Privacy policy
Last updated: 18 September 2026
This Privacy Policy explains how Virasmart SIA collects, uses, stores and protects personal data when you visit or make a purchase from our online store at shop.virasmart.eu, use our website, contact us or use our services.
1. Data Controller
The controller responsible for the processing of personal data is:
Virasmart SIA
Registration No.: 40203696628
VAT No.: LV40203696628
Vienības gatve 109
Rīga, LV-1058
Latvia
Email: info@virasmart.eu
Phone: +371 20 879 900
Virasmart SIA processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), applicable Latvian legislation and other applicable European Union legislation.
2. Personal Data We Collect
Depending on how you use our online store or services, we may collect and process the following personal data:
-
first and last name;
-
company name, registration number and VAT number, where applicable;
-
billing address;
-
delivery address;
-
telephone number;
-
email address;
-
products and services ordered;
-
order and transaction information;
-
selected payment method and payment status;
-
delivery information;
-
communications with Virasmart SIA;
-
information relating to returns, warranty claims or complaints;
-
IP address, browser, device and technical information generated when using our online store;
-
other information voluntarily provided by the customer in connection with an order or enquiry.
We do not receive or store customers' online banking credentials or complete payment card details when payments are processed through external payment service providers.
3. Purposes and Legal Basis for Processing
We process personal data only where there is a lawful basis for doing so.
Personal data may be processed for the following purposes:
Processing orders and performing contracts
We process personal data to accept and process orders, provide products and services, arrange delivery, communicate regarding orders and fulfil our contractual obligations.
Legal basis: performance of a contract or taking steps at the customer's request before entering into a contract.
Processing payments
Personal data necessary for processing payments may be transferred to our authorised payment service provider.
Legal basis: performance of a contract and compliance with applicable financial and accounting obligations.
Delivery of products
Customer contact and delivery information may be provided to the selected courier, parcel service or freight provider where necessary to deliver an order.
Legal basis: performance of a contract.
Accounting and legal obligations
Order, invoice, payment and transaction information may be processed and retained to comply with accounting, tax and other legal requirements.
Legal basis: compliance with a legal obligation.
Customer service, returns, warranty and complaints
We process information necessary to respond to enquiries, administer returns, investigate complaints and handle warranty or conformity claims.
Legal basis: performance of a contract, compliance with legal obligations and, where applicable, our legitimate interests.
Security and fraud prevention
We may process technical, transaction and account information where reasonably necessary to protect our online store, customers and business against fraud, misuse or security threats.
Legal basis: legitimate interests.
Marketing communications
Where required by law, marketing communications are sent only with the customer's consent. Customers may withdraw their consent or unsubscribe from marketing communications at any time.
Legal basis: consent or another lawful basis permitted under applicable legislation.
4. Payment Processing and Maksekeskus AS
Online payments may be processed through Maksekeskus AS (MakeCommerce).
Virasmart SIA transfers the personal data necessary for processing payments to the authorised processor Maksekeskus AS.
Depending on the selected payment method, payment processing may also involve the customer's bank, card payment network or another payment service provider.
Payment transactions are completed through the secure environment of the relevant payment service provider.
Virasmart SIA does not receive or store customers' online banking credentials or complete payment card details.
The payment methods available to the customer are displayed during checkout.
5. Shopify
Our online store is operated using the Shopify e-commerce platform.
Shopify provides the technical infrastructure necessary for operating the online store, including functionality related to shopping carts, checkout, order management and other e-commerce services.
Personal data may therefore be processed by Shopify and its service providers where necessary to provide these services.
Where personal data is transferred outside the European Economic Area, appropriate safeguards are applied as required by applicable data protection legislation.
6. Sharing Personal Data
Virasmart SIA may share personal data only where necessary for operating the online store, fulfilling orders, providing services or complying with legal obligations.
Recipients may include:
-
Maksekeskus AS and other payment service providers;
-
banks and payment networks involved in the selected payment method;
-
Shopify and relevant e-commerce service providers;
-
courier, parcel delivery and freight companies;
-
accounting and financial service providers;
-
IT, hosting and technical service providers;
-
professional advisers where necessary;
-
public authorities where disclosure is required by law.
Delivery service providers may include Omniva, Venipak, DPD, SmartPosti and other carriers selected according to the order and destination.
Only the personal data reasonably necessary for providing the relevant service is shared.
Virasmart SIA does not sell customers' personal data.
7. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected or for the period required by applicable law.
Order, invoice, transaction and accounting information is retained for the period required by applicable Latvian accounting and tax legislation.
Customer correspondence, complaints, warranty cases and other contractual information may be retained for as long as reasonably necessary to establish, exercise or defend legal claims and fulfil contractual or legal obligations.
Marketing information processed on the basis of consent is retained until the consent is withdrawn or the information is no longer necessary for the relevant purpose.
Technical and security information is retained only for as long as reasonably necessary for security, fraud prevention and operation of the online store.
When personal data is no longer required, it is deleted or anonymised where reasonably possible and subject to applicable legal requirements.
8. Cookies and Similar Technologies
Our online store may use cookies and similar technologies necessary for the operation of the website and online store.
These technologies may be used for purposes including:
-
maintaining shopping cart and checkout functionality;
-
remembering customer preferences;
-
website security;
-
analysing website performance and usage;
-
improving the online store;
-
marketing and advertising, where the customer has provided the required consent.
Where required by law, non-essential cookies are used only after the customer has provided consent.
Customers can manage available cookie preferences through the cookie settings provided on the website and through their browser settings.
9. Marketing
Virasmart SIA may send information about products, services or offers where permitted by applicable law.
Where consent is required, such communications will be sent only after the customer has provided consent.
Customers may unsubscribe from electronic marketing communications at any time using the unsubscribe option provided in the communication or by contacting:
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
10. Data Security
Virasmart SIA applies appropriate organisational and technical measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or other unlawful processing.
Access to personal data is limited to persons and service providers who require such access for legitimate business or legal purposes.
However, no internet-based service can guarantee absolute security.
11. Your Rights
Subject to the conditions provided by applicable data protection legislation, you have the right to:
-
request access to your personal data;
-
request correction of inaccurate or incomplete personal data;
-
request deletion of personal data;
-
request restriction of processing;
-
object to certain processing;
-
request data portability where applicable;
-
withdraw consent at any time where processing is based on consent;
-
lodge a complaint with the competent data protection supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, please contact:
We may request additional information where reasonably necessary to verify the identity of the person making the request.
12. Supervisory Authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.
For Virasmart SIA in Latvia, the supervisory authority is:
Datu valsts inspekcija
Data State Inspectorate of the Republic of Latvia
You may also have the right to contact the competent data protection authority in your country of residence within the European Union.
13. Children's Data
Our online store and professional services are not specifically directed at children.
We do not knowingly collect personal data from children where parental or guardian consent would be required under applicable law.
14. Changes to this Privacy Policy
Virasmart SIA may update this Privacy Policy when necessary due to changes in our services, online store, payment or delivery providers, technical solutions or applicable legislation.
The current version of the Privacy Policy will be published on our online store.
The date of the latest update is shown at the beginning of this document.
15. Contact
For questions concerning this Privacy Policy or the processing of personal data, please contact:
Virasmart SIA
Registration No.: 40203696628
VAT No.: LV40203696628
Vienības gatve 109
Rīga, LV-1058
Latvia
Email: info@virasmart.eu
Phone: +371 20 879 900
Online store: shop.virasmart.eu
Website: virasmart.eu