Privacy Policy

1. General information

This Privacy Policy explains how MANTO SIA (registration No. 40203711113, registered address: Īvāni, Liezēres pag., Madonas nov., LV-4884, Latvia; “we”, “us” or the “Controller”) processes personal data collected through the website dzenumuiza.lv (the “Website”), including its online shop, booking forms and contact channels. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), the Personal Data Processing Law of the Republic of Latvia, and other applicable legislation.

2. Controller and contact details

Data controller: MANTO SIA, Reg. No. 40203711113, VAT No. LV40203711113
Address: Īvāni, Liezēres pag., Madonas nov., LV-4884, Latvia
Email: info@dzenumuiza.lv
Phone: +371 26155109

3. What data we process

• identification and contact details (name, email address, phone number, billing/delivery address);
• order and booking information (goods or services purchased, booking dates, payment information processed by our payment service provider);
• communication data (messages sent via contact forms, email or phone);
• newsletter data (email address, if you subscribed to our newsletter);
• technical and usage data (IP address, browser type, visit statistics) collected through cookies and similar technologies.

4. Purposes and legal basis

• providing orders, bookings and services – performance of a contract (GDPR Art. 6(1)(b));
• preparing accounting and tax documents – legal obligation (GDPR Art. 6(1)(c));
• customer service and responding to enquiries – legitimate interest (GDPR Art. 6(1)(f));
• sending newsletters and offers – consent (GDPR Art. 6(1)(a)), which may be withdrawn at any time;
• improving the Website, security and statistics – legitimate interest.

5. Data retention

Accounting documents are retained for the period required by law (generally 5 years under Latvia’s Accounting Law). Communication and newsletter data is kept for as long as necessary for its purpose, or until consent is withdrawn. Data is deleted or anonymised once the applicable period expires.

6. Sharing data with third parties

We may share data with: payment service providers (e.g. the payment processor we use), delivery/courier providers, website hosting and IT service providers, and public authorities where required by law. Data processing agreements compliant with the GDPR are in place with all our processors. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

7. Cookies

The Website may use cookies to ensure its operation, analyse traffic and personalise content. You can manage cookie settings in your browser, or through the cookie consent tool shown on the Website, where available.

8. Your rights

Under the GDPR you have the right to: access your data, correct inaccurate data, request erasure, restrict processing, object to processing, receive your data in a structured format (data portability), and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, please contact us using the email address above.

9. Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Data State Inspectorate of the Republic of Latvia (www.dvi.gov.lv) or another competent supervisory authority.

10. Children

The Website is not intended for individuals under 16 years of age, and we do not knowingly collect data from such individuals without parental or guardian consent.

11. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

12. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page of the Website. This policy was last updated: July 2026.