Privacy Policy

Current version as of December 14, 2021

We, the legal entity "MB Baltic Shea," legal entity code 305945133, address Striūpų 11, Šakiai (hereinafter referred to as the "Company" or "We"), are committed to ensuring the security and privacy of your data as a customer, user of the Baltic Shea online store, and user of the website www.balticshea.com (hereinafter referred to as "You" or "User") (hereinafter referred to as the "Online Store").

This Privacy Policy is intended to provide information on how the Company processes and protects your data when you use the Online Store.

The collection, processing, and storage of your personal data related to your use of the Online Store are governed by this Privacy Policy, the Personal Data Protection Law of the Republic of Lithuania, and other applicable laws.

1. Definitions

1.1. Personal Data - refers to any information that can directly or indirectly identify your identity. The following personal data are processed:

• Buyer's name and surname;

• Name and surname of the person receiving the goods;

• Buyer's contact information - email address and phone number, address;

• Buyer's delivery information - the address to which the goods will be delivered or the Buyer's choice for goods delivery/pick-up;

• Buyer's selected payment method and entered payment data;

• Your order history in the Online Store;

• IP address;

• Network and location data when provided by you;

• Your history of inquiries and complaints;

• Other publicly available data that you share when visiting the online store.

1.2. Data Processing - means any operation performed on personal data (such as data collection, editing, modification, recording, storage, provision of access, submission of queries, archiving, etc.).

1.3. Data Controller - MB Baltic Shea, legal entity code 305945133, address Striūpų 11, Šakiai.

1.4. Data Subject - any natural person whose data is processed by the Company.

1.5. Website - www.balticshea.com.

2. Processing of Your Personal Data When Using the Online Store and Visiting the Website

2.1. By providing data to the Company, the Data Subject agrees that Personal Data will be used by the Company to ensure the functioning of the Online Store for the purposes desired by the Data Subject.

2.2. The Company processes your personal data on the following legal bases:

The Company obtains your explicit consent to process your data when you create a User account;

You place an order in the Online Store, which is accepted and executed, thus entering into a contract with you;

In cases where the Company is legally obliged to process your data;

The legitimate interests of the Company are pursued. We will process your Personal Data if we have a legitimate interest in doing so, and such data processing does not infringe upon your interests and rights.

2.3. The Company processes your data for the following purposes:

For the efficient, optimal, and user-friendly functioning of the Online Store;

To ensure smooth administration of the Online Store;

For the registration and maintenance of your User account;

For the proper provision of services you have ordered;

To provide you with relevant information, answer your questions and inquiries;

For statistical and other analysis aimed at improving the operation of the Online Store and your experience using it;

When you visit the Website, the Company may process your IP address, network, and location data. These Personal Data are collected through cookies and similar technologies with your consent.

For other purposes that may be specified by you when providing your data.

3. Provision of Personal Data to Third Parties

3.1. We undertake to maintain confidentiality regarding your Personal Data. Your Personal Data may be disclosed to third parties only when necessary to conclude and execute an agreement for the benefit of the Data Subject or for other lawful reasons.

3.2. The Company may provide Personal Data to its data processors who provide services to the Company and process personal data on behalf of the Company. Such data processors chosen by the Company have the right to process Personal Data only according to the Company's instructions and to the extent necessary to fulfill the obligations stipulated in the agreement between the Company and the service provider. We assure you that the Company only cooperates with data processors who guarantee the appropriate measures (organizational and technical) for the processing of Personal Data and ensure that the processing of Personal Data complies with legal requirements.

3.3. The Company may also provide personal data in response to requests from courts or state authorities to the extent necessary to comply with applicable laws and directives from state authorities.

4. Retention Period for Personal Data

4.1. We retain your Personal Data only for the period necessary to achieve the purposes set out in this Privacy Policy.

4.2. If you are inactive in the Online Store's User account for 3 years, your Personal Data will be deleted.

4.3. You can also request the deletion of your User account in the Online Store.

5. Personal Data of Minors

5.1. We are committed to protecting the privacy of minors. Please note that our Online Store and Website are not intended for individuals under the age of 18.

5.2. Individuals under the age of 18 cannot provide any Personal Data in the Online Store or Website.

5.3. If a person is under the age of 18 and wishes to use the Online Store or Website, before providing Personal Data, they must have the written consent of at least one of their legal representatives (parent, guardian).

6. Rights of Data Subjects

6.1. As a Data Subject, you have the following Data Subject rights:

6.1.1. The right to obtain information about data processing ("the right to know").

6.1.2. The right to access the processed data ("the right to access").

6.1.3. The right to request the correction of data ("the right to correct").

6.1.4. The right to request data deletion ("the right to be forgotten"). This right does not apply if the Personal Data requested to be deleted is processed on other legal grounds, such as for the performance of a contract or the fulfillment of legal obligations.

6.1.5. The right to restrict data processing ("the right to restrict").

6.1.6. The right to object to data processing.

6.1.7. The right to data portability. The right to data portability cannot adversely affect the rights and freedoms of others. The Data Subject does not have the right to data portability for Personal Data processed non-automatically in structured files, such as paper files.

6.1.8. The right to object to automated data processing, including profiling.

6.1.9. The right to lodge a complaint about the processing of Personal Data with the State Data Protection Inspectorate.

6.2. To exercise your rights, you can send us a request or inquiry in writing to: info@balticshea.com. Upon receiving such a request or inquiry from you, we may ask you to fill out the necessary forms and may request a notarized copy of your identification document, which we require to verify your identity to prevent the disclosure of Personal Data.

6.3. After receiving your request or inquiry regarding the processing of Personal Data, we undertake to provide you with a response within 1 month from the date of the request and to perform the actions specified in the request or inform you why we refuse to perform them. If necessary, the specified period may be extended for an additional 2 months, taking into account the complexity and number of requests. In this case, we will inform you of such an extension within 1 month from the date of receipt of the request.

6.4. If you request the deletion of Personal Data, we will keep only copies of the information necessary to protect our and other persons' legitimate interests, comply with the obligations of state authorities, resolve disputes, identify disruptions, or fulfill any agreements you have entered into with us.

6.5. If you believe that your rights as a Data Subject have been violated, you can also file a complaint with the supervisory authority responsible for data protection – the State Data Protection Inspectorate. More information and contact details can be found on the Inspectorate's website at www.ada.lt.

7. Cookie Policy

7.1. Our Website may use cookies and other tracking technologies. Through the use of cookies, our Website can "remember" your actions and choices while browsing the Website (e.g., registration data, your preferred language, and other display options).

7.2. We use cookies and other tracking technologies for Security.

7.3. You can control cookies on the Website. You have the right to choose whether to accept cookies and other tracking technologies used by us, to disable cookies completely, or to disable certain types of cookies.

7.4. For more general information about the use of cookies, please refer to AllAboutCookies.org or www.google.com/privacy_ads.html. If you decide to disable all or certain cookies on our Website, this may affect the operation of the Website, slow down its performance, or limit the availability of certain functions. You will also need to reset certain settings each time you visit the Website.

7.5. We use cookies in the following categories:

Cookie type: Functional cookie; Cookie storage period: 3 years.

8. Final Provisions

8.1. Please note that our Website may contain links to other websites, including websites operated by third parties, which are not covered by this Privacy Policy. Please familiarize yourself with and assess the privacy policy of these websites before providing any of your Personal Data.

8.2. If necessary, considering the data protection measures we apply, we may update and amend this Privacy Policy. You will be informed about changes to the Privacy Policy applicable to you through our usual means of communication.

Feel free to reach out!