Privacy policy

This is a translation for convenience. If the Latvian and English versions differ, the Latvian version applies.

1. Controller

The controller of personal data is [Pārdevēja vārds, uzvārds vai uzņēmuma nosaukums], reg. no. [numurs], address: [Juridiskā adrese]. Contact for data questions: veikals@latstats.lv.

This policy covers the shop at shop.latstats.lv. The latstats.lv website has its own privacy policy.

2. What data we process

• Order data: the surname and number to be printed on the jersey, size, price, order time and status.
• Contact and delivery details: name, e-mail, phone number, delivery address.
• Payment information: payment status and the Stripe payment identifier. Card details are processed by Stripe; we do not receive them.
• Correspondence: if you e-mail us.
• Usage statistics: only if you accept analytics cookies (section 5).

3. Purposes and legal basis

• Fulfilling the order, production, delivery and communication about the order: performance of a contract (GDPR Article 6(1)(b)).
• Accounting and tax obligations: legal obligation (GDPR Article 6(1)(c)).
• Fraud prevention, handling complaints and website security: legitimate interests (GDPR Article 6(1)(f)).
• Visitor statistics (Google Analytics): your consent (GDPR Article 6(1)(a)), which you can withdraw at any time.

4. Who we share data with

• Stripe (payment processing).
• Printful (producing and shipping the jersey): name, address, phone, e-mail and the jersey text. Printful’s facilities and companies may also be located outside the European Economic Area, for example in the USA. In that case transfers are protected by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
• Delivery providers (couriers, parcel lockers) used by Printful.
• Hosting and e-mail: Hetzner servers (Germany).
• Google (Google Analytics), only with your consent.
• Public authorities, where required by law.

5. Cookies

• Necessary: the security cookie csrftoken for the order form and a cookie that remembers your analytics choice. They are needed for the website to work and do not require consent.
• Analytics (Google Analytics 4): loaded only after your consent. They help us understand how many visitors open the page and complete an order. You can change your choice at any time in the page footer (“Cookie settings”).

6. How long we keep data

We keep orders and related accounting data for as long as accounting law requires (usually 5 years), and for handling complaints for up to 2 years after delivery. Generated print files are deleted once they are no longer needed for fulfilling the order and handling complaints.

7. Your rights

You have the right to access your data, have it corrected, request erasure or restriction of processing, object to processing, receive your data in a portable format and withdraw consent. Write to veikals@latstats.lv. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).