PRIVACY POLICY
-
2024-12-10
PRIVACY POLICY
This Privacy Policy (hereinafter – Privacy Policy) provides information on how MB Evlaidai, legal entity code 306235734, registered address: Rožių g. 9C, LT-14166 Antežerių k., Zujūnų sen., Vilnius district (hereinafter – Data Controller), processes your personal data in the online store https://www.evlaidai.lt/.
You can contact the Data Controller using the following details:
Tel.: +37060138140
Email: info@evlaidai.lt
Address: Rožių g. 9C, LT-14166 Antežerių k., Zujūnų sen., Vilnius districtWhat personal data do we process?
• Purpose: Contracting and executing agreements with legal entities
o Processed personal data: Name, surname, contact information, correspondence content, other data specified in the agreement.
o Legal basis: Legitimate interest to carry out activities.
o Retention period: 10 years after the contract ends.• Purpose: Contracting and executing agreements with individuals
o Processed personal data: Name, surname, address, phone number, email address.
o Legal basis: Contract.
o Retention period: 10 years after the contract ends.
o Personal data may be shared with payment service providers.• Purpose: Order delivery
o Processed personal data: Name, surname, phone number, email address, address, parcel locker information, shipment number.
o Legal basis: Contract.
o Retention period: 10 years after order delivery.
o Personal data may be shared with courier services or delivery providers.• Purpose: Refunds
o Processed personal data: Name, surname, bank account number, other details.
o Legal basis: Contract, legal obligation.
o Retention period: 10 years after the payment transaction.
o Personal data may be shared with payment service providers.• Purpose: Creating and managing user accounts on the website
o Processed personal data: Name, surname, account username and password, phone number, email address, address.
o Legal basis: Contract.
o Retention period: 2 years after the last login to the account.• Purpose: Communication with website visitors
o Processed personal data: Name, surname, phone number, email address.
o Legal basis: Actions taken at the data subject’s request before entering into a contract or legitimate interest to ensure service quality.
o Retention period: 1 year after the inquiry is resolved.• Purpose: Direct marketing (newsletters, event invitations, offers of similar goods or services)
o Processed personal data: Name, surname, email, phone number.
o Legal basis: Consent or legitimate interest to offer similar goods/services to clients.
o Retention period: 2 years after consent is obtained or after purchasing goods or services.
o Personal data may be shared with newsletter delivery services.• Purpose: Managing social media accounts
o Processed personal data: Unique ID, IP address, device information.
o Legal basis: Consent or legitimate interest to communicate with clients.
o Retention period: As long as the visitor follows our accounts.
o Information shared via social media (e.g., messages, "Like" clicks) is jointly controlled with social media operators as joint data controllers.o Currently, we manage the following social media accounts:
- “Facebook” - https://www.facebook.com/evlaidai.lt, privacy policy available at https://www.facebook.com/privacy/explanationWe recommend reading third-party privacy notices and contacting service providers directly with any questions about how they use your personal data.
Who may we share your personal data with?
We may share information about you with our employees, agents, service providers (e.g., debt collection companies, archiving service providers, legal or marketing services, IT service providers) or subcontractors if reasonably necessary for the purposes outlined in this Privacy Policy.
We may also disclose information about you as required by law or to protect our rights or interests (including sharing your personal data with third parties for debt recovery purposes). If we transfer part of our business or assets, personal data may also be disclosed to potential buyers or other parties involved in the transfer or reorganization process.
How is your personal data processed?
Your personal data is processed in compliance with the General Data Protection Regulation (GDPR), the Lithuanian Law on Legal Protection of Personal Data, and other applicable laws. The Data Controller implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, or other unauthorized processing. Measures are determined based on the risks posed by personal data processing.
What are your rights?
Below, we provide information about your rights regarding the processing of your personal data by the Data Controller and when you can exercise these rights. For more information or to exercise your rights, contact us at the email address provided in this Privacy Policy.
• You can contact us at any time to inquire whether we process your personal data. If we store or process your personal data, you have the right to access it. To do so, submit a written request to the email address provided in this Privacy Policy. We may ask you to confirm your identity for security purposes.
When submitting such a request, adhere to the principles of fairness and reasonableness.
• If you have given consent for data processing, you can withdraw it at any time by contacting us via email.
• You have the right to request the correction of any inaccuracies in your personal data. We may ask you to confirm the corrected information.
• You have the right to request the deletion of your personal data in cases specified by GDPR Article 17.
• You have the right to request restrictions on processing your personal data.
• You have the right to data portability for data processed by automated means based on consent or contract.
• You have the right to object to the processing of your personal data under GDPR Article 21.
How can you exercise your rights?
To exercise your rights, submit requests, complaints, or inquiries to us in writing using the contact details provided in this Privacy Policy.
We will respond to requests, complaints, or inquiries in writing in accordance with applicable laws and within statutory deadlines. We strive to provide information as quickly as possible, but no later than 30 days from the receipt of your request.If we have doubts about the identity of the person submitting a request, we reserve the right to ask for proof of identity.
Complaints
If you believe your rights as a data subject have been or may be violated, please contact us immediately using the email provided in this Privacy Policy. We ensure that we will contact you within a reasonable period and inform you about the progress of the complaint investigation and its outcome. If you are not satisfied with the investigation results, you can submit a complaint to the supervisory authority: in Lithuania – the State Data Protection Inspectorate (https://vdai.lrv.lt/). A list of supervisory authorities in other EU member states can be found on the European Data Protection Board website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
Responsibility
You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If your provided data changes, you must inform us immediately via email. We are not responsible for any damage caused to you due to the provision of inaccurate or incomplete data or failure to notify us of changes.
Privacy Policy updated on December 10, 2024.
This Privacy Policy was created using the business document preparation tool Dokas. All copyright to the Privacy Policy belongs to Dokas legal, MB, which grants MB Evlaidai the right to use the Privacy Policy in the online store at https://www.evlaidai.lt/. Copying or otherwise using the Privacy Policy or parts of it without the written consent of Dokas legal, MB, is prohibited. All conditions of the granted rights are specified in Section 2 of Dokas Rules. Personal data is processed as described in Dokas Privacy Policy.
-