1.    General rules.
1.1.    SwissOvit is a trademark owned by Forans International AG (forans.swiss) operates this online store and is responsible for the collection, processing, and storage of personal data. 
1.2.    Personal Data refers to any information that can identify a natural person, also known as the Data Subject. Processing includes any action taken with personal data, such as collecting, recording, modifying, using, viewing, deleting, or destroying it.
1.3.    The Data Controller must follow the principles of data processing as defined by the applicable laws and demonstrate that personal data is handled in compliance with current regulations.
1.4. Forans Latvia SIA, which also serves as the primary logistics hub. Forans SIA (Legal. address: "Piepilsetas," Krustkalni, Kekavas novads, LV-2111, Latvia, Reg. No 40003395114) This Privacy Policy outlines how Forans SIA, acting as the Data Controller, handles the personal data of customers and visitors to the SWISSOVIT.COM website (hereinafter referred to as the "Data Subject" or "You").

2.    Collection, Processing, and Storage of Personal Data
2.1. The Data Controller primarily collects, processes, and stores personally identifiable information via the online store website and email.
2.2. By using the Online Shop, you consent to the collection and management of your information in line with the purposes outlined in this Privacy Policy.
2.3 The Data Subject is responsible for ensuring the accuracy, correctness, and completeness of the personal data provided. Providing false information intentionally constitutes a violation of the Privacy Policy. The Data Subject must notify the Data Controller promptly of any changes to the personal data.
2.4 The Data Controller is not liable for any damages arising from incorrect or false personal data provided by the Data Subject or third parties.

3.    Processing of Customer Personal Data
3.1.    The Data Controller may process the following types of personal data:
•    Name
•    Date of birth
•    Email address
•    Contact phone number
•    Delivery address
•    Transaction details (e.g., purchased goods, delivery address, price, payment details)
•    Any other information provided during the purchase of goods and services or when contacting us.
3.2.    The Data Controller has the right to verify the accuracy of the provided data using publicly available registers.
3.3.    The legal basis for personal data processing is established under Article 6(1) of the General Data Protection Regulation, including:
•    The Data Subject’s consent for the processing of personal data for specified purposes.
•    Processing necessary for the performance of a contract or measures taken before entering into the contract.
•    Processing required to comply with legal obligations.
•    Processing necessary for the pursuit of legitimate interests, except when the Data Subject’s rights and freedoms override these interests, especially in cases involving minors.
3.4.    The Data Controller will store and process personal data as long as one of the following applies:
•    The personal data is necessary for the intended purposes.
•    The Data Controller or Data Subject can exercise legitimate interests, such as legal claims.
•    There is a legal obligation to retain the data, such as under the Accountancy Act.
•    The Data Subject’s consent is valid, unless another legal basis applies.
Once the relevant circumstances are no longer applicable, the personal data retention period will end, and the data will be permanently erased or anonymized.
3.5.    The Data Controller may transfer personal data to business partners and data processors who perform necessary data processing on our behalf, such as accountants or courier services. The payment processor, makecommerce.lv, will receive personal data for payment execution. Upon request, we may also transfer personal data to authorities for legal defense purposes.
3.6.    The Data Controller will implement technical and organizational measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing.

4.    Rights of the Data Subject
4.1. Under the General Data Protection Regulation and Latvian law, you have the right to: Access your personal data, receive information on its processing, and request an electronic copy for data portability.
4.2.    Request corrections to inaccurate, incomplete, or incorrect personal data.
4.3.    Request the deletion of personal data ("right to be forgotten"), except where retention is required by law.
4.4.    Withdraw your consent to the processing of personal data.
4.5.    Request restriction on processing, meaning you can ask us to temporarily stop processing your personal data.
4.6.    File a complaint with the Data Inspectorate.

5.    Final Provisions
5.1    This Privacy Policy has been created in accordance with Regulation (EU) 2016/679 on personal data protection, repealing Directive 95/46/EC, and the relevant laws of Latvia and the European Union.
5.2    The Data Controller reserves the right to amend or add to this Privacy Policy at any time without prior notice. Any changes will take effect upon publication on the website: https://swissovit.com/policies/privacy-policy.