Privātuma Politika

1. GENERAL PROVISIONS

We are committed to protecting your privacy and personal data. Complying with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (further – Regulation (EU) 2016/679), we guarantee transparent and honest handling of your personal data.

This Privacy Policy outlines your rights and provides information on how your personal data is processed.

We will not sell or lease your personal data. We will collect, store and process all data in compliance with Regulation (EU) 2016/679 and other legal acts. We will not sell your data to third parties, unless we are required to do so by law or it is necessary for us to be able to provide our services, or if you give explicit consent for your data to be shared.

The data controller of your personal data is UAB Uoga Uoga, Company Code 302642608, VAT Payer’s Code LT100006547014, registered office at 4-101 Riterių Str., Vilnius, LT-08248, Lithuania; tel.: +370 656 65 268; e-mail: [email protected]; Data Protection Officer: [email protected]

2. PERSONAL DATA COLLECTED, PURPOSE AND LEGAL BASIS FOR PROCESSING DATA

We collect and process your personal data for specific purposes and only to the extent required for meeting them.

• To enable us to offer you goods and services for online trading purposes, we processes the following personal data: name and surname, telephone number, address, e-mail address, information on purchased/considered goods or services, delivery address, information on the individual collecting the order, payment information, order history, information on returning of goods and payments, termination of distance contracts, communication history between you and us, including emails, information on deliveries of goods or provision of services; when you create an account with us, information on your IP address and the date and time of account creation will also be processed. Your data will be processed on the basis of entering and performance of a contract, in accordance with point (b) of Article 6(1) of Regulation (EU) 2016/679.

If you notify us that your goods will be collected by another individual, we will process their personal data for our own legitimate interest on the basis of performance of the contract in accordance with point (f) of Article 6(1) of Regulation (EU) 2016/679.

• To enable us to notify you that your order is incomplete, for the purpose of sending reminders about an abandoned shopping basket we process the following personal data: e-mail address, information on goods added to the shopping basket, date and time when goods are added to the basket. Your personal data is processed to pursue our legitimate interest to efficiently organise the functioning of our online shop in accordance with point (f) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to comply with legal obligations and issue invoices, record financial transactions on our accounting system, for the purpose of accounting we process the following personal data: name and surname, address, telephone number, e-mail address, information on goods or services purchased, including prices and applicable taxes, invoice issue date and number, information on the payment made, including your bank account number and payment date. Your personal data is processed according to point (c) of Article 6(1) of Regulation (EU) 2016/679 in order to comply with our legal obligations set out in the Republic of Lithuania Law on Financial Accounting and other legal acts.
  
  
• To enable us to deliver services which meet our customers’ needs and expectations, for the purpose of service optimization and business analysis we process the afore-mentioned personal data. We process your personal data to pursue our legitimate interest to efficiently organise our activities in accordance with point (f) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to provide you with high quality services and ensure overall customer service, for the purpose of addressing your requests and questions we process the following personal data: name and surname, telephone number, e-mail address, address, date and time of request/query, content, date and time of response, content, other information related to a specific request or query. Your personal data is processed according to point (c) of Article 6(1) of Regulation (EU) 2016/679 in order to comply with our legal obligations set out in the Republic of Lithuania Law on Protection of Consumer Rights and in order to pursue our legitimate interest to provide high quality services and information our clients are interested in according to point (f) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to ensure our documentation is stored and managed appropriately, for the purpose of document management we process the personal data, document registration dates and numbers indicated in all documents being sent, received, internal documents and other. Personal data is processed in accordance with point (c) of Article 6(1) of Regulation (EU) 2016/679 in order to comply with our legal obligations set out in Regulations on the Preparation, Management and Accounting of Documents of Non-Governmental Organisations and Private Legal Entities, as approved by the Chief Archivist of Lithuania in Order No. V-152 dated 20 December 2011 and in other legal acts.
  
  
• To enable us to send you updates, offers, information on special deals, invitations to participate in surveys, etc., for the purpose of sending newsletters (direct marketing) we process the following personal data: e-mail address, date and time you subscribed to our newsletter, date and time you cancelled subscription to our newsletter. Your personal data is processed with your consent in accordance with point (a) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to obtain feedback from you on the goods, products or services purchased from us and to be able to share your ratings and reviews with other customers by making them public on our website, for the purpose of reviewing the quality of goods, products and services we process the following personal data: e-mail address, name, information on the goods, products or services purchased and reviewed, star rating and testimonial submitted, date of rating, your country. Your personal data is processed in order to pursue our legitimate interest to obtain detailed information about our goods, products or services in accordance with point (f) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to organise competitions and award winners, we process personal data for the purpose of organising competitions. Personal data is processed on the basis of consent, in accordance with point (a) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to enrol our clients in the Loyalty Programme, create accounts for them, provide benefits and organise our activities so that they meet the needs and expectations of our customers, for the purpose of executing the Loyalty Programme we process the personal data of the Programme members in line with the Loyalty Programme Terms and Conditions.
  
  
• To enable us to protect our website and the processed information from cyber incidents and personal data breaches, for the purpose of ensuring protection of information, including personal data we process the following personal data: IP address, date of log-in, information on activities. Your personal data is processed in accordance with point (c) of Article 6(1) of Regulation (EU) 2016/679 in order to comply with our legal obligations set out in Article 32 of Regulation (EU) 2016/679, the recommendations of the Lithuanian Data Protection Authority and to pursue our legitimate interest to ensure the safety of our information systems and personal data, in accordance with point (f) of Article 6(1) of Regulation (EU) 2016/679.
  
  
• To enable us to ensure the functioning of our website and provision of services through the website, we use cookies on our website and process personal data collected with the help of cookies. Depending on the cookie type, personal data is processed with the consent of the website user, according to point (a) of Article 6(1) of Regulation (EU) 2016/679 and/or in order to pursue our legitimate interest to enable the use of our website in line with point (f) of Article 6(1) of Regulation (EU) 2016/679. More information on the use of cookies and this method of processing personal data is provided in Section 7 Cookie Policy.
  
  
• If required, the afore-mentioned personal data will be processed for the purpose of protecting our rights and legitimate interests to pursue legitimate interests to protect ourselves against existing or impending demands, claims or lawsuits and in order to exercise our rights in accordance with point (f) of Article 6(1) of Regulation (EU) 2016/679.
  
  

We provide assurance that the personal data we process in each individual case is limited to and does not exceed what is necessary.

We inform that the Company does not conduct profiling or use it for decision-making related to you.

3. ORIGIN OF PERSONAL DATA
   

We process the personal data you have submitted while using our website, sending e-mails or contacting us in other ways. Additionally, we process the personal data we receive from your bank or other payment institution when you pay for the goods or services purchased. We also receive your personal data from companies delivering the goods, when they notify us that the order is being processed. We obtain the personal data of another individual collecting the goods from the individual who has placed the order.

4. WHO RECEIVES PERSONAL DATA OR HAS THE RIGHT TO ACCESS IT
   

Personal data is shared only with reliable third parties we have contracts with and only to the extent necessary for the provision of services. For the purpose of adequate provision of services, we share your personal data with the following partners:

• Companies providing courier services and Lithuanian Post (Lietuvos paštas) who deliver goods to your address;

In order to protect our interests or upon a request from the below institutions, your personal data will/may be shared with:

• Law enforcement institutions in the Republic of Lithuania, in accordance with legal acts;
• State institutions and courts, when such obligation is outlined in applicable legal acts.

Additionally, we may share/grant access to your personal data to providers of services such as website maintenance and web hosting, maintenance and administration of the IT infrastructure and software, etc.

When you provide feedback on any goods, products or services purchased from us, your personal data (name, purchased product or service, star rating and review, review date, country of reviewer) will be made public on our website and this personal data will be available to all visitors to our website.

5. DURATION OF STORING PERSONAL DATA

We store personal data for the duration necessary for the specified purposes of processing personal data or for as long as we are legally obliged and (or) recommended by protection institutions.

We store your personal data:

• For the purpose of online trading: for as long as your account is active, or 5 years from the date you registered on our website, if during that time you have not logged in to your account;
• For the purpose of sending abandoned basket reminders: 7 days
• For the purpose of accounting: 10 years from the date of issuing the invoice;
• For the purpose of service optimization and business analysis: 5 years;
• For the purpose of addressing requests and questions: 5 years;
• For the purpose of document management: 5 years;
• For the purpose of sending newsletters (direct marketing): 5 years or until you withdraw your consent; information on the consent given will be stored for further 2 years after the end of personal data processing for which the consent was given;
• For the purpose of reviewing the quality of goods, products and services: for the period of selling the goods, products or services, but not longer than 5 years;
• For the purpose of organising competitions: until the winner is announced and 1 month after this announcement;
• For the purpose of executing the Loyalty Programme: for the duration of membership in the Loyalty Programme. Should there be an outstanding valid discount voucher at the point of cancelling membership of the Loyalty Programme, personal data will be stored until the expiry of the discount voucher or until the date the afore-mentioned voucher is redeemed.
• For the purpose of securing the safety of information, including personal data: 6 months or for the duration recommended by protection authorities;
• For the purpose of protecting Company rights and legitimate interests: within the statutory limitation period.

6. YOUR RIGHTS AND EXERCISING THEM

A number of rights are granted to data subjects by Regulation (EU) 2016/679. As a data subject, you have the following rights:

• Right to possess information on personal data processing;
• Right to request access to your personal data and obtain a copy of it;
• Right to request rectification of incorrect data or supplementation of incomplete data;
• Right to request restriction of data processing;
• Right to request erasure of data (“right to be forgotten”);
• Right to withdraw consent for processing of personal data, when data processing is based on consent;
• Right to object to data processing, when personal data is processed for the purpose of direct marketing or is based on legitimate interest;
• Right to data portability, when personal data is processed by automated means on the basis of entering and performance of contract and consent.

The afore rights shall be exercised to the extent and conditions laid out in Regulation (EU) 2016/679.

To exercise the afore-mentioned rights concerning the processing of personal data described within this Privacy Policy, please forward your requests to UAB Uoga Uoga or contact our Data Protection Officer (contact details above).

In order to analyse your request adequately, please submit your query in writing and confirm your identity.

In your request, please indicate which of the afore-mentioned rights and to what extent you wish to exercise.

The request must be signed. If electronic communication is used to submit the request, a digital copy of the signed request must be submitted or the request must be signed with a qualified electronic signature or generated in a way that allows the identification of the person submitting the request or claim or to verify the authenticity of the request or claim.

The requirement to verify identity is not applicable when requesting information on personal data processed in accordance with Articles 13 and 14 of Regulation (EU) 2016/679.

Should your identity as the data subject be questioned or the information you have submitted with your request is insufficient to determine your identity, we may ask for additional information necessary for unambiguous verification of your identity.

We shall respond to your request no later than one month after receiving the request and provide information on the actions taken upon receiving your request. If the request is complex or multiple requests are submitted, this deadline may be extended by two further months, depending on the complexity and number of requests received. You will be informed of any such extension and reasons for it within one month from when we receive your request.

Should we decide not to implement your request, we will inform you of this decision immediately but no later than month after receiving your request. You have the right to lodge a complaint with the State Data Protection Inspectorate or use other means of rights protection. In all cases, we ask you to contact us before lodging a complaint, so that we can find the most suitable solution together.

7. COOKIE POLICY

WHAT ARE COOKIES

This website uses cookies. Cookies are small text files which are placed on your terminal device (laptop, mobile phone, tablet, etc.) to help recognise you as a visitor to the website and store information about your browsing activity on it. When you first enter the site, cookies are deployed to your terminal device and used to identify this device in the future. The next time you visit the site, your browser will retrieve and send the information back to the server or component which has originally deployed the cookie. We access the cookies stored on your device every time you visit our website or open an e-mail from us.

Cookies are used to ensure the website functions properly, to enable visitors to use services and functionalities provided through the site, so that the content and advertising can be personalised in order to show you adverts relevant to you, analyse the flow of data and enhance user experience. Additionally, site browsing information may be shared with our social media, advertising and analytics partners who may combine it with other information that you have provided to them or that they have collected from your use of their services.

DATA PROCESSED WITH THE HELP OF COOKIES

We use cookies to collect, store and use information about your device, your visits to our website and your activities on it (including your IP address, geographical location, browser type, the site you have been directed from, duration of visit and page views, etc.).

TYPES OF COOKIES AND WHAT THEY ARE USED FOR

Our website uses various types of cookies set by us and by third parties.

Cookies used on this website:

• Essential cookies are necessary for the website to function properly. These cookies enable the main functions of the site, such as ensuring consistent performance of the site, shopping basket, favourites list, etc. Without essential cookies, the website will not operate properly and (or) you will not be able to access the services and functionalities offered through the website;
• Functional cookies enable the website to remember information needed for the correct functioning of the site and its look, e.g. your language and region preferences;
• Analytics cookies collect anonymous information and are used to analyse statistical information on user interaction;
• Marketing cookies are used to track user behaviour on other websites and to be able to display advertising tailored and relevant to individual visitors.

Detailed information about the cookies used on this website, their purpose and duration is provided in the pop-up cookie notification banner which appears upon entering the site.

Please note, the website uses Google Analytics, a web analytics service which helps to analyse how the website is used. Google Analytics uses cookies to generate information which will be transmitted to Google Inc. (hereinafter – Google). Google use the information generated about our website to compile reports about the use of this website. To switch off the Google Analytics cookies, you will have to download and install the Google Analytics opt-out browser add-on. You can access it by clicking on this link https://tools.google.com/dlpage/gaoptout?hl=en. The information generated by the cookie about the use of this internet website – standard internet protocol information (including your IP address) and anonymous information on user behaviour – will be transmitted to Google and may be stored by Google on servers in the United States. In this case, the transfer of personal data to the third country (US) is based on Article 45 (1) of Regulation (EU) 2016/679 and the adequacy decision adopted by the European Commission on 10 July 2023 for the EU-US Data Privacy Framework. Before transmitting the user’s IP address to Google, the website anonymises it. Access to the Google privacy policy: https://www.google.com/privacypolicy.html.

COOKIE MANAGEMENT AND DELETION

Cookies can be controlled with the help of the cookie management tool installed on our website.

Essential cookies are deployed automatically, while non-essential cookies can only be used with your consent. You can give your consent for us to use all cookies by clicking “Accept all Cookies” or choose to accept only certain types of cookies by modifying your browser settings. You can withdraw your consent at any time by clicking the round icon at the bottom of the page.

Additionally, you can manage cookies by configuring your browser to accept all cookies, reject all cookies or be notified when a new cookie is deployed. Each browser is different, so check the “Help” menu of your browser to learn how to delete cookies or change your cookie preferences. The operating system of your device may contain additional controls for cookies. If you do not wish for your information to be collected, you can find simple instructions on how to control or disable cookies on the different types of web browsers at http://www.allaboutcookies.org/manage-cookies/. Please note, however, that disabling certain cookies may negatively affect your browser speed, restrict certain functionalities of the website or block access to the website.

8. THIRD PARTY WEBSITES, SERVICES AND PRODUCTS ON OUR WEBSITE

Our website may display pop-up ads by our partners or other third parties as well as links to their websites and services.

Please note that in these cases we do not accept and responsibility or liability for the content of such websites or their privacy policies. We therefore advise you check the privacy policies of the relevant websites when you access them through our website.

Our website contains links to social media sites Facebook and Instagram managed by Meta Platforms Inc., operating through Meta Platforms Ireland Limited. You will recognise these links from the logo of the service provider. When you click on the link, the web pages of social media sites will open but they are excluded from this Privacy Policy. More information on the privacy principles of specific social media sites can be found in the their privacy policies:

Facebook: http://www.facebook.com/policy.php;

Instagram: https://privacycenter.instagram.com/policy.

9. ENSURING PERSONAL DATA PROTECTION

We are committed to ensuring the protection of your personal data. In order to process your personal data, we are implementing and will continue to implement appropriate organisational and technical measures which ensure appropriate protection of your personal data, including protection against unauthorised data processing, accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unlawful access to transmitted, stored or otherwise handled documents.

Your personal data will be processed only by those of our employees who are granted such rights through their job functions or by data processors contracted for this purpose. All individuals authorised by us to handle your personal data are obliged to ensure the confidentiality and protection of personal data.

10. CHANGES TO PRIVACY POLICY

You can access our Privacy Policy at any time on our website.

We may amend this Privacy Policy at our discretion and at any time. Please note that the implementation of any changes made to this Privacy Policy may take some time. Please check this section of the website to follow modifications to our Privacy Policy.

If you have any questions or believe that this Privacy Policy does not address the issues important to you, please contact us or our Data Protection Officer using the contact details provided above.

This Privacy Policy was last reviewed and updated on 02-12-2024.