Privacy Policy of the Online Store www.armass.eu

Last updated: 09.10.2026

SIA ARMAS respects your privacy and the protection of your personal data. This Privacy Policy explains what personal data we process, for what purposes and on what legal basis the data is used, to whom the data may be disclosed, how long it is retained, and what rights you have in relation to the processing of your personal data.

This Privacy Policy applies to the online store www.armass.eu (hereinafter – the Website), as well as to the processing of personal data related to placing orders, payments, delivery, customer service, product returns and other services connected with the use of the Website.

1. Data Controller

The controller of personal data is:

SIA ARMAS
Registration No.: 40103119172
VAT Registration No.: LV40103119172
Legal address: Akāciju iela 6–60, Riga, LV-1029, Latvia
Store / physical address: Buļļu iela 45, korp. 9, Riga, LV-1067, Latvia
E-mail: [email protected]
Phone: +371 22078558

(hereinafter – ARMAS, we, us or our).

2. What Personal Data We Process

Depending on how you use the Website and our services, we may process the following categories of personal data:

2.1. Identification and Contact Information

• first name and last name;
• telephone number;
• e-mail address;
• delivery address;
• billing address.

2.2. Order and Transaction Information

• order number;
• purchased products and quantities;
• order value;
• selected delivery method;
• selected payment method;
• payment status;
• order and delivery status;
• information regarding returns, refunds, complaints or warranty-related matters.

2.3. Legal Entity and Business Information

If an order is placed on behalf of a company or another legal entity, we may also process:

• company name;
• registration number;
• VAT registration number;
• registered or billing address;
• contact person’s information.

2.4. Communication Information

If you contact us by e-mail, telephone, contact form or through another communication channel, we may process your contact details, the content of the communication, submitted documents, photographs, videos and other information that you provide during the communication.

2.5. Account Information

If you create a user account on the Website, we may process information required to create and maintain the account, including the account identifier, contact information and order history.

Passwords are stored in a protected form, and ARMAS does not have access to a user’s password in plain text.

2.6. Technical Information

Certain technical information may be processed automatically in order to ensure the operation and security of the Website, for example:

• IP address;
• device and browser information;
• date and time of Website visits;
• technical log files;
• information regarding the use of the Website;
• cookie and similar technology information.

3. Purposes and Legal Bases of Personal Data Processing

We process personal data only for specific and lawful purposes.

3.1. Placing and Fulfilling Orders

Personal data is used to accept, process and fulfil orders, arrange payment and delivery, send information about order status and provide customer service.

Legal basis: entering into and performance of a contract (Article 6(1)(b) GDPR).

3.2. Payment Processing

Personal data is processed in order to ensure payment for orders, payment confirmation, refunds and the handling of payment-related matters.

Payment processing is provided by the payment platform makecommerce.lv, therefore our company transfers the personal data necessary for the execution of payments to the owner of the platform, Maksekeskus AS.

Maksekeskus AS may process the information and transaction data necessary for payment processing in accordance with applicable laws and regulations.

Legal basis: performance of a contract and compliance with applicable legal obligations.

3.3. Delivery of Goods

In order to deliver goods, the personal data necessary for delivery is transferred to the delivery service provider selected by the Buyer or required for the fulfilment of the order.

Depending on the selected delivery method, such providers may include, for example, Omniva, Venipak or other delivery service providers available on the Website.

The delivery service provider may receive the Buyer’s first name, last name, telephone number, e-mail address, delivery address and other information necessary for the delivery of the particular shipment.

Legal basis: performance of a contract.

3.4. Accounting, Taxation and Compliance with Legal Obligations

Certain information regarding orders and transactions is processed in order to comply with accounting, tax and other requirements imposed by applicable laws and regulations.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

3.5. Product Returns, Complaints and Assessment of Non-Conformity

Personal data may be used to process withdrawal notices, product returns, refunds, complaints, claims and requests relating to goods that do not conform to the contract.

Legal basis: performance of a contract, compliance with a legal obligation and ARMAS’s legitimate interests in protecting and exercising its legal rights.

3.6. Fraud Prevention and Website Security

Personal and technical data may be processed in order to prevent fraud, misuse of the Website, unauthorised access, cybersecurity incidents and other security threats.

Legal basis: ARMAS’s legitimate interests (Article 6(1)(f) GDPR) in ensuring the security of the Website, information systems, customers and the company.

3.7. Customer Service

Personal data is used to answer questions, provide information, resolve issues and provide customer support.

Legal basis: performance of a contract or ARMAS’s legitimate interests in providing quality customer service, depending on the specific circumstances.

3.8. Marketing

If you have provided separate consent to receive marketing communications, we may use your contact details to send information about offers, products or news.

Legal basis: your consent (Article 6(1)(a) GDPR), where consent is required.

You may withdraw your consent at any time by using the unsubscribe option provided in the relevant communication or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

4. Is the Provision of Personal Data Mandatory?

Information marked as mandatory during checkout is necessary for entering into and performing the distance contract.

If the Buyer does not provide the required name, contact details, delivery information or other information necessary for order fulfilment, ARMAS may be unable to accept, process payment for, deliver or otherwise fulfil the order.

Providing personal data for marketing purposes is voluntary and does not affect the ability to purchase products on the Website.

5. Recipients of Personal Data

Personal data is disclosed only to the extent necessary to provide a specific service or comply with legal obligations.

Recipients of personal data may include:

• payment service providers, including Maksekeskus AS / MakeCommerce;
• delivery and logistics service providers, such as Omniva, Venipak and other carriers selected by the Buyer;
• IT, hosting, cloud and cybersecurity service providers that support the operation of the Website and our information systems;
• e-mail and communication service providers, to the extent necessary for communication with customers;
• accounting and professional service providers, to the extent they require access to personal data in order to provide their services;
• state and municipal authorities, law enforcement bodies, courts or other competent authorities, where disclosure is required by law or by a legally binding request;
• other service providers where this is necessary to provide a service requested by the Buyer and there is an appropriate legal basis for processing the personal data.

Where a service provider processes personal data on behalf of ARMAS, ARMAS selects service providers that implement appropriate personal data protection and security measures.

6. Transfer of Personal Data Outside the European Economic Area

Some technology or IT service providers may use infrastructure or subcontractors located outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA to a country for which the European Commission has not adopted an adequacy decision, the transfer is carried out only where an applicable transfer mechanism under the GDPR and appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

Further information regarding safeguards applicable in a particular case may be requested by contacting [email protected].

7. Personal Data Retention Periods

Personal data is not retained longer than necessary for the purpose for which it was collected, unless a longer retention period is required by law or is necessary for the establishment, exercise or defence of legal claims.

• Order and transaction data is retained for as long as necessary for contract performance, customer service and the handling of possible claims.
• Accounting source documents and the personal data contained therein are retained for the period required by applicable laws and regulations; the minimum retention period for relevant accounting documents is generally not less than five years.
• Correspondence relating to complaints, non-conformity of goods, refunds or disputes may be retained until the relevant matter has been finally resolved and thereafter for as long as necessary to protect legal interests.
• Marketing data is processed until consent is withdrawn or until another applicable legal basis for processing no longer exists.
• Cookie and technical data is retained in accordance with the necessary lifetime of the relevant cookie or technical system and the cookie settings displayed on the Website.

When retention of personal data is no longer necessary and there is no other legal basis for further processing, the data is deleted, anonymised or otherwise securely destroyed.

8. Cookies

The Website uses cookies and similar technologies. Cookies are small data files stored on a user’s device or used during a browser session.

The Website may use the following categories of cookies:

• Strictly necessary cookies – required for the basic operation and security of the Website, shopping cart functionality, checkout and other services requested by the user.
• Functional cookies – help remember user preferences and improve Website functionality.
• Analytics cookies – where used, help analyse Website traffic and usage in order to improve the Website and user experience.
• Marketing cookies – where used, may help measure advertising effectiveness or provide more relevant advertising content.

Cookies that are not technically necessary for the operation of the Website or a service requested by the user are used only after the user’s consent has been obtained, where such consent is required under applicable law.

The user may consent to optional cookies, reject them or change their choice using the cookie management tool available on the Website.

Withdrawal of consent does not affect the lawfulness of personal data processing carried out before the consent was withdrawn.

9. Personal Data Security

ARMAS implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental or unlawful destruction, loss, alteration, disclosure or other unauthorised processing.

Access to personal data is provided only to persons and service providers who require it for the performance of their respective duties or services.

However, no information system can guarantee absolute security. ARMAS therefore regularly reviews and, where necessary, improves the security measures applied.

10. Your Rights

Under the GDPR and other applicable data protection legislation, depending on the circumstances, you have the right to:

• receive information about and access your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data, where the conditions provided by law are met;
• request restriction of personal data processing;
• object to the processing of personal data, where processing is based on legitimate interests;
• receive your personal data in a structured, commonly used and machine-readable format and, in certain cases, transmit it to another controller (data portability);
• withdraw your consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority if you believe that your personal data is being processed unlawfully.

Certain rights are not absolute and may be restricted where further processing or retention of personal data is required by law or where another lawful basis for processing exists.

To exercise your rights, please contact us at: [email protected].

Before fulfilling a request, we may need to verify the identity of the person making the request in order to prevent disclosure of personal data to an unauthorised person.

11. Automated Decision-Making

ARMAS does not carry out solely automated processing of personal data that results in a decision concerning the Buyer which produces legal effects or similarly significantly affects the Buyer, unless separate information regarding such processing is provided in accordance with applicable law.

12. Right to Lodge a Complaint

If you believe that the processing of your personal data by ARMAS infringes your rights, we encourage you to contact us first:

E-mail: [email protected]
Phone: +371 22078558

You also have the right to lodge a complaint with the Latvian data protection supervisory authority:

Data State Inspectorate of Latvia (Datu valsts inspekcija)
Website: www.dvi.gov.lv

13. Changes to this Privacy Policy

ARMAS may periodically update this Privacy Policy, for example where there are changes to personal data processing activities, Website functionality, service providers or applicable laws and regulations.

The current version of the Privacy Policy is always published on the Website, together with the date of the latest update.

14. Contact Information

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact:

SIA ARMAS
Legal address: Akāciju iela 6–60, Riga, LV-1029, Latvia
E-mail: [email protected]
Phone: +371 22078558