1.1. Company or Data Controller – MB "EJRA", a private limited company established and operating under the laws of the Republic of Lithuania, with company code 305063484, registered address: Dariaus ir Girėno str. 149, Vilnius.
1.2. Client or Data Subject – an individual who is a client of the Company (including website visitors) whose personal data is collected by the Company.
1.3. Online Store – the Company's online store at https://www.irankistai.lt/.
1.4. Services – all services provided by the Company.
1.5. Personal Data – any information relating to an identified or identifiable individual (Data Subject), which can be identified directly or indirectly by reference to such data as a personal code, one or more characteristics specific to the physical, physiological, psychological, economic, cultural, or social identity of that individual.
1.6. Processing of Personal Data – any operation or set of operations performed on personal data such as collection, recording, accumulation, storage, classification, grouping, merging, alteration (supplementation or correction), provision, dissemination, use, logical and/or arithmetic operations, search, dissemination, destruction, or other action.
1.7. Partner – a legal entity providing services to the Company related to the Company's activities, or selling goods to the Company, or carrying out joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programs, etc., in media, websites, the Online Store, retail stores, shopping networks, and more.
1.8. Cookie – a small piece of text information that is automatically created while browsing the website and stored on the visitor's computer or other device.
1.9. Direct Marketing – activities aimed at offering goods or services to individuals by mail, telephone, or other direct means and/or inquiring about their opinions regarding the offered goods or services.
1.10. Privacy Policy – this document, which defines the principles and rules of Personal Data processing when using the Online Store services.
1.11. Account – the main login details of the Client to the Online Store, consisting of one email address and a Password.
1.12. Password – a unique combination of numbers, letters, or numbers and letters or other symbols created by the Client, which allows access to the Online Store when entered.
2.1. The Client grants the Company the right to perform all Personal Data processing actions to the extent and for the purposes specified in this Privacy Policy.
2.2. Personal data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing and protection of Personal Data, and this Privacy Policy.
2.3. The Company's Personal Data is processed in accordance with the following principles:
2.3.1. Personal data is collected for specified and legitimate purposes;
2.3.2. Personal data is processed accurately, fairly, and lawfully;
2.3.3. Personal data is adequate and limited to what is necessary for collection and further processing;
2.3.4. Personal data is kept up-to-date;
2.3.5. Personal data is stored in a form that allows the identification of the Data Subject for no longer than necessary for the purposes for which the data was collected and processed.
2.3.6. All information about Personal Data is confidential;
2.3.7. The Client's Personal Data and personal information will not be used for unlawful purposes.
2.4. It is considered that the Client, by purchasing in the Online Store, has read and agrees with the current version of the Privacy Policy. If the Client does not agree with any part of the Privacy Policy or the Privacy Policy as a whole, the Client must not place an order and not purchase items from the Online Store.
2.5. The Privacy Policy can be accessed in the Online Store and printed at any time. The Privacy Policy may be changed, supplemented, or updated at the Company's discretion. The new version of the Privacy Policy is published in the Online Store.
2.6. The Client may place an order in the Online Store without registration or through their Account registered in the Online Store.
2.7. During initial registration to the Online Store via the Account, the Client must provide their email address and create a secure Password, as well as provide accurate Personal Data to the Online Store. The Client is responsible for the accuracy of the provided data. After creating an Account, the Client is assigned an identification code.
2.8. When using the Services, as well as purchasing in the Online Store, the Client must always provide accurate Personal Data to the Online Store and is responsible for its accuracy.
2.9. The Client has the right to change and supplement Personal Data in the Account or contact the Online Store with a request to delete the Account at any time.
2.10. The Client must not disclose the Password to third parties and must keep it secure; otherwise, all related liability rests with the Client.
3.1. The Company respects each Client's right to privacy. The Client's Personal Data (i.e., name, surname, email address, phone number, product/service delivery address, age/date of birth, product/service payment details (bank account number, payment method, etc.), purchase history, and, with the Client's consent, age, gender, date of birth, place of residence) is collected and processed for the following purposes:
3.1.1. For the purpose of electronic commerce. Personal Data processed: name, surname, email address, phone number, product/service delivery address, age/date of birth, IP address, product/service payment details. The retention period for Personal Data used for electronic commerce purposes is 5 (five) years from the date of the last login to the Online Store.
3.1.2. For the purpose of Direct Marketing. Personal Data processed: name, surname, phone number, email address, address, age, gender, date of birth, place of residence. The retention period for Personal Data used for Direct Marketing purposes is 5 (five) years from the date of the last login to the Online Store.
3.2. The Client may consent to the processing of their Personal Data (name, surname, phone number, email address, address, age, gender, date of birth, place of residence) for Direct Marketing purposes. If, after giving consent to the processing of their data for Direct Marketing purposes and receiving Direct Marketing messages, the Client no longer wishes to receive them and informs the Company, the Company will cease processing the Client's Personal Data for Direct Marketing purposes and will not send the Client any electronic newsletters, except for information related to the Client's order.
3.3. The Client has the right to withdraw the consent given in point 3.2 at any time by notifying the Company by email at info@irankistai.lt, clearly indicating that they are withdrawing their consent to the use of their Personal Data for Direct Marketing purposes and no longer wish to receive any Direct Marketing messages.
3.4. The Client also has the opportunity to exercise their right to object to the processing of their Personal Data for Direct Marketing purposes by clicking the appropriate link provided in each sent email.
3.5. The Client, as the Data Subject, has the following rights related to the procedures of their Personal Data processing:
3.5.1. To receive information from the Company about the processing of their Personal Data and to access their Personal Data and how it is processed;
3.5.2. To receive information from the Company about the sources and types of the Client's Personal Data collected, the purpose for which it is processed, and the recipients to whom it has been or will be disclosed within at least the last 1 (one) year;
3.5.3. To request the correction, destruction of the Client's Personal Data, or the suspension of any processing actions, except for storage, when the Personal Data is processed in violation of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts.
3.6. In exercising their rights, the Client must present a passport, identity card, or driver's license. The Company provides the Data Subject with information about the processed Data Subject's Personal Data free of charge once a year. The Client can exercise their rights specified in point 3.5 by contacting by email at info@irankistai.lt. The Company has the right to correct, change, delete Personal Data or suspend the processing of Personal Data only after identifying the Client who has requested it.
3.7. The Client's Personal Data is not provided to third parties, except in the following cases:
3.7.1. When the Client's consent has been obtained as indicated in this Privacy Policy;
3.7.2. Personal Data for electronic commerce purposes is provided to Partners who provide services to the Company related to the Company's activities;
3.7.3. In cases provided by the laws and legal acts of the Republic of Lithuania to competent authorities.
3.7.2. Payments in the Online Store are processed using the makecommerce.lt platform, operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475), so your personal information required for payment processing and confirmation will be transferred to Maksekeskus AS.
3.8. The Client is informed of their right to object to the processing of their Personal Data for Direct Marketing purposes, i.e., the Client has the right to express their objection immediately or later.
3.9. The Client agrees that their Personal Data may be transferred to Partners when fulfilling the Client's order placed in the Online Store, as well as when the Company provides Services
