Privacy Policy

PRIVACY POLICY

In this Privacy Policy (hereinafter – Privacy Policy ), we provide information on how the seller, individual activity certificate No. 1525510 (hereinafter – Data Controller ) processes your personal data on the online store https://www.smaguszaislai.lt/.

You can contact the Data Controller using the following details:

Tel.: +370 631 10760

Email: info@smaguszaislai.lt

Address: Šėtos g. 11, Kaunas

What personal data do we process?

• Purpose: Conclusion and execution of contracts with legal entities
  • Personal data processed: Name, surname, date of birth, contact information, content of correspondence, other data contained in the contract.
  • Legal basis: Legitimate interest to conduct business.
  • Retention period: 10 years after the expiration of the contract.
• Purpose: Conclusion and execution of contracts with natural persons
  • Personal data processed: Name, surname, date of birth, address, phone number, email address.
  • Legal basis: Contract.
  • Retention period: 10 years after the expiration of the contract.
  • We may transfer personal data to payment service providers.
• Purpose: Order delivery
  • Personal data processed: Name, surname, phone number, email address, address, self-service parcel terminal information, parcel number.
  • Legal basis: Contract.
  • Retention period: 10 years after the expiration of the contract.
  • We may transfer personal data to courier services, delivery service providers, postal services.
• Purpose: Refund of payment
  • Personal data processed: Name, surname, bank account number, other details.
  • Legal basis: Contract, legal obligation.
  • Retention period: 10 years after the payment order.
  • We may transfer personal data to payment service providers.
• Purpose: Creation and administration of user accounts on the website
  • Personal data processed: Name, surname, username and password, phone number, email address, address, photo.
  • Legal basis: Contract.
  • Retention period: 2 years after the last login date.
• Purpose: Communication with website visitors
  • Personal data processed: Name, surname, phone number, email address.
  • Legal basis: Seeking to take steps at the data subject's request prior to entering into a contract or legitimate interest to conduct business and/or ensure quality.
  • Retention period: 1 year after the resolution of the inquiry.
• Purpose: Direct marketing (newsletters, event invitations, offering similar goods or services)
  • Personal data processed: Name, surname, email, phone number.
  • Legal basis: Consent or legitimate interest to offer similar goods/services to customers.
  • Retention period: 2 years after receiving consent or after the person has purchased goods or services.
  • We may transfer personal data for newsletter sending solutions.
• Purpose: Administration of social media accounts
  • Personal data processed: Unique ID, IP address, device information.
  • Legal basis: Consent or legitimate interest to communicate with the customer.
  • Retention period: As long as the social media visitor is a follower of the accounts.
  • Information provided to us by social media when visiting our controlled properties (including the use of "Like" buttons and other communication) is jointly controlled by us and the social media operators, as joint data controllers.
  • Currently, these issues are present on social networks:
    • "Facebook" - lt, whose privacy notice is available at https://www.facebook.com/privacy/explanation
    • "Instagram" - lt, whose privacy notice is available at https://help.instagram.com/519522125107875
    • "Pinterest" - lt, whose privacy notice is available at https://policy.pinterest.com/en/privacy-policy
    • "Linkedin" - lt, whose privacy notice is available at https://www.linkedin.com/legal/privacy-policy
    • "Youtube" - lt, whose privacy notice is available at https://policies.google.com/privacy
    • "TikTok" - lt, whose privacy notice is available at https://www.tiktok.com/legal/page/row/privacy-policy/en

  We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.

  To whom is your personal data transferred?

  We may transfer information about you to our employees, intermediaries, service providers such as debt administration or collection companies, archiving service providers, individuals or subcontractors providing legal, marketing, IT services, if reasonably necessary for the purposes set out in the Privacy Policy.

  We may also include information about you in the data processing activities, it is very important to do so in accordance with your rights or to protect your rights or interests (your submission to third parties to recover your personal data), as well as in the event of an intention to transfer part of the company or its assets or reorganize the company or its assets or reorganize your personal data, by disclosing your personal data (to a potential).

  How is your personal data processed?

  Personal data will be processed in compliance with the requirements of the General Data Protection Regulation (hereinafter – GDPR ), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts. The data controller, when determining the means of personal data processing, both during data processing and implemented technical and organizational data protection measures specified in legal acts, aimed at protecting processed personal data from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any unlawful processing. Appropriate measures are determined taking into account the risks arising from personal data processing.

  What are your rights?

  Below we provide information about your rights related to the processing of your personal data by the Data Controller, and in such cases when you can exercise these rights. If you want to get more information about your rights or exercise them, please contact us at the email address provided in this Privacy Policy.

  • You can contact us at any time and inquire whether we process any of your personal data. If we store or otherwise process your personal data, you have the right to access it. To do so, please submit a written request to us at the email address specified in this Privacy Policy. We may ask you to confirm your identity for the purpose of fulfilling the request. When submitting a request, adhere to the principles of fairness and reasonableness.
  • If you have given us consent for the processing of your data, you can withdraw it at any time at the email address specified in this Privacy Policy.
  • You have the right to ask us to correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.
  • You have the right to ask us to delete your personal data. This right is exercised in cases provided for in Article 17 of the GDPR.
  • You have the right to ask us to restrict the processing of your personal data or not to process it.
  • You have the right to data portability of data processed by automated means and which we have received from you with your consent or for the purpose of concluding a contract. If you exercise this right, at your request, we will transfer a copy of the data you provided.
  • You have the right, in accordance with Article 21 of the GDPR, to object to our use of your personal data.

  How can you exercise your rights?

  To exercise your rights, submit requests, complaints, or claims to us in writing using the contact details provided in this Privacy Policy.

  We will respond to received requests, complaints, or claims in writing in accordance with the procedures and deadlines established by law. We strive to provide you with information as soon as possible, but no later than within 30 days of receiving your request.

  If, upon receipt of a request, complaint, or claim, we have doubts about the identity of the applicant, we may ask the applicant to provide an identity document.

  Complaints

  If you believe that your rights as a data subject have been and/or may be violated, please contact us at the email address provided in this Privacy Policy. We assure you that we will contact you within a reasonable period after receiving your complaint and inform you about the progress of the complaint investigation, and later about everything. If the investigation results are not satisfactory, you can submit a complaint to the supervisory authority: in Lithuania – to the State Data Protection Inspectorate ( https://vdai.lrv.lt/ ), a list of supervisory authorities in other EU member states can be found on the European Data Protection Board website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt .

  Responsibility

  You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you provided changes, you must inform us immediately by email. In no event will we be liable for damages incurred by you due to your provision of incorrect or uninformed personal data.

  Privacy Policy updated on June 19, 2026.