Privacy Policy

We would like to inform you that since May 25, 2018, Latvia has been applying the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, hereinafter referred to as the Regulation, which establishes the rules for the processing of personal data of natural persons.

The limited liability company “B2Y” has taken the necessary measures to comply with the requirements of the Regulation and ensure that your personal data as a user of the online store website https://bio2you.lv, hereinafter referred to as the Online store, are stored securely, processed lawfully and only for the purposes of processing personal data determined.

To inform you of what personal data the limited liability company “B2Y” collects and processes, this Privacy Policy, hereinafter referred to as the Policy, has been developed and approved in the following version:

Data Controller and Contact Information
1. Your data controller is the limited liability company “B2Y”, registration No. 40103243404, legal address: Latgales street 322A, Riga, LV-1063, Latvia, hereinafter referred to as the Company, which is the owner of the Online store.
2. For any questions related to personal data processing, you can contact the Company by sending an email to info@bio2you.eu or writing to the Company’s office address: Latgales street 322A, Riga, LV-1063, Latvia, hereinafter referred to as the Office
Using the online store website and providing information
1. You can use parts of the online store website without providing personal data or individually identifiable information to the company. You can also set your browser security settings to prevent certain tracking or recording methods. If you do so, the functionality of the online store website may be reduced.
2. You can choose to provide personally identifiable information to the company. For example, you can register with the online store, make purchases, read articles and view information, receive email messages from us or participate in special promotions. If you register with the online store or make transactions through the online store website, the company will collect information about your transactions to register and authenticate you, process your records and payments, and send you goods sold on the online store.
3. In accordance with the Policy 2.2, providing your personal data to the company is voluntary. We would like to draw your attention to the fact that if you do not provide your personal data, the company will not be able to achieve the purposes of processing personal data specified in Policy Section
Types and use of collected personal data (processing purposes)
1. As previously stated in this Policy, the Company may collect information about your personal data, which you voluntarily provide to the Company, as well as the data of visitors to the Internet Store website, as described below in this Policy.
2. You may voluntarily provide personally identifiable information. Personally identifiable information includes: Your name, email address, telephone number, date of birth, shipping and billing addresses, payment details, as well as a permanent identifier associated with personally identifiable information, as well as other information that you may provide to the Company to give voluntarily.
3. The Company collects the personally identifiable information you provide to:
  1. respond to your information requests;
  2. provide the service you requested, including processing online purchases, sell and send you the goods purchased in the Internet store;
  3. fulfill the requirements set out in the regulatory acts;
  4. protect the legitimate interests of the Company and You, including preventing illegal activities;
  5. analyze and improve the operation of the Company;
  6. resolve disputes and claims;
  7. maintain your online account in the Internet Store;
  8. select and create product offers suitable for you;
  9. evaluate the products placed in the Internet store;
  10. organize and implement contests and promotions;
  11. if you have signed up to receive news – send you to e-mail or phone (in the form of SMS) information about new Company products, services, offers, events and other company news;
  12. to implement other specific purposes, about which you will be informed before you provide the relevant data to the Company.
4. The Company does not collect the browsing history of your Internet browser on third-party websites and does not store such information.
5. The company does not send any personal data to third parties about the browsing history of your Internet browser in the Internet store, by which you could be identified.
Legal basis for personal data processing
1. The company processes your personal data on the following legal grounds:
  1. Clause (a) of the first part of Article 6 of the Regulation (Your consent);
  2. Clause (b) of the first part of Article 6 of the Regulation (execution of a distance contract / purchase contract);
  3. Clause (c) of the first part of Article 6 of the Regulation (Execution of the Company’s legal obligation);
  4. Clause (f) of the first part of Article 6 of the Regulation (Legitimate interests of the Company or third parties);
  5. In case you have applied to receive news – the first part of Article 9 of the Information Society Services Law (Your free and unequivocal consent).
2. The Company’s legitimate interests are the Company’s activities, including improving the operation of the Internet store, protecting the Company’s legitimate interests, participating in commercial transactions and promoting the sale of the Company’s products.
Protection of personal data
1. The Company protects your personal data using modern technologies, taking into account the existing risks regarding the privacy of natural persons, as well as the technical, organizational and financial resources reasonably available to the Company, including using the following personal data protection security measures:
  1. Closed space and denial of access to unauthorized persons;
  2. Use of firewall programs;
  3. Data encryption when transmitting data (SSL encryption);
  4. Use of intrusion protection and detection programs;
  5. Implementation of other protective measures.
Transfer of personal data
1. Your personal data, which is processed by the Company, is not disclosed to third parties (including, but not limited to, information about purchased goods, received services on the website of the Internet store) except in cases where:
  1. data must be transferred to the relevant third party (the Company’s cooperation partner) as part of the distance contract concluded with you, in order to perform some function necessary for the performance of the contract or delegated by law (for example, to a credit institution within the framework of settlements or to ensure the performance of services, for example, the delivery of the Company’s goods);
  2. You have given clear and unambiguous consent;
  3. personal data must be transferred to the persons provided for in the regulatory acts upon their justified request, in accordance with the procedures and to the extent specified in the legal acts;
  4. personal data must be transferred in cases determined by legal acts for the protection of the Company’s legitimate interests, for example, when contacting legal service providers, debt collection companies, mediators, courts or other state institutions against a person who has violated the Company’s legitimate interests;
  5. Information collected by the Company, including personally identifiable information, may be disclosed to a company that may partially or fully acquire ownership of the Company.
2. Your personal data may be transferred to the Company not only in the cases indicated above, but also in fulfillment of its legal obligations.
3. For the purpose of direct marketing, the Company may transfer personal data to cooperation partners who provide marketing services to the Company with your prior direct and unequivocal consent.
4. For the avoidance of doubt, the Company is not responsible for the protection of the information you provide on other websites. You should be aware that when you voluntarily disclose personally identifiable information on other applications and websites, it may be collected and used by others and may result in you receiving unsolicited messages.
Storage of personal data, duration of storage, deletion of personal data
1. The company stores and processes your personal data as long as at least one of the following criteria exists:
  1. while the contract concluded with you is valid;
  2. as long as the Company has a legal obligation to store data;
  3. as long as the Company or you can realize your legitimate interests (for example, submit objections or bring or take a lawsuit to court) in accordance with the procedures specified in the regulatory acts;
  4. as long as your consent to the relevant personal data processing is valid, unless there is another legal basis for data processing.
2. After all Policy 7.1. the terms of your personal data processing mentioned in paragraph 2 expire, your personal data are permanently deleted.
3. Situations may arise when the Company, for strategic or other reasons, decides to sell, buy, merge or otherwise reorganize the Company’s company. Such transaction may involve the disclosure of personally identifiable information to prospective or actual purchasers or joint venture partners, as well as the receipt of such information from sellers. In accordance with the Company’s standard practice, the Company tries to ensure adequate information protection in such transactions.
Access to personal data and your other rights
1. You have the right to receive the information stipulated in the regulatory acts in connection with the processing of your personal data. Most of your information has already been placed in your private account in the Internet store and on the website of the Company’s Internet store, which you use for the purpose of receiving the Company’s services and goods, and where you can personally verify the correctness of your personal data and, if necessary, manage them, including correction, delete, change.
2. In accordance with the regulatory enactments, you also have the right to request the Company to access your personal data, as well as to request the Company to supplement, correct or delete it, or to limit the processing in relation to you, or the right to object to the processing, as well as the right to data portability (transfer of data to other managers). This right of yours is enforceable as long as the processing of personal data does not result from the Company’s legal obligations and is carried out in the public interest.
3. You can submit a request for the exercise of your rights:
  1. in written form in person at the Company’s Office, presenting an identity document (passport or ID card);
  2. by sending in writing to the address of the Company’s Office. In this case, you must provide sufficient information in your request so that the Company can identify you (for example, your name, address, or e-mail is mentioned in your request, which is also mentioned in your personal online store account or in the relevant order form);
  3. in the form of electronic mail, by sending to the Company’s e-mail address: info@bio2you.eu. The relevant request must be signed with a secure electronic signature, but such a requirement is not mandatory for you if the Company has access to sufficient information to ensure that the received e-mail with the request is from you (for example, the e-mail is mentioned as contact information in your personal in the online store account or in the relevant order form).
4. Upon receiving your request for the exercise of your rights, the Company verifies your identity, evaluates the request and fulfills it in accordance with the regulatory enactments.
5. The company sends you the response to the request by mail to the contact address specified in the request in a registered letter or signed with a secure electronic signature and sent to your e-mail (basically taking into account the method of receiving the response indicated by you).
6. The company ensures compliance with data processing and protection requirements in accordance with regulatory enactments. In the event that you have raised objections against the Company, the Company takes the necessary actions to resolve your objections as soon as possible. However, if this fails, you have the right to apply to the relevant supervisory authority (in the Republic of Latvia it is the Data State Inspectorate).
Your consent to the processing of personal data and the right to withdraw it
1. You can give your consent to the processing of personal data (for example, but not limited to receiving individually prepared advertisements and offers) by authorizing yourself in the Internet store, in the Internet store (for example, signing up for news), in person at the Company Office or by sending an e-mail to info@bio2you.eu.
2. You have the right to withdraw the consent given to the processing of your personal data at any time in the same way as it was given, respectively in person at the Office, by authorizing in the Internet store or by sending to the Company’s e-mail address: info@bio2you.eu. When sending a withdrawal of consent to the e-mail address of the Company specified above, the withdrawal of consent must be signed with a secure electronic signature, but such a requirement is not mandatory for you if the Company has access to sufficient information to make sure that the received e-mail with the withdrawal of consent is yours. (e.g. e-mail is mentioned as contact information in your online store account or in the relevant order form).
3. Upon receiving the said withdrawal of your consent, the company will no longer process your personal data based on such consent for the specific purpose.
4. The withdrawal of consent does not affect the legality of the processing of your personal data carried out in the period until you submitted the respective withdrawal of consent (during the validity of the consent).
5. For the avoidance of doubt, it should be clarified that by revoking the consent to the processing of personal data, such processing of your personal data, which the Company carries out on the basis of other legal grounds (for example, on the basis of the concluded distance contract (purchase contract)) cannot be stopped.
Commercial Notices
1. Communication about commercial announcements about the Company’s goods and/or services and other announcements not related to the goods sold directly to you (for example, advertisements, customer surveys, news announcements, special offers, contests) is carried out by the Company in accordance with the provisions of external regulatory acts or in accordance with your consent.
2. In the event that you have agreed to receive such communications, but at some point decide that you no longer wish to receive such communications, you may opt out of receiving them in one of the following ways:
  1. select an “opt-out” or “unsubscribe” link or follow the opt-out instructions that may be contained in such message;
  2. in a specific case, return to the website of the Internet store or the specific service where you initially registered the benefits you want and follow the cancellation instructions;
  3. write to us at the e-mail address info@bio2you.eu. In this case, please indicate your name, surname, e-mail address, as well as indicate that you no longer wish to receive messages.
3. Please note that if you opt out of receiving messages, this may affect the amount and type of services you have chosen to receive from the Company.
Communication with you
1. The company communicates with you using the contact information you provided (basically, e-mail, phone number, through the Internet store).
2. The Company communicates about the execution of the concluded distance contract (purchase contract) on the basis of the mentioned contract (for example, on coordination of the type and timing of delivery of the Company’s goods, coordination of information on payments, changes in the order, etc.).
Visits to the Internet store and processing of cookies
1. The website of the online store, like many others, uses cookies. These are small data files that are recorded on your computer that help the Company deliver content faster and more reliably. When you visit or use the Internet Store website or use the Company’s services. tools or communication channels, the Company or the Company’s authorized service providers may use cookies that help the Company serve you better, faster and more reliably, as well as the Company may do so for advertising purposes.
2. Usually, cookies do not store any information that could directly identify the user’s identity, but your personal information processed by the Company may be related to the use of your computer or other equipment, including browsing websites and other information obtained and stored with the help of cookies.
3. The Company may cooperate with third parties (commonly referred to as service providers) who, with the Company’s permission, have the ability to place third-party cookies on the website and tools of the Internet Store. The providers of these services help the Company to serve you better, faster and more reliably. Please note that third-party cookies are subject to third-party privacy policies, so the Company assumes no responsibility for the privacy policies of third-party cookies.
4. Please familiarize yourself with the Company’s cookies (“cookies”) policy in the Company’s cookie setting notice.
Validity and Amendments to the Policy
1. This Policy is available in the Company Office and in the Internet store https://bio2you.lv. At your separate request, the Policy can be issued in a separate copy to the Office address or sent to your e-mail address.
2. The Company has the right to unilaterally amend this Policy at any time. If the Company does so, then the Company will publish the current Policy on the website of the Internet store. Any amendments to this Policy will be effective on the date they are posted.
3. This version of the Policy enters into force on January 2, 2023 and replaces the previously approved version of the Policy.