Who we are

General

Baltic Bites SIA (hereinafter referred to as "Ēst - est.lv", “we”, “our”) is pleased about your visit to the website as well as your interest in the company and its offers. We take the protection of your private data seriously and we want you to feel comfortable visiting our sites

Below we inform you about what data we store about you when using our website and how this data is used. If our website contains links that lead you to the website of another provider, our privacy policy is not applicable to the redirected website.

By accepting the following privacy policy you agree on the collection, processing and use of your personal data by Ēst - est.lv under consideration of the data protection law / General Data Protection Regulation (GDPR) and the following terms and conditions.

 

Please take enough time to carefully read this note.

 

Controller

Controller is the subject that is responsible for the processing of your personal data and who is deciding over the purposes and means of the processing of your personal data. In this case the data controller is:

Baltic Bites SIA

Reg.Nr. 50203029341

Matisa str. 61-22

Riga, Latvia

Phone: 20100200

E-Mail: info@est.lv

 

You can contact our data protection officer at info@est.lv.

If you want to object to the collection, processing or use of your personal data by Ēst - est.lv in accordance with the data protection law, you can send your objection via e-mail to the address stated above. This may result in the service no longer being usable.

With your objection, further use of the website may not be possible for technical reasons.

 

Your Rights

You have the right to receive explicit information from Ēst - est.lv about the personal data we have stored about you, free of charge.

 

In addition, you have the following rights:

  • Right of access – The right to know what data was collected and how it is processed
  • Right to rectification – The right to request the modification of personal data if it is not up to date
  • Right to erasure – The right to request the deletion of personal data
  • Right to restriction of processing – The right to limit processing of personal data
  • Right to data portability – The right to transfer personal data in a machine-readable format
  • Right to object – The right to withdraw from given consent or object to the processing of personal data
  • Right to lodge a complaint to the supervisory authority – The right to submit a complaint against Ēst - est.lv at a supervisory authority, which can be either the responsible authority of Ēst - est.lv as named below or any other supervisory authority within the EU.
 

The responsible supervisory authority for Ēst - est.lv is:

Datu Valsts Inspekcija

Blaumana str.11/13-11

Riga, LV-1011, Latvia

E-mail: info@dvi.gov.lv

 

You can also send your complaint to the supervisory authority in your habitual residence or place of work.

If you would like to exercise your rights as a data subject, please do not hesitate to contact us under the contact information provided above.

When, why and how we collect your data

We also have to collect, process, store and sometimes even share different personal data in order to be able to offer you our services and provide services. Below you can see which of your data we need for which purposes and under which circumstances we share your data with others.

Personal data is information from which we can directly or indirectly relate to your person, such as first and last name, address, phone number, date of birth, location data or e-mail address.

 

Please only give us as much information as we absolutely need.

Since we want to give you a good overview of the details, we use the table form. We think this will enable us to provide you with the information in a transparent, understandable and easily accessible form in a clear and simple language.

 

Below we would like to show you which of your data we collect. Since there are different types of data, we have grouped them into data categories as we believe that the information is so more understandable.

 

Personal data we collect when visiting our website

When you open our website to get inspiration for your next order but do not register or order as a guest we collect the following personal data:

 

Categories of data

Explanation

Device information

Device-ID, operating system and corresponding version or other device identifiers

Connection data

Time, date and duration of website use, origin, corresponding IP address and other protocol data

 

This information is collected to show you the visited website. We also limit ourselves to what is absolutely necessary to ensure that we comply with a principle of data processing, namely data minimisation.

 

Personal data we collect when visiting our website and registering

As you could see above, we follow the minimum principle. The less information, the better. All data collected is strictly bound to clearly defined purposes. If you not only visit the website but also want to log in to see for example your old orders, we collect the following personal data:

 

Categories of data

Explanation

Access data

Username, User-ID, Password

Device information

Device-ID, operating system and corresponding version or other device identifiers

Connection data

Time, date and duration of website use, origin, corresponding IP address and other protocol data

Communication data

Comments, ratings or feedback, general communication

Other information

Data that you provide us voluntarily while using the website, app or related activities, but also from other sources such as social media or other (public) databases (e.g. User-ID of other platforms)

 

If you provide us with personal data of another person, you must obtain that person's prior consent. In this case, you must inform these persons about how we process personal data in accordance with our privacy policy.

 

Personal data we collect when visiting our website, registering and ordering

To take advantage of all the benefits we offer, you can also log in and place your order. As you can imagine, more data will be collected according to the information you provide. The fields required for order processing are marked as mandatory. Without this information we cannot process your orders. All other information not shown as mandatory fields is optional. If you voluntarily provide us with this information, you will help us improve our service to you. However, omitting this information has no detrimental effect on you. The extent depends on the information you provide. But the basic information is as follows:

 

Categories of data

Explanation

Account information (necessary for delivery services)

First name, last name, company (optional), address, phone number and/or e-mail address

Access data

Username, User-ID, Password

Device information

Device-ID, operating system and corresponding version or other device identifiers, geolocation data

Connection data

Time, date and duration of website use, origin, corresponding IP address and other protocol data

Communication data

Comments, ratings or feedback, communication data (e.g. e-mail communication)

Other information

Data that you provide us voluntarily while using the website, app or related activities

Order information

Order history

 

What the defined purposes and what the legal basis are

As we have already informed you above, we only collect your personal data when it is necessary and the purpose is lawful and previously defined. The information in (brackets) is the legal basis on which we base the respective processes. Below we would like to give you more information for the purposes and legal basis:

 

What the purpose is

Why we process data for this purpose

Customer support

When you contact our Customer Service to obtain information or to complain, we store the information you provide to us. For example, the reason for contacting us, which order you did not like or on which delivery something was missing. Depending on the reason of the contact, the personal data may vary. As we want to improve our service for you, we store the communication in your account. This way we can answer your questions faster and more satisfying.

 

Categories of personal data:

Account information Access data Communication data Other information

 

Legal basis: This information is required to fulfill our order obligations and to deliver the food to you (contract fulfillment).

But it is also in our business interest to give you the best takeaway experience (legitimate interest).

Security and protection

We want to offer you and all our customers the best service. Unfortunately, not every visitor to our website is as friendly as you. For this reason, in order to protect our services, we must collect personal data that helps us identify potential attackers and thereby avert risks. We also save that we have informed you about the privacy policy. To this end, we note in your account that you have received the corresponding information and that the privacy policy has been made available to you.

 

Categories of personal data:

Connection data Access Data

 

Legal basis:

We are legally obliged to protect your data appropriately (compliance with legal obligation) and the protection of our company is in our interest (legitimate interest).

Ordering and delivery process

After you have placed your order, some processes are running in the background. We assign your order to your account depending on whether you are a registered customer or a guest. We send your order to the respective restaurant, external service (couriers, call centre) and check whether the order has been delivered to you.

 

Categories of personal data: Access Data Account Information Connection Data Communication Data Device Information Order Information Other Information

 

Legal basis:

In order to deliver your order and to notify our partner restaurants we need your personal data (fulfilment of contract).

 

Further processing based on our legitimate interest

In addition to the purposes and legal bases mentioned above, we also process your personal data out of so-called legitimate interest. A mainly legitimate interest is for example the processing of personal data within a group of companies, processes for network and information security or in direct marketing activities.

We use your personal data to pursue our legitimate interests, provided your rights and freedoms do not prevail. In order to reconcile our interests with your rights, we have introduced appropriate control mechanisms. The processes described below have been subjected to a four-way test to ensure that your rights and freedoms are not affected by our processing. As part of the 4-way test, we first check whether the data collected is (a. Personal Data Test) personal data. Then we test whether the purpose is legitimate (b. (Purpose Test) and the personal data to be collected comply with the principles of data processing (c Necessity Test) and finally a balance of interests (d. Balancing Test). Only if we can reasonably assume and also ensure that we can protect your data from any risks, we will process them on the legal basis of legitimate interest. These processes include:

 

Process based on legitimate interest

Explanation

Advertising

We will email you to offer you coupons, discounts and promotions, conduct opinion polls and surveys to improve our service. You can object to the further processing of the data for advertising purposes with every e-mail. Of course, you can also contact our data protection officer directly at info@est.lv if you wish to object to the processing of your data for advertising purposes or for further information on this question.

Measurement Data

In order to improve our services we will collect different measurement data, which we cannot assign to you or to a profile. This helps us to optimize our advertisements

E-Mail Marketing

We want to prevent generic newsletters and uncontrolled marketing measures. Therefore, we select the deals that suit your interests and contact you if we believe the information might appeal to you. You can object to the further processing of the data for advertising purposes with every e-mail. Of course, you can also contact our data protection officer directly at info@est.lv if you wish to object to the processing of your data for advertising purposes or for further information on this question.

Quality Assessment

To offer you continuously better services, we regularly evaluate the success or potential causes of unsuccessful marketing measures. For this we analyze for example whether our newsletters are opened and the contents are also clicked.

Other information

Data that you provide us voluntarily while using the website, app or related activities, but also from other sources such as social media or other (public) databases (e.g. User-ID of other platforms)

Merger & acquisition, change of ownership

We would also like to inform you that in the event of a merger with or acquisition by another company, we will disclose information to that company. Of course, we will require the company to comply with the legal data protection regulations.

When we delete your data

We generally delete your data after the purpose has been fulfilled. The exact deletion rules are defined in our regional deletion concepts. Different deletion rules apply depending on the purpose of the processing. Within our deletion concepts we have defined various data classes and assigned rule deletion periods to them. The data collected is marked with a deletion rule. When the retention period is met, the stored data will be deleted accordingly.

 

We will delete your personal data either if you wish and let us know or three years after we collect your data. If your account is inactive for three years, we will also delete your account. Before this happens you will receive a separate notification from us to the e-mail address registered in your user account.