Privacy Policy

Nutrameg Latvia SIA

registration number 40203072376

registered office Lastadijas iela 6, LV-1050, Riga, Latvia

Extract from the "General Terms and Conditions" section "Privacy Policy"

to view the full "General Terms and Conditions" document please go to "General Terms and Conditions"

[..]

19.1. This Privacy Policy explains how Nutrameg Latvia SIA, registration number 40203072376 with registered office Lastadijas iela 6, LV-1050, Riga, Latvia processes personal data when providing Services and managing Website.

19.2. Personal data controller is Nutrameg Latvia SIA, registration number 40203072376 with registered office Lastadijas iela 6, LV-1050, Riga, Latvia. 

19.3. What personal data are we processing?

19.3.1. We process your personal data for multiple purposes, when you register for the Services, carry out activities in your profile or visit our Website. In certain cases, the processing of your data is necessary to provide the Services. But in other cases, if processing is not strictly necessary, we will indicate that, for example, by giving you the possibility to choose, if you want to submit your data to us.

19.3.2. The information that you enter, when you do the informative weight loss test on our Website, is not stored or otherwise recorded in our information systems.

19.4. To register new Services users, identify the existing users, grant you access to your already existing user profile and administer your profile, we process your name, surname, email address, phone number, gender, age, payment information as well as other data, which you have indicated during the registration process.

Personal data category	Legal basis for processing	Retention period
Email address, phone number, name, surname, age, gender, type, date and amount of payment for Services, type of Services requested.	Processing is necessary for the performance of a contract concluded with you and provide you the Services.	Data is retained for as long as you are a registered user of the Services and have paid for the Services. When you delete your profile, we may retain the data, which we are required to keep to fulfill our legal obligations (for example, for tax purposes).

19.5. To provide you a personalised Services, prepare a diet and nutrition plan as well as other tips and suggestions in relation to the use of the Services, we process the data you have disclosed regarding your eating habits, health status, information on pregnancy or breastfeeding as well as other health related data. This information is a special category of personal data, thus we process it with due care and based on your explicit consent. Your health data will only be processed after you have made the payment for the Services. Due to the specifics of the Services, we will not be able to provide you the Services, if you have not granted the explicit consent for the processing of your health data. If you choose not to consent, we will make a refund of your payment for the Services.

Personal data category	Legal basis for processing	Retention period
Information on your health, smoking habits, pregnancy, breastfeeding, illnesses, medication which you use, diet choices, weight and height.	Processing is based on your explicit consent to receive the Services.	Data retained for as long as there is a valid consent. When the consent is windrowed, the provision of Services is stopped. If you delete your profile, this data is deleted, if their retention is not required under the applicable laws.

19.6. To comply with applicable laws, for example, in relation to processing of payments and our accounting obligations, we process information that relates to your payments.

Personal data category	Legal basis for processing	Retention period
Information on your payments, your place of residence.	Processing necessary for compliance with a legal obligation	Data retained for as long as required under applicable law

19.7. To inform you about news and promotions in relation to the Services and send you personalized advertising or other marketing communication, we process your name, email address and/or phone number. You will only receive such information, if you have consented to it when registering for the Services. You have the right to withdraw your consent to receive such communication, by contacting our customer support at StockholmDiet.com online SUPPORT HELP DESK. In case you withdraw your consent by contacting our customer support at StockholmDiet.com online SUPPORT HELP DESK, we will register this information in your profile within 5 business days.

Personal data category	Legal basis for processing	Retention period
Name, surname, email address and/or phone number.	Name, surname, email address and/or phone number.	Data is retained for as long as there is a valid consent. When consent is withdrawn, we will cease the processing of your data for this purpose.

19.8. For the purposes of developing a marketing strategy, client segmentation and analysis of our Services, we may process the data you have indicated when registering for the Services, for example, your gender, the chosen Services as well as certain information obtained from cookies.

Personal data category	Legal basis for processing	Retention period
Gender, information from cookies, for example, IP address, device used, type of browser, time and date of opening, unsubscribing and blocking of our emails, clicks, interaction with the Website.	Processing necessary for the purposes of our legitimate interests to improve and develop our business.	Please see our cookie policy, to see more information on our cookies. If you delete your profile, we may retain some of the information in an anonymised and aggregated form.

19.9. To provide customer service and resolve any issues that may arise in relation to our Services, we process your name, surname, contact information, your profile data and any other information that you may provide during your communication with our consultants or customer service specialists.

Personal data category	Legal basis for processing	Retention period
Name, surname, e-mail address and/or phone number, profile information, any other information, which may be provided to us during consultation or for purposes stated herein.	Processing necessary for the purposes of our legitimate interests to ensure the quality of our Services, solving any problems in relation to it and protection of our legal interests and rights in case of any disputes.	Data is retained until the purpose of its processing is achieved or deleted when you delete your profile, if retention is not required to protect our legal rights.

19.10. To ensure the protection and security of our database, internal systems, the Website and other infrastructure and oversee the use of our Services, we may process various technical information, which we acquire from cookies, log files and other similar technological solutions.

Personal data category	Legal basis for processing	Retention period
Your IP address, information on your device, type and version of browser, time zone, various metadata, information on access to the Website and profile, information on interaction with the Website, entry and correction of data and any other information for the purpose set herein.	Processing necessary for the purposes of our legitimate interests to ensure the security of our IT system and reliable, continuous, secure business.	Data retained for 12 months

19.11. To estimate, predict and offer you the most appropriate, effective diet and nutrition plan, as well as to help you achieve the goal you have set, we may collect and analyse (profile) certain types of user information. When profiling, we use only accurate, minimal data, such as the correlation of a user's weight change due to a particular nutrition plan. We perform such profiling based on our legitimate interests to provide the most appropriate and efficient Services to the user. We do not make automated decisions based on profiling that may have legal consequences for you or adversely affect you as a data subject. This allows us to offer our users a nutrition and diet plan that has been successful for other users with similar parameters.

19.12. Retention period and data deletion:

19.12.1. We will process your personal data for as long as any of the above mentioned data processing purposes or legal basis is valid. We evaluate the retention period by taking into account our legal obligations and retention periods set therein, as well as our legitimate interests or your instructions, for example, in case you withdraw your consent.

19.12.2. When any of the above mentioned data processing purposes or legal basis no longer exist, we delete or anonymise the data.

19.13. Sharing of your personal data:

19.13.1. In certain cases, we cooperate with various third party service providers and data processors, who provide support for our Services. Thus your personal data may be shared with such service providers, who provide hosting and server co-location services, e-mail and content delivery services and tools, invoicing and payment processing services, marketing, accounting, legal IT and other services, which we may reasonably require.

19.13.2. Such service providers may only receive the personal data required to provide the respective service, for example, the information on your payments will only be shared with payment processing service providers and only to the extent necessary to secure your payment, refund your payment, or review your complaints.

19.13.3. Such third party service providers can only process this data in accordance with our instructions and are forbidden to use it for other purposes. Such service providers are required to ensure personal data protection in accordance with the applicable legal norms and binding agreements concluded with us. If any of such service providers is located outside the EU/ EEA, we ensure that the personal data transfer is carried out in accordance with the legal requirements and solutions provided in the General Data Protection Regulation.

19.13.4. We choose and select such service providers with due care and require them to ensure the integrity and confidentiality of your personal data.

19.13.5. Your personal data may be accessed only by authorized Companies employees who have agreed to confidentiality obligations and who need this information in order to perform their duties.

19.13.6. In certain situations, we may be legally required to share your information with law enforcement bodies and government authorities. We may also share your information with such authorities in order to bring, enforce or defend your legal claims

19.13.7. Company as the personal data controller is responsible for the processing of your personal data.

19.14. Your rights:

19.14.1. You have the right to request access to your personal data and receive all information we process on you within one month.

19.14.2. If you wish to correct your data, you can do it by contacting us or correcting it yourself by logging in your profile.

19.14.3. If we process your personal data on the basis of our legitimate interests, you have the right to object to such processing. If we will receive such objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

19.14.4. You have the right to withdraw your consent for the processing of your data, which is based on consent. Revoking of consent will not affect the lawfulness of processing based on consent before its withdrawal.

19.14.5. You have the right to delete your data by logging in your profile or contacting us. Please note that we will not be able to delete the data, which we are obliged to retain in accordance with applicable laws. If you will request deleting your data or object to processing of data required to provide you our Service, we will not be able to provide you our Services or it will be hindered.

19.14.6. If you wish to exercise any of the above-mentioned rights, please write to us using the contact information provided herein. Before providing any information to you, we may be required to verify your identity.

19.14.7. If you believe that we have not fulfilled our personal data processing obligations or otherwise violated your data protection rights, you have the right to submit a complaint to the supervisory authority – Data State Inspectorate (Blaumaņa iela 11/13, Riga, LV-1011, www.dvi.gov.lv).

19.15. Contact information:

19.15.1. If you have any questions concerning this Privacy Policy or you wish to exercise your data subject rights, please contact our customer support at StockholmDiet.com online SUPPORT HELP DESK.
Nutrameg Latvia SIA, registration number 40203072376 with registered office Lastadijas iela 6, LV-1050, Riga, Latvia

19.16. Miscellaneous:

19.16.1. We reserve the right to change and amend this Privacy Policy from time to time. The amendments take effect as soon as they are uploaded to the Website. In the event of a material change, we will notify you, for example, by posting a notice on your profile, on the Website or by sending you an email.

[..]