Privacy Policy

1. Data Controller and Contact Information

The controller (and, in certain cases, the processor) of personal data is the limited liability company "SIA FemHaus” (hereinafter referred to as the “Company”), Unified Registration No. 50103731721, with its registered office at 74-24 Brīvības Street, Riga, LV-1011.

The Company’s contact information for matters related to the processing of personal data is info@shop.femhaus.lv. In cases where the Company processes your personal data, you have the right to ask questions related to the processing of your personal data by sending a request to the contact information provided or by visiting the Company’s office in Riga in person at Brīvības iela 74 - 24, LV-1011.

2. Purposes of Personal Data Processing

When processing personal data, the Company complies with the applicable laws and regulations of the Republic of Latvia, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation”), as well as other laws and regulations governing privacy and the processing of personal data. 

The Company’s Data Protection Policy applies to all processing of personal data carried out by the Company. This Data Protection Policy explains how the Company processes the personal data of individuals and how it ensures that data subjects can exercise their rights regarding matters related to the protection of personal data. 

The Company processes personal data that is received directly from the data subject (i.e., the person who submitted the personal data) or indirectly (through corporate clients). Personal data received indirectly is processed only if the Company needs to process such data to provide a service under contractual obligations.

The company's purposes for processing personal data:

• To provide services under contractual obligations. Personal data is processed only to the extent necessary to enter into a contract and fulfill the specified contractual obligations. Legal basis for processing: performance of a contract (Article 6(1)(b) of the Regulation).
• For personnel recruitment and management—to ensure the proper conduct of the recruitment process and to protect our legitimate interests insofar as they relate to personnel recruitment. Legal basis for processing: compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation, Labor Law).
• Processing of transaction data in accordance with the “Accounting Act.” In this case, all of your data protection rights may apply, except for the right to erasure, the right to object, and the right to data portability. Legal basis for processing: compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).
• To improve the quality of customer service—The purpose of processing personal data is to enable the Company to evaluate the objections or comments you have provided regarding customer service, thereby preventing similar incidents in the future and improving customer service. Personal data is processed only to the extent necessary to identify the nature of the improvements to be made. This personal data is not used for the further improvement of the Company’s services or the achievement of its objectives. Legal basis for processing: the legitimate interests of the controller (Article 6(1)(f) of the Regulation).
• To operate the online store, including the creation of an account/profile on shop.femhaus.lv. The purpose of processing personal data is related to the provision of the online store service. The online store processes personal data for the preparation, conclusion, and administration of distance contracts (invoice preparation, delivery, and communication). The legal basis for processing is: performance of a contract (Article 6(1)(b) of the Regulation), the data subject’s consent (Article 6(1)(a) of the Regulation), compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).
• To provide information to public administration authorities and entities engaged in operational activities in the cases and to the extent specified in external regulatory acts. Legal basis for processing: compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of the Regulation).

To ensure data subjects’ right to privacy, the Company adheres to the principles of confidentiality and strictly limits the disclosure of personal data. Only persons authorized by the Company are entitled to modify and process personal data. Once none of the circumstances specified in this section apply, the data subject’s personal data is deleted, destroyed, or transferred to the national archives for storage, in accordance with the requirements of applicable laws and regulations. 

3. Categories of recipients of personal data

The company does not disclose personal data to third parties, except in cases specified by law. Personal data cannot be accessed in third countries (that is, countries outside the European Union and the European Economic Area).

4. Retention Period for Personal Data

The company stores and processes personal data as long as any of the parties has a legal obligation to retain the data:

• All information obtained during the recruitment process regarding job applicants will be retained for no longer than one year to safeguard the Company’s legal interests. In the event that the Company receives complaints regarding a specific recruitment process, all information processed during that recruitment process will be retained for as long as necessary for that specific process.
• All information processed for the purpose of improving the quality of customer service is retained only for as long as necessary to identify the nature of the required improvements, but no longer than six months. 
• All information necessary to fulfill a legal obligation applicable to the Company is retained for as long as necessary to achieve the purpose of the personal data processing in accordance with applicable laws and regulations, i.e., as long as there is a legal obligation to retain the data (for example, in accordance with the Law “On Accounting,” the Labor Law, the Audit Services Law, the Law on the Prevention of Money Laundering and Terrorist Financing, etc.);

Company The following criteria are used to determine the retention period for personal data:

• until the deadline for data storage and processing specified in external regulatory acts, or until the deadline by which the data subject may exercise their legitimate interests and rights (for example, to file objections and/or bring a lawsuit);
• as long as the data subject's consent to the processing of the relevant personal data remains valid, provided there is no other lawful basis for the processing.
• until the contractual obligations have been fully fulfilled (including negotiations in which a verbal agreement is reached and/or a service request is made).

5. Cookies

The company does not use cookies on its website.

Third-Party Cookies
The company's website may contain third-party cookies, such as Google Analytics.
The Google Analytics tool is provided by Google Inc. (a U.S. company), which has access to the statistical data collected by this tool. Google Inc. has adhered to the European Union (EU)–United States (U.S.) Privacy Shield Framework and is listed on the EU–U.S. Privacy Shield List, which confirms that the service provider complies with the privacy standards required by the EU. This service provider is also subject to contractual obligations designed to ensure privacy.

Cookie Control
The data subject may delete cookies at their discretion (for more information— www.AboutCookies.org and/or www.youronlinechoices.com/lv/).

6. Rights of the Data Subject

The rights of the data subject apply to any natural person whose personal data is processed by the Company and apply to the processing of personal data regardless of the form in which you or any other natural person has provided the personal data: on the Company’s website, through the information systems provided, in paper form, or by telephone. The data subject has the following rights:

• Please contact us if you have any questions regarding the management of your data by emailing info@shop.femhaus.lv or visiting our office in person at Brīvības iela 74 - 24, Riga, LV-1011.

• the right to access this data. If we process your data, we are required to provide information about the processing of your data free of charge. Before you provide any personal data, we are required to verify your identity to ensure that information about your data is not disclosed to third parties.
• If the information held by the Company is incomplete or incorrect, you have the right to request that any inaccuracies in your personal data be corrected.
• the right to object to the Company’s processing of personal data if there is no longer any obligation to retain it;
• the right to request the deletion of your data if the Company continues to store it after the retention period has expired, as well as, in certain situations, to restrict the processing of your data and/or obtain electronic copies of the information held by the Company.

You may request that these rights be exercised by contacting the Company—by emailing info@shop.femhaus.lv or in person at our office at Brīvības iela 74–24, Riga, LV-1011— and we will make the corrections specified in your request to the extent that they comply with applicable laws and regulations and professional standards.

7. Policy Changes

The company may revise this privacy notice at any time to incorporate the latest privacy terms. We will notify you of any significant changes to the processing of personal data described in this Privacy Notice through an appropriate communication channel.

8. The Policy and Its Validity

The company is committed to protecting the privacy of your personal information. If you have any questions or comments regarding the handling of your personally identifiable information, please contact us by email at info@shop.femhaus.lv or in person at our office in Riga, Brīvības iela 74 - 24, LV-1011.

You may also use this contact information to report any issues you may have regarding compliance with our privacy policy.

We will respond within one month of receiving your email. If your inquiry is complex or we receive a large number of inquiries, we will notify you that resolving the issue will take longer than one month, and we will resolve it no later than three months from the date the inquiry was first submitted.

At the same time, you retain the right to file a complaint with the regulator in Latvia responsible for personal data protection, the State Data Inspectorate (http://www.dvi.gov.lv).

9. Safety

The Company protects the data subject's data using state-of-the-art technology, taking into account existing privacy risks and the Company's reasonably available organizational, financial, and technical resources, such as data encryption, firewalls, intrusion detection, and other security measures.

In the event of a personal data security incident that poses a potentially high risk to the rights and freedoms of the data subject, the Company will notify the affected data subject, if possible, or the information will be published on the Company’s website or by other appropriate means.

10.10.2025