to ensure the protection of your personal data and privacy in accordance with:

• Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); • Other applicable regulatory enactments in the Republic of Latvia in the field of personal data processing and privacy; • This Privacy Policy.

With this Privacy Policy, the limited liability company “SIA RMEQ” provides you with information about the principles, methods, purposes, volumes, conditions, and deadlines for the processing of your personal data.

1. Definitions

1.1. Personal data – any information relating to an identified or identifiable natural person. 1.2. Data subject – an identified or identifiable natural person (hereinafter referred to as the client). 1.3. Profiling – automated processing of personal data that involves the use of personal data to evaluate specific personal aspects relating to a natural person. 1.4. Controller – the limited liability company “SIA RMEQ” (hereinafter also referred to as ‘’synthiquesounds’’). 1.5. Processor – a natural or legal person who processes personal data on behalf of the controller (‘’synthiquesounds’’). 1.6. Third party – a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data. 1.7. Consent of the data subject (client) – a statement or a clear affirmative action by the data subject, signifying agreement to the processing of their personal data. 1.8. Cookies – text files stored on the user’s device to personalize the usability of the ‘’synthiquesounds’’ website for each specific website user.

2. Controller and Processor of Personal Data

2.1. The controller of personal data is the limited liability company “SIA RMEQ,” registration number 40203298983, legal address: Riga, Kurzemes Prospekts 128-25, LV-1069. 2.2. Processors of personal data are legal entities that, on behalf of ‘’synthiquesounds’’ and in accordance with ‘’synthiquesounds’’ instructions, process personal data, and undertake to comply with the requirements of legal acts in the field of data processing.

3. Categories and Types of Customer Personal Data Processed

3.1. The categories of customer personal data processed by ‘’synthiquesounds’’ differ depending on the ‘’synthiquesounds’’ services the customer wishes to use. 3.2. The categories of customer personal data processed by ‘’synthiquesounds’’ can be divided as follows: 3.2.1. Customer personal data processing for the issuance of ‘’synthiquesounds’’ customer cards and related actions; 3.2.2. Customer personal data processing for registration in the ‘’synthiquesounds’’ e-shop and related actions; 3.2.3. Customer personal data processing for sending ‘’synthiquesounds’’ newsletters by email or SMS; 3.2.4. Customer personal data processing for security purposes; 3.2.5. Customer personal data processing for other marketing purposes (promotional events). 3.3. To provide customer cards and related marketing offers, ‘’synthiquesounds’’ may process the following customer personal data, depending on the information voluntarily provided by the customer: name, surname, or username; gender; date of birth (date, month, and year at the customer’s choice); address; mobile phone number; email. 3.4. For customer registration in the ‘’synthiquesounds’’ e-shop and depending on the information provided by the customer, ‘’synthiquesounds’’ may process the following customer personal data: name, surname, or username; gender; date of birth (date, month, year); address; mobile phone number; email address. 3.5. For the execution of transactions in the ‘’synthiquesounds’’ e-shop, including product delivery, ‘’synthiquesounds’’ may process the following customer personal data depending on the customer’s chosen method of product delivery: email, name, surname; address; mobile phone number. 3.6. For sending ‘’synthiquesounds’’ newsletters by email or SMS, ‘’synthiquesounds’’ may process the following customer personal data based on the information provided by the customer and the purpose: email address, phone number, address. 3.7. For the purpose of property protection, ‘’synthiquesounds’’ may process the following customer personal data: video images obtained from video camera recordings located in ‘’synthiquesounds’’ premises. 3.8. For promotional purposes during ‘’synthiquesounds’’-organized promotional events (presentations, store opening events, etc.), ‘’synthiquesounds’’ may process the following customer personal data: photographs.

4. Purposes of Personal Data Processing

4.1. ‘’synthiquesounds’’ processes customer personal data solely for the purposes (objectives) mentioned below, in compliance with the requirements of laws and regulations on the processing of personal data and depending on the volume of personal data provided by the customer and the customer’s consent to specific processing purposes. 4.2. ‘’synthiquesounds’’ processes customer personal data for the following specific purposes: 4.2.1. Name, surname, or username – for identifying the customer in the ‘’synthiquesounds’’ store, providing the customer with the opportunity to use the customer card without presenting it; as well as for customer registration on ‘’synthiquesounds’’ e-shop and providing access to ‘’synthiquesounds’’ e-shop; 4.2.2. Date of birth (date, month, year) – for granting discounts to the customer in the customer’s birth month; 4.2.3. Address – for sending informational materials and invitations to the customer by mail, as well as for the delivery of goods ordered on ‘’synthiquesounds’’ e-shop if the chosen delivery method requires specifying an address for delivery; 4.2.4. Mobile phone number – for sending SMS messages about current promotional offers and invitations to events; and if the customer has provided a phone number during the process of ordering goods on ‘’synthiquesounds’’ e-shop, for communication regarding the delivery of goods ordered on ‘’synthiquesounds’’ e-shop; 4.2.5. Email – for sending ‘’synthiquesounds’’ newsletters in electronic form; for providing access to ‘’synthiquesounds’’ e-shop for the customer; for sending notifications necessary for the processing of ‘’synthiquesounds’’ e-shop orders, payments, and deliveries, if the customer places an order for goods on ‘’synthiquesounds’’ e-shop; 4.2.6. Video images – for video surveillance in ‘’synthiquesounds’’ store premises to protect ‘’synthiquesounds’’ property, prevent theft in ‘’synthiquesounds’’ store, detect thefts in ‘’synthiquesounds’’ store, identify persons committing thefts, and ensure the vital interests of persons, including protection of life and health; 4.2.7. Photographs – for promoting ‘’synthiquesounds’’ during promotional events organized by ‘’synthiquesounds’’. 4.3. ‘’synthiquesounds’’ informs that some of the processing purposes mentioned in point 4.2 may be carried out in an automated manner, including customer profiling, in order to provide new, specific, and individual ‘’synthiquesounds’’ offers to a specific customer, taking into account the information obtained by ‘’synthiquesounds’’ and automatically collected from the customer’s personal data and previous purchases at ‘’synthiquesounds’’ store, if the customer has consented to this.

5. Legal Basis and Term of Personal Data Processing

5.1. Personal data processing carried out by ‘’synthiquesounds’’ may only be based on one of the following grounds: 5.1.1. Consent of the customer – the customer’s personal, freely given, specific, informed, and unambiguous indication of the customer’s agreement to the processing of the customer’s personal data; 5.1.2. Performance of a contract – processing is necessary for the performance of a contract to which the customer is a party or for the performance of pre-contractual measures taken at the customer’s request; 5.1.3. Compliance with a legal obligation – processing is necessary for compliance with a legal obligation to which ‘’synthiquesounds’’ is subject; 5.1.4. Protection of vital interests – processing is necessary in order to protect the vital interests of the customer or of another natural person; 5.1.5. Legitimate interests – processing is necessary for the purposes of the legitimate interests pursued by ‘’synthiquesounds’’ or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the customer which require protection of personal data, in particular where the customer is a child. 5.2. The term of personal data processing by ‘’synthiquesounds’’ depends on the legal basis for the processing of personal data and the specific processing purpose and may vary: 5.2.1. Consent – personal data may be processed until the customer withdraws their consent to the processing of personal data, except where ‘’synthiquesounds’’ has other legal grounds for the processing of customer personal data for specific processing purposes; 5.2.2. Performance of a contract – personal data may be processed for as long as the customer is a party to the contract and for the period of time specified in the contract for the specific processing purpose; 5.2.3. Compliance with a legal obligation – personal data may be processed for the period of time specified in laws and regulations that require the processing of personal data, or for the period of time specified in a legal act, administrative act, or other legal document; 5.2.4. Protection of vital interests – personal data may be processed for as long as it is necessary to protect the vital interests of the customer or of another natural person; 5.2.5. Legitimate interests – personal data may be processed for as long as the legitimate interests pursued by ‘’synthiquesounds’’ or by a third party are not overridden by the interests or fundamental rights and freedoms of the customer which require the protection of personal data, in particular where the customer is a child.

6. Categories of Data Recipients

6.1. ‘’synthiquesounds’’ may disclose customer personal data to the following categories of recipients in accordance with the legal basis for the processing of personal data and the specific processing purpose: 6.1.1. Legal representatives of ‘’synthiquesounds’’ – ‘’synthiquesounds’’ employees or authorized persons who, in connection with the performance of their duties, require access to customer personal data in accordance with the customer’s consent to the processing of personal data or other legal grounds for processing personal data; 6.1.2. Processors – third parties that provide services to ‘’synthiquesounds’’ or customers on behalf of ‘’synthiquesounds’’ and process personal data on behalf of ‘’synthiquesounds’’ (e.g., IT service providers, marketing agencies, payment service providers, suppliers, courier services), in accordance with contracts concluded with ‘’synthiquesounds’’ and provided for by legal acts on personal data processing and privacy; 6.1.3. Supervisory authorities and state institutions – if necessary, ‘’synthiquesounds’’ may disclose customer personal data to supervisory authorities and state institutions in accordance with the requirements of laws and regulations on personal data processing and protection, as well as on the basis of a legal obligation; 6.1.4. Recipients of legal proceedings – ‘’synthiquesounds’’ may disclose customer personal data to recipients of legal proceedings in accordance with a court order or other legal requirement; 6.1.5. Other third parties – third parties that may need access to customer personal data in order to perform the necessary actions for specific processing purposes, if the customer has given consent to the processing of personal data or other legal grounds for processing personal data are provided. 6.2. ‘’synthiquesounds’’ may also provide access to customer personal data for processors located in third countries (outside the European Union and the European Economic Area) if necessary, in accordance with the legal basis for the processing of personal data and the specific processing purpose, and if the requirements of the legal acts on the transfer of personal data to third countries are met.

7. Customer Rights

7.1. In accordance with the requirements of laws and regulations on personal data processing and protection, the customer has the following rights regarding the processing of personal data by ‘’synthiquesounds’’: 7.1.1. The right to be informed about the processing of personal data – the customer has the right to be informed about the purposes and legal basis for the processing of personal data, categories of personal data processed, recipients of personal data, the term of personal data processing, as well as other information specified in laws and regulations on personal data processing and protection; 7.1.2. The right of access to personal data – the customer has the right to obtain confirmation from ‘’synthiquesounds’’ as to whether personal data concerning the customer are being processed and, if so, to access the personal data and obtain information about the processing of personal data; 7.1.3. The right to rectify inaccurate personal data – the customer has the right to request the rectification of inaccurate personal data concerning them, as well as to provide additional personal data if the personal data processed is incomplete; 7.1.4. The right to erasure of personal data (the right to be forgotten) – the customer has the right to request the erasure of personal data concerning them if the customer withdraws their consent to the processing of personal data and there is no other legal basis for the processing of personal data; if the customer objects to the processing of personal data for direct marketing purposes; if the customer objects to automated processing, including profiling, and there are no overriding legitimate grounds for the processing of personal data; if personal data has been unlawfully processed; if personal data must be erased to comply with a legal obligation; 7.1.5. The right to restrict processing – the customer has the right to request the restriction of the processing of personal data if the customer disputes the accuracy of personal data, and the accuracy of personal data is verified; if the processing of personal data is unlawful, and the customer opposes the erasure of personal data and requests the restriction of their use instead; if ‘’synthiquesounds’’ no longer needs the personal data for the purposes of processing, but the customer needs them to establish, exercise or defend legal claims; if the customer has objected to processing based on the legitimate interests of ‘’synthiquesounds’’, pending verification whether the legitimate grounds of ‘’synthiquesounds’’ override those of the customer; 7.1.6. The right to data portability – the customer has the right to receive personal data concerning them, which the customer has provided to ‘’synthiquesounds’’, in a structured, commonly used, and machine-readable format, and has the right to transmit this data to another controller without hindrance from ‘’synthiquesounds’’; 7.1.7. The right to object to the processing of personal data – the customer has the right to object to the processing of personal data concerning them if the processing is based on the legitimate interests of ‘’synthiquesounds’’, including profiling; if the processing of personal data is for direct marketing purposes; if personal data is processed for scientific or historical research purposes, or for statistical purposes, and there are no overriding legitimate grounds for the processing of personal data; 7.1.8. The right not to be subject to a decision based solely on automated processing, including profiling – the customer has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the customer or similarly significantly affects the customer; 7.1.9. The right to withdraw consent – if personal data processing is based on the customer’s consent, the customer has the right to withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal; 7.1.10. The right to lodge a complaint with a supervisory authority – if the customer believes that the processing of personal data by ‘’synthiquesounds’’ violates their rights and freedoms, the customer has the right to lodge a complaint with the Data State Inspectorate or another competent supervisory authority in accordance with the requirements of laws and regulations on personal data processing and protection.

8. Customer Obligations

8.1. The customer is responsible for the accuracy, completeness, and correctness of the personal data provided to ‘’synthiquesounds’’ and for informing ‘’synthiquesounds’’ of any changes to the provided personal data without delay.

9. Final Provisions

9.1. This Privacy Policy may be subject to change in accordance with the development of ‘’synthiquesounds’’ activities, changes in laws and regulations, or other circumstances that may affect the processing of personal data.

9.2. ‘’synthiquesounds’’ will inform customers about any significant changes to this Privacy Policy on its website or by other means of communication.