1. General provisions
1.1. This Privacy Policy (hereinafter referred to as the ” Policy“) governs the privacy practices of MB “Izoforma”, Inc. 304778126 , registered office address: S.Fino g. 10-5, Vilnius, Lithuania (hereinafter referred to as “Website“), operates the principles and procedures for the processing of personal data on the website https://veidrodisplius.lt/ (hereinafter referred to as ” Website“).
1.2. We want to ensure that users of our services, visitors to the Website and others whose personal data we process have full confidence in our services and are transparent about how we process their data. In this Policy you will find information about how we collect and use (or wish to collect and use) your personal data.1.3 We are guided by the following data processing principles in the course of our activities:
1.3.1. Personal data must be processed in a lawful, fair and transparent manner in relation to the data subject (principle of lawfulness, fairness and transparency);
1.3.2. Personal data must be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; further processing for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes shall not be considered incompatible with the original purposes (purpose limitation principle);
1.3.3. Personal data must be adequate, relevant and only necessary for the purposes for which they are processed (principle of data minimisation);
1.3.4. Personal data must be accurate and, where necessary, kept up-to-date; all reasonable steps must be taken to ensure that personal data which are not accurate in relation to the purposes for which they are processed are erased or rectified without undue delay (the accuracy principle);
1.3.5. Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be retained for longer periods if the personal data are to be processed solely for archiving purposes in the public interest, for the purposes of scientific or historical research, or for statistical purposes, subject to the implementation of the appropriate technical and organisational measures necessary to safeguard the rights and freedoms of the data subject (the principle of limitation of the period of storage);
1.3.6. Personal data must be processed in such a way as to ensure, through appropriate technical or organisational measures, adequate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage (integrity and confidentiality principle);
1.3.7. We are responsible for ensuring compliance with the above principles and must be able to demonstrate compliance (the accountability principle).
1.4. This Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the ” GDPR“), the Law on the Legal Protection of Personal Data of the Republic of Lithuania (” LPPD“), and other legal acts of the European Union and the Republic of Lithuania. The terms used in the Policy shall be understood as defined in the GDPR and the DPAA.
2. Collection, processing, storage of personal data
2.1. It is very important that you read the Policy carefully, because when you visit the Website and use our services, this Policy will be directly applicable to the collection, processing, and, in the cases provided for in the Policy, transfer of your personal data to the recipients of the data.
2.2. If you do not agree with this Policy and the processing of personal data described in it, please do not visit the Website and/or use our services.
2.3. You are responsible for ensuring that the data you provide is accurate, correct and complete. Entering knowingly incorrect data is a breach of the Policy. You must inform us if there is any change to the data you have provided. Under no circumstances shall we be liable for any damage caused to you and/or third parties as a result of you providing incorrect and/or incomplete personal data or failing to request that the data be updated and/or amended following a change in it.
2.4. The entities to which we may disclose your personal data are described under each processing activity.
2.5. In certain cases, we may disclose your information to entities other than those specified:
2.5.1. To comply with the law or in response to a mandatory requirement of a court proceeding (e.g. following a court order to provide data);
2.5.2. To confirm the legality of your actions;
2.5.3. To protect your rights, property or security;
2.5.4. In other cases, with your consent or at your lawful request.
3. Conducting e-commerce
3.1. In order to provide you with the opportunity to shop in the online shop on the Website, we process the following personal data about you for the purpose of providing this service:
3.1.1. Name;
3.1.2. Name;
3.1.3. Gender (referent);
3.1.4. Telephone number;
3.1.5. Email address;
3.1.6. Address of place of residence;
3.1.7. If necessary, additional information provided by the consignee for delivery (e.g. stairwell door code).
3.2. The legal basis for the processing of data for the purpose of carrying out e-commerce is Article 6(1)(b) GDPR – processing for the performance of a contract concluded with you in connection with the purchase of goods.
3.3. For this purpose, MB “Izoforma” uses the data obtained from you for the purpose of dispatching the goods you have ordered and invoicing you. For the delivery of goods, Izoforma MB uses parcel delivery companies.
5. Organising the loyalty programme and carrying out related direct marketing
5.1. MB Izoforma provides loyalty programme members with what can be described as “direct marketing” – email newsletters, email and SMS information about promotions and discounts. Accordingly, if you are a participant in the loyalty programme, MB Izoforma processes such personal data on the basis of your consent for the purpose of organising the loyalty programme and carrying out the related direct marketing:
5.1.1. Name;
5.1.2. Name;
5.1.3. Email address;
5.1.4. Telephone number;
5.1.5. City;
5.1.6. Date of birth;
5.1.7. Information on goods purchased, types of goods and amounts spent.
5.2. MB Izoforma receives data directly from you and uses it for direct marketing purposes.
5.3. The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR – your consent as a participant in the loyalty programme.
5.4. You have the right to withdraw your consent to receive communications by email and/or SMS at any time, without prejudice to the lawfulness of the processing based on your consent prior to the withdrawal, but in this case we will no longer be able to provide you with special offers and other information related to the loyalty programme.
6. Procedures and time limits for storing personal data
6.1. When processing and storing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.
6.2. We apply different retention periods depending on the purpose for which your personal data is processed.
6.3. We apply the following retention periods for personal data:
Purpose of processing of personal data – Conduct of e-commerce
Retention period – MB Izoforma – the data of registered users is stored for 3 years after the last visit to the Website. Data of other customers is stored for 3 years after the last purchase of goods.
6.5. In the event that certain of your personal data are necessary for the establishment, exercise or defence of legal claims, we will retain them to the extent necessary for such purposes in accordance with judicial, administrative or extrajudicial proceedings.6.4.Exceptions to the above retention periods may be made to the extent that such exceptions do not infringe your rights as a data subject, are in accordance with the legal requirements, and are properly documented.
7. Your rights
7.1. You have the right, at any time, upon request, to have access to your personal data processed by us and to know how they are processed, to request the rectification of incorrect, incomplete or inaccurate personal data, and to request the suspension of the processing of your personal data, except for the storage of your personal data, if the data are processed in a way that does not comply with the requirements of the legislation.
7.2. To the extent that the processing of personal data is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent prior to the withdrawal of consent.
7.3. You can exercise your rights by submitting a written request to Šiuolaikinės at info@veidrodisplius.lt or by sending your request by post to S.Fino g. 10-5, Vilnius.
8. Contact information and complaint procedure
8.1. If you have any questions regarding the protection of personal data, please contact us at info@veidrodisplius.lt.
8.2. If you are not satisfied with our response or if you believe that we are not processing your data in accordance with legal requirements, you have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania as a supervisory authority.
9. Information on the use of cookies
9.1. When you visit the Website, we want to provide you with content and functionality that meets your needs. To do this, we use cookies. Cookies are small text files that are stored on your browser or device (personal computer, mobile phone or tablet).
9.2. We use cookies to provide a better experience for people browsing the Website and to improve the Website itself.
9.3. The cookies used on our Website can be grouped into the following types:
9.3.1. Cookies are essential for the operation of the website and are used to enable the website to perform basic functions. These cookies allow you to navigate the website and use the features you want, for example, to access secure areas of a particular website.
9.3.2. Performance (analytical) cookies collect anonymous information about how visitors use the website. By providing information about the areas visited, the time spent on the site and any problems encountered, such as error messages, these cookies help us understand how visitors behave on the site. This information helps us to improve the performance of the website.
9.3.3. Functional cookies improve your experience on the website. For example, these cookies may remember information such as your saved bookmarks and username.
9.4. We use the following cookies:
9.4.1. Google Analytics cookies are analytical cookies used to collect statistical information about website traffic, to maintain the user’s session and to identify unique visitors.
9.4.2. Wordpres cookies are functional cookies used to maintain the user’s session, to enable you to register and log in to the Website, to make purchases and to carry out other related actions.
9.4.3. The cookie “favourite_products_id” is a functional cookie used to store marked products.
9.4.4. The “soundest-views” and “soundestID” cookies are analytical cookies used to determine the number of times the Website is accessed and to identify unique users.
9.4.5. The cookie “viewedOuibounceModal” is a functional cookie used to determine whether a customer has seen a message on the exit page offering to subscribe to a newsletter.
9.4.6. The “accept-cookies” cookie is a functional cookie that is directly linked to other analytical cookies.
9.5. You can delete or block cookies by selecting the appropriate settings in your browser to refuse all or some cookies. Each browser is different, so if you don’t know how to change your cookie preferences, you should be able to find this information in your browser’s help menu. Please be aware that if you use browser settings that block cookies (including essential cookies), you may have problems using all or part of the features of the Website.
10. Processing of personal data by third parties
10.1. When using third-party services, for example, when visiting our Facebook social network account, third-party terms and conditions may apply. For example, Facebook applies a Data Policy to all its users and visitors. Therefore, when using the services of such third parties, it is recommended that you familiarize yourself with their terms and conditions.
11. Final provisions
11.2. Legal relations related to this Policy shall be governed by the law of the Republic of Lithuania.
11.3. We shall not be liable for any damages, including damages caused by interruptions in the use of the Website, for loss or corruption of data caused by acts or omissions by you or by third parties acting with your knowledge, including erroneous data entry, other errors, wilful damage, or other misuse of the Website. We are also not liable for any interruptions to access and/or use of the Website and/or any damage caused by such interruptions and/or damage caused by the acts or omissions of third parties not affiliated with us, you or other data subjects, including power outages, Internet access failures, etc.
11.4. This Policy shall be reviewed and, if necessary, updated at least once every two years. Amendments or changes to the Policy shall take effect from the date of their publication on the Website.
11.5. If you use the Website and our services after the Policy has been updated, we will assume that you do not object and that you are aware of the changes made.