1. General rules
1.1 This Privacy policy governs the principles of collection, processing and storage of personal data. Personal data is processed and stored at NaiveFly, Lielā skolas iela 6, Cēsis, Cēsu novads, Latvija, LV-4101, which is the data controller and processor (see below as the Processor).
1.2 For the purposes of this Privacy policy, data means the data of a customer that is being processed.
1.3 For the purposes of the Privacy policy, customer means anyone who purchases goods or services from the Processor's website.
1.4 The Processor shall comply with the principles of processing personal data as set out in the legislation. They shall be processed in a lawful, fair and secure manner. The processor is able to declare that the personal data provided have been processed in accordance with the provisions of the law.

2. Collection, processing and storage of personal data
2.1 The Processor shall obtain, process and store the personal data provided, which has been collected electronically.
2.2 By sharing their personal data, the customer grants the Processor the right to collect, use and manage, in accordance with the purpose set out in the Privacy policy.
2.3 The Client is responsible for the data provided and its accuracy. Submission of known false data is considered a violation of the Privacy policy. The Client is obliged to notify the Processor immediately of any changes to the Personal Data.
???? 2.4 The Processor shall not be liable for any damage or loss suffered by the Data Subject or any third party as a result of the Data Subject submitting false data.

3. Processing of personal data of customers
3.1 The Processor may process the following personal data of the Customer:
3.1.1. Name and surname;
3.1.2. Telephone number;
3.1.3. E-mail address;
3.1.4. Delivery address;
3.1.5. Bank account number;
3.1.6. Payment card details;
3.1.7. Any other information provided at the time of purchasing the services and goods offered by this website.
3.2 In addition to the foregoing, the Processor shall have the right to verify the accuracy of the data submitted using publicly available registers.
3.3 The legal basis for the processing of personal data is Article 6 Paragraph 1 Subparagraphs (a), (b), (c), (f) of the General Data Protection Regulation:
(a) the customer has given consent to the processing of his or her personal data for one or more specified purposes;
(b) the processing is necessary for entering into a contract at the customer's request prior to the conclusion of the contract to which the customer is a party;
(c) the processing is necessary for compliance with a legal obligation to which the processor is subject;
(f) processing is necessary for the pursuit of the legitimate interests of the controller or of a third party, except where the interests or fundamental rights and freedoms of the client which require the protection of personal data override such interests, in particular where the client is a child.
3.4 The Processor shall retain and process the personal data of the Customer for as long as at least one of the following criteria applies:
3.4.1. The purpose of the processing - security and courage
Maximum period of storage of personal data - under the conditions laid down by law
3.4.2 Purpose of processing - order processing
Maximum retention period for personal data - 2 years
3.4.3. Purpose of processing - provision of online shop services
Maximum retention period for personal data - 2 years
3.4.4. Purpose of processing - customer management
Maximum storage period for personal data - 2 years
3.4.5. Purpose of processing - financial activities, accounting
Maximum period of storage of personal data - under the conditions laid down by law
3.4.6 Purpose of processing - marketing activities
Maximum storage period for personal data - 2 years
3.5 The Processor has the right to share the personal data of customers with third parties, such as processing companies, accountants, transport and courier companies. The Processor is responsible for the processing of personal data. The payment processing is provided by the payment platform Stripe, therefore NaiveFly transfers the personal data necessary for the payment processing to the Stripe platform.
3.6 When processing and storing personal data, the Processor shall implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.
3.7 The processor shall keep the customer data depending on the purpose of the processing, but for a maximum period of 2 years.

4. Client's rights
4.1 In accordance with the General Data Protection Regulation and the legislation of the Republic of Latvia, the Client has the right to:
???? 4.1.1 Access to his/her personal data, to receive information on its processing, as well as to request a copy of your personal data in electronic format and the right to transfer this data to another controller (data portability).
4.1.2. Request the rectification of inaccurate personal data.
4.1.3 To have your personal data erased, except where required by law to retain the data.
4.1.4. Withdraw your prior consent to the processing of personal data.
4.1.5. To contact the Data Inspectorate.
You can make a request to realize your rights by sending a request electronically to NaiveFly E-mail naive.fly.info@gmail.com.

These Data Protection Rules have been drawn up in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Directive 95/46/EC (General Data Protection Framework), the Personal Data Protection Act and the legislation of the Republic of Estonia and the European Union.
???? The Processor shall have the right to amend the Data Protection Terms in part or in full by informing the Customers of the amendments via http://naivefly.eu.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us naive.fly.info@gmail.com.