Privacy Policy

GENERAL PROVISIONS

1. MB "Daiktų namai", legal entity code 303332530, address - Bagušių g. 7, Vilnius, (hereinafter - the Community) protects and respects the privacy of its customers (hereinafter - the Persons) and undertakes to comply with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "General Data Protection Regulation"), the Law of the Republic of Lithuania on the Legal Protection of Personal Data, as well as with the provisions of other applicable legislation in the field of personal data protection when processing personal data.

2. This Privacy Policy (the "Policy") has been prepared to enable Individuals to know what and for what purposes the Community processes their personal data, what are the Individual's rights and the procedure for their exercise.

PURPOSES AND GROUNDS FOR PROCESSING PERSONAL DATA

3. The Community processes personal data for the following purposes:

3.1. to enter into and perform contracts with Individuals;

3.2. to carry out direct marketing;

3.3. to manage enquiries received by the Company;

3.4. for other purposes for which the Community is entitled to process the Personal Data of Individuals, where the Individuals have given their consent or where the processing of the Personal Data is necessary for the legitimate interest of the Community or where the processing of the Personal Data is imposed on the Community by other legal acts.

4. The Community processes personal data on the following grounds:

4.1;

4.2. performance of a contract;

4.3. the legitimate interest of the Community

PERSONAL DATA PROCESSED BY THE COMPANY

5. For the conclusion and performance of contracts - name, surname, telephone number, email, address, method of delivery, shopping history, payment details (goods, price, method of payment), and other personal data of customers to which the Company has access in the course of the provision of its services to customers. Refusal to provide such data shall render the conclusion and performance of the contract impossible.

6. For the purpose of direct marketing, the name, surname and email address of the person. These personal data are processed only with the consent of the Individual to the processing of personal data for direct marketing purposes. The person may withdraw his/her consent to the processing of personal data for direct marketing purposes at any time by notifying the following contacts: info@daiktunamai.lt . The person's refusal to consent to the processing of his/her personal data for direct marketing purposes shall not affect the conclusion and performance of contracts.

7. For the purpose of managing enquiries received by the Community, the name, surname, telephone number, e-mail, address and other data left by persons contacting the Community.

8. Other data which is collected on the basis of the consent of the Individual and which is defined in detail at the time the Individual's consent is sought.

PRINCIPLES FOR PROCESSING PERSONAL DATA

9. The Community ensures and undertakes to comply with the following basic principles of data processing:

9.1. Personal Data shall be collected for the purposes defined and set out above;

9.2 Personal data is processed accurately and fairly;

9.3. personal data shall be processed only for legitimate interest, in accordance with the procedures set out in this Policy and the law;

9.4. Personal data may be kept up to date;

9.5. personal data shall be stored for as long as the stated purposes of processing require, but no longer than the time limits set out in the legislation of the Republic of Lithuania, and shall be destroyed after the expiry of the retention period of personal data:

9.5.1. personal data processed for the conclusion and performance of contracts shall be stored for 10 (ten) years from the date of termination of the contractual relationship;

9.5.2. the retention period of personal data to be used for direct marketing purposes shall be from the date of the consent of the Individual to the processing of his/her data for direct marketing purposes until the date of withdrawal of such consent, but no longer than 24 months (twenty-four) months from the date of receipt of such consent. Upon request to stop processing personal data for direct marketing purposes, the personal data shall be deleted.

9.5.3 Personal data processed for other purposes shall be retained until the date of revocation of the Individual's consent to the processing of the personal data or until the processing is necessary for the legitimate interest of the Community or when the Community is under an obligation to process the personal data imposed by other legal acts.

9.6 Personal data shall only be processed by Community employees who have been given the right to do so;

9.7 All information about personal data processed shall be confidential;

9.8. when processing and storing personal data, the Community shall implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES

10. The Community may provide personal data to:

10.1. to companies providing delivery services;

10.2. to other third parties, subject to the consent of the Personal Data Subject in each specific case of such provision;

10.3. data processors (subcontractors) who provide services to the Company (perform work) and process Personal Data on behalf of the Community as data controller;

10.4. in other cases, where necessary for the proper enforcement of applicable law or a court order.

PROCEDURE FOR EXERCISING PERSONAL RIGHTS

11. A person has the following rights:

11.1. to be informed about who processes his/her personal data, to whom they are communicated, the purposes for which they are processed, the period of their storage;

11.2. to request that the Community rectify inaccurate data, erase his/her personal data or transfer them;

11.3. require the Community to cease processing the Personal Data, except where such processing is mandatory under applicable law;

11.4. if he/she considers that the processing of Personal Data by the Community has infringed his/her rights, to submit a request for rectification of such infringement.

12. The Individual may exercise his/her rights by contacting the Community and submitting the relevant request to the following contacts.

13. The Person shall also have the right to apply to the State Data Protection Inspectorate or to a court if he/she believes that his/her rights have been violated.
FINAL PROVISIONS

14. The Community has the right to unilaterally change the processing of personal data referred to in this Policy in accordance with the requirements of law. The Community undertakes to inform Individuals of changes to the principles governing the processing of personal data on the Community's website or by any other means of the Community's choice before such changes take effect.

COOKIES

Cookies are small files that are sent to a user's web browser and placed on the computers or other devices of browsers when they first visit a website. Cookies are subsequently used on the website to ensure the best possible use of the website for the user, by identifying the user's computer and facilitating access to the website or the information contained therein, thus making the content of the website as user-friendly as possible.

COOKIES ARE USED FOR THE FOLLOWING PURPOSES:

- To ensure the smooth use and functioning of the website and to facilitate the browsing process.

- To identify the user who has visited the website and to store information about the goods or services placed in the shopping cart and the data entered during the purchase, so that the user does not have to re-enter his/her data again the next time he/she makes a purchase (if he/she makes a purchase using the same computer or other device as the first time).

- To monitor the duration and frequency of the user's visit to the website and to collect statistical information in order to better understand the user's browsing behaviour on the website and for the purpose of target marketing.