privacy policy

SIA MANGO ENZO (Registration No. 40203508840, Adress: Stirnu iela 13c-36, Rīga, LV-1035 ) (hereinafter referred to as "the Company"), which manages the online store www.the-overthinker.com, is committed to protecting your privacy and ensuring the protection of your personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and other applicable legislation.

This Privacy Policy outlines how we collect, process, and store personal data, the purposes for which we use it, and how we ensure its protection.

1. General Provisions

1.1. This Privacy Policy describes how SIA MANGO ENZO, Reg. No. 40203508840, (hereinafter referred to as "Data Controller") collects, processes, and stores personal data obtained from its clients and individuals visiting the website (hereinafter referred to as "Data Subject" or "You"). 
1.2. Personal data is any information concerning an identified or identifiable natural person, i.e., the Data Subject. Processing refers to any activity involving personal data, such as collection, recording, modification, use, viewing, deletion, or destruction. 1.3. The Data Controller adheres to the principles of data processing established by law and is capable of ensuring that personal data is processed following applicable legislation.

2. Collection, Processing, and Storage of Personal Data

2.1. The Data Controller collects, processes, and stores personally identifiable information primarily through the website and email. 
2.2. By visiting and using the services offered on the online store, you agree that any information provided will be used and managed following the purposes outlined in this Privacy Policy. 
2.3. The Data Subject is responsible for ensuring that the personal data provided is accurate, complete, and true. Providing false information constitutes a breach of this Privacy Policy. The Data Subject must immediately notify the Data Controller of any changes to their personal data. 
2.4. The Data Controller is not responsible for damages incurred by the Data Subject or third parties if they result from false or inaccurate personal data.

3. Processing of Customer Personal Data

3.1. The Data Controller may process the following personal data: 
3.1.1. Name and surname 
3.1.2. Contact information (email address and/or phone number) 
3.1.3. Transaction details (purchased products, delivery address, price, payment information, etc.) 
3.1.4. Any other information provided to us during the purchase of services and products or by contacting us.

3.2. Additionally, the Data Controller has the right to verify the accuracy of the submitted data using publicly available registers.

3.3. The legal basis for processing personal data is based on Article 6(1) of the General Data Protection Regulation: 
a) the Data Subject has given consent to the processing of their personal data for one or more specific purposes; 
b) the processing is necessary for the performance of a contract to which the Data Subject is a party or for the implementation of pre-contractual measures at the Data Subject's request; 
c) processing is necessary for compliance with a legal obligation to which the Data Controller is subject; 
f) processing is necessary for the legitimate interests pursued by the Data Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require protection of personal data, especially where the Data Subject is a child.

  • 3.4. The Data Controller stores and processes personal data of the Data Subject while at least one of the following criteria exists: 
  • 3.4.1. The personal data is necessary for the purposes for which it was collected; 
  • 3.4.2. While the Data Controller and/or the Data Subject may realize legitimate interests, such as submitting objections or initiating legal actions; 
  • 3.4.3. As long as there is a legal obligation to retain the data, for example, under the Accounting Law; 
  • 3.4.4. While the consent for data processing remains valid if no other legal basis for processing exists.

3.5. To fulfill its obligations towards you, the Data Controller may share your personal data with cooperating partners, data processors who perform necessary data processing on our behalf, such as accountants, courier services, etc. The payment processing is provided by the payment platform Swedbank Everypay, and necessary personal data is shared with the platform owner Swedbank AS for payment execution.

Upon request, we may share your personal data with state and law enforcement authorities to protect our legal interests by filing, presenting, and defending legal claims.

3.6. In processing and storing personal data, the Data Controller implements organizational and technical measures to ensure the security of personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.

4. Rights of Data Subject

4.1. In accordance with the General Data Protection Regulation and Latvian law, you have the right to: 
4.1.1. Access your personal data, receive information on its processing, and request a copy of your personal data in electronic format and the right to data portability; 
4.1.2. Request correction of inaccurate, incomplete, or incorrect personal data; 
4.1.3. Request deletion of your personal data ("right to be forgotten"), except in cases where legal obligations require retention; 
4.1.4. Withdraw your previously given consent to personal data processing; 
4.1.5. Restrict processing of your data – the right to request temporary suspension of data processing; 
4.1.6. Lodge a complaint with the Data State Inspectorate. Requests for the exercise of your rights can be submitted by filling out a form at the company address or sending a request electronically to our customer support service at [email protected].

5. Cookies

Cookies are small text files stored on your computer by websites you visit. They are used to ensure the proper functioning of websites and provide information to website owners.

5.1. Cookies used on www.the-overthinker.com: 
5.1.1 Functional cookies. These cookies are necessary for you to move around the website and use its features. Without these cookies, we cannot provide the services you request, such as shopping cart functionality. 
5.1.2 Google Analytics cookies. These cookies are used to collect statistics on our website visits. We use this information to improve the site’s performance and advertising efforts. 
5.1.3 Targeted Advertising Cookies. These cookies are used to enhance advertising effectiveness and display ads most likely to interest you. 
5.1.4 Third-party service provider cookies. Cookies may be set by third-party services used on this website, such as the Facebook "Like" button. Some of these cookies may track your actions on other websites, and we cannot control them as these cookies are not set by our website.

5.2. To refuse receiving cookies, you can use private browsing mode offered by most web browsers (private tab, incognito tab, or InPrivate tab). Any cookies created in private browsing mode are deleted once you close all browser tabs.

5.3. To opt out of targeted advertising, you can use free tools like Your Online Choices or YourAdChoices.

5.4. If you are a data subject under the EU GDPR (e.g., you are an EU citizen providing your personal data), you have the following rights concerning your personal data: 
5.4.1 Right to access information. You have the right to receive information about why and how your personal data is processed. You have the right to receive a copy of your personal data in a widely used electronic format free of charge. 
5.4.2 Right to rectification. You have the right to request the rectification or supplementation of inaccurate or incomplete personal data without undue delay. 
5.4.3 Right to be forgotten. You have the right to withdraw your consent to personal data processing and request the deletion of your personal data without undue delay once the data is no longer necessary to provide the requested services and comply with legal obligations. 
5.4.4 Right to restriction. You have the right to request the restriction of processing of your personal data if you object and we do not have legitimate grounds to continue processing, or if you contest the accuracy of the data, the processing is unlawful, or you wish to assert legal claims. 
5.4.5 Right to object. You have the right to object to data processing at any time, unless it is necessary for a task carried out in the public interest or where there are compelling legitimate grounds for processing.

6. Final Provisions

6.1. This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), as well as applicable laws in the Republic of Latvia and the European Union.

6.2. The Data Controller reserves the right to make changes or additions to this Privacy Policy at any time without prior notice. Amendments will take effect upon publication on the website www.the-overthinker.com.