Privacy policy

Last updated: 15 May 2026 | Addmeon online store operated by Cnergy SIA

1. Data Controller

The Addmeon online store is operated by Cnergy SIA, registration number 40103709466, VAT registration number LV40103709466, registered in Riga, Latvia (hereinafter — Cnergy SIA, we, or us). Addmeon is the trading brand of Cnergy SIA. Cnergy SIA is the data controller for all personal data collected and processed in connection with the operation of the Addmeon online store (hereinafter — Store).

Contact details of the data controller:

📧 E-mail: [email protected]
📞 Telephone: +371 25 777 298
🏢 Legal address: Riga, Latvia

2. Legal Framework

This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the Personal Data Processing Law of the Republic of Latvia (Fizisko personu datu apstrādes likums), and other applicable legislation. This Policy applies to all personal data processing activities carried out by Cnergy SIA in connection with the operation of the Store.

3. Personal Data We Collect and Why

We process personal data for the following purposes, under the following legal bases:

Data Category	Purpose	Legal Basis (GDPR Art. 6)	Retention Period
Full name, e-mail, telephone, delivery address	Order processing, delivery, customer account	Art. 6(1)(b) — performance of contract	5 years from last transaction
Payment data (transaction reference, amount, method)	Payment processing, accounting, fraud prevention	Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation	10 years (accounting law requirements)
Order history, purchased items, returns, warranty claims	Order fulfilment, warranty handling, dispute resolution	Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation	5 years from last transaction
E-mail address (registered users)	Sending order confirmations, shipping updates, service communications	Art. 6(1)(b) — contract	Duration of account + 2 years
E-mail address (with consent)	Marketing communications, newsletters, offers	Art. 6(1)(a) — consent	Until consent is withdrawn
IP address, browser type, device type, browsing behaviour on Store	Store security, fraud prevention, analytics, service improvement	Art. 6(1)(f) — legitimate interest	12 months
Cookies and similar tracking data	Store functionality, user preferences, analytics	Art. 6(1)(a) — consent; Art. 6(1)(f) — legitimate interest (strictly necessary cookies)	As per Cookie Policy
Communications (e-mail, telephone records)	Responding to enquiries, handling complaints	Art. 6(1)(b) — contract; Art. 6(1)(f) — legitimate interest	3 years from last contact

4. Source of Personal Data

We collect personal data directly from you when you: create an account, place an order, contact us by e-mail or telephone, subscribe to marketing communications, or interact with the Store. Certain technical data (IP address, device and browser information, browsing behaviour) is collected automatically through the Store's systems and cookies. We do not collect personal data from third-party data brokers. Supplier product data feeds used to populate the Store's catalogue do not contain personal data.

5. Recipients and Disclosure of Personal Data

We do not sell or rent personal data to third parties. Personal data may be disclosed to the following categories of recipients solely to the extent necessary for the stated purpose:

Delivery and logistics partners — courier and postal services for order fulfilment (name, delivery address, telephone number);
Payment service providers — for secure processing of payments (transaction data; card details are never stored by Cnergy SIA);
IT service providers — hosting, e-commerce platform, CRM, and e-mail service providers used to operate the Store;
Analytics providers — for Store performance analytics (pseudonymised or aggregated data);
Warranty and repair service centres — authorised service centres for warranty claim processing;
Accounting and legal advisors — for legal compliance and financial reporting;
Public authorities — where required by applicable law or upon a lawful request from a competent authority.

All third-party processors are bound by data processing agreements requiring them to process personal data only on our documented instructions, in compliance with GDPR, and to implement appropriate technical and organisational security measures.

6. International Data Transfers

Cnergy SIA is established in Latvia (EU/EEA) and primarily processes personal data within the EU/EEA. Where any transfer of personal data outside the EU/EEA is required (e.g. through the use of certain cloud-based software providers), we ensure that such transfers are subject to appropriate safeguards in accordance with Chapter V of the GDPR, including Standard Contractual Clauses (SCCs) adopted by the European Commission, or that the recipient country has been recognised as providing an adequate level of data protection.

7. Data Security

Cnergy SIA implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), restricted access to personal data on a need-to-know basis, and regular review of security practices. Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, Cnergy SIA will notify the relevant supervisory authority within 72 hours and, where required, inform the affected individuals without undue delay.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to your personal data:

Right of access (Art. 15) — you have the right to obtain confirmation of whether we process your personal data, and to receive a copy of it;
Right to rectification (Art. 16) — you have the right to request correction of inaccurate or incomplete personal data;
Right to erasure (Art. 17) — you have the right to request deletion of your personal data in certain circumstances (e.g. when data is no longer necessary for the purpose it was collected, or when consent is withdrawn), subject to applicable legal retention obligations;
Right to restriction of processing (Art. 18) — you have the right to request that we restrict processing of your personal data in certain circumstances;
Right to data portability (Art. 20) — where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
Right to object (Art. 21) — you have the right to object to processing based on legitimate interests, including profiling, and to object to direct marketing at any time;
Right to withdraw consent (Art. 7(3)) — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact us at [email protected]. We will respond to your request within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 2 months, of which we will notify you. We may ask you to verify your identity before processing the request.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR or applicable national law, you have the right to lodge a complaint with the competent supervisory authority. In Latvia, the supervisory authority is the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia | www.dvi.gov.lv | e-mail: [email protected]. If you are located in another EU member state, you may also lodge a complaint with your local supervisory authority. A list of all EU supervisory authorities is available at: https://edpb.europa.eu.

10. Marketing Communications

We may send you marketing communications about our products and promotions if you have provided your explicit consent during registration or checkout. You may unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link in any marketing e-mail, or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Cookies

The Store uses cookies and similar tracking technologies to ensure functionality, remember user preferences, and analyse how visitors use the Store. Detailed information about the types of cookies used, their purpose, duration, and how to manage or disable them is set out in our separate Cookie Policy, accessible on the Store. Strictly necessary cookies are placed on the basis of our legitimate interest in ensuring the Store's operation. All other cookies are placed only with your prior consent.

12. Children's Privacy

The Store is not directed at children under the age of 14. We do not knowingly collect personal data from children under 14 without verified parental or guardian consent. If we become aware that personal data has been collected from a child under 14 without appropriate consent, we will take steps to delete such data promptly. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at [email protected].

13. Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. The current version is always published on the Store with the date of last update shown at the top of this document. Where changes are material, we will notify registered users by e-mail. Continued use of the Store after the updated Policy has been published constitutes acceptance of the revised terms.

Talk to a real person