Privacy Policy

1. Introduction and Definitions

1.1. Cosmetic Lab SIA processes personal data in accordance with applicable data protection laws, ensuring security and confidentiality of all personal information.

1.2. Definitions:

• Data Subject – any individual whose personal data is processed by Cosmetic Lab, including customers and website visitors.
• Cosmetic Lab – SIA Cosmetic Lab, Reg. No. LV40103863637, Latgales iela 322a, Riga, LV-1063, Latvia.
• GDPR – General Data Protection Regulation (EU Regulation 2016/679).
• Personal Data – any information relating to an identified or identifiable individual (Data Subject).
• Processing – any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
• Customer – a natural or legal person to whom Cosmetic Lab provides services and/or sells products.
• Website – the website www.cosmeticlab.eu operated by Cosmetic Lab.
• Controller – the entity that determines the purposes and means of the processing of personal data (Cosmetic Lab).
• Processor – a person or organization that processes personal data on behalf of the controller.

2. Application of the Privacy Policy

2.1. This Privacy Policy applies in all cases where Cosmetic Lab, as the data controller, processes personal data in connection with its business operations, including communication with customers and website visitors.

2.2. This Privacy Policy does not apply to any financial services offered by third-party financial institutions. In such cases, the financial institution acts as the data controller.

2.3. If Cosmetic Lab processes personal data of representatives of legal entities, Cosmetic Lab does so only for purposes described in Section 4 of this Privacy Policy.

2.4. This Privacy Policy is effective from the date indicated above. Cosmetic Lab may update or modify it at any time. Updated versions will be published on the Website.

3. Data Controller and Contact Details

If you have questions about this Privacy Policy or your personal data, please contact us by e-mail: sales@cosmetic-lab.lv

Website: www.cosmeticlab.eu

4. Purposes for Processing Personal Data

Cosmetic Lab collects and processes personal data for the following purposes:

• Providing services and fulfilling contracts – to process and deliver orders, communicate with customers, and provide after-sales support.
• Communication with potential customers – to respond to inquiries or requests received via website forms or email.
• Website analytics – to analyze website usage and improve user experience.
• Legal compliance – to meet obligations under applicable laws and regulations.
• Protection of rights and interests – to prevent fraud, ensure data security, and defend legal claims.

Providing personal data may be required to enter into or perform a contract. Failure to provide necessary data may prevent Cosmetic Lab from providing services.

5. Legal Basis for Processing

Processing of personal data by Cosmetic Lab is based on the following legal grounds under Article 6 of the GDPR:

• (a) Consent – when data is processed for website analytics or newsletter subscription;
• (b) Contract performance – when processing is necessary to fulfil a contract with the Client;
• (c) Legal obligation – when processing is required by law (e.g., accounting);
• (f) Legitimate interest – to protect business interests, ensure website security, and prevent misuse.

6. Transfer of Personal Data

Cosmetic Lab may share personal data with:

• Contractual partners assisting in order execution or website operation.
• State authorities when required by law.

All partners process personal data in accordance with GDPR. Personal data is not transferred outside the European Economic Area unless appropriate safeguards are in place.

7. Data Retention

Cosmetic Lab retains personal data only for as long as necessary:

• Accounting data – 5 years after the end of the financial year;
• Cookie and analytics data – up to 2 years or until consent is withdrawn;
• Email address, phone number, address – for the duration of the business relationship;
• Payment details (if relevant) – as required by financial legislation.

8. Rights of Data Subjects

Data Subjects have the right to:

• Access their personal data;
• Request correction of inaccurate data;
• Request data portability;
• Restrict or object to data processing;
• Request deletion of personal data;
• Withdraw consent at any time;
• Lodge a complaint with the supervisory authority.

Requests can be submitted by email to sales@cosmetic-lab.lv.

Supervisory authority: Datu valsts inspekcija (Data State Inspectorate), E-mail: pasts@dvi.gov.lv

9. Cookies

9.1. Cosmetic Lab uses cookies and similar technologies. For more information, see our Cookie Policy.

9.2. Types of cookies used:

• Essential cookies – necessary for the website to function. Example: session cookies, security cookies (CSRF protection).
• Functional cookies – remember your preferences. Example: language selection cookie, saved contact form data.
• Analytical cookies – collect anonymous statistical data to improve the Website. Example: cookies from Google Analytics (if activated in the future).

If consent is given for analytical cookies, you can withdraw it anytime by adjusting your cookie preferences.

This Privacy Policy forms part of the general Terms & Conditions of Cosmetic Lab SIA.