1. General provisions

1.1. In this privacy policy (hereinafter referred to as the “Privacy Policy“) of MB „SLAPTA MEILĖ“, institution code 306716155 (hereinafter referred to as “SLAPTA MEILĖ”, “we”), we provide information about how we process your personal data when you use our services and visit our website.

1.2 Visitors to the Website who are under the age of 18 are requested not to register on the Slapta meilė Website and not to provide any personal data.

1.3 In this Privacy Policy we provide the following information:

  1. Clarification of the terms of the Privacy Policy;
  2. For what purposes, what personal data we process, on what legal basis and for how long we keep it;
  3. Automated solutions and profiling;
  4. Transfer of personal data to third parties;
  5. Social media;
  6. Your rights;
  7. About cookies;
  8. Changes to the Privacy Policy.

1.4 If you have any questions or wish to exercise any of your rights set out in this Privacy Policy, you may contact us by email: [email protected]​​

2. Definitions

2.1. The „Slapta meilė“ online store – the website located at www.slaptameile.lt.

2.2. Data Controller – MB “SLAPTA MEILĖ“, organization code 306716155, email [email protected], tel. no. +37060955551.

2.3. Customer – a person who makes a purchase in the „Slapta meilė“ online store without registering.

2.4. Parties – Client and Data Controller.

2.5. Personal data – any information related to a natural person – data subject, whose identity is known or can be directly or indirectly determined using such data as a personal identification code, one or more physical, physiological, psychological, economic, cultural or social characteristics specific to the individual.

2.6. Data recipient – a legal entity or natural person to whom „Slapta meilė“ provides personal data and who independently determines the purposes and means of processing the personal data received.

2.7. Data processor - a legal or natural person processing personal data on behalf of the data controller for the purposes and in the manner specified by the data controller.

2.8. Data subject – a natural person whose personal data is controlled and/or processed by „Slapta meilė“.

2.9. Provision of personal data – disclosure of personal data by transferring it or making it accessible by other means (except for the publication of such data in the media).

2.10. Processing of personal data means any operation or set of operations performed on personal data (or sets of personal data) by automated or non-automated means, including collection, recording, sorting, systematization, storage, adaptation, modification, generation, retrieval, use, disclosure by transmission, distribution or other making accessible, as well as alignment or combination with other data, restriction, deletion or destruction.

2.11. Direct marketing – activity aimed at offering goods or services to individuals by mail, telephone, or other direct means and/or inquiring about their opinions on the offered goods or services.

3. For what purposes, what personal data we process, on what legal basis and for how long we keep them

3.1. in the performance of contractual obligations for the purpose of ordering and providing services:

  1. The data for ordering and providing services may include: name, surname, email address, telephone number, information about the services you have ordered, payment information and any information related to the provision of the services that you provide yourself.
  2. The legal basis for processing these data: the performance of a contract between you and us (or, at your request, taking steps to enter into such a contract).
  3. We will retain your data for this purpose for 10 years after the end of the service contract.

3.2. for the purpose of general direct marketing offers, sending you newsletters (notifications) about the services we offer or asking for your opinion on the quality of our services:

  1. We process the following data: email address and/or phone number.
  2. The legal basis for processing this data is your consent; in addition, if we have already provided you with services and you have not consented to the processing of your personal data for direct marketing purposes, we will process your personal data on the basis of legitimate interest, namely to maintain and improve our relationship with our existing clients.
  3. If you have not objected to the processing of your data for the purpose of general direct marketing offers, we will process your data until the date of full provision of the services under the contract or the date of termination of the service contract, and if you are not our customer and have simply consented to receive general direct marketing offers, we will retain your data for 3 years from the date of consent or for a shorter period if you withdraw your consent. You have the right to withdraw your consent at any time by clicking on the relevant link in any general direct marketing communication you receive and you can also do so in your account, if you have one, or by contacting us at [email protected].

3.3 We may process your personal data referred to in this Privacy Policy where it is necessary to assert, exercise or defend legal claims. For this purpose, we process your personal data on the basis of legitimate interest, namely to protect and safeguard our rights, your rights and the rights of others.

3.4 In addition to the specific purposes set out in this part of the Notice, we may also process your personal data where processing is necessary to comply with our legal obligations and to protect your vital interests or those of other natural persons.

3.5 Your personal data shall be kept for no longer than is necessary to achieve the purposes of processing personal data set by Slapta meilė. After the expiry of the retention period, we will securely and irretrievably destroy or alter your personal data in such a way that they can no longer be directly or indirectly identified.

4. Transfer of personal data to third parties

4.1 Slapta meilė may transfer your personal data to the following categories of recipients:

  1. personal data processors providing various services to Slapta meilė: Slapta meilė website maintenance, hosting providers, email service providers, newsletter providers, survey providers, social media account administrators, customer service centres, data protection officer service providers, lawyers, consultants, auditors, bailiffs, other recipients with confidentiality obligations;
  2. as necessary to provide or pay for services (e.g. to make a payment for a service you have chosen), to the payment service providers you designate or who will be involved in making the payment;
  3. law enforcement authorities, the judiciary and other public authorities, but only to the extent and to the extent necessary for the proper enforcement of applicable law.

4.2 We only use Data Processors that have appropriate technical and organisational measures in place to ensure the protection of personal data in accordance with the GDPR and to ensure the exercise of your rights as a Data Subject.

4.3 We do not transfer your personal data outside the European Economic Area unless the country to which your personal data is transferred ensures an adequate level of protection or you consent to such transfer of your personal data.

4.4 The Data Processors engaged by Slapta meilė will only process your personal data in accordance with the Company's instructions. The engaged Data Processor is only entitled to engage a sub-processor with the prior written consent of Slapta meilė.

5. Social media

5.1 We currently have the following social media accounts:

  1. on Facebook - @slapta meile, whose privacy policy is available here;
  2. on Instagram - @slaptameile, whose privacy policy is available here.

5.2 We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

6. Your rights

6.1 In this Privacy Policy, we provide an overview of your rights under data protection legislation. Some of the rights cover many aspects, so this Privacy Policy only sets out the main ones. We recommend that you consult the relevant legislation and supervisory authorities' guidelines so that you are fully aware of these rights.

6.2 You have the following Data Subject Rights:

  1. Know about the processing of your personal data. We also give you this right by providing information in this Privacy Policy. You have the right to obtain confirmation from us as to whether we are processing personal data relating to you and, in the case of processing, you have the right to have access to the personal data we are processing as well as to certain supplementary information. Unless it would infringe the rights and freedoms of others, we will provide you with a copy of your personal data on your request. We will provide the first copy free of charge, but we may charge a reasonable fee for additional copies to cover administrative costs.
  2. Request the rectification of inaccurate personal data or the completion of incomplete data.
  3. Request erasure of your personal data if:
    - the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    - you withdraw your prior consent and there is no other lawful basis for processing your personal data;
    - the data is processed for the purpose of direct marketing;
    - personal data have been processed unlawfully;
    - other cases set out in the GDPR.
    However, please note that in some cases you may not be able to exercise this right due to exceptions. These exceptions include cases where the data are necessary for: exercising freedom of expression and information; bringing, exercising or defending legal claims.
  4. You can request restriction of the processing of your personal data when:
    - you contest the accuracy of the data for a period of time during which we can verify the accuracy of the personal data;
    - we no longer need the personal data, but need it to assert, exercise or defend legal claims;
    - Your personal data is no longer required by Slapta meilė, but is necessary for you to exercise your right to lodge a complaint or to defend your rights;
    - You have objected to the processing on grounds of public interest or legitimate interest, pending an assessment of the validity of your objection.
    In the event of restriction of the processing of your data, we will continue to retain your data but will not further process it, except: (i) with your consent; (ii) for the establishment, exercise or defence of legal claims; (iii) for the protection of the rights of others; (iv) for imperative reasons of public interest.
  5. Request the transfer of your personal data. Where the legal basis for the processing of personal data is your consent or the performance of a contract, or actions carried out at your request prior to the conclusion of a contract, you have the right to receive your personal data in a structured, commonly used and machine-readable format. You will not be able to exercise this right where it may adversely affect the rights and freedoms of others.
  6. To object to the processing of your personal data on the basis of your particular situation, where we process your personal data for public interest purposes or on the basis of our legitimate interest or the legitimate interest of third parties. If you object to such processing of your personal data, we will no longer process your relevant personal data unless we can demonstrate that such processing of your personal data is for compelling legitimate reasons which override your interests, rights and freedoms. We may also continue to process such data in order to assert, exercise or defend legal claims.
  7. The right to object to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you object to such processing of your personal data, we will no longer process your relevant personal data for this purpose.
  8. Where the legal basis for processing is your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing of your data prior to withdrawal.
  9. In case you believe that we are violating data protection legislation by processing your personal data, you have the right to file a complaint with the State Data Protection Inspectorate, ada.lt.

6.3.You may exercise the Data Subject's rights set out in this Privacy Policy by submitting a request and specifying the specific right you wish to exercise. In order to exercise your rights, we will need to verify your identity. Therefore, when applying to exercise your rights (other than your right to know about the processing of your personal data, which is already implemented in this Privacy Policy), you may submit a request by:

  1. Via email to [email protected] by submitting a request signed with a qualified electronic signature;
  2. Otherwise, if we can identify you.

6.4 We will provide you with a response on the action taken to implement the request or the reasons for not implementing the request no later than 1 month after receiving the request. Depending on the complexity and number of requests, the time period for the exercise of rights may be extended by a further 2 months.

6.5 If you submit your request by electronic means, the response will, where possible, be provided to you in the same way, unless you request otherwise.

7. About cookies

7.1 The following cookies are used to make your browsing experience on the Slapta meilė website easier and more efficient, and to ensure that we deliver a high quality service that meets your needs.You will find them on the bottom left.

0
Go back View Cart