Privacy Policy
Current version 2022-11-30
We, legal entity name UAB “Kandeliabrai”, legal entity code 303327241, address Savanorių pr. 1-82, LT-03116 Vilnius, VAT code LT100008804515 (hereinafter – the Company or We), we take care of our customer, the user of the Kandeliabrai e-store and the user of the website https://kandeliabrai.com (hereinafter – You or the User) (hereinafter – E-shop) with data security and privacy.
This Privacy Policy is intended to provide information about how the Company processes and protects your data when you use the E-store.
The collection, processing and storage of your personal data, as far as your use of the E-shop is concerned, is determined by this privacy policy, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts.
1. Concepts
1.1. Personal data – means any information that can directly or indirectly identify you. The following personal data of yours are processed:
– Name and surname of the buyer;
– Name and surname of the person who will collect the goods;
– Buyer’s contact details – e-mail address and telephone number, address;
– Buyer’s delivery data – the address to which the goods will be delivered or another choice of the Buyer regarding the delivery / collection of goods;
– The buyer’s chosen payment method and entered payment data;
– History of orders placed in your E-store;
– IP address;
– network and location data when you provide it;
– History of your inquiries and complaints;
– other publicly available data that you shared while visiting the online store.
1.2. Processing of personal data – means any operation performed with personal data (such as – information collection, editing, modification, recording, storage, granting of access, submission of requests, archiving, etc.).
1.3. Data controller – VŠĮ “Menoja”, legal entity code 302047539, address Parko str. 4, Ginkūnai, LT-81495 Šiauliai district, VAT payer code LT100005048318.
1.4. Data subject – any natural person whose data is processed by the Company
1.5. Website – https://kandeliabrai.com.
2. Processing of your personal data when using the E-shop and visiting the Website
2.1. By submitting data to the Company, the Data Subject agrees that the Personal Data will be used by the Company in order to ensure the functioning of the E-store for the purposes desired by the Data Subject.
2.2. The Company processes your personal data on the following basis:
– The company receives your express consent to process your data in this way, i.e. when you create a User account;
– You place an order in the E-shop, which is accepted and executed, thereby concluding a contract with you and executing it;
– also in cases where the Company has to process your data under a legal obligation;
– the legitimate interests of the Company are implemented. We will process your Personal Data if we have a legitimate interest in doing so and such data processing does not violate your interests and protection of rights.
2.3. The company processes your data for the following purposes:
– For efficient, optimal and convenient functioning of the E-shop;
– In order to ensure the smooth administration of the E-store;
– To register and maintain your account;
– For the proper provision of the services you have ordered;
– In order to provide you with relevant information, to answer your questions and requests;
– Carrying out statistical and other analysis aimed at improving the operation of the E-store and your experience using it;
– When you visit the Website, the Company may process your IP address, network and location data. These Personal Data are collected with the help of cookies and other similar technologies based on the User’s consent.
– For other purposes that may be indicated to you at the time of submitting your data.
3. Provision of personal data to third parties
3.1. We are committed to maintaining the confidentiality of your Personal Data. Your Personal Data may be disclosed to third parties only if it is necessary to conclude and execute a contract for the benefit of the data subject, or for other legitimate reasons.
3.2. The Company may provide Personal Data to its data processors who provide services to the Company and process personal data on behalf of the Company. Such Personal Data Processors selected by the Company have the right to process Personal Data only in accordance with the Company’s instructions and only to the extent necessary to properly fulfill the obligations set forth in the contract between the Company and the service provider. We assure you that the Company cooperates only with such data processors who guarantee appropriate measures (organizational and technical) for the processing of Personal data and ensure the processing of Personal data in accordance with the requirements of legal acts.
3.3. The company may also provide personal data in response to court or state authority requests to the extent necessary to properly comply with applicable legislation and state authority orders.
4. Term of personal data storage
4.1. We store your personal data only for such a period as is necessary for the implementation of the goals set out in the privacy policy.
4.2. If you have not been active in the User account in the E-store for 20 years, your personal data will be deleted.
4.3. You can also request that your account in the E-store be deleted.
5. Personal data of minors
5.1. We care about protecting the privacy of minors. We inform you that our E-shop and Website are not suitable for persons under 18 years of age.
5.2. Persons who are under 18 years of age may not provide any Personal Data in the E-shop and Website.
5.3. If a person is younger than 18 years old, in order to use the E-store or Website, before submitting Personal data, he must have the written consent of at least one of the legal representatives (father, mother, guardian(s)) regarding the processing of personal data.
6. Rights of data subjects
6.1. As a Data Subject, you have the following Data Subject rights:
6.1.1. The right to receive information about data processing (“right to know”).
6.1.2. The right to access the processed data (“right to access”).
6.1.3. The right to demand rectification of data (“right to rectification”).
6.1.4. The right to request deletion of data (“right to be forgotten”). This right does not apply if the personal data that is requested to be deleted is also processed on another legal basis, such as the processing is necessary for the performance of a contract or is the fulfillment of an obligation according to applicable legislation.
6.1.5. The right to restrict data processing (“right to restrict”).
6.1.6. The right to object to data processing.
6.1.7. Right to data portability. The right to data portability cannot adversely affect the rights and freedoms of others. The data subject does not have the right to data portability in relation to personal data that is processed manually in systematized files, such as paper files.
6.1.8. The right to request that only automated data processing, including profiling, not be applied.
6.1.9. The right to submit a complaint regarding the processing of personal data to the State Data Protection Inspectorate.
6.2. In order to exercise your rights, you can send us an inquiry or request in writing: info@kandeliabrai.lt. Upon receiving such a request or inquiry from you, we may ask you to fill out the necessary forms, as well as to provide a notarized copy of your personal document, which we need to verify your identity in order to avoid disclosure of personal data.
6.3. After receiving your request or inquiry regarding the processing of personal data, we undertake to provide you with an answer and perform the actions specified in the request or inform you why we refuse to perform them no later than within 1 month from the date of the request. If necessary, the specified period can be extended by another 2 months, taking into account the complexity and number of requests. In this case, within 1 month from the day of receiving the request, we will inform you about such an extension.
6.4. If Personal Data is deleted at your request, we will only keep copies of information that are necessary to protect our and others’ legitimate interests, to comply with the obligations of government authorities, to resolve disputes, to identify disturbances or to comply with any agreements you have entered into with us.
6.5. If you believe that your rights as a data subject have been violated, you can also file a complaint with the Personal Data Protection Authority that supervises us – the State Data Protection Inspectorate, you can find more information and contact details on the inspectorate’s website www.ada.lt.
7. Cookie policy
7.1. Our Website may use cookies and other tracking technologies. With the help of cookies, Our Website can “remember” your actions and choices while browsing the Website (eg registration data, your preferred language and other display options) for a certain period of time.
7.2. We use cookies and other tracking technologies to enable or improve the operation of the store.
7.3. You can control Cookies on the Website. You have the right to choose whether you want to accept Cookies and other tracking technologies We use, or whether you want to disable cookies completely or only some of them.
7.4. More general information about the use of cookies can be found at AllAboutCookies.org or www.google.com/privacy_ads.html. If you decide to disable all or certain Cookies on our Website, this may affect the performance of the Website, may slow down the speed of its operation, and may limit the availability of certain functions. You will also need to reset certain options each time you visit the Site.
7.5. We use the following categories of cookies: to operate the store/cart, login interface, cookie policy selection, Google Analytics.
8. Final Provisions
8.1 Please note that our Website may contain links to other websites, including websites operated by third parties, which are not covered by this Privacy Policy. Please review and evaluate the privacy policies of these websites before submitting any of your Personal Data.
8.2. We may update and change this Privacy Policy as necessary, taking into account the Personal Data Protection measures we have in place. You will be informed about changes to the Privacy Policy that apply to you through the usual means of communication between you and us.
