Privātuma politika

Last updated: 17 July 2026

1. General Information

This Privacy Policy explains how SIA “KGM” collects, uses, stores and protects personal data of natural persons, including when a person:

visits the website kgm.lv;
creates a customer account;
places an order in the online shop;
contacts SIA KGM by telephone, e-mail or contact form;
subscribes to receive news and commercial communications;
represents a company or farm in cooperation with SIA KGM.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR), the Personal Data Processing Law of the Republic of Latvia and other applicable legislation. The supervisory authority for personal data protection in Latvia is the Data State Inspectorate.

2. Personal Data Controller

The personal data controller is:

Sabiedrība ar ierobežotu atbildību “KGM”
Registration No.: 40103060578
VAT Registration No.: LV40103060578
Address: “Vecozoli”, Zaķumuiža, Ropaži Parish, Ropaži Municipality, LV-2133, Latvia
Telephone: +371 67339046, +371 67339047
E-mail: info@kgm.lv
Online shop e-mail: eveikals@kgm.lv
Website: kgm.lv

The SIA KGM website provides an online shop, customer account, contact form and newsletter subscription form.

Questions regarding the processing of personal data and the exercise of data protection rights may be sent to info@kgm.lv.

3. Personal Data We Process

Depending on the services used by a person, SIA KGM may process the following categories of personal data.

3.1. Identification and Contact Information

first name and surname;
company or farm name;
registration and VAT number;
delivery and billing address;
e-mail address;
telephone number;
job title or represented organisation.

3.2. Order and Transaction Data

order number and date;
selected products and quantities;
order value;
delivery method and address;
payment method and payment status;
bank transfer information;
invoices, delivery notes and other transaction documents;
information regarding returns, exercise of the right of withdrawal or complaints.

SIA KGM does not request customers’ online banking login details, PIN codes or passwords.

3.3. Customer Account Data

username;
e-mail address;
account access credentials;
addresses saved in the account;
order history;
account settings selected by the customer.

3.4. Communication Data

information entered in the contact form;
e-mail correspondence;
customer questions and requests;
applications and complaints;
notes related to customer service;
information that a person voluntarily chooses to provide to us.

Please do not include information in contact forms or e-mail messages that is not necessary for the specific matter being addressed.

3.5. Website Usage and Technical Data

IP address;
browser and device type;
operating system;
date and time of visit;
pages viewed;
technical log files;
cookie identifiers;
information regarding consent to the use of cookies;
information regarding website errors and security events.

3.6. Newsletter Subscription Data

e-mail address;
date and time consent was given;
information about the source of consent;
unsubscribe or consent withdrawal information.

4. Purposes and Legal Bases for Processing Personal Data

4.1. Acceptance and Fulfilment of Orders

Personal data is processed in order to:

accept and confirm an order;
prepare an invoice and other documents;
receive and identify payment;
organise product preparation and delivery;
inform the customer about the status of the order;
process returns or the exercise of the right of withdrawal.

Legal basis: entering into and performance of a contract.

4.2. Compliance with Accounting and Legal Obligations

Personal data is processed in order to comply with accounting, tax, consumer protection and other requirements established by applicable legislation.

Legal basis: compliance with a legal obligation applicable to SIA KGM.

4.3. Creation and Maintenance of a Customer Account

Data is used to provide customer authentication and to store order history, addresses and other settings selected by the customer.

Legal basis: performance of a contract and provision of a service requested by the customer.

4.4. Communication and Customer Service

Data is processed in order to:

answer questions;
provide information about products;
prepare individual offers;
resolve delivery or payment matters;
review complaints and claims.

Legal basis: performance of a contract, steps taken prior to entering into a contract, or SIA KGM’s legitimate interest in providing high-quality customer service.

4.5. Ensuring Website Operation and Security

Technical data may be processed in order to:

ensure operation of the website and online shop;
maintain shopping cart and authentication functionality;
prevent unauthorised access;
detect fraudulent or malicious activity;
analyse technical errors;
protect the interests of SIA KGM, its customers and website users.

Legal basis: SIA KGM’s legitimate interest in ensuring the security and operation of the website.

4.6. Sending News and Offers

If a person has subscribed to receive news, SIA KGM may use their e-mail address to send information about:

new products;
company news;
special offers;
useful articles;
other information related to the activities of SIA KGM.

Legal basis: the person’s consent.

Consent may be withdrawn at any time by using the unsubscribe link in a received message or by writing to info@kgm.lv. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. It must be as easy to withdraw consent as it was to give it.

4.7. Protection of SIA KGM’s Rights and Interests

Personal data may be used in order to:

prevent or investigate violations;
recover debts;
prepare, submit or defend legal claims;
preserve evidence in the event of a dispute.

Legal basis: SIA KGM’s legitimate interest in protecting its rights and financial interests or compliance with a legal obligation.

5. Is Providing Personal Data Mandatory?

Data required to place an order, such as the customer’s name, contact information, billing address and delivery address, is necessary for entering into a distance contract and fulfilling the order.

If the required data is not provided, SIA KGM may be unable to:

accept or fulfil an order;
prepare an invoice;
deliver a product;
respond to a request;
review a complaint.

Subscription to newsletters is voluntary and is not a condition for purchasing products.

6. Sources of Personal Data

SIA KGM primarily obtains personal data:

directly from the person;
from the company or farm represented by the person;
automatically when the person uses the website;
from banks or payment service providers;
from product delivery and logistics service providers;
from publicly available registers where necessary to verify a business partner or company.

Where personal data has not been obtained directly from the data subject, in certain cases the person must also be informed about the source of the data and the categories of data obtained.

7. Recipients of Personal Data

Personal data may be disclosed only to the extent necessary to provide the relevant service.

Recipients of data may include:

authorised employees of SIA KGM;
website maintenance and IT service providers;
hosting and data storage service providers;
accounting and auditing service providers;
banks and payment service providers;
couriers, carriers and logistics partners;
e-mail and newsletter service providers;
legal advisers, insurers and debt collection service providers;
state and municipal authorities where disclosure is required by law;
other service providers processing data on behalf of SIA KGM.

For example, in order to arrange delivery, the carrier may receive the recipient’s name, telephone number, delivery address and information about the shipment. The Data State Inspectorate indicates that a privacy policy should provide information about data recipients or categories of recipients and the data disclosed for delivery purposes.

SIA KGM does not sell personal data to third parties.

8. Transfer of Personal Data Outside the European Union and EEA

SIA KGM seeks to use service providers that process personal data within the European Union or European Economic Area.

Certain website, e-mail, analytics, social media or other technology service providers may process data outside the European Union or EEA.

In such cases, data is transferred only where an appropriate legal basis and data protection safeguards are in place, such as:

an adequacy decision adopted by the European Commission;
Standard Contractual Clauses approved by the European Commission;
another transfer mechanism provided for under the General Data Protection Regulation.

9. Personal Data Retention Periods

Personal data is not retained for longer than necessary to achieve the specific purpose of processing.

Order, Invoice and Accounting Data

Data is retained for the period required by legislation governing accounting, taxation and transaction documents.

Customer Account Data

Data is retained while the customer account remains active. After the account is closed, data is deleted or anonymised, except for information that must be retained to comply with legal obligations or protect legal claims.

Contact Form and Correspondence Data

Data is retained until the matter has been fully resolved and thereafter for as long as necessary to address potential claims, complaints or disputes.

Complaint and Dispute Data

Data is retained until the complaint or dispute has been finally resolved and until the applicable limitation period has expired.

Newsletter Subscription Data

Data is retained until consent is withdrawn. Information demonstrating that consent was originally given and subsequently withdrawn may also be retained after unsubscribing so that SIA KGM can demonstrate the lawfulness of processing.

Website Technical Data

Data is retained for as long as necessary to ensure website operation and security, troubleshoot errors and investigate incidents.

Cookie Data

Cookie retention periods are specified in the Cookie Policy or in the website’s cookie settings.

After the applicable retention period expires, data is deleted, anonymised or securely destroyed.

10. Cookies

The kgm.lv website may use cookies in order to:

ensure operation of the online shop and shopping cart;
maintain the user session and language preference;
provide authentication;
save cookie preferences;
protect the website;
obtain statistical information;
evaluate website performance;
conduct marketing activities where the person has given consent.

Strictly necessary cookies may be used without separate consent where they are required to provide a service explicitly requested by the user. Analytics and marketing cookies may only be activated after the appropriate consent has been obtained.

More detailed information about the types of cookies used, service providers and retention periods is available in the Cookie Policy.

11. Rights of the Data Subject

A person has the right to:

receive information about the processing of their personal data;
request access to their personal data;
receive a copy of their personal data;
request correction of inaccurate or incomplete data;
request deletion of data in certain circumstances;
request restriction of processing;
object to processing based on SIA KGM’s legitimate interests;
in certain circumstances, receive their data in a structured, commonly used and machine-readable format;
withdraw previously given consent;
lodge a complaint with the Data State Inspectorate.

A request may be submitted:

By e-mail: info@kgm.lv
By post: SIA “KGM”, “Vecozoli”, Zaķumuiža, Ropaži Parish, Ropaži Municipality, LV-2133, Latvia.

To prevent disclosure of data to an unauthorised person, SIA KGM may ask the applicant to provide additional information to verify their identity.

SIA KGM responds without undue delay, normally no later than within one month. In the case of a complex or extensive request, this period may be extended by a further two months, with the person being informed about the extension and the reasons for it.

Certain rights may be restricted where retention or processing of data is required by law or where the data is necessary for the establishment, exercise or defence of legal claims.

12. Right to Lodge a Complaint

If a person believes that their personal data is being processed improperly, they may first contact SIA KGM by writing to info@kgm.lv.

The person also has the right to lodge a complaint with the Latvian supervisory authority:

Data State Inspectorate
Elijas iela 17, Riga, LV-1050, Latvia

Lodging a complaint does not restrict the person’s right to use other legal remedies provided for by applicable legislation.

13. Automated Decision-Making

SIA KGM does not make decisions based solely on automated processing of personal data that would produce legal effects concerning a person or otherwise significantly affect them.

Technical website functions, such as automatically sending an order confirmation, are not regarded as such automated decision-making.

14. Personal Data Security

SIA KGM uses appropriate technical and organisational measures to protect personal data, including:

restricting access rights;
user authentication;
updating systems and software;
creating data backups;
secure data transmission solutions;
confidentiality obligations for employees and service providers;
monitoring security events and unauthorised access.

No information system can guarantee absolute security. However, SIA KGM takes reasonable measures to reduce the risk of data loss, unauthorised access, disclosure or alteration.

15. Third-Party Websites

kgm.lv may contain links to third-party websites, such as social networks, map services or websites of cooperation partners.

When such a link is opened, personal data is processed by the relevant third party in accordance with its own privacy policy. SIA KGM is not responsible for the content or data processing practices of third-party websites.

16. Changes to the Privacy Policy

SIA KGM may periodically amend this Privacy Policy in order to reflect:

actual personal data processing activities;
changes to website functionality;
changes to the services used;
requirements of applicable legislation.

The current version of the Privacy Policy is always published on kgm.lv, together with the date of its latest update.

Terms relating to purchases made through the online shop are available in the Online Shop Purchase Terms, while the form for exercising the right of withdrawal is available on the Withdrawal Form page.