Privacy policy

1. General provisions

1.1. This Privacy Policy describes how SIA Eventure, reg. no. 40103761635, Vienības gatve 18A, Rīga, LV-1004, Latvia (Data Controller), collects, processes and stores personal data of its customers and of visitors to www.berghoff.lv, www.berghoff.lt, www.berghoff.ee, www.berghoff.fi, www.berghoff.se, www.berghoff.dk (Data Subject or You).
1.2. Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, such as collecting, recording, altering, using, viewing, deleting or destroying.
1.3. The Data Controller follows the data processing principles defined by law and processes personal data in accordance with applicable legislation.

2. Collection, processing and storage of personal data

2.1. The Data Controller collects, processes and stores identifying information mainly through the online store and by email.
2.2. By visiting and using the website, you agree that the information you provide is used in accordance with the purposes described in this Privacy Policy.
2.3. The Data Subject is responsible for providing accurate, correct and complete data and for informing the Data Controller of any changes without delay.
2.4. The Data Controller is not responsible for losses incurred by the Data Subject or third parties because of false data.

3. Processing of customer personal data

3.1. The Data Controller may process the following personal data:

  • first and last name;
  • contact information (email and/or phone number);
  • transaction data (purchased items, delivery address, price, payment details and similar);
  • any other information provided when using the services or contacting us.

3.2. The Data Controller may verify submitted data in public registers.
3.3. The legal basis for processing is Article 6(1) of the GDPR: (a) the Data Subject has given consent; (b) processing is necessary for the performance of a contract; (c) processing is necessary for compliance with a legal obligation; (f) processing is necessary for the legitimate interests of the Data Controller or a third party, unless overridden by the Data Subject's fundamental rights.
3.4. Personal data is stored as long as at least one of the following applies: the data is needed for the purpose for which it was collected; the Data Controller or the Data Subject can assert legal interests (for example claims or disputes); the law requires the data to be kept (for example accounting rules); or the Data Subject's consent is valid. When none of these applies, the data is deleted or anonymised.
3.5. To fulfil its obligations, the Data Controller shares personal data with partners and processors, such as accountants, carriers that deliver the orders (for example Omniva and DPD) and Shopify, the e-commerce platform on which the online store runs.
3.6. Payments are processed by the payment providers Shopify Payments and MakeCommerce (Maksekeskus AS); the personal data needed to carry out the payment is passed to them. Data may also be shared with public authorities where this is necessary to defend legal interests.
3.7. The Data Controller applies technical and organisational measures to protect personal data against accidental or unlawful destruction, alteration, disclosure or other unauthorised processing.

3.8. AI shopping advisor (chat). The online stores offer an optional chat with an AI shopping advisor that answers questions about products, delivery and returns. The answers are generated automatically by artificial intelligence and may contain mistakes, so please check the product page before you buy. The chat is clearly marked as an AI assistant, and you can use the online store without it.
3.8.1. Data processed: the messages you type in the chat, the page and product you are viewing, the store country and language, and the technical data needed to provide the chat and protect it against misuse (for example your IP address). Please do not enter personal data in the chat, such as your name, address, order number or payment details. For orders, complaints and personal matters, please contact customer service at info@berghoff.lv.
3.8.2. Purpose and legal basis: to answer your questions and help you choose products (GDPR Article 6(1)(b) – steps taken at your request before entering into a contract) and to protect the chat against misuse (Article 6(1)(f) – the Data Controller's legitimate interest).
3.8.3. Processors: the AI model is provided by Anthropic (Anthropic Ireland, Limited, with processing by Anthropic, PBC in the United States; Claude API), and the chat server runs on Cloudflare, Inc. (Cloudflare Workers). They process the data on behalf of the Data Controller. Where data is transferred outside the European Union or the European Economic Area, this is done with appropriate safeguards, in particular the European Commission's Standard Contractual Clauses.
3.8.4. Storage: the conversation is stored only in your browser for the open tab and is deleted when you close the tab or start a new conversation. The Data Controller does not store chat conversations on its servers. Technical logs without message content (for example the time, IP address, error codes and usage statistics) are kept by the hosting provider for up to 7 days for operation and security. The AI provider deletes messages within 30 days (longer only if they are flagged for misuse, for up to 2 years, or where required by law) and does not use them to train its models.
3.8.5. No decisions with legal or similarly significant effects for you are made automatically in the chat.
3.8.6. Your rights under section 4 also apply to data processed in the chat.

4. Rights of the Data Subject

4.1. Under the GDPR you have the right to:

  • access your personal data, receive a copy of it and request data portability;
  • request correction of inaccurate or incomplete data;
  • request deletion of your data (“right to be forgotten”), unless the law requires otherwise;
  • withdraw consent you have given;
  • restrict the processing of your data;
  • lodge a complaint with the Data State Inspectorate of Latvia or with the data protection authority of your country of residence.

Requests can be sent by email to info@berghoff.lv.

5. Final provisions

5.1. This Privacy Policy is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable laws of the Republic of Latvia and the European Union.
5.2. The Data Controller may amend this Privacy Policy. Changes take effect upon publication in the online stores www.berghoff.lv, www.berghoff.lt, www.berghoff.ee, www.berghoff.fi, www.berghoff.se, www.berghoff.dk.