The controller of the personal data processed by you is Palvitana, UAB (legal entity code 125173121, legal address: Klaipėdos pl. 74-2, Palanga LT-00163, Lithuania, data are collected and processed in the Register of Legal Entities of the State Enterprise Centre of Registers, e-mail address firstname.lastname@example.org, telephone number +370 676 53254).
Personal data of Palvitana, UAB is processed in accordance with the data protection requirements established in the legal acts of the European Union and the Republic of Lithuania.
1. Main concepts
1.1. Personal data means any information relating to a natural person, the data subject, who is identified or who can be identified directly or indirectly by reference to such data as a full name, personal identification number or one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.
1.2. Personal data processing means any operation, which is performed with personal data such as: collection, recording, accumulation, storage, classification, grouping, combining, alteration, disclosure, making available, use, logical and/or arithmetic operations, retrieval, dissemination, destruction or any other operation or a set of operations.
2. Personal data collected and processed by Palvitana, UAB
2.1. Palvitana, UAB receives personal information directly from data subjects. For example, the website allows both registered members and non-registered persons to purchase goods and/or use our services.
2.2. In its activities, Palvitana, UAB processes the following personal data of website visitors:
|Data subjects||Personal data||Purposes of data processing||Grounds for data processing||Terms of data processing|
|E-shop buyers (unregistered).||Full name; Address of residence or delivery; Telephone number; E-mail; Order information.||Customer service; Sale of goods (conclusion and performance of contracts); Execution of e-commerce.||Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Art. 6 (1)).||5 years from the date of order fulfilment.|
|E-shop buyers (registered members).||Full name; Address of residence or delivery; Telephone number; E-mail; Order history, order information.||Customer service; Sale of goods (conclusion and performance of contracts); Execution of e-commerce.||Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Art. 6 (1)).||5 years from the date of the last order fulfilment or from the last active action in your account (login).|
3. How personal data is collected
3.2.1. When you submit them yourself:
3.2.2. placing an order through the e-shop;
3.2.3. concluding a sales contract when purchasing our goods;
3.2.4. after registering on our website (after creating an account).
3.3. When you visit our website and use our website (using cookies).
4. Purposes for personal data processing
4.1. Palvitana, UAB processes personal data for the following purposes:
4.1.1. execution and administration of ongoing activities (retail, electronic commerce);
4.1.2. concluding and executing sales contracts;
4.1.3. customer service.
4.1.4. The data of the visitors of the website of Palvitana, UAB may be processed for other purposes as well, if the consent has been obtained.
5. Legal grounds
5.2. Palvitana, UAB processes personal data for the purposes of performing direct marketing activities and/or sending newsletters or other information, with the consent of the data subjects.
6. Access to and transfer of personal data
6.1. Employees of Palvitana, UAB have access to the personal data of data subjects if this data is necessary for the performance of their duties.
6.2. Palvitana, UAB may involve third parties (partners, service providers), providing services to visitors of the website, selling and delivering goods (e.g. courier companies, etc.), maintaining a website and an e-commerce platform (e.g. an IT service company, etc.). In this case, only the personal data transferred to the third party (partners, service providers) necessary for the provision of the service and ensuring that the third party guarantees the necessary level of protection of personal data. Your personal data may also be transferred to other persons when required by law.
6.3. Palvitana, UAB ensures that personal data is not transferred outside the EEA.
7. Personal Data Safety
7.1. Personal data is stored on servers located in the European Union.
7.2. Palvitana, UAB applies appropriate technical and organizational measures to ensure the security of personal data, including protection against unauthorised processing, accidental loss, destruction or damage.
7.3. In the event of a personal data breach which may pose a significant risk to the privacy of visitors to the Website of Palvitana, UAB, Palvitana, UAB shall notify the data subjects themselves and the authorities of such violation.
7.4. The data subject is responsible for ensuring that the data provided by his Palvitana, UAB is accurate, correct and complete. If the data provided by the visitor changes, he must immediately inform Palvitana, UAB. Palvitana, UAB will not be liable for any damage caused to the visitor due to incorrect or incomplete personal data or for not informing the Data Controller of any change.
8. Rights of the Data Subject
8.1 Visitors to the website of Palvitana, UAB, whose data are processed in the activities of the data controller, shall have the following rights:
8.1.1. know (be informed) about the processing of one’s personal data (right to know);
8.1.2. to have an access to your personal data and to be informed of how they are processed (right to access);
8.1.3. to request to correct or supplement the incomplete personal data (right to rectify), taking into account the purposes for the processing of personal data;
8.1.4. destroy one’s data or suspend the processing of one’s data (except for storage) (right to destroy and right to “be forgotten”);
8.1.5. require the data manager to restrict the processing of personal data for one of the legitimate reasons (right to limit);
8.1.6. right to data transfer (“right to transfer”);
8.1.7. the right to object to the processing of his personal data or to withdraw his consent to the processing of personal data at any time, that personal data are processed for one or more specific purposes, without prejudice to the lawfulness of the processing based on consent prior to the withdrawal of consent.
8.1.8. Palvitana, UAB may not delete personal data if there is a legitimate interest in storing them.
8.1.9. Data subjects shall have the right to withdraw their consent at any time to use data for which they have given their consent for certain purposes.
8.1.10. Palvitana, UAB may not give you the conditions for the implementation of the above-mentioned rights, where in the cases provided for by law it is necessary to ensure the prevention, investigation and detection of crimes, violations of professional or ethical conduct, as well as the protection of the rights and freedoms of the data subject or other persons.
8.1.11. In order to exercise your rights, you have the right to send an e-mail request to email@example.com or to contact +370 676 53254. For this purpose, Palvitana, UAB has an approved application form for the implementation of the data subject's rights. Palvitana, UAB informs that in case of doubts about the identity of the person, the Data Controller may request additional information in order to correctly identify the person.
9. Personal data storage
9.1. The personal data of visitors to the Website of Palvitana, UAB will be stored during the period of service (order execution) of Palvitana, UAB and another 5 (five) years after the order was fulfilled. The concluded contracts are stored for 5 (five) years after the day of performance of the contract, after the expiration of the contract or its termination. After 5 (five) years, personal information will be deleted. The data used during registration is stored for 5 (five) years from the last active action in the website account.
9.2. Personal data may be stored anonymously for research purposes.
9.3. In the event of a dispute, personal data shall be stored until the dispute is resolved.
11. Other provisions
11.1. The e-mail address and/or telephone number of the visitors of the Palvitana, UAB website will be used to send notifications. If website visitors do not want to be informed, they can opt out of these posts.
11.2. Should you have any questions, requests or complaints regarding the processing of personal data of Palvitana, UAB website visitors, please contact Palvitana, UAB. Visitors to the website of Palvitana, UAB have the right to file a complaint with the State Data Protection Inspectorate (firstname.lastname@example.org or L. Sapiegos g. 17, Vilnius), if they learn that their rights have been violated in the processing of personal data.