Privacy Policy

Last updated: June 10, 2025

This Privacy Policy explains how we collect, use, and process your personal data when you use our online store. We are committed to protecting your rights under the General Data Protection Regulation (GDPR) and ensuring your data is handled securely and lawfully.

1. Data Controller

The data controller is the operator of this online store. For any questions or requests related to your personal data, you can contact us via email: info@img-expert.com

2. Data We Collect

We may collect the following categories of personal data:

1. Email address
2. Order and transaction details
3. IP address and device data
4. Cookies and session-related technical data
5. Name and other contact information (if voluntarily provided)

We do not collect any sensitive personal data (special categories of data under Article 9 of the GDPR).

3. Purpose and Legal Basis for Processing

We process your personal data only for specific and legitimate purposes, based on the legal grounds provided by the GDPR:

1. To fulfill and manage orders – based on the necessity for contract performance
2. To comply with legal obligations, such as tax or accounting – based on legal compliance
3. To prevent fraud, provide support, and improve our services – based on our legitimate interest
4. To send marketing communications – only with your prior consent

4. Cookies and Analytics

We use cookies and analytics tools to improve the website’s performance. Analytics tools (e.g. Google Analytics or similar) are only activated after you provide consent through the cookie banner or settings. For more information, see our Cookie Policy.

5. Data Sharing

We do not sell your personal data. We may share it only with third parties where necessary to operate our store:

1. Payment processors (e.g. Stripe, PayPal)
2. Hosting and cloud service providers
3. Legal and accounting advisors (if applicable)
4. Competent public authorities – only as required by law

If data is transferred outside the EEA, we ensure an adequate level of protection through appropriate safeguards such as Standard Contractual Clauses (SCC).

6. Data Retention

We retain personal data only as long as necessary for the purposes described above or to comply with legal obligations:

1. Orders and transaction data – at least 5 years
2. Contact details – until consent is withdrawn or 2 years of inactivity
3. Cookies – according to their specific expiration periods (see Cookie Policy)

7. Your Rights Under GDPR

You have the following rights under the GDPR:

1. Right to access your data
2. Right to rectify inaccurate data
3. Right to erasure (“right to be forgotten”)
4. Right to restrict processing
5. Right to data portability
6. Right to object to processing
7. Right to withdraw consent at any time
8. Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us via the email provided above.

8. Data Security

We implement appropriate technical and organizational measures to ensure the security of your personal data, including encryption, access control, authentication, and system monitoring.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in data practices or legal requirements. Updates will be published on this page with the revised date.

Data Controller

This website is owned and operated by:

AIDEN GROUP SIA
Registry No: 50103654441
VAT No: LV50103654441
Address: Buļļu iela 45B, Rīga, LV-1067, Latvia
Email: info@img-expert.com

For the purposes of the General Data Protection Regulation (GDPR), AIDEN GROUP SIA is the data controller responsible for the processing of your personal data.