We are commited to protecting and respecting your privacy and make every effort that our personal data processing would comply with the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27 on the protection of individuals with regards to the processing of personal data and on the free movement of such data and therefore repealing the Directive 95/46/EC (further referred to as “General Data Protection Regulation” or “GDPR”).
Please read this Privacy Policy carefully in order to understand why and how we collect your personal data as well as how we use it.
Your personal data manager is UAB Magijos Kvapas, legal entity code 300110300, address Mėsinių St.7, Vilnius, Lithuania, e-mail [email protected].
how we use your personal data;
what data we disclose to the third parties;
how long we retain your personal data;
marketing announcements;
your rights;
how we use cookies;
children‘s personal data management;
amendments to Privacy policy;
how to contact us;
On your first visit of our website we will ask to confirm that you agree to the use of cookies under the terms set out in this Privacy Policy.
If you have any questions regarding applicable personal data and privacy protection provisions, please contact us via e-mail [email protected].
YOUR NAME, SURNAME AND CONTACT DATA
| How do we use data? | Why do we use them? |
| Delivering your purchased goods to your specified payer and delivery address. For this purpose we will retain your data for a maximum of 10 (ten) years from the date of your last transaction. | This is necessary for us to adhere to the contractual obligations with you. It would be very complicated to deliver the purchased goods to you when your name, surname and contact data are not provided. |
| Sending you information about our new products and services via e-mail, SMS, Facebook and Gmail platforms or regular mail. For this purpose your data will be retained for a period not longer than 2 (two) years upon receiving your consent or until your withdrawal of it. | By the following we are aiming at your awareness of up-to-date information. We send this information within your consent. When sending SMS messages related to our services, emails or messages via our applications, e.g., up-to-date order information and questionnaires to evaluate our service quality. |
| For this purpose your personal data will be retained for a period not longer than 1 (one) year after the termination of communication. | This is necessary for us to adhere to our contractual obligations with you (for you to know when purchased goods will be delivered to you). Therefore, questionnaires are needed to asses the quality of our services aiming at legal interest to improve it (you can cancel the receipt of such questionnaires by emailing us at [email protected] or by following the cancelation link in an e-mail). |
| Organising competitions.
For this purpose your data will be retained for a period not longer than 2 (two) years upon closing the competition and for a period not longer that 10 (ten) years upon delivering a prize in case of winning. |
This is necessary for us to adhere to our contractual obligations with you. If we cannot use your personal data, you will not have an opportunity to win. |
| Trying to identify you upon receiving your order by phone. | This is necessary to process your order by phone. |
| On fraud prevention and detection
For this purpose your data will be retained for a period not longer than 3 (three) years from your last login into your account or for a period not longer than 10 (ten) years of your last transaction (whichever is later). |
This is necessary to prevent and detect fraud in order to protect both, i.e. you and us. |
INFORMATION ABOUT YOUR INTERESTS, CITY, GENDER AND PLACE OF RESIDENCE
| How do we use data? | Why do we use them? |
| Aiming at knowing your actual age.
For this purpose your data will be retained for a period not longer than 3 (three) years from your last login into your account or the day of your last transaction (whichever is later). |
Services provided on our website are not intended for persons under 14. |
| Applying the segmentation strategy of our customers. For this purpose your data will be retained for a period not longer that 2 (two) years upon receiving your consent or untill your withdrawal of it. | By the following we strive to better service of your interests. Instead of general notifications only information pertaining to your personal topics of interest will be sent. |
| When sending you questionnaires by e-mail in order to evaluate our service quality. For this purpose your data will be retained for a period not longer than 2 (two) years upon receiving your consent or untill your withdrawal of it. | Questionnaires to assess the quality of our services. This helps us to improve our service quality (you can cancel the receipt of such questionnaires by emailing us at [email protected] or by following the cancelation link in an e-mail). |
PAYMENT INFORMATION
| How do we use data? | Why do we use them? |
| Accepting and refunding money.
For this purpose your personal data will be retained for a period not longer than 10 (ten) years upon completing the operation. |
This is necessary for us to adhere to our contractual obligations with you. |
| Payment card information
Your payment card information data will be retained upon your consent.The data will be retained for your account validity period or untill your withdrawal of the consent. |
We do this for your purchasing convenience. |
| On fraud prevention and detection
For this purpose your data will be retained for a period not longer than 3 (three) years from your last login into your account or for a period not longer than 10 (ten) years of your last transaction (whichever is later). |
This is necessary to prevent and detect fraud in order to protect both, i.e. you and us. |
COMMUNICATION HISTORY
The information provided by you via phone (a record of a telephone conversation or a missed voice message when you call our customer service line) or via e-mail.
| How do we use data? | Why do we use it? |
| Providing services and assistance to ensure consistant and good quality service.
The data of this communication will be retained for a period not longer that 1 (one) year upon the termination of communication. |
This is necessary for us to adhere to our contractual obligations with you. |
PURCHASE AND ACTION HISTORY
| How do we use data? | Why do we use it? |
| Selling goods to you.
For this purpose your data will be retained for a period not longer than 3 (three) years from your last login into your account or your last transaction (whichever is later). |
This is necessary to adhere to our contractual obligations with you (for this purpose we use only your purchase history). |
| Providing services and assistance as well as handling refund issues.
For this purpose your data will be retained for a maximum of 3 (three) years from your last login into your account or your last transaction (whichever is later). |
This is necessary to adhere to our contractual obligations with you (for this purpose we use only your purchase history). |
| Sending e-mails about the shopping cart with an item / items in it.
For this purpose your data will be retained for a maximum of 2 (two) years upon receiving your consent or untill your withdrawal of it. |
This is also necessary to remind you that there is an item added in your shopping cart. At the bottom of each newsletter you will find the functions of your order removal and settings management. |
| Sending personalised emails to you.
For this purpose your data will be retained for a maximum of 2 (two) years upon receiving your consent or untill your withdrawal of it. |
By this, we strive to meet your needs, reflect your interests and ensure the highest level of service. At the bottom of each newsletter you will find the functions of order removal and settings management. |
| Sending you questionnaires to assess our service quality via e-mail
For this purpose your data will be retained for a maximum of 2 (two) years upon receiving your consent or untill your withdrawal of it. |
Questionnaires to assess the quality of our services. This helps us to improve our service quality (you can cancel the receipt of such questionnaires by emailing us at [email protected] or by following the cancelation link in an e-mail). |
DEVICE INFORMATION
The information you provide us while browsing our website or using applications including Internet Protocol (IP) address and device type, screen resolution and (choosing the sharing of information with us) and your location information as well as information about your usage of our website and applications.
| How do we use data? | Why do we use it? |
| Aiming at improving our applications and website as well as the setting of your default options.
For this purpose your data will be retained for a period not longer than 3 (three) years from your last login into your account or your last transaction (whichever is later). |
By this we strive at ensuring the most enjoyable shopping experience. |
| Aiming at protecting our website and applications.
For the following purpose your data will be retained for a period not longer than 3 (three) years from your last login into your account and for a period not longer that 10 (ten) years from your last transaction (whichever is later). |
This is necessary to prevent and detect fraud and to protect both, i.e. you and us. |
INFORMATION OBTAINED WHEN LOGGING VIA GOOGLE OR FACEBOOK
| How do we use data? | Why do we use it? |
| Aiming at providing access to our website and applications we will retain your data for a maximum of 3 (three) years from your last login into your account or your last transaction (whichever is later). | In this way, we ensure easier ways to use our website and purchase the goods you like. |
LOYALTY CARD INFORMATION
| How do we use data? | Why do we use them? |
| To enable you to participate in a loyalty program.
We will retain loyalty card data for this purpose for a period not longer than the expiry date of your loyalty card. |
We want you to take the advantage of loyalty programs. By participating in a loyalty program you can purchase our goods at lower prices. |
| Insurers and professional consultants | We can disclose your personal data to our insurers and professional consultants for risk management, professional advice or filing, enforcement or defense of legal claims. |
| Payment service providers | Financial transactions related to the purchase of goods on the website may be handled by our payment service providers. We only disclose your financial transaction information to our payment service providers to the extent necessary for the execution of payment transactions, refunds and complaints. |
| Other service providers | For the purpose of providing specific services, we may disclose your personal data to other service providers such as website hosting providers, courier services, servers and their maintenance providers, email service providers, nesletter service providers, survey service providers. When concluding an agreement with such service providers, we take all necessary measures to ensure that our data processors also keep personal data confidential. |
We may transfer your personal data not only in the specific cases outlined above but also in accordance with our legal obligations and when it is necessary to protect the vital interests of yours or others. For direct marketing purposes we may transfer personal data to our partners upon your consent.
These data recipients may also be established outside the Republic of Lithuania, the European Union or the European Economic Area. When transferring your personal data to such persons we will take all necessary legal measures to ensure that your rights to privacy and protection of personal data are properly protected.
This section of the Privacy Policy gives you an overview of your rights under data protection regulations. Some rights cover many aspects, therefore only the main ones are presented in the following report. We recommnend you consulting relevant legislation and guidelines of the supervisory authorities in order to be fully aware of these rights.
If you would like to exercise your rights, or if you have any questions regarding the processing of your personal data or exercise of the rights, please e-mail us at [email protected].
If you think that your personal data are being processed in violation of data protection regulations, you have the right to file a complaint to the National Data Protection Inspectorate. registered address L.Sapiegos St. 17,10612 Vilnius, www.vdai.lrv.lt. Prior to filing your complaint, please contact us to solve the situation together.
RIGHT TO RECEIVE INFORMATION ABOUT PERSONAL DATA PROCESSING
Information about you personal data processing is provided upon collecting your data. You can always find it in this Privacy Policy or receive it by emailing us at [email protected].
RIGHT OF ACCESS TO PERSONAL DATA
You have the right to obtain a confirmation from us that we are processing personal data relating to you. When we process your personal data, you have the right of access to the personal data that we process as well as information on the processing such as the purposes of processing, the categories of personal data, the recipients of the personal data, etc. We will provide you with a copy of personal data if that the rights and freedoms of other individuals are not violated.
RIGHT TO REQUEST CORRECTION OF PERSONAL DATA
You have the right to correct any inaccurate personal data and to supplement any incomplete personal data taking into account the purposes of the processing.
RIGHT TO REQUEST DELETION OF DATA
Under certain circumstances you have the right to ask to delete your personal data. You can exercise the right when: (i) the data is no longer required in order to fulfill aims the data was collected for or processed in any other way; (ii) your consent has been revoked and there is no legal basis to process your data; (iii) you do not agree your data to be processed aiming at our legal or third party interest; (iv) personal data are processed for direct marketing services, (v) unlawful processing of personal data; (vi) personal data have to be deleted in accordance with the legal regulations applicable to us. However, please take into consideration that under certain circumstances you will not be able to exercise this right due to applicable exceptions. The exceptions include the cases when personal data processing is obligatory aiming at: (i) using the freedom of self-exression and information; (ii) complying with our legal obligations; or (iii) asserting, enforcing or defending legal claims. Neither will this right be exercised if our interest or those of our third party outweigh your fundamental rights or freedoms.
RIGHT TO RESTRICT DATA PROCESSING
In certain cases you have the right to restrict data prcessing. This right can be exercised in the following cases: (i) when you dispute the acuracy of personal data; (ii) when personal data are processed illegally but you do not wish to have it deleted; (iii) when personal data are no longer needed for the purpose of processing our data but you request it for the purpose of making, enforcing or defending legal claims or (iv) if you do not consent to their being processed in the legitimate interest of us or a third party until the grounds for your disagreement have been verified. By restricting the processing of personal data, we may continue to retain your personal data but there will be no further processing except for: (i) your consent; (ii) the filing, enforcement and defense of legal claims; (iii) protection of the rights of other natural or legal persons; or (iv) an important public interest.
RIGHT TO DISAGREE WITH DATA PROCESSING
You have the right to object to the processing of your personal data for reasons related to your particular situation but only to the extent that we use the data for our or third party‘s legitimate interests. In case you make an objection, we will no longer process personal data unless we can prove that the data are being processed for compelling legitimate reasons, overriding your interests, rights and freedoms or to claim, enforce or defend legal claims.
RIGHT TO DISAGREE WITH DATA PROCESSING PERTAINING TO DIRECT MARKETING PURPOSES
You have the right to object to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you do not agree, we will no longer process your data for this purpose.
RIGHT TO TRANSFER PERSONAL DATA
You will be able to exercise this right in cases where we process your personal data by automated means (computers, etc.) and the legal basis for the processing of your personal data is your consent or the performance of a contract or action taken at your request prior to the contract.
You have the right to receive your personal data in a systematic, commonly used and computer readable format. However, you will not be able to exercise this right where it may adversly affect the rights and freedoms of others.
RIGHT TO WITHDRAW YOUR CONSENT
In cases where legal basis for the processing of your personal data is your consent, you have the right to withdraw it at any time. Revocation of consent will not affect the lawfulness of the processing prior to revocation.
The services provided on our website are not intented for persons under 14. Individual loyalty programs or competiton conditions may provide a different, higher minimum age limit for participants.
If we have reasonable grounds to suspect that we are processing data of persons below the age specified in this paragraph, we will remove the data of those individuals from our databases.
We can make amendments to Privacy Policy to reflect how we process your personal data.
If significant amendments are made we will notify you on the website or by other appropriate means of communication such as email so you could review these amendments prior to continuing using our website.
