The SoundStore.lv online store is operated by SIA “PRO 1 STAGE”. This privacy policy explains what personal data we process, for what purposes, on what legal basis, how long we keep it, and what your rights are. The policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter — the Regulation).
1. Data controller and contact details
The controller of your personal data is:
- SIA “PRO 1 STAGE”
- Registration No.: 50003385531, VAT No.: LV50003385531
- Legal address: Ogļu iela 26-6, Riga, LV-1048, Latvia
- Office / order pickup address: Mellužu iela 13-4, Riga, LV-1067, Latvia
- Phone: +371 67441330, +371 26324201
- E-mail for data protection matters: [email protected]
2. What data we process, why, and for how long
2.1. Order fulfilment and distance contract
To accept and fulfil your order we process your name, surname, e-mail address, phone number, delivery address, order contents and payment information. Within this purpose we may contact you about order status, delivery and payments.
Legal basis: Article 6(1)(b) of the Regulation — performance of a contract, and Article 6(1)(c) — compliance with legal obligations (including the Consumer Rights Protection Law and distance contract rules).
Retention: order and transaction data is kept for 5 years in accordance with the Accounting Law; in case of unfulfilled obligations — up to 10 years.
2.2. Customer account
When you register an account on SoundStore.lv we process your name, surname, e-mail address, password (encrypted), addresses and order history. An account is optional — you can also purchase as a guest.
Legal basis: Article 6(1)(b) of the Regulation — performance of a contract at your request.
Retention: while the account is active. You may delete your account at any time by contacting us or via the “My Account” section.
2.3. Social sign-in (Google, Meta, Apple)
You may sign in or register on SoundStore.lv using your Google, Meta (Facebook) or Apple account. If you choose this option, the respective provider transfers to us your name, e-mail address and account identifier. We never receive or see your social network password.
If the e-mail address is already registered on SoundStore.lv, the social sign-in is linked to your existing customer account. Signing in with e-mail and password continues to work in parallel.
Social sign-in providers are independent controllers of their own processing under their privacy policies: Google Ireland Ltd., Meta Platforms Ireland Ltd., Apple Distribution International Ltd.
Legal basis: Article 6(1)(a) of the Regulation — your consent, expressed by actively choosing social sign-in, and Article 6(1)(b) — performance of a contract.
Retention: while the account is active or until the link is removed.
2.4. Payment processing
We offer payment by advance (proforma) invoice via bank transfer and card payments processed by AS “Citadele banka”. For card payments, card data is processed solely by the bank — we never receive or store your payment card details. We only receive confirmation of the payment status.
Legal basis: Article 6(1)(b) of the Regulation — performance of a contract, and Article 6(1)(c) — accounting obligations.
Retention: payment records — 5 years in accordance with the Accounting Law.
2.5. Delivery and pickup
If you choose delivery to an Omniva parcel terminal, we transfer your name, phone number and the selected terminal to SIA “Omniva” for shipment delivery and notifications. If you choose to pick up the goods at our office (Mellužu iela 13-4, Riga), no additional data is transferred.
Legal basis: Article 6(1)(b) of the Regulation — performance of a contract according to your choice.
2.6. Warranty and service
To provide warranty and post-warranty service we process purchase data, information about the purchased goods and your contact details.
Legal basis: Article 6(1)(c) of the Regulation — obligations under the Consumer Rights Protection Law.
Retention: warranty documents — 2 years from purchase (the statutory claim period); accounting documents — 5 years.
2.7. Commercial communications
If you have given consent, we may send you information about news and special offers. You can opt out at any time — by clicking the unsubscribe link at the end of an e-mail, changing the settings in “My Account”, or writing to [email protected].
Legal basis: Article 6(1)(a) of the Regulation — your consent.
Retention: until consent is withdrawn.
2.8. Website operation, cookies and analytics
SoundStore.lv uses only cookies necessary for the website to function (functional cookies): a session cookie that enables the cart and sign-in, and security cookies set by our content delivery network Cloudflare. No advertising or third-party tracking cookies are used.
For visit statistics we use a self-hosted Matomo analytics tool running on our own servers in Latvia. The data (pages visited, device type, truncated IP address) is not shared with any third party and is used solely to improve the website.
Legal basis: Article 6(1)(f) of the Regulation — our legitimate interest in operating, securing and improving the website.
2.9. Video surveillance at the pickup location
Our office and order pickup location at Mellužu iela 13-4, Riga, is under video surveillance for the security of property and persons and for the prevention of theft and fraud. Surveillance areas are marked with information signs.
Legal basis: Article 6(1)(f) of the Regulation — our legitimate interest in protecting property and persons.
Retention: recordings are kept for up to 30 days. If a recording is requested by competent authorities or a security incident has been identified, the relevant recordings are kept as long as necessary.
3. Recipients of data
We do not sell or rent your personal data. Data may be transferred only to:
- the delivery service provider of your choice (SIA “Omniva”);
- for payment processing — AS “Citadele banka” (card payments) and our bank within settlement operations;
- Cloudflare, Inc. — the content delivery network and security provider through which the website is accessed;
- social sign-in providers (Google, Meta, Apple) — only if you choose this sign-in method;
- state and municipal institutions in the manner and to the extent prescribed by law;
- courts or other institutions where necessary to protect our legitimate interests.
The website and its data are hosted on our own servers in Latvia — we do not use external hosting services.
4. Transfers outside the EU/EEA
Your personal data is not transferred to countries outside the European Union and the European Economic Area, except technical data (e.g. IP address) that may be processed within the infrastructure of Cloudflare, Inc. (USA) while providing content delivery and security services. Such transfers take place under the EU–U.S. Data Privacy Framework and the standard contractual clauses approved by the European Commission.
Your personal data is not used for automated decision-making.
5. Your rights
Under the Regulation you have the right to:
- access your personal data and receive a copy of it;
- request rectification of inaccurate data;
- request erasure of your data (“right to be forgotten”);
- request restriction of processing;
- object to processing based on our legitimate interests;
- data portability.
You can download a copy of your data yourself in “My Account” → “GDPR — Personal data”. To exercise your other rights, write to [email protected] or submit a written request at our office address, presenting an identity document.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority — the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv).
6. Consent and its withdrawal
Where processing is based on your consent, you may withdraw it at any time by writing to [email protected] or changing the settings in your account. Withdrawal of consent does not affect processing carried out while the consent was valid and does not affect processing performed on another legal basis.
7. Other provisions
SoundStore.lv may contain links to third-party websites that have their own terms of use and privacy rules, for which we are not responsible.
We may update this privacy policy from time to time by publishing its current version on this page. Registered customers will be informed of material changes.
Last updated: 2026-07-10