1. General provisions
1.2. We strive to ensure that our service users, Website visitors and other individuals whose personal information we process would have full confidence in our services and be informed in a transparent way on how we process their data. In this Policy you will find information on how we collect and use (or wish to collect and use) your personal data.
1.3. In our activity we follow these data processing principles:
1.3.1. Personal data of the data subject must be processed in a lawful, honest and transparent manner (legality, fairness and transparency principle);
1.3.2. Personal data must be collected for specified, clearly defined and legitimate purposes and not further managed in a way incompatible with those purposes; further processing of data for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, is not considered to be incompatible with the primary purpose (purpose limitation principle);
1.3.3. Personal data must be adequate, appropriate and only necessary for the purpose for which they are processed (data minimization principle);
1.3.4. Personal data must be accurate and, if necessary, updated; all reasonable steps must be taken to ensure that personal data which are not accurate considering the purposes for which they are processed are immediately erased or corrected (accuracy principle);
1.3.5. Personal data must be stored in such a way that the identity of the data subjects can be determined for no longer than it is necessary for the purposes for which personal data are processed; personal data may be stored for longer periods if personal data are only processed for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes, by implementing the appropriate technical and organizational measures necessary to safeguard the rights and freedoms of the data subject (principle of limitation of retention period);
1.3.6. Personal data should be processed in such a way as to ensure the proper security of personal data, including protection against unauthorized processing or unlawful processing of data, and accidental loss, destruction or damage, by applying appropriate technical or organizational measures (a principle of integrity and confidentiality);
1.3.7. We are responsible for complying with the above principles and we must be able to prove that they are being complied with (accountability principle).
1.4. This Policy is based on the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter referred to as LLPPD), and other legal acts of the European Union and the Republic of Lithuania. Terms used in the Policy are understood in a way in which they are defined in GDPR and LLPPD.
2. Collection, processing, storage of personal data
2.1. It is very important that you carefully read the Policy, because when you visit the Website and use our services, this Policy will directly apply to the collection, processing, and, in the cases provided for in the Policy, the transference of your personal data to the recipients of the data.
2.2. If you do not agree with this Policy and the processing of personal data described therein, please do not visit the Website and / or use our services.
2.3. You are responsible for ensuring that the data you provide is accurate, correct and complete. Knowingly entering incorrect data is considered a violation of the Policy. If the data you provided have changed, you must inform us. Under no circumstances shall we be liable for any damage caused to you and (or) third parties due to the fact that you have provided incorrect and / or incomplete personal data, or you have not requested the update and / or modification of the data after they have changed.
2.4. The subjects to which we can disclose your personal data are described next to each data processing activity.
2.5. In certain cases, we may disclose your information to subjects other than those indicated:
2.5.1. Not to violate laws or to respond to a mandatory demand from a court (for example, upon receipt of a court's request to provide data);
2.5.2. To confirm the legitimacy of your actions;
2.5.3. To protect your rights, property and to ensure their safety;
2.5.4. In other cases – with your consent or your legitimate request.
3. Electronic commerce activity
3.1. To provide you with the opportunity to shop at the e-shop on the Website, we process the following personal data for the purpose of providing this service:
3.1.3. Telephone number;
3.1.4. E-mail address;
3.1.5. Delivery address;
3.1.6. Payer’s address;
3.1.7. If you pay by transfer – details of your bank account;
3.1.8. If necessary, information provided by you that is required for delivery (e.g. entry code) is added.
3.2. To process your personal data for e-commerce purposes on the legal basis it is necessary to process the data provided in order to conclude and implement a contract you conclude when you purchase our goods.
3.3. For the delivery of goods, we use shipping companies to which we transfer your personal data for this purpose.
4. Sending newsletters (direct marketing)
4.1. With your consent, we would like to provide you with something that can be described as "direct marketing" – to send newsletters and / or special offers to your e-mail. Your consent is the legal basis for processing of your personal data.
4.2. You can give your consent while signing up to the Website or later after logging in to your personal account and agreeing to subscription of newsletters and / or receipt of special offers.
4.3. You can also subscribe to newsletters by entering your e-mail to the newsletter subscription field and clicking on the subscription link.
4.4. We do not provide data that is processed for direct marketing purposes to third parties.
4.5. You have the right to cancel your consent regarding sending newsletters and / or special offers by e-mail at any time, without prejudice to the legality of the consent based data processing until the withdrawal of the consent.
5. The procedure and terms for storage of personal data
5.1. By managing and storing your personal data, we implement organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, modification, disclosure, and any other unlawful processing.
5.2. We apply different terms for the storage of personal data, depending on the purpose of the processing of your particular personal data.
5.3. We apply the following terms for personal data storage:
Purpose of personal data processing
Electronic commerce activity
Registered user data is stored for 3 years from the last visit to the Website.
Sending newsletters (direct marketing)
5 years after giving consent.
5.4. Exceptions from the above retention period may be determined to the extent that such deviations do not violate your rights as data subject, comply with legal requirements and are reasonable and properly documented.
5.5. In the event that your certain personal data will be necessary for the purpose of claiming, enforcing or defending legal requirements, we will protect them to the extent as they will be necessary to achieve such objectives through a judicial, administrative or extrajudicial procedure.
6. Your rights
6.1. You have the right at any time, upon request, to have access to your personal data that we process and to find out how they are processed, to request correction of incorrect, incomplete, inaccurate personal data, to request to discontinue, except for the storage, processing your personal data, if the data is processed not complying with legal requirements.
6.2. To the extent that the processing of personal data is based on your consent, you have the right at any time to withdraw the consent without prejudice to the legality of the consent based data processing until the withdrawal of the consent.
6.3. You can exercise your rights by submitting a written request by e-mail to firstname.lastname@example.org or by sending a request to Jurgiskiu g. 45, Jurgiskiai, Alytaus r. sav., Republic of Lithuania, or by arriving to our office at the address above.
7. Contact information and complaints
7.1. If you have questions regarding personal data protection, please feel free to contact us by email email@example.com.
7.2. If you are not satisfied with our reply or think that we process your data in violation of legal requirements, you have the right to submit a complaint to the State Data Protection Inspectorate of the Republic of Lithuania.
8. Personal data processing by the third parties
8.1. Using third party services, such as visiting our Facebook account, may be subject to third party terms. For example, Facebook applies its Data Policy to all its users and visitors. Therefore, if you use such third party services it is recommended to read their terms and conditions.
9. Final Provisions
9.1. Legal relations regarding this Policy are governed by the law of the Republic of Lithuania.
9.2. This Policy is reviewed and, if necessary, updated at least once every two years. Policy additions or changes take effect from the day they are published on the Website.
9.3. If you use the Website and our services after the Policy update, we will make sure that you do not object and are aware of the changes.