PRIVACY POLICY
PRIVACY POLICY
In this privacy policy (hereinafter referred to as the Privacy Policy), we provide you with information on how UAB Sanifinas, legal entity code 123468429, registered office address Justiniškių 8-10, Vilnius, 05120 Vilnius (hereinafter referred to as the Data Controller) processes your personal data in the Funtastik.lt online store. You can contact the Data Controller at the following contacts: Tel.: +(370) 611 33013 E-mail: funtastik.lt@dream-group.biz Address: Justiniškių gatvė 8, 05131 Vilnius
1. What personal data of yours do we process?
1.1. Conclusion and performance of contracts with legal entities Data: Name, surname, contact information, content of correspondence. Legal basis: Legitimate interest in carrying out activities Storage period: 10 years after the end of the contract Who we can transfer:
1.2. Conclusion and performance of contracts with legal entities Data: Name, surname, address, e-mail address, telephone number Legal basis: Contract Storage period: 10 years after the end of the contract Who we can transfer: Payment service providers
1.3. Order delivery Data: Name, surname, telephone number, e-mail address, address, parcel self-service terminal information, parcel number Legal basis: Contract Storage period: 10 years after the end of the contract Who we can transfer: Courier services, delivery service providers, post office
1.4. Payment refund Data: Name, surname, bank account number, other details Legal basis: Contract, legal obligation Storage period: 10 years after the payment order Who we can transfer: Payment service providers
1.5. Creation and administration of user accounts on the website Data: Name, surname, account name and password, phone number, e-mail address, address Legal basis: Contract Storage period: 2 years after the last day of account access To whom we can transfer: -
1.6. Communication with website visitors Data: Name, surname, phone number, e-mail address Legal basis: Intention to take action at the request of the data subject before concluding a contract / Legitimate interest in carrying out activities and/or ensuring quality Storage period: 1 year after the day of resolving the request To whom we can transfer: -
1.7. Direct marketing (newsletters, invitations to events, offering similar goods or services) Data: Name, surname, e-mail, phone number Legal basis: a) Consent b) Legitimate interest in offering similar goods/services to customers Storage period: a) 2 years after consent is obtained b) 2 years after the person has purchased the goods or services To whom we may transfer: Newsletter sending decision 1.8. Social media account administration Data: Unique ID, IP address, device information. Legal basis: Consent / Legitimate interest in communicating with customers Storage period: As long as the visitor of the social website is a follower of the accounts To whom we may transfer: Social network (joint controllers)
2. How do we process your personal data on social networks? The information that you provide to us through social media when visiting our accounts (including messages, use of the “Like” fields, and other communication) is controlled jointly with the social network controllers as joint controllers of personal data. We currently have the following social media accounts: • Facebook - https://www.facebook.com/funtastik.lt/, whose privacy notice is available at https://www.facebook.com/privacy/explanation • Instagram - https://www.instagram.com/funtastik.lt/, whose privacy notice is available at https://help.instagram.com/519522125107875 • Pinterest - https://www.pinterest.com/funtastiklt/, whose privacy notice is available at https://policy.pinterest.com/en/privacy-policy • Youtube - https://www.youtube.com/channel/UC3k11zVz0ETm8Z85b4Wsp_Q, whose privacy notice is available at https://policies.google.com/privacy • TikTok - https://www.tiktok.com/@funtastiklt, whose privacy notice is available at https://www.tiktok.com/legal/page/row/privacy-policy/en We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.
3. Who can we transfer your personal data to? We may transfer information about you to our employees, intermediaries, service providers, such as debt administration or collection companies, archiving services companies, legal, marketing services, IT service providers or subcontractors, if reasonably necessary for the purposes specified in this Privacy Policy. We may also disclose information about you if we are required to do so by law or in order to protect our rights or interests (including providing your personal data to third parties in order to recover your debts to us), as well as when intending to transfer the company's activities or part of its assets or reorganize the company or in carrying out these processes, disclosing your personal data to the (potential) acquirer of the activities or part thereof, other participants in the reorganization.
4. How is your personal data processed? Your personal data will be processed in accordance with the requirements set out in the General Data Protection Regulation (hereinafter referred to as the GDPR), the Law of the Republic of Lithuania on the Legal Protection of Personal Data and other legal acts. The Data Controller, both when determining the means of processing personal data and during the data processing itself, implements appropriate technical and organizational data protection measures established by law to protect the personal data being processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unlawful processing. The appropriate measures are determined taking into account the risks arising from the processing of personal data.
5. What are your rights? Below we provide information about your rights related to the processing of your personal data by the Data Controller and the cases when you can exercise these rights. If you want to receive more information about your rights or exercise them, please contact us at the e-mail address specified in this Privacy Policy. • You can contact us at any time and ask whether we process any of your personal data. If we store or use your personal data in any way, you have the right to access them. To do this, please submit a written request to us at the e-mail address specified in this Privacy Policy. We may ask you to confirm your identity in order to fulfill your request. When making such a request, please adhere to the principles of fairness and reasonableness. • If you have provided us with consent to the processing of your data, you may withdraw it at any time by sending an e-mail to the address specified in this Privacy Policy. • You have the right to ask us to correct any inaccuracies in our data. In such a case, we may ask you to confirm the corrected information. • You have the right to ask us to erase your personal data. This right is exercised in the cases provided for in Article 17 of the GDPR. • You have the right to request us to restrict the processing of your personal data or not to process it. • You have the right to the transfer of data that is processed by automated means and which we have received from you with your consent or for the purpose of concluding a contract. If you exercise this right, we will transfer a copy of the data you have provided at your request. • You have the right to object to our use of your personal data in accordance with the procedure established in Article 21 of the GDPR.
6. How can you exercise your rights? In order to exercise your rights, requests, complaints or claims, please submit them to us in writing using the contacts specified in this Privacy Policy. We will respond to the received requests, complaints or claims in writing in accordance with the procedure and terms established by legal acts. We strive to provide you with information as soon as possible, but no later than within 30 days of receiving your request. If, upon receiving a request, complaint or claim, we have suspicions about the identity of the requesting person, we have the right to request the requesting person’s identity document.
7. Complaints If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately by e-mail specified in this Privacy Policy. We ensure that only after receiving your complaint will we contact you within a reasonable period of time and inform you about the progress of the complaint investigation, and later about the result. If you are not satisfied with the results of the investigation, you can file a complaint with the supervisory authority - the State Data Protection Inspectorate (https://vdai.lrv.lt/).
8. Liability You are responsible for ensuring that the data you provide to us is accurate, correct and complete. If the data you provide changes, you must immediately inform us of this by e-mail. We will not be liable for any damage caused to you due to you providing incorrect or incomplete personal data or failing to inform us of changes. The Privacy Policy was updated on May 22, 2023. This Privacy Policy was created by Glimstedt Docket. The Glimstedt Law Firm owns all copyrights to the Privacy Policy, which entitles UAB Sanifinas to use the Privacy Policy.