Privacy Policy
Last updated: January 3, 2025
Introduction
SIA NetaDEV, registration number 40203665238, with its registered address at Smiltenes nov., Variņu pag., "Lejaslazdiņi", LV-4726 (hereinafter – Neta or we) recognises that you care about the protection of your personal data, and we take the processing of your personal data seriously and responsibly.
This Privacy Policy describes our main principles and practices regarding the processing of your personal data when using the platform neta.market (hereinafter – the Website or the Platform), and explains your rights.
Within this Privacy Policy, "you" may refer to a visitor to the Website, a registered Buyer, or a Seller (maker).
Neta is an online marketplace that provides the technical environment for communication between Buyers and independent Sellers, order placement, payment processing, and delivery arrangements.
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR), the Law on Processing of Personal Data of the Republic of Latvia, and other applicable legal acts.
Data Controller
For the purposes of this Privacy Policy, Neta (SIA NetaDEV) is regarded as the controller of personal data. Our cooperation partners (including delivery service providers, IT service providers, and others) are regarded as processors of personal data.
Please note that Sellers (makers) who sell goods on the Platform may act as separate controllers in relation to personal data which they process in the context of self-arranged delivery or direct communication.
Contact details:
SIA NetaDEV
Smiltenes nov., Variņu pag., "Lejaslazdiņi", LV-4726
Email: info@netatirgus.lv
Information We Collect
Website visitors:
When you visit the Website, we automatically collect technical data such as IP address, browser and device information, information about pages visited, and cookie data.
Registered Buyers:
When you register and make purchases, we process:
- your first name and surname;
- email address;
- telephone number;
- delivery address;
- order history (goods, prices, dates, status);
- information received from the bank regarding payment of the purchase, where applicable;
- the content of communications with Sellers within the Platform.
Sellers (makers):
In addition to the above, in relation to Sellers we process:
- store/profile information;
- Stripe account information (if you use Stripe payments);
- bank account details for receipt of payments, where applicable;
- sales and transaction statistics.
Communication data:
When you contact us by email or through the Platform, we retain a record of that correspondence, which may include your name, surname, email address, and other data disclosed by you in the course of the communication.
How We Use Your Personal Data
We use your personal data in order to ensure the operation of the Platform and to provide services to you. The principal processing purposes and their legal bases are set out below.
On the basis of contract (GDPR Article 6(1)(b)):
- your registration and maintenance of your account;
- placement and administration of orders;
- payment processing;
- arranging delivery;
- provision of customer support.
On the basis of legitimate interests (GDPR Article 6(1)(f)):
- ensuring the security of the Platform;
- prevention of fraud;
- improvement and development of services;
- ensuring the efficient functioning of the Website.
On the basis of consent (GDPR Article 6(1)(a)):
- sending informational emails regarding news and promotions;
- use of analytical and marketing cookies.
You may withdraw your consent at any time.
On the basis of legal obligation (GDPR Article 6(1)(c)):
- compliance with accounting and tax record-keeping obligations;
- cooperation with law enforcement authorities.
Payment Processing
Payments by payment card, Apple Pay, Google Pay, and other payment methods supported by Stripe are processed using Stripe Connect. In such cases, payment processing is carried out by Stripe, Inc. acting as an independent payment service provider.
Stripe may process your personal data (including card details and transaction information) in accordance with its privacy policy: stripe.com/privacy
Where the Seller does not accept Stripe payments, payment is made directly between the Buyer and the Seller (by bank transfer or other methods). In such cases, Neta does not process payment details.
To Whom We Disclose Personal Data
In certain circumstances, we may disclose your personal data to third parties in order to provide the service and perform the contract.
Sellers (makers):
When you make a purchase, we disclose to the Seller the data necessary for fulfillment of the order (name, delivery address, contact information).
Delivery partners:
Where the Seller uses delivery offered by Neta, we disclose your name, address, and telephone number to the courier.
Payment service providers:
Stripe, Inc. – for payment processing (name, email address, payment information).
IT service providers:
Hosting and infrastructure providers – for operation of the Platform.
Public authorities:
Law enforcement and supervisory authorities – in cases provided for by applicable law.
Data processing agreements have been concluded with all processors in order to ensure an adequate level of personal data protection.
Transfers of Data Outside the European Economic Area
Neta stores personal data primarily within the European Economic Area. However, when Stripe payment services are used, your data may be transferred to the United States of America.
We ensure adequate safeguards for transfers of personal data to countries outside the EEA on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission and other applicable safeguards pursuant to Article 46 GDPR.
Further information about international transfers of personal data may be obtained by contacting us at info@netatirgus.lv.
How Long We Retain Your Personal Data
We retain your personal data for as long as necessary to achieve the purposes of processing, unless a longer retention period is required by applicable law.
- Account data – for as long as the account remains active, plus 1 year after account deletion;
- Transaction data – 5 years after the transaction (for accounting purposes);
- Communication data – 2 years after the end of the communication;
- Technical data – up to 1 year;
- Marketing consents – until consent is withdrawn.
Please note that we may be required to retain certain personal data even after you stop using the Platform in order to comply with legal obligations.
Cookies
Cookies are small text files stored by your browser on your device. We use cookies to ensure the operation of the Website and to improve user experience.
We use the following categories of cookies:
- Strictly necessary cookies – these ensure the core functionality of the Website (session management, shopping cart). These cookies cannot be disabled.
- Analytical cookies – these help us understand how visitors use the Website. They are used only with your consent.
- Marketing cookies – these are used to display personalised advertising. They are used only with your consent.
You may manage cookie settings using our cookie consent tool or your browser settings.
Automated Decision-Making
Neta does not carry out fully automated decision-making which produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
If such processing is introduced in the future, we will update this Privacy Policy accordingly and inform you of your rights.
Your Rights
You have certain rights in relation to the way we process your personal data:
- Right of access – you have the right to obtain information about which of your personal data we process and to receive a copy thereof;
- Right to rectification – you have the right to request correction of inaccurate or incomplete data;
- Right to erasure – you have the right to request deletion of your data in certain circumstances ("right to be forgotten");
- Right to restriction of processing – you have the right to request restriction of processing, for example, while your request for rectification is being reviewed;
- Right to object – you have the right to object to processing based on legitimate interests or for direct marketing purposes;
- Right to data portability – you have the right to receive your data in a structured format and to transmit it to another controller;
- Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time;
- Right to lodge a complaint – you have the right to lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).
To exercise your rights, please contact us at info@netatirgus.lv. We will respond to your request within one month.
Please note that in certain cases we may have a lawful basis for refusing your request (for example, where we are required to retain data for accounting purposes).
Necessity of Providing Data
Provision of personal data during registration and order placement is necessary for the conclusion and performance of a contract. Without such data, we cannot provide the services of the Platform.
Mandatory data fields are marked with an asterisk (*) in the relevant forms. If you do not provide such data, we will not be able to:
- create your user account;
- process your orders;
- ensure delivery of goods.
Consent to receive marketing communications is voluntary and does not affect your ability to use the Platform.
Security
All information you provide is stored on secure servers. We implement appropriate organisational, technical, and administrative measures to protect your personal data, including:
- encryption of data in transit (SSL/TLS);
- secure authentication mechanisms;
- access controls and restrictions;
- regular security testing.
However, please note that no transmission of information over the internet is completely secure. If you believe that your interaction with us is no longer secure, please contact us immediately.
Amendments to the Privacy Policy
We may periodically update this Privacy Policy. Any amendments are published on the Website and take effect on the date of publication.
In the case of material amendments, we will notify you by publishing a notice on the Platform or by sending an email.
Contact Details
If you wish to contact us in relation to questions about your privacy or this Privacy Policy: