KEY DEFINITIONS

1.1. Company or Data Controller – MB Be Festive, a private limited liability company incorporated and operating under the laws of the Republic of Lithuania, company registration number 306760874, registered address I. Simonaitytės g. 6-9, Vilnius.

1.2. Customer or Data Subject – a natural person who is a customer of the Company (including website visitors) whose Personal Data is collected by the Company.

1.3. Online Store – the Company’s online store at festive.lt.

1.4. Services – all services provided by the Company.

1.5. Personal Data – any information relating to a natural person – the Data Subject – whose identity is known or can be directly or indirectly determined using data such as a personal identification number or one or more physical, physiological, psychological, economic, cultural or social characteristics specific to that person.

1.6. Processing of Personal Data – any operation performed on personal data: collection, recording, accumulation, storage, classification, grouping, combining, alteration (supplementing or correcting), provision, publication, use, logical and/or arithmetic operations, retrieval, dissemination, destruction, or any other operation or set of operations.

1.7. Partner – a legal entity that provides services to the Company related to its activities, sells goods to it, or carries out joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programmes, etc., in the media, on websites, in the Online Store, in retail stores, retail chains, etc.

1.8. Cookie – a small piece of text information that is automatically created when browsing a website and is stored on the visitor’s computer or other device.

1.9. Direct Marketing – activities intended to offer goods or services to individuals by post, telephone or other direct means and/or to ask for their opinion on the goods or services offered.

1.10. Privacy Policy – means this document, which sets out the principles and rules for the Processing of Personal Data when using the services of the Online Store.

1.11. Account – the Customer’s basic login details for the Online Store, consisting of one email address and a Password.

1.12. Password – a unique combination of numbers, letters, or numbers and letters or other symbols created by the Customer, which, when entered, allows the Customer to log in to the Online Store.

GENERAL PROVISIONS

2.1. The Customer grants the Company the right to perform all Personal Data Processing operations to the extent and for the purposes set out in this Privacy Policy.

2.2. Personal Data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing and protection of Personal Data, as well as this Privacy Policy.

2.3. The Company processes Personal Data in accordance with the following principles:

2.3.1. Personal Data is collected for defined and lawful purposes;

2.3.2. Personal Data is processed accurately, fairly and lawfully;

2.3.3. Personal Data is adequate and only of the scope necessary for its collection and further processing;

2.3.4. Personal Data is kept up to date;

2.3.5. Personal Data is stored in a form that allows the identity of the Data Subject to be determined for no longer than is necessary for the purposes for which the data was collected and processed.

2.3.6. All information about Personal Data is confidential;

2.3.7. The Customer’s Personal Data and personal information will not be used for unlawful purposes.

2.4. By making a purchase in the Online Store, the Customer is deemed to have read the current version of the Privacy Policy and to agree to it. If the Customer does not agree with any part of the Privacy Policy or with the Privacy Policy as a whole, the Customer must not place an order or purchase goods in the Online Store.

2.5. The Privacy Policy is available in the Online Store and can be printed at any time. The Privacy Policy may be amended, supplemented or updated at the Company’s discretion. The new version of the Privacy Policy is published in the Online Store.

2.6. The Customer may place an order in the Online Store without registration, or via their Account after registering in the Online Store.

2.7. Upon initial registration with the Online Store via an Account, the Customer must provide their email address, create a secure Password, and provide accurate Personal Data to the Online Store. The Customer is responsible for its accuracy. Once the Account is created, the Customer is assigned an identification code.

2.8. When using the Services and when purchasing in the Online Store, the Customer must always provide accurate Personal Data to the Online Store and is responsible for its accuracy.

2.9. The Customer has the right to change and supplement the Personal Data in their Account at any time, or to contact the online store with a request to delete the Account.

2.10. The Customer must not disclose the Password to third parties and must keep it secure; otherwise, all related liability rests with the Customer.

COLLECTION, USE, CORRECTION AND
STORAGE OF PERSONAL DATA

3.1. The Company respects every Customer’s right to privacy. The Customer’s Personal Data (i.e. first name, surname, email address, telephone number, delivery address of the goods/services, age/year of birth, payment details for the goods/services (bank account number, payment method, etc.), purchase history, and also, with the Customer’s consent, age, gender, date of birth and place of residence) is collected and processed for the following purposes:

3.1.1. For the purpose of e-commerce. The following Personal Data is processed: first name, surname, email address, telephone number, delivery address of the goods/services, age/year of birth, IP address, payment details for the goods/services. Personal Data used for the purpose of e-commerce is stored for 5 (five) years from the date of the last login to the Online Store.

3.1.2. For the purpose of Direct Marketing. The following Personal Data is processed: first name, surname, telephone number, email address, address, age, gender, date of birth, place of residence. Personal Data used for the purpose of Direct Marketing is stored for 5 (five) years from the date of the last login to the Online Store.

3.2. The Customer may give consent to the processing of their Personal Data (first name, surname, telephone number, email address, address, age, gender, date of birth, place of residence) for the purpose of Direct Marketing. If, having given consent to the processing of their data for the purpose of Direct Marketing and to receiving Direct Marketing messages, the Customer later no longer wishes this and informs the Company accordingly, the Company will no longer process their Personal Data for the purpose of Direct Marketing and will not send the Customer any electronic newsletters, except for information related to the Customer’s order.

3.3. The Customer has the right at any time to withdraw the consent referred to in clause 3.2 for the Company to process the Customer’s Personal Data for the purpose of Direct Marketing, by submitting a corresponding notice to the Company by email at [email protected], clearly stating that they withdraw their consent to the use of their Personal Data for the purpose of Direct Marketing and do not wish to receive any Direct Marketing messages.

3.4. The Customer also has the option to exercise their right to object to the processing of the Customer’s Personal Data for the purpose of Direct Marketing by clicking the corresponding link included in every email sent.

3.5. The Customer, as a Data Subject, has the following rights related to the procedures for processing the Customer’s Personal Data:

3.5.1. to receive information from the Company about the processing of the Customer’s Personal Data, and to access their Personal Data and how it is processed;

3.5.2. to receive information from the Company about the sources from which and the types of the Customer’s personal data that have been collected, the purpose for which it is processed, and the data recipients to whom it is provided and has been provided at least during the last 1 (one) year;

3.5.3. to demand the rectification or destruction of the Customer’s Personal Data, or the suspension of the processing of their Personal Data, except for storage, where the Personal Data is processed in violation of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws.

3.6. To exercise their rights, the Customer must present a passport, identity card or driving licence. The Company provides the Data Subject with information about the Data Subject’s Personal Data being processed free of charge once a year. To exercise the rights set out in clause 3.5, the Customer may contact the Company by email at [email protected]. The Company has the right to correct, change or delete Personal Data, or to suspend the processing of Personal Data, only after verifying the identity of the Customer who submitted the request.

3.7. The Customer’s Personal Data is not provided to third parties, except in the following cases:

3.7.1. Where the Customer’s consent has been obtained, as set out in this Privacy Policy;

3.7.2. Personal Data is provided for e-commerce purposes to Partners providing the Company with services related to the Company’s activities;

3.7.3. To competent authorities in the cases provided for by the laws and legal acts of the Republic of Lithuania.

3.7.2. Payments in the Online Store are processed via the makecommerce.lt platform, operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no. 12268475); therefore, your personal information required to execute and confirm the payment will be transferred to Maksekeskus AS.

3.8. The Customer is aware of their right to object to the processing of their Personal Data for the purpose of Direct Marketing, i.e. the Customer has the right to express their objection immediately or later.

3.9. The Customer agrees that their Personal Data may be transferred to Partners for the fulfilment of the Customer’s order placed in the Online Store, when the Company provides the Services to the Customer, and to the Company’s Partners as set out in clause 3.7.

3.10. If the Customer does not agree with the Privacy Policy, the Customer will not be able to use the services of the Online Store.

3.11. The Company implements organisational and technical measures designed to protect Personal Data against accidental or unlawful destruction, alteration or disclosure, as well as against any other unlawful processing.

3.12. The Customer agrees that, in cases where this is necessary pursuant to instructions from competent authorities and/or where the Customer’s Personal Data may have been used in unlawful activities, or where there are reasonable suspicions of identity theft in respect of which the competent law enforcement authorities are conducting a pre-trial investigation, or where there are other legitimate grounds or purposes, their Personal Data may be stored on the Company’s servers for longer than set out in this Privacy Policy.

3.13. Upon receiving a Data Subject’s instruction or enquiry related to the processing of Personal Data, the Company provides the Customer with a response, either granting the request/instruction or providing a reasoned refusal to do so, no later than within 30 (thirty) calendar days from the date of the Data Subject’s request. If the Data Subject so wishes, the response must be provided in writing.

3.14. In order for the Company to be able to offer the Customer full-featured services in the Online Store, with the Customer’s consent, information in the form of Cookies is stored on the Customer’s computer (device). This information is used to recognise the Customer as a previous user of the Online Store, to collect Online Store visitor statistics, and to gather information about the shopping cart. The Customer may at any time review which Cookies are stored and may delete some or all of the stored Cookies.

3.15. To learn more about cookies, for example how to manage or delete them, you can visit www.allaboutcookies.org.

OTHER PROVISIONS

4.1. The Company has the right to amend or supplement the Privacy Policy in whole or in part. Amendments or supplements to the Privacy Policy take effect from the date of their publication.

4.2. If you have any questions, please contact us at: [email protected]