Data controller
The controller of your personal data is SIA “Rovell”, registration number 44103143630, registered and postal address: Aleksandra Bieziņa iela 9–157, Riga, LV-1029. For questions about data processing, contact us at info@rgpiano.com, +37127175712.
What data we process
When you contact us or request a service, you provide your name, email address, phone number and message content. When you shop in our online store, we also process your surname, the products and quantities selected, order amounts and discounts, invoice and payment information, and the details of your selected Omniva parcel locker. In the event of a withdrawal or complaint, we process the notice you submit, the information needed to identify your purchase, correspondence and acknowledgement of receipt.
Purposes and legal bases for processing
To prepare and fulfil an order or service request and communicate about its fulfilment, we process data for the performance of a contract or to take steps at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, or GDPR). For invoice accounting, providing withdrawal rights and handling consumer claims, we also process data to comply with legal obligations (point (c)). To answer general enquiries, protect our rights in a dispute and ensure website security, we rely on the relevant legitimate interests (point (f)).
Information required for an order
The data marked as required on the order form is needed to prepare the order, communicate with you and arrange delivery. If you do not provide it, we may be unable to fulfil the order. Consent to receive marketing messages is not required to place an order or submit a withdrawal notice.
Who we may share data with
We share data only to the extent necessary for the relevant purpose. To fulfil an order, it may be received by Omniva — the contact, parcel-locker and shipment information needed for delivery; and by banks and accounting service providers — payment and accounting information. Data may also be processed by the website hosting, data storage and email service providers we use. We provide data to competent authorities where required by law. Service providers that process data on our behalf must comply with the relevant data protection obligations. If data is transferred outside the European Economic Area, that transfer must comply with Chapter V of the GDPR. You may ask the controller for information about the recipients of your data and the applicable transfer safeguards.
How long we retain data
We retain data for as long as necessary for the specific purpose and to comply with legal obligations. For accounting source documents, we apply the retention periods set out in Section 28 of Latvia’s Accounting Law; for other source documents, these are at least five years. Retention periods for order, correspondence, withdrawal and complaint data are determined by contract performance, the applicable limitation periods for claims, and the need to resolve the particular matter or dispute. We retain security records and backups for as long as needed for their protection and recovery purposes. When the basis for retention ends, we delete or anonymise the data. Withdrawal of consent for other processing does not remove statutory document retention obligations.
Website operation and security
To save your basket, the selected products and their quantities are stored in your browser. The buyer’s name, email address and phone number are not saved in basket storage. For website and form security, we process the necessary session data, technical request identifiers and timestamps to prevent unauthorised use and repeated submissions. External content, such as YouTube and Google Maps, loads in accordance with your privacy choices. Bundle discounts are calculated from the selected products and quantities, rather than your personal profile. To protect orders and manually assess potential misuse, we process the public IP address that can be reliably obtained, browser and operating-system information, a length-limited User-Agent, browser language, the referring page without parameters, submission time and the number of other orders from the same IP address in the preceding 24 hours. The legal basis for this processing is our legitimate interest in protecting the store against misuse. We retain technical data and copies of seller notifications containing that data in the website database for no more than 30 days. They are not used for automatic order blocking or customer profiling.
Your rights and contact details
In the cases provided for by the GDPR, you have the right to access your data, request its rectification, erasure or restriction of processing, receive data in a portable format, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal. Legal retention obligations may limit data erasure. Send your request to info@rgpiano.com or the controller’s postal address. To protect your data, we may carry out a proportionate identity check where necessary. We normally inform you of the handling of your request within one month; extensions and exceptions are governed by Article 12 of the GDPR. You have the right to lodge a complaint with Latvia’s Data State Inspectorate (www.dvi.gov.lv).
We save your privacy choice in this browser and ask you to choose again after 12 months. You can withdraw consent at any time in Privacy settings. Loading YouTube or Google Maps content may send data to those providers, and they may use cookies.