ANP-Rotas

Privacy Policy

Last updated: October 16, 2026

1. General Provisions

This Privacy Policy describes how the ANP Rotas online store, available at anp-rotas.lv, processes the personal data of visitors and customers.

Data processing is carried out in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the applicable laws of the Republic of Latvia.

Data Controller:

  • First Name, Last Name: Anatoly Poletaev

  • Business Registration Number: 328602-62577

  • Business address: Latvia, Bauska Municipality, Īslīce Parish, “Salas 2” - 3, LV-3914

  • Email: contact@anp-rotas.lv

2. Website Analytics and Data Storage

We use the self-hosted Shynet analytics tool to analyze traffic and improve the website’s performance.

Shynet does not store visitors’ IP addresses and does not use cookies. To generate session keys, the IP address and User-Agent are hashed. These keys are used for analytics and are not intended to identify visitors.

Analytics data is stored on our server. We do not use it for advertising tracking or user profiling.

3. Data Required for Order Processing and Fulfillment

When placing an order, the online store may process the following personal data:

  • the buyer’s first and last name;

  • email address;

  • phone number;

  • delivery address or selected package locker;

  • details about the ordered items;

  • information needed to personalize the product;

  • order number and status information;

  • data required to confirm payment and maintain records.

This data is used to process the order, manufacture or prepare the product, arrange delivery, communicate with the customer, process returns, and fulfill legal obligations.

4. Payment Processing

Order payments are processed by the Klix by Citadele payment service. To facilitate the payment, we provide Klix with the customer’s email address and order details.

Payment data is processed by Klix in accordance with its own terms and conditions and privacy policy. We do not receive the customer’s credit card information. We receive payment status information from Klix that is necessary for order processing.

Learn more about how Klix processes data: https://klix.app/lv/terms/

5. Data Transfer for Delivery

We use Omniva to deliver orders. To arrange delivery, we transfer the necessary customer and order information: name, contact details, and the selected package locker or courier delivery address.

Omniva processes the transferred data in accordance with its own rules and privacy policies.

More information about Omniva’s data processing: https://www.omnivagroup.com/lv/politikas/

6. Legal Basis for Processing

Personal data is processed on the following grounds provided for by the GDPR:

  • performance of a contract with the customer;

  • compliance with legal obligations, including accounting and tax reporting requirements;

  • legitimate interest in ensuring the security and functionality of the website, as well as in protecting the seller’s legitimate rights;

  • the user’s consent, if required for a specific purpose of processing.

If processing is based on consent, the user may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

7. Data Retention Periods

Personal data is stored only for as long as necessary to achieve the relevant purposes, taking into account the mandatory retention periods provided for by law.

Order and payment data may be retained for the periods established by applicable accounting and tax requirements.

Correspondence with customers and information about returns may be retained for the period necessary to address inquiries, fulfill obligations, and protect the legitimate rights of the parties.

After the relevant periods have expired, the data is deleted or anonymized, unless its continued retention is required by law.

8. Transfer of Data to Third Parties

Personal data may be transferred to service providers if necessary for the operation of the online store and the fulfillment of orders. Such recipients may include:

  • Omniva — for delivery;

  • Klix — for payment processing;

  • hosting and technical infrastructure providers;

  • accounting and other professionals, if their services are necessary to fulfill legal obligations.

Data is transferred only to the extent necessary. If a service provider processes data on behalf of the seller, the relevant GDPR requirements apply.

Personal data is not sold to third parties.

9. Transfer of Data Outside the European Economic Area

If the services used involve the transfer of personal data outside the European Economic Area, such transfers are carried out on a basis provided for by the GDPR and with the necessary data protection safeguards in place.

The mere fact of placing an order from another country does not mean that personal data is automatically transferred outside the European Economic Area.

10. User Rights

In accordance with the GDPR, you have the right to:

  • receive information about the processing of their personal data;

  • request access to their data and a copy thereof;

  • request the correction of inaccurate data;

  • request the erasure of data in cases provided for by law;

  • request that processing be restricted;

  • object to processing based on a legitimate interest;

  • receive the data in a portable format, if applicable;

  • withdraw consent if processing is based on consent;

  • file a complaint with the data protection supervisory authority.

To exercise these rights, users may contact us at: contact@anp-rotas.lv.

A response to the request is typically provided within one month. In cases provided for by the GDPR, this period may be extended.

Certain rights may be restricted if further processing is necessary to fulfill legal obligations or to protect legitimate rights.

11. Data Protection

The website owner takes appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or disclosure.

Access to personal data is granted only to the extent necessary to perform the relevant tasks.

12. Complaints and Supervisory Authority

If a user believes that their personal data is being processed in violation of the law, they have the right to contact the Latvian State Data Protection Inspectorate (Datu valsts inspekcija, DVI).

Official website: https://www.dvi.gov.lv/

The user also has the right to bring a claim in court in accordance with applicable law.

13. Changes to the Privacy Policy

This policy may be updated in the event of changes to the online store’s operations, the services used, or legal requirements.

The current version is published on the website with the date of the last update indicated.

Cart
The cart is empty
Subtotal: 
€0
Delivery: 
will be calculated during checkout
Proceed to checkoutView cart