Privacy Policy
In this Privacy Policy, "eCom21" SIA (hereinafter — “we” or “ECOM21”) provide information about what personal data we collect, how we process personal data, to whom we disclose it, how a data subject (hereinafter also — “you”) can control processing of their data, and other important information about the processing of your personal data.
We respect your privacy, therefore, security of your personal data is our priority. We use reasonable organisational and technical means to ensure continuous security of your personal data and compliance of the processes with the requirements of the laws and regulations governing the protection of personal data.
1. Definitions
1.1. “We” shall mean "eCom21" SIA, a private limited liability company, established and operating under the laws of the Republic of Latvia, legal entity code 40103515367, registered address: Riga, Vesetas Street 7, LV-1013, Latvia;
1.2. “You” shall mean the attendees of the Event, the speakers performing at the event and the visitors of our Website and the users of the ECOM21 App;
1.3. “Website” shall mean our website accessible at https://ecom21.com/;
1.4. “Event” shall mean VIII International eCommerce conference ECOM21.
2. Where do we obtain Your data?
We obtain your personal data directly from you, including when you fill in a contact or registration form, when you place an order or when you contact us (for example, by emailing us), or when you speak or otherwise interact with us at the Event. We may also obtain data from other sources, for instance, if the ticket for you was purchased by another attendee or by your employer. We may also obtain data indirectly via third parties for instance, on the social media, when you are tagged in relation to the event. In addition, we obtain your personal data by photographing and filming the event.
3. What personal data do we collect about you and for what purposes do we process it?
3.1. Organisation and administration of the Event
Data categories
Contact information: name, surname, email address, telephone number, company name.
Information related to your purchase: ticket type, your payment instrument data (name of the cardholder, masked card number, expiry date, etc.), the details and date of the order and communication with the sales department.
Information related to you as a speaker: information that you have provided us when we agreed that you will be a speaker, time and date of the presentation, presentation materials, your photo.
Information related to your participation in the workshops held at the Event and organised by our partners: name, surname, email address, company name, information regarding participation in the workshop.
Information related to ensuring safety on the premises: CCTV data.
Legal grounds for data processing
Entering into an agreement with you and carrying out our contractual obligations (Article 6(1)(b) of the GDPR).
Complying with the legal obligations related to organising events (incl. accounting, taxes, other public obligations; protection of consumer rights) obligations in particular ensuring security on the premises and observing any COVID19 related restrictions (Article 6(1)(c) of the GDPR).
Our legitimate interest to ensure safety at the Event and assist our partners with organising workshops (Article 6(1)(f) of the GDPR).
Duration of data processing
We generally retain your data throughout the validity of an agreement concluded with you and throughout the validity of our legitimate interest, however, no longer than 5 years following your last participation at the Event.
Information related to your purchase is retained for the period laid down by the applicable legislation. CCTV data is retained for no longer than 1 month.
Data regarding your EU COVID19 certificate is used only during the Event and is not retained after the end of the Event.
3.2. Providing ECOM21 App
Data categories
Contact information: email address.
Data related to your use of the ECOM21 App: voting in surveys and questionnaires, questions to speakers, information posted and shared with other registered participants via the user profile, data about login to the App, data about the device operating system, entry, use, change of the Account, data or other activities on the App, in the Account, log entries, changes and their history, settings, other system parameters.
You may also share photos and videos directly by using the device camera, if you choose to enable this function. Date and time set on the device is processed to alert the user on the chosen topics at the time of the event, if you choose to enable this function.
We may share your name, surname, contact details and a name of the company which you represent in the mobile application “ECOM21” to other Event participants to contact you.
Legal grounds for data processing
Your consent (Article 6(1)(a) of the GDPR).
Our legitimate interest to ensure the security of the App (Article 6(1)(f) of the GDPR).
Duration of data processing
We generally retain your data throughout the validity of an agreement or our legitimate interest, however, no longer than 5 years following your last participation at the Event.
3.3. Obtaining photo and video materials during the Event for promotional purposes
Please be informed that we will photograph and film the Event based on our legitimate interest to promote the Event. We may use the obtained photos and video recordings in various promotional activities, including posting the photos and video recordings on our Website, social media networks, in various media outlets, issuing brochures, posters or using them for any other promotional or marketing tool, as required. If you wish not to be photographed or filmed, or if you wish to object to the use of a particular photo or video, please send a request to info@ecom21.com.
Legal grounds for data processing
Our legitimate interest (Article 6(1)(f) of the GDPR) to obtain photo and video materials of the Event for the purpose of promoting the Event.
Duration of data processing
We retain your data throughout the validity of our legitimate interest.
3.4. Customer service – inquiries, requests, complaints
If you contact us by phone, we will write down the information you provide, to properly examine your request and/or respond to your inquiry. If you contact us in writing (by e-mail or otherwise), we will store the fact of you contacting us and the information provided, including personal data, so that we can properly examine your request and/or respond to your question, request or complaint.
Data categories
The telephone number you are calling from or your e-mail address, other information pertaining to your inquiry, including, but not limited to, first name, surname, technical details of the call (date, duration, etc.); history of calls; complaint, request, inquiry text, description of the circumstances of the complaint or another inquiry, documents supporting the complaint, request, inquiry, other information provided to us.
Legal grounds for data processing
Your consent (Article 6(1)(a) of the GDPR). Conclusion, performance, amendment and administration of an agreement (Article 6(1)(b) of the GDPR). Our legitimate interest and that of third parties (Article 6(1)(f) of the GDPR).
Duration of data processing
We generally retain your data throughout the validity of our legitimate interest, however, no longer than 5 years following your last participation at the Event. If you contact us by phone, we will write down the information you provide, to properly examine your request and/or respond to your inquiry. If you contact us in writing (by e-mail or otherwise), we will store the fact of you contacting us and the information provided, including personal data, so that we can properly examine your request and/or respond to your question, request or complaint.
Complaints, claims, written requests related to the Event shall be stored no longer than for 1 year after the relevant Event, unless longer periods apply.
3.5. Direct marketing
We process your personal data in order to send you our newsletter and provide with various offers and other information of our main partners and sponsors via e-mail.
Data categories
Contact information: name, surname, email address.
Legal grounds for data processing
Your consent (Article 6(1)(a) of the GDPR) to receive offers and information from us.
Duration of data processing
The consent to receive shall be valid until you withdraw it.
3.6. Marketing in social media
For the purpose of marketing of our Event we also use Facebook business tools that register your activity on this Website to optimize the display of ads and to create so-called custom audiences for Facebook ads (e.g., based on your clicks on our site collected by Facebook’s pixel or using social plug-in).
Data categories
Name, surname, country, photograph, information about communication in the account (“like”, “follow”, “comment”, “share”, etc.), notifications sent, information on notifications (message receipt time, message content, message attachments, correspondence history, etc.), comments, reactions to published entries, sharing, information on participation in events and/or games organized by us.
Legal grounds for data processing
Your consent (Article 6(1)(a) of the GDPR). Our legitimate interest to manage our social media profiles (Article 6(1)(f) of the GDPR).
Duration of data processing
During the period of consent validity. Personal data used for this purpose shall be stored as long as you are registered on a specific social network.
3.7. Website administration, support, improvement
When you visit and browse our Website, for the purpose of collecting statistical data and improving the quality of Services and visitor experience, we process the following data: Website administration, support, improvement.
Data categories
Device IP address; time; visited pages and time spent; type of browser; technical details about operating system; website addresses from which the user has accessed our website, cookies, other technical details.
Legal grounds for data processing
Your consent (Article 6(1)(a) of the GDPR). Our legitimate interest to analyse data in order to administer the Website (Article 6(1)(f) of the GDPR).
Duration of data processing
Please refer to the Cookie Policy.
4. Categories of recipients of personal data
Categories of recipients of personal data are as follows:
workshop organizers and links to their privacy policies: SIA Rimi Latvia, 1 Office, KPMG Latvia, Mastercard Global, FindaNode, LeverUp, Httpool, Huntli, Finchecker, SigningServices, Binance
5. Retention of personal data
The relevant retention periods are indicated in section 3 above. We generally retain your personal data no longer than necessary to achieve the processing purposes. Data are usually stored until:
After the above conditions do not apply, your personal data is deleted permanently.
6. Your rights
The GDPR provides several rights that you can exercise any time contacting us:
Please note that the rights are limited in scope and we might not be required to fulfil all requests. In the event of withdrawal of consent, we are entitled to store your consent and its proof for a period necessary for protecting our rights in regard to claims or complaints submitted to us. If you believe that your personal data is processed unlawfully, without justified grounds or the processing otherwise violates the requirements of the GDPR, or you have any other concerns or questions about the processing of your personal data, please do not hesitate and contact us by submitting a request, application or complaint. We will provide answers to all your questions and eliminate errors, if any.
If you consider that the processing of your personal infringes your rights, you can submit a complaint with the Latvian State Data Inspectorate (Datu valsts inspekcija) (Elijas str. 17, LV-1050 Rīga, Latvia, e-mail: pasts@dvi.gov.lv), however, we would recommend contacting us first and we will try to resolve all your concerns together with you.
Contact us:
E-mail: info@ecom21.com, phone number: +371 63 007 007