We confirm that data of visitors will be collected in accordance with the requirements of the valid legal acts of the European Union and the Republic of Lithuania and the instructions of the controlling authorities. All reasonable technical and administrative measures are in place to protect our collection of Store Visitor data from loss, unauthorized use and alteration.
NAME AND ADDRESS OF THE CONTROLLER
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
UAB SHOPPY LT, 302684450
M. Buksos st. 12-7, Vilnius
Phone: +370 622 99916
What information do we collect about you?
During your visit to our Store, we collect and process data about you. Personal Data includes, without limitation, the data you submit when you register at our store, browse through it and/or purchase goods. Personal data is Your name, surname, e-mail address, postal address, telephone number, shipping address and billing address, signature (in case of claiming your online purchases), date of birth, age, payment method, purchase history, username, and payment details.
Registration on our website
The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data are transmitted to the controller is determined by the respective input mask used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes. The controller may request a transfer to one or more processors (e.g. a parcel service) that also uses personal data for an internal purpose which is attributable to the controller.
How we use your information
We may use your information for a range of different purposes, including:
•to provide products and services to you;
•to communicate with you, including about products and services, competition results, special offers, and events which might interest you;
•to answer your questions and provide you with information or advice;
•to create orders, agreements for the sale of products or services, accounts, tax invoices or receipts
•to gain an understanding your information to improve or develop our products and services;
•to provide you with better customer services;
•to perform research and analysis;
•to send out newsletters, submit advertisements, and send out promotions, evaluate and analyze our market, customers, products and services (including collecting your opinion on products and services and organizing customer surveys). You may send newsletters with your consent (you give this consent by entering your e-mail address on the newsletter order form or by checking in the registration form that you agree to receive notices of discounts, sell-outs, and special offers, etc.);
•to carry out administration, marketing, planning, fraud and loss prevention activities, procurement, product and service development, quality control and research to improve the way The Iconic and our related bodies corporate and service providers provide products and services to you; and;
•to comply with laws or regulations or to comply with any directions given by regulators or authorities.
We may also use your information so that we, our related entities, other business or commercial partners can promote and market products, services and special offers that will be of interest to you (which may include products, services and offers provided by a third party).
We collect aggregate information about you which informs us about our users. The browser information we collect is used in an aggregated, anonymous manner in our internal analysis of traffic patterns within our Site. This information is used by us to administer and improve our education and training products and services.
When we disclose your information
We engage a range of third parties to provide services and perform business support functions for us. Some of those third parties need access to Personal Information in order to provide the services or perform the functions we require. Therefore, we may disclose your information to these third parties to:
•assist us in providing products and services you have requested, such as delivery service providers and fulfillment managers;
•conduct market research and marketing strategy analysis; and
•manage or develop our business and corporate strategies and functions.
Where we share your Personal Information with third party service providers, they will be contractually bound to use the information only for the purposes of providing the services or performing the functions required by us and to store the information securely, for example, storing in non-human readable form to ensure the security of your information.
We do not disclose personal information to overseas recipients who are located outside European Union.
Data protection for minors
Persons under the age of 16 cannot provide any personal data through our Store. If you are a person below the age of 16, you must obtain the consent of your parent or other legal guardians before submitting personal information.
To protect your personal data, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
We generally store information for up to three years. We may store (aggregated) data longer if needed for tax or accounting reasons.
You have several rights under the data privacy legislation. This includes, under certain circumstances, the right to:
• request access to your personal data
• request correction of your personal data
• request erasure of your personal data
• request restriction of processing of your personal data
• request the transfer of your personal data
• object to the processing of your personal data
• object to automated decision making
Brief details of each of these rights are set out below:
REQUEST ACCESS TO YOUR PERSONAL DATA
You have the right to obtain a copy of the personal data we hold about you and certain information relating to our processing of your personal data.
REQUEST CORRECTION TO YOUR PERSONAL DATA
You are entitled to have your personal data corrected if it is inaccurate or incomplete. You can update your personal data at any time by logging into your account and updating your details directly, or by emailing us at email@example.com
REQUEST ERASURE OF YOUR PERSONAL DATA
This enables you to request that Boutique Guru delete your personal data, where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
REQUEST RESTRICTION OF PROCESSING YOUR PERSONAL DATA
You have a right to ask Boutique Guru to suspend the processing of your personal data in certain scenarios, for example, if you want us to establish the accuracy of the data, or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Where processing is restricted, we are allowed to retain sufficient information about you to ensure that the restriction is respected in future.
REQUEST THE TRANSFER OF YOUR PERSONAL DATA
You have the right to obtain a digital copy of your personal data or request the transfer of your personal data to another company. Please note though that this right only applies to automated data which you initially provided consent for us to use or where we used the data to perform a contract with you.
OBJECT TO PROCESSING OF YOUR PERSONAL DATA
You have the right to object to the processing of your personal data where we believe we have a legitimate interest in processing it (as explained above). You also have the right to object to our processing of your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data which override your rights and freedoms.
OBJECT TO AUTOMATED DECISION MAKING & PROFILING
You have the right to object to the automated processing of your personal data without human intervention. This form of processing is permitted where it is necessary as part of our contract with you, providing that appropriate safeguards are in place or your explicit consent has been obtained.
We will try to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. We may need to request specific information from you to help us confirm your identity and ensure your right to exercise any of the above rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Third-party sites, services, and products in our store
The Data Manager Store may contain third-party site advertisements, links to their websites and services that are not controlled by the Data controller. The controller is not responsible for the safety and privacy of information collected by third parties. You must read the privacy practices applicable to third-party websites and services that you use.
By phone: +370 622 99916
By email address: firstname.lastname@example.org
We will endeavor to provide a response as soon as possible, but not later than within one month of receipt of the request unless additional time is required due to the scope of the question.
The document was approved in 2018, on May 23, manager's order no. TV-PP-18-03