Privacy policy

1. BASIC TERMS
1.1. The Company or Data Controller – MB Viltersus, a private limited liability company established and operating under the laws of the Republic of Lithuania, with legal entity code 305073343, registered office address Gedimino g. 22A-14, LT-44319 Kaunas.
1.2. The Client or Data Subject - a natural person - a customer of the Company (including website visitors), whose personal data is collected by the Company.
1.3. Online store – The Company's online store at www.pasauliosiulai.lt.
1.4. Services – all services provided by the Company.
1.5. Personal data - any information related to an identified or identifiable natural person - the Data Subject, whose identity is known or can be directly or indirectly determined by using such data as personal identification number, one or more characteristics specific to the physical, physiological, psychological, economic, cultural, or social identity of that person.
1.6. Personal data processing - any action performed with personal data: collection, recording, accumulation, storage, classification, grouping, combination, modification (addition or correction), provision, publication, use, logical and/or arithmetic operations, search, dissemination, destruction, or any other action or set of actions.
1.7. Partner – a legal entity providing services to the Company related to the Company's activities, or selling goods to it, or carrying out joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programs, etc., in media, on websites, in the Online Store, in retail stores, in trade networks, etc.
1.8. A cookie is a small piece of text information that is automatically created while browsing the website and is stored on the visitor's computer or other device.
1.9. Direct marketing – activities aimed at offering goods or services to individuals by mail, phone, or other direct means and (or) inquiring about their opinion regarding the offered goods or services.
1.10. Privacy policy – means this document that establishes the principles and rules for the processing of Personal data when using the services of the Online store.
1.11. Account – the main data for the Client's login to the Online Store, consisting of one email address and Password.
1.12. Password – is a unique combination of numbers, letters, or a combination of numbers and letters or other symbols created by the Client, which allows access to the Online Store when entered.

2. GENERAL PROVISIONS
2.1. The Client grants the Company the right to perform all actions of Personal Data processing to the extent and for the purposes specified in this Privacy Policy.
2.2. Personal data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing and protection of personal data, as well as this Privacy Policy.
2.3. In the Company, Personal data is processed in accordance with the principles outlined below:
2.3.1. Personal data is collected for specified and legitimate purposes;
2.3..2. Personal data is processed accurately, fairly, and lawfully;
2.3..3. Personal data is adequate and only to the extent necessary for their collection and further processing;
2.3..4. Personal data is continuously updated;
2.3..5. Personal data is stored in such a way that the identity of the Data Subject can be identified no longer than is necessary for the purposes for which the data was collected and processed.
2.3..6. All information about Personal data is confidential;
2.3..7. The Client's Personal data and personal information will not be used for illegal purposes.
2.4. It is considered that the Customer, when purchasing in the Online Store, has read the current version of the Privacy Policy and agrees with it. If the Customer does not agree with any part of the Privacy Policy or the Privacy Policy itself, in that case, the Customer must not submit an order and must not purchase the product in the Online Store.
2.5. The Privacy Policy can be reviewed in the Online Store and printed at any time. The Privacy Policy may be changed, supplemented, or updated at the Company's discretion. The new version of the Privacy Policy is published in the Online Store.
2.6. The customer can place an order in the Online Store without registration, or through their Account after registering in the Online Store.
2.7. During the initial registration to the Online Store through the Account, the Customer must provide their email address and come up with a secure Password, as well as provide accurate Personal data to the Online Store. The Customer is responsible for their accuracy. Once the Account is created, the Customer is given an identification code.
2.8. When using the Services, as well as when purchasing in the Online Store, the Customer must always provide accurate Personal Data to the Online Store and is responsible for their correctness.
2.9. The customer has the right to change and supplement Personal data in the Account at any time or to contact the online store with a request to delete the Account.
2.10. The Client must not disclose the Password to third parties and must keep it secure; otherwise, all related responsibility falls on the Client.

3. COLLECTION, USE, MODIFICATION, AND STORAGE OF PERSONAL DATA
3.1. The Company respects each Customer's right to privacy. Customer's Personal data (i.e. name, surname, email address, phone number, delivery address of goods/services, age/year of birth, payment information for goods/services (bank account number, payment method, etc.), purchase history, and, with the Customer's consent, age, gender, date of birth, place of residence) is collected and processed for the following purposes:
3.1.1. For the purpose of electronic commerce. The following Personal Data is processed: first name, last name, email address, phone number, delivery address of goods/services, age/year of birth, IP address, payment information for goods/services. The retention period for personal data used for electronic commerce purposes is 5 (five) years from the date of the last login to the Online Store.
3.1.2. For the purpose of direct marketing. The following Personal Data is processed: first name, last name, phone number, email address, address, age, gender, date of birth, place of residence. The retention period for Personal Data used for direct marketing purposes is 5 (five) years from the date of the last login to the Online Store.
3.2. The Client may give consent for the processing of their Personal Data (first name, last name, phone number, email address, address, age, gender, date of birth, place of residence) for the purpose of Direct Marketing. If the Client has given consent to process their data for Direct Marketing purposes and to receive Direct Marketing messages, and later no longer wishes to do so, they will inform the Company, and the Company will no longer process their Personal Data for Direct Marketing purposes and will not send any electronic newsletters to the Client, except for information related to the Client's order.
3.3. The Client has the right to withdraw their consent given in point 3.2 for the Company to process the Client's Personal Data for Direct Marketing purposes at any time by sending a corresponding notification to the Company via email at info@pasauliosiulai.lt and clearly stating that they are withdrawing their consent to use their Personal Data for Direct Marketing purposes and do not wish to receive any Direct Marketing messages.
3.4. The Client also has the option to refuse to exercise their right to object to the processing of their Personal Data for Direct Marketing purposes by clicking the appropriate link included in each sent email.
3.5. The Client, as the Data Subject, has the following rights related to the processing of the Client's Personal Data procedures:
3.5.1. to obtain information from the Company about the processing of the Client's Personal data, to familiarize oneself with their Personal data and how it is processed;
3.5.2. to obtain from the Company information about which sources and what Client personal data has been collected, for what purpose they are processed, to which data recipients they are provided and have been provided at least in the last 1 (one) year;
3.5.3. require the correction, destruction of the Client's Personal data or the suspension, except for storage, of their Personal data processing actions, when the Personal data is processed in violation of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal provisions.
3.6. In exercising their rights, the Client must present a passport, identity card, or driver's license. The Company provides the Data Subject with information about the processed Personal Data of the Data Subject free of charge once a year. The Client, to exercise their rights specified in point 3.5, can contact via email info@pasauliosiulai.lt. The Company has the right to correct, change, delete Personal Data, or suspend the processing of Personal Data only after identifying the identity of the Client who has made the request.
3.7. The Client's Personal Data is not provided to third parties, except in the following cases:
3.7.1. When the Client's consent is obtained, as specified in this Privacy Policy;
3.7.2. Personal data for electronic commerce purposes is provided to Partners who provide services to the Company related to the Company's activities;
3.7.3. To the competent authorities in cases provided for by the laws and legal acts of the Republic of Lithuania.
3.7.2. Payments in the online store are processed using the opay.eu platform, which is managed by OPAY solutions UAB (M. K. Paco g. 4, IX entrance, LT-10309 Vilnius, reg. no.: 302664558), therefore your personal information necessary for the execution and confirmation of the payment will be transferred to OPAY solutions UAB.
3.8. The Client is aware of their right to object to the processing of their Personal Data for Direct Marketing purposes, i.e. the Client has the right to express their objection immediately or later.
3.9. The Client agrees that their Personal data may be transferred to Partners in order to fulfill the Client's order placed in the Online store, as well as to the Company providing Services to the Client, and to the Company's Partners, as specified in point 3.7.
3.10. If the Customer does not agree with the Privacy Policy, the Customer will not be able to use the services of the Online Store.
3.11. The Company implements organizational and technical measures to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.
3.12. The Client agrees that in cases where it is necessary according to the instructions of competent authorities and/or the Client's Personal data may have been used in the course of illegal activities, or there are reasonable suspicions of identity theft for which competent law enforcement authorities are conducting a pre-trial investigation, or there are other legitimate grounds or purposes, their Personal data may be stored on the Company's servers longer than specified in this Privacy Policy.
3.13. Upon receiving a request or inquiry from the Data Subject related to the processing of Personal Data, the Company shall provide the Client with a response, either satisfying the request/instruction or refusing to do so with justification, no later than 30 (thirty) calendar days from the date of the Data Subject's inquiry. If the Data Subject wishes, the response must be provided in writing.
3.14. In order for the Company to offer the Client comprehensive services in the Online Store, with the Client's consent, information Cookies are recorded on the Client's computer (device), which is used to recognize the Client as a previous user of the Online Store, collecting statistics on the Online Store's traffic, and information about the shopping cart. The Client can review at any time which Cookies are recorded and can delete some or all of the recorded Cookies.
3.15. To learn more about cookies, such as how to manage or delete them, you can visit www.allaboutcookies.org.

4. OTHER PROVISIONS
4.1. The Company has the right to change or supplement the "Privacy Policy" in whole or in part. Additions or changes to the Privacy Policy take effect from the date of their publication.
4.2. If you have any questions, please contact us at: info@pasauliosiulai.lt.