Privacy and Cookie Policy

At Shroomium, the well-being of our customers is of utmost importance, including their satisfaction with the purchased products and the level of customer service. Our aim is to make our customers feel safe when sharing their personal data with us. In our daily operations, we ensure the protection of personal data. Shroomium products are sold by Fazette SIA (hereinafter referred to as "Shroomium"), which takes care of its customers' privacy and personal data protection, ensuring compliance with customers' rights regarding the lawful processing of personal data.

This document – the Privacy Policy – provides information and clarification on how Shroomium protects and safeguards the personal data of its customers, explains how and for what purposes the customers’ data are processed, and informs about the customers' rights and obligations. We have made this Privacy Policy as simple as possible; however, please first familiarize yourself with the following terms:

• Data Subject: a natural person who can be directly or indirectly identified.

• Personal Data: any information that directly or indirectly relates to a natural person.

• Services: any type of services or goods that Shroomium offers and provides, either online or in person.

• Processing of Personal Data: any operations carried out with personal data, including collecting, registering, entering, storing, using, transferring, blocking, or deleting the data.

• Controller: a natural or legal person, public authority, agency, or other body that determines the purposes and means of processing personal data and is responsible for the processing in accordance with the Personal Data Protection Law.

• In writing, in person, after arranging an appointment by calling +371 26402790, at Shroomium office at Brīvības Street 40-30, Riga, and presenting an identification document;

• Via electronic mail, signed with a secure electronic signature.

• Your consent has been obtained;

• For the realization of our legitimate interests;

• For the conclusion or execution of a contract;

• To comply with legal obligations as stipulated by law.

1. Access your personal data and receive information about their processing;

1. Request the correction of incorrect, inaccurate, or incomplete personal data, or correct them yourself by logging into your profile;

1. Delete your personal data ("right to be forgotten"), except in cases where the law requires us to retain the data;

1. Withdraw previously given consent for data processing;

1. Restrict the processing of your data – the right to request that we temporarily cease processing all your personal data;

1. Request a copy of your personal data in electronic format and the right to transfer this data to another controller (data portability);

1. Lodge a complaint with the Data State Inspectorate

1. General Provisions

The purpose of this Privacy Policy is to inform and clarify how Shroomium protects and safeguards the personal data in its possession. It helps to understand how and for what purposes personal data are processed and informs data subjects about their rights.

In processing personal data, Shroomium complies with the European Regulation 2016/679 (General Data Protection Regulation, GDPR), the Personal Data Processing Law, and other applicable legislation on privacy and data processing, as well as this Privacy Policy. In cases where data processing obligations arise from specific industry regulations, we process your personal data in accordance with the procedures laid out in those regulations.

This Privacy Policy applies to all data subjects whose personal data are processed by Shroomium. For matters related to employment relationships, we have a separate set of guidelines that employees will familiarize themselves with upon commencing employment.

The Privacy Policy does not apply to the data processing carried out by other companies, including if you visit another company's website or use its services through Shroomium website. In such cases, we encourage you to review the respective company’s privacy guarantees.

Any personal data provided, collected, or received will be processed solely for the stated purpose and only to the extent necessary to achieve the objective. Information about the specific data being transferred will be provided, and if necessary, your consent will be requested in accordance with the General Data Protection Regulation and other applicable data processing regulations.

This Privacy Policy may be amended. The latest version of the Privacy Policy is available on our website.

2. Controller and Contact Information

The controller of personal data processing is Fazette SIA (registration number 40203094388, legal address: Brīvības Street 40-30, LV-1050, Riga, Latvia).

Shroomium contact information regarding personal data processing matters is: [email protected]. You may use this contact information or visit Shroomium legal address to ask questions about personal data processing. A request to exercise your rights can be submitted:

3. Legal Basis for Data Processing

We process your personal data only if one of the following legal grounds applies:

We have taken the necessary technical and organizational measures to ensure the security of personal data, protecting your data from accidental disclosure, alteration, or other unlawful processing.

4. Purpose of Data Processing

To conclude, execute, or terminate a contract, we may process the personal data of partners or their employees (e.g., name, surname, contact information, position, bank account number, and other personal data provided to us). Data processing may also occur within the framework of consulting services, if related to the contract's purpose. Before the conclusion of a contract (during the contract initiation stage), personal data may be processed to prepare price offers, purchase orders, or fulfill other client requests related to the contract. During the contract preparation process, we may contact potential clients, partners, or their employees using the information provided.

For answering customer or partner inquiries, whether by phone or electronically, we process the personal data you voluntarily provide, such as name, surname, phone number, and email address, as well as other provided information. Your personal data will be used only to contact you and respond to your inquiries, comments, or suggestions.

When applying for job vacancies, we will process your data solely for the recruitment process for the position you have applied for. If data processing occurs for other purposes, such as notifying you of other suitable vacancies, we will inform you and seek your consent before processing. If a candidate has provided a reference, we will process the contact details of the reference to evaluate the provided feedback during the recruitment process. We may also obtain and process information from recruitment agencies during the recruitment process.

To exercise or protect our rights or those of third parties, we may process any personal data we have access to (e.g., name, surname, contact information, and other necessary personal data).

We may also process your personal data to fulfill Shroomium legal obligations, for example, in relation to accounting, taxes, and other relevant laws (e.g., the Civil Law, Commercial Law, Law on Taxes and Duties, Law on Accounting, and other applicable laws).

To send interest-based offers based on your consent, we process your name, surname, email address, and phone number. We would like to inform you that consent is not the only basis for sending you offers. Under the second part of Article 9 of the Law on Information Society Services, commercial communications may also be sent without consent, for example, if the email address was obtained within the framework of a prior transaction.

You can unsubscribe from receiving such messages at any time by using the automated unsubscribe option in the email, changing your profile settings, calling our information hotline at +371 26402790, or sending a request to stop communication to [email protected].

6. Data Retention Period

We will retain your personal data for as long as necessary to achieve the stated processing purposes unless longer retention is required or permitted by applicable law. If the data processing is based on your consent, the data will be processed as long as your consent is valid and has not been withdrawn.

7. Data Sharing

We may share your personal data within the company group, ensuring sufficient and appropriate data protection.

We always ensure adequate protection and confidentiality when transferring or receiving your personal data, and the data is processed only for the purposes indicated by us.

8. External Service Providers for Data Processing

We use service providers who support us in fulfilling the services we provide. These service providers process your data on our behalf, following our instructions and under our supervision, only for the purposes described in this Privacy Policy. We take all necessary measures to ensure the proper protection of your data in accordance with applicable data protection laws.

9. Data Security

We implement technical and organizational security measures to protect your personal data from unauthorized use, loss, destruction, or access by unauthorized persons. Our security measures are in line with current standards.

10. Data Processing Location

Your personal data is primarily processed within the territory of the European Union and the European Economic Area (EU/EEA).

At the same time, please note that some service providers may be located outside the EU/EEA, meaning that personal data may be transferred outside the EU/EEA (for example, when using Google Analytics cookies). In such cases, Shroomium chooses to apply special data protection measures to ensure the security of personal data. For instance, if your personal data is transferred to countries outside the EU/EEA, Shroomium ensures an adequate level of protection through available transfer tools, such as the EU’s adequacy decision, standard contractual clauses, binding corporate rules, derogations, or other tools and/or additional measures suitable for the specific transfer case.

You have the right to request information about the transfer of your personal data outside the EU/EEA by emailing us or submitting a written request to Shroomium.

11. Your Rights Regarding Data Processing

In accordance with the GDPR and Latvian legislation, you have the right to:

13. Cookie Policy

Shroomium uses cookies on its website to improve the user experience and ensure the site's functionality.

Cookies are small text files stored on your device (computer or mobile device) when you visit certain websites. Shroomium uses similar technologies such as pixels, web beacons, digital identifiers, etc. These are often used as mechanisms for websites to remember useful information, such as your login information, and enhance the website navigation experience.

Cookies collect information such as your IP address, device type, browser used, activity on the website, and the websites visited.

HOW WE USE COOKIES

The website uses several types of cookies for different purposes:

• Necessary Cookies: These cookies ensure the operation of the website, including allowing you to use our services and log into your account. These cookies are based on our legitimate interest to provide the website's operation and services. Necessary cookies are stored until you close your browser, i.e., until the end of the session.

• Analytical/Performance Cookies: These cookies allow us to recognize and count the number of website visitors and see how these visitors navigate the site. The legal basis for using these cookies is our legitimate interest in improving the website's functionality, such as ensuring search options. Analytical/performance cookies are permanently stored on your device.

• Functional Cookies: These cookies allow the website to remember your chosen settings and preferences, making the site easier to use, such as keeping you logged in. These cookies are based on our legitimate interest in providing, improving, and making the website more user-friendly. Functional cookies are permanently stored on your device.

• Targeting/Advertising Cookies: These cookies record your website visit, the pages you visit, and the links you follow to display products or services relevant to your interests, either from us or our partners. These cookies are used based on your consent. By visiting the website and using our services, you agree to the use of targeting/advertising cookies. Targeting/advertising cookies are stored until you delete them from your browser. For more information on how targeted advertising works, you can visit the Network Advertising Initiative's (“NAI”) educational page: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Cookies are processed and received by us and our partners, who ensure the website's operation, collect and analyze your activities on the website. Cookie information is not transferred outside the European Union and EEA.

HOW TO LIMIT AND DELETE COOKIES

If you wish to limit, block, or delete cookies, this option is available by changing your browser settings. You cannot opt out of the use of necessary and functional cookies, as they are essential for the website's functionality. Likewise, you cannot opt out of the use of analytical cookies as they are necessary for us to improve the website's performance.

When visiting our website, a pop-up window will appear informing you about the use of cookies. By clicking “OK,” you confirm that you have read the information about cookies and their purposes.

We use Google Analytics services. This website utilizes Google Inc.'s “Google Analytics,” which uses cookies stored on your computer and allows the analysis of how you use the website. The information generated by these cookies about your use of the website is transmitted to a Google server in the USA and stored there. Your IP address is anonymized within the European Union or the European Economic Area, and only in exceptional cases may be sent for processing to Google servers in the USA. Google uses this information to evaluate how you use the website, to prepare reports for the site operators on website activity, and to provide other services related to website and internet usage. Google will not associate your IP address with any other information held by Google. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google's behalf. You can opt out of this by downloading and installing the Google Analytics Opt-out Browser Add-on. For more information on how Google uses your personal information, you can read here: https://www.google.com/intl/en/policies/privacy. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We also use Facebook Pixel. You can opt out of its use on Facebook and Instagram: https://www.facebook.com/settings/?tab=ads.

For general information on cookies and how to manage them, please visit www.allaboutcookies.org.

CHANGES TO THE PRIVACY POLICY

We reserve the right to make changes to this Privacy Policy at any time by posting them on the website. Any version of the Privacy Policy published on the website supersedes all previous versions and takes effect immediately after publication.

You have the right to contact the data protection supervisory authority – the Data State Inspectorate, Blaumaņa iela 11/13-15, Rīga, LV-1011, Phone: +371 67223131, Email: [email protected].

CONTACT INFORMATION

If you have any questions, comments, or requests regarding the Privacy Policy, please contact us at [email protected] or: Fazette SIA, Brīvības iela 40 - 30, Riga, LV-1050, Latvia.