+371 28086999
Manager: SIA “GREB”, Regi. No. 40203477131, (hereinafter - company).
For the purposes of this privacy policy, any use of the word “you”, “your” or similar expressions means any visitor to the gumi.lv (hereinafter referred to as “the website”). Terms like “we,” “our,” or similar expressions mean society.
Personal data is any information that can be used to identify an individual.
When processing personal data, the company shall comply with the requirements of General data Protection Regulation 2016/679 and the personal data processing Law, as well as other requirements of the laws in force in Latvia in order to ensure protection of personal data.
This privacy policy explains how the public processes personal data, the procedures for exercising the rights of the data subject and the issues related to the protection of personal data. The company's privacy policy concerns the processing of personal data by the company on the website indicated and in connection with the operation of that website. Buyers purchasing goods on the Internet site are also subject to additional provisions laid down in the distance contract and the terms of use of the e-shop.
When selling goods, personal data related to the order, purchase agreement entered into, order fulfillment and accounting are processed (including order processing, invoicing and billing administration). Even if you wish to exercise the right of withdrawal for consumers, you have questions or claims about the product purchased, or if there are commercial warranties, you will need to process the personal data in question to ensure that this situation is resolved. Without this data, the company would not be able to properly trade the goods and the related activities.
| Categories of personal data | Legal basis |
| – Personal information (given name, surname, name, right of representation) – contact information (e-mail address, telephone number) – method of delivery of goods, progress – method of payment, payment information, identifying information included in invoices (including payment documents, billing administration) – basic information regarding third parties receiving the goods – order information (for example, order number, number of linked orders, customer number, delivery address, supply information and status) – history of the goods/services purchased | Terms of use of the online store (e-shop) and contract between you and the public for the use of the website and the purchase of goods. Our legitimate interest in performing and promoting the sale of goods, getting paid and providing convenient customer service. Performance of obligations specified in regulatory enactments (including accounting and settlement of accounts, ensuring conditions for conformity of goods, ensuring exercise of the right of withdrawal). Administration, performance of goods quality and commercial warranty obligations (obligations arising from the contract and the law relating to the commercial guarantee of goods and services, compliance with the quality obligations laid down in the contract). |
When goods are traded, the buyer's data will also be used, for the most part, to contact the buyer and fine-tune the order before its final approval.
If we find an unfinished order, we can email technical support or communicate by telephone if the customer has not completed the purchase in an e-store available on the website. This is necessary to ensure that the buyer is not affected by technical problems at the time of the purchase and to withdraw the reservation of the item or to agree on the confirmation of the order by the buyer. Such communication may take place if the person making the order (the buyer) has provided his e-mail or telephone number and it has been duly recorded in the e-store system.
| Categories of personal data | Legal basis |
| – Contact information (e-mail address, phone number) – order information (for example, order number, order status) | Our legitimate interest in ensuring the proper functioning of the e-store, improving the functioning of the shopping process. |
– Investigation and prevention of illegal activities against us
In order to detect and prevent illegal and unfair acts against the public (for example, to investigate and prevent intrusion or unauthorised editing of the website or interference with access to the website, as well as in cases of attempted fraud of goods), we can collect and process the data available to us, including by transferring them to law enforcement authorities or information technology security incident prevention institutions.
| Categories of personal data | Legal basis |
| – Data generated by the user, visit history, data related to the devices used and their settings, such as language settings, time zone, operating system and platform, IP and MAC addresses, browser settings, other information about the use of the Internet site and the public's digital services, other identifying information. – personal information (given name, surname, name, representation rights, personal identity number) – contact information (e-mail address, telephone number, address) – billing properties, payment information, payment method — Basic information about the third parties receiving the product — product delivery information (delivery address, associated order numbers, history of purchased goods/services) | Our legitimate interest in preventing abuse of services or disrupting the provision of services, or in investigating and preventing a criminal offence against a company. To fulfil a legal obligation under applicable law. |
Upon receipt of your consent, we inform you of various news and news developments related to our and our partners' services, promotions, and offerings. If you wish to receive our news, you must provide it on our website or apply in another way.
| Categories of personal data | Legal basis |
| – Personal information (given name, surname, name, right of representation) – Contact information (e-mail address, telephone number) – Technical data relating to the visit to the website and the granting of consent | Your consent |
Profiling is the segmentation of buyers (customers) in an automated manner for the purpose of evaluating specific aspects related to a natural person in order to apply customized marketing offers or predict aspects related to the personal preferences and interests of the buyer. In marketing, we use profiles to send you, with your consent, messages that we think are most relevant to you and not to send or display inappropriate messages. Based on the seller's legitimate interest in promoting the sale of goods, we can carry out statistical profiling (i.e. not related to the individual (buyer)) and analyzing shoppers' habits using anonymised, aggregated profiling results.
Profiling segments users by products of interest to provide a more user-friendly experience. The user can receive personalized offers. Profiling can take into account product groups of interest, past purchases (purchase history), the data you generate using the website (sections you visit, actions you take, length of stay, purchase amount, order quantity), the information we have provided, and other information we have obtained to select offers that are most likely to meet your interests and needs. You have the right to oppose direct marketing based on this type of profiling by sending a message to the public.
Contact information available to us may be used when contacting us (including to review submissions and claims) or when we need to reply or send you information. Such information will also be used to examine and respond to claims.
| Categories of personal data | Legal basis |
| – Personal information (given name, surname, name, right of representation) – related legal person – information relating to representation (name, right of representation) – other identifying information and information provided to us – contact information (address, e-mail address or telephone number) – order information (for example, product information, order number, customer number, delivery address, delivery information and status) – history of purchased goods/services – settlement properties, payment information, payment method - User generated data, etc. Technical data related to site visit | To fulfil a legal obligation under applicable law. Our legitimate interest in providing customer service. |
We can implement and implement different customer loyalty programs, and personal data processing can also take place within them. For specific forms of processing of personal data within a specific loyalty program, please view the terms of the loyalty program or ask us. Commonly used personal data for the implementation and implementation of customer loyalty programmes:
| Categories of personal data | Legal basis |
| – Personal information (given name, surname, name, right of representation) – contact information (e-mail address) | Terms of participation of the customer loyalty program, contract between you and the company for the use of the website and participation in the loyalty program. Your consent (relevant to specific aspects of data processing, in precisely foreseen cases where you have given your consent). Our legitimate interest in promoting trade in goods. |
We can sometimes hold promotions, draws, contests, offers and lotteries in connection with the goods and services we offer. Membership is voluntary and subject to your acceptance. If you wish to participate in such events, processing of personal data may also be necessary (for example, to register for a lottery or a draw, ensure that such a lottery takes place). The specific rules may lay down more precise rules on the categories of data required.
| Categories of personal data | Legal basis |
| – Personal information (given name, surname, name, right of representation) – contact information (e-mail address) – order information (for example, check or order number, order status, delivery information and status) – User generated data, etc. technical data related to the visit of the website | Your agreement terms of lottery, promotion, draw or competition. |
What sources do we get personal data from, how correct are they?
We get personal data from you. We collect information that we receive when you visit and use the website, provide us with data (including data that you provide to us before ordering goods or filling in information fields on the website), as well as data that you provide when contacting us. We may receive data from service providers that operate the website, including its activity statistics services, counter-attack, security and intrusion protection services.
If your data provided to us (e.g. contact information for news) has changed, you should inform us immediately by correcting incorrect or inaccurate data.
– Service providers and cooperation partners
In order to fulfil our obligations to you, to ensure the operation of the website and to provide services to the public, we transfer your personal data to the companies and institutions that provide services to us, such as the payment service provider, the supplier of goods delivery services, the provider of services related to the maintenance and operation of the website. Similarly, the company's operating providers (the IT maintenance and data storage service provider – WebDev) may in some cases be considered as controllers of your personal data.
In the ordinary course of business, your data is transferred to the payment service provider and the data will be transferred to the selected delivery service provider. However, other service providers that you will see at the appropriate purchase step may be used when you place your order and pay.
Cookies are processed and received by us and our collaborators who keep the website running, collect, and analyze your activity on the website.
If you use any information exchange facility or tool on your website, your data may be transferred to the relevant Partner associated with the information exchange or transfer option you choose, as well as to the message sending service providers.
We make reasonable efforts to verify all providers who process your personal data on our behalf and on our behalf. Service providers are not entitled to use your personal data for any other purpose.
- legal protection institutions, State and local government institutions
In order to fulfil our statutory obligations, we may transfer your personal data to law enforcement authorities (e.g. police), state and local government authorities upon request (e.g. the supervisory authority responsible for the protection of personal data). We may transfer your personal data to law enforcement authorities (such as courts), as well as to state and local government authorities, also in order to defend our legitimate interests by drawing up, submitting and defending claims, claims and submissions.
Using cookies
Like many others, this site uses cookies to help improve the experience of using the site and ensure it works well. We encourage you to familiarise yourself with the principles of the use of cookies.
Personal data may be processed during the use of cookies. By using this site, you agree to the use of cookies described here (unless your browser is set to not accept cookies). You should note that if you choose to disable the required cookies, the website will not be able to function properly.
Cookie information
This website is open through one of your browsers, such as Chrome, Firefox, Safari, edge, or more.
Cookies are information that this browser gets and saves when you use our site. The next time you visit our website again, your browser will remember your actions and do some of them for you, such as choosing a working language or controlling the display of a cookie notification. With cookies, the website gains the ability to store the user's individual settings, recognize them, and respond appropriately.
Types of cookies and their purpose
There are two types of cookies: sessions and persistent cookies. Cookies are also divided into first - or third-party cookies. The above concepts are explained below so that you can better understand the nature of cookies and why we use them.
Session cookies let you recognize when you visit a specific website, memorizing any changes or choices on that site so that they remain on other pages. These cookies allow you to quickly and easily use multiple pages on a single website, avoiding the need to process each page you visit. Session cookies are not permanent — they will expire when you close the web browser or end the session on the specific website.
Persistent cookies are cookies that are stored on your computer for a specific time after the end of your Internet browsing session, so they allow you to save the user's choices or actions on the site and use them the next time the user visits a website that uses them.
First Party cookies (“First Party Cookie”) are cookies maintained by entities administered by the website operator, in this case us. Third-party cookies (“third party cookie”) are maintained by other domains that don't belong to us. Third-party cookies that can be stored on your device (computer, phone, or tablet) when you browse our website.
Cookie categories according to their function
The following categories of cookies are distinguished between the types of cookies mentioned above:
– Required (short-term, first-party): These cookies are essential for you to browse and use different websites. These are required to provide basic features of the site, that is, to place items in a shopping cart, provide a purchase process, and display a specific version of the page. Without these cookies, you won't be able to get the services you need and your website won't work properly.
– Performance cookies (long-term, first-party and third-party): These cookies collect information about how visitors use websites, such as which websites they visit most often. Information collected through cookies is mostly aggregating, so direct identification is almost impossible. Information shall only be used to ensure better operation of the website. Sometimes these types of cookies can be called analytics cookies because they help you store more information — for example, how a visitor uses a website and what links they use. The cookie keeper can use it to create your interest profile and show relevant ads on other sites. Analytics cookies mostly work by identifying your browser and device.
– Functional cookies (long-term, first-party, and third-party): These cookies allow a specific web page to remember your choices and offer you better, more modern features. These cookies are optional, but allow the website to provide enhanced features and improve user experience – allows websites to store information you have entered as a web page user (for example, user ID, language choice, user location, personal data security settings). The purpose of these cookies is to offer all users enhanced, personalized features. Functional cookies are also used to allow you to use some of the functions you want, such as playing video. These cookies can't track your browsing activities on other websites.
- Advertising cookies (long-term, first-party, and third-party): These cookies are used as an advertising source that contains important information for you and meets your interests. They are also used to limit the number of ads you see and as an additional tool to measure the effectiveness of your ad campaigns. They typically place ad systems with permission from the network operator.
List of cookies used on the website
The use (expiration) dates of cookies used on our website are specified as maximum and you can delete cookies yourself more quickly.
| Cookie name | Type | Service provider | Deadline | Additional information /or loading at |
| _tt_enable_cookie | First parties | gumi.lv | 3 months | This cookie is used to remember the user's choices about using cookies on the site. |
| csrf_token | First parties | CloudFlare | 1 month | This cookie is used by CloudFlare to identify reliable web traffic. |
| currence | First parties | gumi.lv | 1 month | Used to save the selected currency. |
| language | First parties | gumi.lv | 1 month | Typically used to preserve language choices and provide content in that language. |
| PHPSESSID | First parties | gumi.lv | Session | Cookie generated by PHP language based applications to maintain user session variables. |
| default | First parties | gumi.lv | Session | This cookie is used to save default settings and preferences. |
| ga_session_duration | First parties | gumi.lv | 30 minutes | Tracks session length to improve performance analysis. |
| _ga_xxlpxh50n3 | First parties | gumi.lv | 1 year and 1 month | This cookie is used to save the session state to Google Analytics. |
| _ TTP | First parties | gumi.lv | 3 months | Used for user behavior analysis and site optimization. |
| _ GA | First parties | gumi.lv | 1 year and 1 month | Uses Google Universal Analytics to distinguish unique users. |
| _ FBP | First parties | gumi.lv | 3 months | Uses Matt to offer ad solutions. |
| include_vat | First parties | gumi.lv | 1 month | |
| adult_valid | First parties | gumi.lv | 1 month | |
| VISITOR_INFO1_LIVE | Third parties | youtube.com | 6 months | Used to track a user's preferences while watching embedded YouTube videos. |
| YSC | Third parties | youtube.com | Session | Used to track embedded video views. |
| _ TTP | Third parties | tiktok.com | 3 months | Used for user behavior analysis and site optimization. |
| VISITOR_PRIVACY_METADATA | Third parties | youtube.com | 6 months | Saves user preferences for privacy settings. |
To save personal settings
These cookies allow our site to remember information that affects the appearance or behavior of the website. For example, the language that you want or the area that you are in. These cookies can also help you resize text, typeface, and other elements of websites that you can personalize. Cookies also help you use the e-store, providing convenient shopping, order design and billing for your ordered item.
To ensure protection
We use cookies to authenticate users, prevent fraudulent access data, and protect user data from unauthorized access.
Statistical recording, visitor flow measurement and network security
Each time you visit our website, analytics software anonymously saves cookies. They help you know how many people visit our site repeatedly. This is how we better understand the behaviour of our visitors on the website, as well as who they prefer and who they are interested in. This information is not related in any way to other information. For example, we know that several people visit the section again a month. But we don't know who they are.
The data we recorded can also be used to protect our network and prevent attacks.
To store registration information
We store login or logout information in cookies for registered users or repeat shoppers, and help you fill in text input fields in the form of the website.
For advertising purposes
We also use cookies to increase the appeal of ads to you as a user and offer advertisers better advertising terms. Cookies are typically used to target ads based on what applies to users (remarketing), improve campaign performance reports, and prevent users from showing ads they've already seen. We use remarketing data only for visitor segmentation to help ensure appropriate ad content. Segments are based on some general behavior patterns of visitors and the content of the pages they visit.
If we have your consent to processing personal data for marketing purposes, including profiling, we can link these dedicated cookies to your other personal data and create individual profiles using automated processing that are later used for personalized advertising purposes.
In most cases, there is no specific way to unlock cookies without limiting the functionality of a full or partial website. If you are not sure if cookies are required to make full use of the services provided, we recommend that you save their settings.
You can customize and unlock cookies by using the tool on your website when you first open the website.
You can delete cookies in your browser — usually available in the “history of websites you visit.”
Browsers also let you block cookies on your computer, for example, by using the “enable Tracking Protection” feature. Please note that the functionality of our website may be so limited in this case. For information about how to set up cookies in your browser, visit the website of that browser.
We always try to process your personal data within the territory of the European Union and the European Economic area (EU/EEA). As far as trade in goods is concerned, data transfers outside the EU/EEA are not normally foreseen.
In some cases, the processors we attract may be outside the EU/EEA, but in such cases we continue to pay attention to the reliability of the processors as well as to the requirements of the General data Protection Regulation on the prerequisites and safeguards for such transfers (e.g. by closing standard data protection clauses).
All personal data obtained from you are stored for as long as you use our services (including delivery of goods, compliance obligations) or until you withdraw your consent if your personal data are processed on that basis. As a general rule, we store additional information related to the order according to the specified retention period of the accounting records. Longer retention periods for personal data are acceptable to meet the requirements of the laws on minimum retention periods for documents or information, or to protect our legitimate interests.
Once this period has expired, we will safely delete your personal data or make it unavailable (archiving) or unidentifiable so that it can no longer be linked to you.
We reserve the right to delete or permanently anonymize your data more quickly if the legal basis for their use has been lost or is not necessary for the further provision of the service.
You are responsible for storing and deleting data in your terminal equipment (use the appropriate settings in your Internet browser to delete cache (cache) and cookies).
We provide, continually review and improve safeguards to protect your personal data from unauthorized access, accidental loss, disclosure or destruction. To implement this, we apply modern technologies, technical and organizational measures, including through firewalls, restored software, and data encryption.
The data subject shall have the general rights provided for in the General data Protection Regulation and other applicable legislation, including:
– Access to personal data
You have the right to request confirmation from us whether we are processing personal data related to you and, in such cases, to request access to that personal data, or to provide information about personal data if there is no provision for direct access.
– Rectification of personal data
If you believe that information about you is incorrect or incomplete, you have the right to ask us to correct or supplement it.
– Withdrawal of consent
To the extent that we process your personal data based on your consent, you have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent given prior to withdrawal, or where processing of data is carried out under another legal basis.
– Objection to the processing of data for the purposes of supplying the information addressed
You have the right to oppose the processing of your personal data at any time for direct marketing, the delivery of the information addressed.
– Objection to processing on the basis of legitimate interests
You have the right to oppose the processing of personal data that we process based on our legitimate interests, however, we will continue to process your data even if you oppose it, if we have good reasons to continue processing your personal data. In order to exercise the above rights, please submit a written application to us.
– Deletion
Under certain circumstances, you have the right to ask us to delete your personal data, but this does not apply when the law requires us to save the data. In order to exercise the above rights, please submit a written application to us.
– Processing restriction
Under certain circumstances, you have the right to restrict the processing of your personal data. Please note that if you request that your data processing be restricted, this may affect your ability to receive our services and purchase goods. In order to exercise the above rights, please submit a written application to us.
– Data transfer
You have the right to receive or transfer your personal data to another data controller. This right includes only data that you have provided to us on the basis of your consent or contract, as well as automated processing. In order to exercise the above rights, please submit a written application to us.
The operation of the website, as well as all relations between you and the public, shall be governed by the law of the Republic of Latvia, as well as the relevant applicable law of the European Union.
If you have any questions, comments, or requests related to your privacy policy or the processing of your personal data, contact the public.
If you are not satisfied with the response received, you have the right to lodge a complaint with the supervisory authority – data State Inspectorate (www.dvi.gov.lv)
– Contact details of the manager
To contact us, you can email [email protected] or to a mail address: SIA “GREB”, address: Tiraines Street 9A, Riga, LV-1058, Tel.: (+371) 28086999.
Date of update: 11.08.2026
Contact our specialists and we will help you!