Privacy Policy

Learn how zum.lv protects your personal data. Detailed information on data processing, storage, cookie use and your rights under GDPR.

Privacy Policy

Last updated: 24 February 2026

1. Data Controller and Contact Information

Controller:
AS “DIĀNA”, Reg. No. 41203000447
Address:
Andreja iela 5, Ventspils, LV-3601
Email:
[email protected]
Phone:
+371 23777713
Website:
https://zum.lv

AS “DIĀNA” (hereinafter — the Controller) is the owner and operator of the online store zum.lv. This privacy policy explains how we collect, process, store and protect your personal data when you visit and use the zum.lv website.

Personal data processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, hereinafter — GDPR) and the Personal Data Processing Law of the Republic of Latvia.

For information on the use of cookies, please see our Cookie Policy.

2. Purposes and Legal Basis for Processing Personal Data

2.1. Performance of a Contract (GDPR Article 6(1)(b))

Purpose Data Categories Retention Period
Order processing and fulfilment First name, last name, address, phone, email, delivery address 5 years after the transaction
User account maintenance First name, last name, email, phone Until account deletion
Customer service and communication First name, email, phone, correspondence 2 years after last contact
Organising product delivery First name, address, phone 5 years after delivery
Payment processing Transaction data (payment information is processed by payment service providers) 5 years after the transaction

2.2. Compliance with Legal Obligations (GDPR Article 6(1)(c))

Purpose Data Categories Retention Period
Fulfilment of accounting and tax requirements Transaction data, invoices 5 years in accordance with the legislation of the Republic of Latvia
Consumer rights protection Order data, correspondence 2 years after the transaction

2.3. Legitimate Interests (GDPR Article 6(1)(f))

Purpose Data Categories Retention Period
Ensuring website security and functionality IP address, browser type, session data 90 days
Fraud prevention IP address, transaction data 1 year
Error monitoring and performance improvement (Sentry) Technical information, error data 90 days

2.4. Consent (GDPR Article 6(1)(a))

Purpose Data Categories Retention Period
Sending marketing communications (email, SMS) Email, phone, first name Until consent is withdrawn
Use of analytical and statistics cookies See Cookie Policy See Cookie Policy
Use of marketing cookies See Cookie Policy See Cookie Policy
Displaying personalised advertisements Browsing data, interests Until consent is withdrawn

You may withdraw your consent at any time (see Section 5), and this will not affect the lawfulness of processing carried out prior to withdrawal.

3. Recipients of Personal Data

We may share your personal data with the following third parties only to the extent necessary for the provision of the relevant service:

Recipient Category Purpose Legal Basis for Transfer
Delivery service providers Product delivery Performance of a contract
Payment service providers (Klix, etc.) Payment processing Performance of a contract
Accounting service providers Financial record-keeping Legal obligation
IT service providers Website maintenance and development Legitimate interest
Google LLC (Analytics, Ads, Tag Manager, Sign-In) Website analytics, advertising, authentication Consent / legitimate interest
Meta Platforms Inc. (Facebook) Measuring advertising effectiveness Consent
Microsoft (Clarity) Website usability analytics Consent
Sentry (Functional Software Inc.) Error monitoring Legitimate interest
Cookiebot (Usercentrics A/S) Cookie consent management Legitimate interest
Product financing partners Instalment payment services Performance of a contract

Data transfers outside the EU/EEA: Some of the service providers mentioned above (Google, Meta, Microsoft, Sentry) are US-based companies. Data transfers are carried out on the basis of the EU–U.S. Data Privacy Framework or the Standard Contractual Clauses (SCCs) approved by the European Commission.

4. Data Security

AS “DIĀNA” has implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure, including:

  • Encryption of data in transit (TLS/SSL)
  • Access control mechanisms
  • Regular security audits
  • Employee training in data protection

5. Your Rights

Under the GDPR, you have the following rights:

Right Description
Right of access (Article 15) To receive information about what personal data we process about you
Right to rectification (Article 16) To request the correction of inaccurate data
Right to erasure (Article 17) To request the deletion of your data (“right to be forgotten”)
Restriction of processing (Article 18) To request the restriction of data processing
Data portability (Article 20) To receive your data in a structured format
Right to object (Article 21) To object to data processing based on legitimate interests
Right to withdraw consent (Article 7) To withdraw any previously given consent

How to Exercise Your Rights

We will respond to your request within 30 days. If the request is complex, the deadline may be extended by 60 days, and you will be informed accordingly.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the requirements of the GDPR, you have the right to lodge a complaint with the Data State Inspectorate:

6. Automated Decision-Making

zum.lv does not use automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

7. Changes to the Privacy Policy

We reserve the right to update this privacy policy. We will notify you of any significant changes by publishing an updated version on zum.lv. We recommend checking this page regularly.

8. Contact Information

If you have any questions about the processing of personal data or wish to exercise your rights:

This privacy policy is effective from 24 February 2026.

This page is available at Zum.lv - the largest online store in Latvia.

View page on site