BEAR RAINPROOF TOTE BAG

COLOR	Gray

1. General Provisions

1.1. This Privacy Policy describes how SIA ETNO DESIGNS, 50203306591, Olaines municipality, Virši, Pavasaris OL 120, LV-2127 (hereinafter referred to as the "Data Controller") collects, processes, and stores personal data obtained from customers and visitors of the www.mooncoats.com website (hereinafter referred to as "Data Subject" or "You").

1.2. Personal data refers to any information related to an identified or identifiable natural person (i.e., the Data Subject). Processing refers to any action related to personal data, such as collection, recording, modification, usage, viewing, deletion, or destruction.

1.3. The Data Controller complies with the principles of data processing established by law and ensures that personal data is processed in accordance with applicable legislation.

---

2. Collection, Processing, and Storage of Personal Data

2.1. The Data Controller primarily collects, processes, and stores personally identifiable information through the online store and email. 

2.2. By visiting and using the services provided on the online store, you agree that any provided information is used and managed in accordance with the purposes outlined in this Privacy Policy.

2.3. The Data Subject is responsible for ensuring that the submitted personal data is accurate, correct, and complete. Providing false information intentionally is considered a violation of this Privacy Policy. The Data Subject must promptly notify the Data Controller of any changes to the submitted personal data.

2.4. The Data Controller is not responsible for any damages incurred by the Data Subject or third parties due to incorrect personal data submission.

---

3. Processing of Customer Personal Data

3.1. The Data Controller may process the following personal data:

• Full Name
• Date of Birth
• Contact Information (Email Address and/or Phone Number)
• Transaction Data (Purchased Products, Delivery Address, Price, Payment Information, etc.)
• Any other information submitted to us during the purchase of products or services on our website or when communicating with us.

3.2. In addition, the Data Controller has the right to verify the accuracy of the submitted data using publicly available registers.

3.3. The legal basis for personal data processing is Article 6(1)(a), (b), (c), and (f) of the General Data Protection Regulation (GDPR):

• (a) The Data Subject has given consent for the processing of their personal data for one or more specific purposes;
• (b) Processing is necessary for the performance of a contract in which the Data Subject is a party or for carrying out pre-contractual measures at the request of the Data Subject;
• (c) Processing is necessary to comply with a legal obligation applicable to the Data Controller;
• (f) Processing is necessary for the legitimate interests of the Data Controller or a third party, except when such interests are overridden by the fundamental rights and freedoms of the Data Subject requiring personal data protection, particularly if the Data Subject is a child.

3.4. The Data Controller stores and processes the personal data of the Data Subject as long as at least one of the following criteria is met:

• The data is necessary for the purposes for which it was collected;
• The Data Controller or the Data Subject has legitimate interests as defined by applicable regulations (e.g., filing legal claims or defending rights in court);
• A legal obligation requires data storage (e.g., accounting regulations);
• The Data Subject has given consent for specific data processing, provided there is no other legal basis for processing.

When none of the above conditions apply, the storage period of the Data Subject’s personal data ends, and all relevant data is irreversibly deleted from computer systems, electronic, and/or paper documents, or anonymized.

3.5. To fulfill obligations towards You, the Data Controller has the right to share Your personal data with cooperation partners and data processors who process data on behalf of the company, such as accountants, courier services, etc. The data processor acts as a data controller. Payment processing is handled via MakeCommerce.lv, so our company transfers the necessary personal data to the platform owner Maksekeskus AS.

Upon request, we may also share Your personal data with state authorities and law enforcement agencies to protect our legal interests in legal proceedings.

3.6. When processing and storing personal data, the Data Controller implements organizational and technical measures to protect personal data from accidental or unlawful destruction, alteration, disclosure, or any other illegal processing.

---

4. Data Subject Rights

4.1. In accordance with the GDPR and the laws of the Republic of Latvia, You have the right to:

• Access Your personal data, receive information about its processing, request a copy of Your personal data in an electronic format, and request data portability to another controller;
• Request correction of inaccurate, incorrect, or incomplete personal data;
• Request deletion of Your personal data (“Right to be Forgotten”), except when the law requires retention;
• Withdraw previously given consent for personal data processing;
• Restrict data processing, meaning You can request a temporary halt in the processing of all Your personal data;
• Lodge a complaint with the Data State Inspectorate.

Requests to exercise these rights can be submitted in person at SIA ETNO DESIGNS Olaines municipality, Virši, Pavasaris OL 120, LV-2127 or electronically by emailing info@etnodesigns.com.

---

5. Final Provisions

5.1. This Privacy Policy is developed in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council (General Data Protection Regulation, GDPR) and the applicable laws of the Republic of Latvia and the European Union.

5.2. The Data Controller has the right to make changes or additions to this Privacy Policy at any time without prior notice. Changes take effect upon publication on the website www.mooncoats.com.