Privacy Policy and Distance Contract

1. General Provisions

1.1. This Privacy Policy describes how ELME MESSER L SIA, Registration No. 40003284675 (hereinafter also referred to as the “Data Controller”), obtains, processes, and stores personal data that gasbox.lv collects from its customers and persons visiting the website (hereinafter referred to as the “Data Subject” or “You”).
1.2. Personal data is any information relating to an identified or identifiable natural person, i.e., the Data Subject. Processing is any activity related to personal data, such as collection, recording, modification, use, viewing, deletion, or destruction.
1.3. The Data Controller complies with the data processing principles provided by law and can confirm that personal data is processed in accordance with applicable legislation.

---

2. Collection, Processing, and Storage of Personal Data

2.1. The Data Controller collects, processes, and stores personally identifiable information primarily through the online store website, email, and paper documents (contracts).
2.2. By visiting and using the services provided in the online store, you agree that any information provided is used and managed in accordance with the purposes set out in this Privacy Policy.
2.3. The Data Subject is responsible for ensuring that the submitted personal data is accurate, correct, and complete. Providing knowingly false information is considered a violation of this Privacy Policy. The Data Subject must immediately inform the Data Controller of any changes to the submitted personal data.
2.4. The Data Controller is not responsible for any losses incurred by the Data Subject or third parties due to false personal data provided.

---

3. Processing of Customer Personal Data

3.1. The Data Controller may process the following personal data:
3.1.1. First name, last name
3.1.2. Date of birth and personal identification number
3.1.3. Contact information (email address and/or phone number)
3.1.4. Transaction data (purchased goods, delivery address, price, payment information, etc.)
3.1.5. Any other information submitted during the use of the website services or when purchasing goods or contacting us
3.2. In addition, the Data Controller has the right to verify the accuracy of the submitted data using publicly available registers.
3.3. The legal basis for processing personal data is Article 6(1)(a), (b), (c), and (f) of the General Data Protection Regulation (GDPR):
a) the Data Subject has given consent to the processing of personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the Data Subject is a party or to take steps prior to entering into a contract at the request of the Data Subject;
c) processing is necessary for compliance with a legal obligation;
f) processing is necessary for the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject, especially if the Data Subject is a child.
3.4. The Data Controller stores and processes personal data of the Data Subject as long as at least one of the following conditions exists:
3.4.1. Personal data is necessary for the purposes for which it was received;
3.4.2. The Data Controller and/or the Data Subject may exercise legitimate interests (e.g., submit objections, initiate or defend legal claims);
3.4.3. There is a legal obligation to retain the data (e.g., under accounting laws);
3.4.4. The Data Subject’s consent for the relevant processing is valid, provided there is no other legal basis.
When these conditions cease, the storage period ends, and all personal data is permanently deleted or anonymized.
3.5. To fulfill obligations, the Data Controller may transfer personal data to partners and processors (e.g., accountants, couriers). Payment processing is ensured by the platform every-pay.com, and necessary data is transferred to AS “SEB banka.” Data may be provided to authorities upon request to protect legal interests.
3.6. The Data Controller implements organizational and technical measures to protect personal data against unlawful actions.

---

4. Rights of the Data Subject

4.1. In accordance with GDPR and Latvian law, you have the right to:
4.1.1. Access your personal data and receive information about its processing, including a copy (data portability);
4.1.2. Request correction of incorrect or incomplete data;
4.1.3. Request deletion (“right to be forgotten”), except where retention is required by law;
4.1.4. Withdraw consent at any time;
4.1.5. Restrict processing;
4.1.6. Lodge a complaint with the Data State Inspectorate.
Requests can be submitted in person in Riga, Katlakalna iela 9A, LV1073, or electronically via info@elmemesser.lv.

---

5. Final Provisions

5.1. This Privacy Policy is developed in accordance with GDPR (EU Regulation 2016/679) and applicable Latvian and EU law.
5.2. The Data Controller may amend this Privacy Policy at any time without notice. Changes become effective upon publication on gasbox.lv.

---

Distance Contract

The seller of goods offered in this online store, ELME MESSER L SIA (Reg. No. 40003284675), hereinafter referred to as the “Seller,” and the person placing the order, hereinafter referred to as the “Buyer,” conclude the following agreement:
The Seller undertakes to sell and deliver goods according to the Buyer’s order.

---

Ordering, Delivery, and Payment

The Buyer orders goods via the website, specifying type and quantity. Payment can be made using the website’s payment tools or via invoice sent by email. The invoice is electronically prepared and valid without a signature.
Delivery is ensured within 3 days after payment, with timing agreed with the Buyer.

---

Right of Withdrawal

The Buyer has the right to withdraw within 14 days of receiving the goods by sending written notice.
The Buyer must return the goods within 7 days after sending the withdrawal notice. Return costs are covered by the Buyer.
The withdrawal right does not apply if:

• goods cannot be returned by nature or are perishable;
• goods are custom-made.

The Buyer is responsible for maintaining the quality and safety of goods during the withdrawal period. The Seller may refuse or charge compensation if the goods are damaged, used improperly, or packaging is missing/damaged.

---

Data Processing

By placing an order, the Buyer confirms agreement that their data will be used for order processing and delivery in accordance with laws. The Buyer also agrees to receive email notifications related to the order.