Privacy policy

AirO2, SIA
Reg. No 45403058281
Registered office: 7a Matrožu iela, Rīga, LV-1048

1. Introduction

AirO2, SIA, hereinafter referred to as the "Provider", on the website www.air-o2.com (hereinafter referred to as the "Site") processes personal data obtained from the data subject - the user of the Site (hereinafter referred to as the "User").

The Provider shall take care of the User's privacy and personal data protection, respect the User's right to lawful processing of personal data in accordance with the applicable law - Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation) and other applicable privacy and data processing legislation.

In light of the above, the Provider has developed this Privacy Policy with the aim of providing the User with the information required by the Regulation.

The Privacy Policy applies to the processing of data regardless of the form and/or medium in which the User provides personal data (Website, paper, in person or by telephone).

The Provider reserves the right to modify this policy at any time. It is the responsibility of the visitor to the Site to independently check the content of the Site to familiarize themselves with any changes to the Terms.

2. Identity and contact details of the provider

The Provider is AirO2, SIA, Reg. No. 45403058281. The address of the Provider is Matrožu iela 7a, Riga, LV-1048, website - www.air-o2.com, e-mail - air@airo2.eu, telephone - +371 2564 2178.

3. Purposes for which personal data are processed and legal basis for processing

If the User provides the Provider with personal data by telephone, via the Site contact forms, email or other mail, we store and use this information for the performance or conclusion of the relevant service contract, including the identification of the customer; the preparation and conclusion of the contract; provision of services (performance of contractual obligations); customer service; handling and processing objections; customer loyalty; administration of payments and billing; debt collection and recovery; proof of facts, website maintenance and performance improvement; business planning and analytics; planning and record keeping. We will also process this data for the purposes of providing information to public authorities and operational subjects in the cases and to the extent provided for in external laws and regulations.

The legal grounds for data processing are for the conclusion and performance of a contract, for the enforcement of laws and regulations, in accordance with the consent of the User - data subject,

• our legitimate interests (e.g. to verify the User's identity before entering into a contract);
• to ensure compliance with contractual obligations;
• to analyse the performance of the website applications, to ensure the effectiveness of the provision of services, etc.

4. Categories of personal data

Categories of personal data - name, surname, personal identification number, email or postal address, IP address, telephone number, content of the message or letter, etc.

5. Categories of recipients of personal data

The data shall be disclosed to those employees of the Data Provider who need to know the data in order to perform their direct duties or to conclude the relevant service contract.

When obtaining and using personal data, we partly use the services of external service providers who, in accordance with the contract, strictly follow our instructions and who are under our constant control before the use of the service and in the future.

Payment processing is provided by the payment platform makecommerce.lv, therefore our company passes the personal data necessary for the payment to the owner of the platform Maksekeskus AS.

6. Categories of users (data subjects)

Categories of Users - current, former and potential customers of the Provider, as well as other persons who wish to contact the Provider.

7. Transfer of data outside Latvia

The data received will not be transferred outside Latvia, the European Union or the European Economic Area, nor will it be transferred to any international organisation. At the same time, given that the Website is linked to Google and Facebook services, the Provider cannot guarantee that these companies will not transfer the data outside the European Union or the European Economic Area.

8. Duration of data storage

We process and store the User's personal data for as long as either party is legally obliged to store the data.

After these circumstances cease to apply, and unless otherwise stated in the data protection instructions, we will delete the personal data at the latest three months after the original reason for retaining the data no longer applies, unless we have a legal obligation to continue to retain the data (for example, but not limited to, for accounting or litigation purposes).

9. Access to personal data by the user (data subject)

The User shall have the right to obtain access to the User's personal data within one month from the date of the request.

The User may submit a request for the exercise of his/her rights in writing in person, at the Provider's registered office (upon presentation of an identity document), by post or by e-mail, signed with a secure electronic signature.

Upon receipt of a User's request to exercise his/her rights, the Provider shall verify the identity of the User, evaluate the request and execute it in accordance with the laws and regulations.

The User shall have the right to receive the information required by the regulatory enactments in relation to the processing of his/her data, the right to request access to his/her personal data, as well as to request the Provider to supplement, rectify or delete them, to restrict processing or to object to processing, insofar as these rights do not conflict with the purpose of data processing (conclusion or performance of contracts).

The User shall not be entitled to receive information if the disclosure of such information is prohibited by law in the field of national security, national defence, public security, criminal law, as well as for the purpose of safeguarding public financial interests in tax matters or the monitoring and macroeconomic analysis of financial market participants.

10. Cookie processing

Cookies are small text files that the Site stores in your browser. Your browser's local storage (localStorage) works in a similar way, so in this section both are referred to as cookies.

Cookies that work without consent

The Site stores necessary cookies immediately, because without them the shopping cart, language and country selection, delivery method selection, checkout and the saving of your cookie choice do not work. These cookies do not require consent because they are necessary for the service you request (Section 7.¹ of the Latvian Information Society Services Law). The legal basis for processing is the conclusion and performance of a contract and the Provider's legitimate interest in keeping the Site running (Article 6(1)(b) and (f) of the Regulation).

• Shopify (store platform). For example, the localization cookie stores the selected language and country. The cart cookie stores the shopping cart. The full list of Shopify cookies is available here: https://www.shopify.com/legal/cookies.
• MakeCommerce (delivery solution). The mc_country, mc_delivery_method, mc_carrier and mc_parcel cookies store the selected country, delivery method, carrier and parcel locker.

Cookies that work only with your consent

The Site stores analytics and marketing cookies only if you accept them in the cookie notice or select the relevant category in its settings. Until you make a choice, and after you decline, these cookies are not stored and the related tools are not loaded. The legal basis for processing is your consent (Article 6(1)(a) of the Regulation and Section 7.¹ of the Latvian Information Society Services Law).

Analytics. Analytics cookies show which pages visitors view, where they come from and which contact forms, phone or email links they use. The Provider uses this data to improve the content of the Site.

• Google Analytics (Google Ireland Limited). The _ga cookie distinguishes visitors, and the _ga_<identifier> cookie stores the session state. They are kept for up to 2 years.
• Shopify analytics collects statistics on store visits and purchases. The cookie names are given in the Shopify list (link above).

Marketing. Marketing cookies make it possible to determine whether an advertisement led to an enquiry or a purchase. They also make it possible to show advertisements to people who have already visited the Site.

• Google Ads and Google Merchant Center (Google Ireland Limited). Cookies whose names begin with _gcl_ (for example, _gcl_au) determine whether an ad click led to a purchase or an enquiry. They are kept for 90 days.
• Meta Platforms Ireland Limited (Facebook and Instagram). The _fbp cookie links the visit to Meta advertising so that its results can be measured and ads can be shown.
• Omnisend (email marketing). The omnisendSessionID, omnisendContactID, omnisendShopifyCart and page-views cookies link the visit and the cart contents to Omnisend. If your email address is on our list, this makes it possible to send, for example, a reminder about items left in the cart. The omnisendContactID cookie is kept for 365 days, the others until the end of the session.

How to change or withdraw your choice

The Site footer contains a "Cookie settings" link. It opens the cookie notice, where you can change your choice or withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, analytics and marketing tools are no longer loaded, and the Google, Meta and Omnisend cookies stored in your browser are deleted. You can also delete cookies in your browser settings.

Server logs

The server hosting the Site may record the requests sent by the visitor (device used, browser, IP address, date and time of access). This data is used for technical purposes: to keep the Site running and to investigate possible security incidents. The legal basis for processing is the Provider's legitimate interest in ensuring the technical operation and integrity of the Site.

Access to data

Only those employees of the Provider who are responsible for analysing the Site and advertising have access to the statistics. Google and Meta process data in accordance with their own privacy terms: https://policies.google.com/privacy and https://www.facebook.com/privacy/policy/. Information on the transfer of data outside the European Union is provided in section 7.

11. Third party websites

We may work with third parties who are authorised to place third party cookies on our websites or our services, apps and will do so with your consent. These service providers allow us to provide you with a better, faster and safer website experience. Please note that third party cookies are subject to third party privacy policies and we do not accept any responsibility for these privacy policies.

The "Facebook pixel" tool is installed on the website. The purpose of using this tool is to tailor content and advertisements to Facebook users. To learn more about Facebook's privacy policy, click here https://www.facebook.com/about/privacy/. You can also change the advertising settings in your Facebook profile.

12. Right to lodge a complaint with the supervisory authority

The data subject has the right to lodge a complaint with the supervisory authority (the State Data Inspectorate). Documents shall be accepted by the State Data Inspectorate by post, electronic mail (documents signed with a secure electronic signature), or may be left at the 1st floor mailbox at 11/13 Blaumaņa Street, Riga. The State Data Inspectorate accepts electronic mail sent to the e-mail address info@dvi.gov.lv.

13. Validity of the Privacy Policy

We reserve the right to change and update the content of this privacy policy from time to time to clarify the description of how we process your data.

In light of the above, we encourage you to review this Privacy Policy regularly to keep up to date with how we process your personal data on the Site.