Privacy Policy

I. Definitions

1. Data Controller (hereinafter referred to as the Controller) is a small limited liability company "Serjarom", a company established in accordance with the laws of the Republic of Lithuania, whose registered office is at Šv. Antano g. 24-1, Didžiasalio k., Vilniaus raj., Republic of Lithuania, legal entity code 306284578, data about which is collected and stored in the register of legal entities of the Republic of Lithuania.

2. Data Subject is a natural person whose personal data is processed by the Controller.

3. Online Store is the company's online store at www.serjarom.lt.

4. Services are all services provided by the company.

5. Personal data is any information relating to an individual - Data Subject, whose identity is known or can be directly or indirectly determined using such data as an identification number, one or more characteristics of a person's physical, physiological, psychological, economic, cultural or social nature.

6. Data processing is any operation performed on personal data, such as: collection, recording, storage, classification, grouping, linking, updating, providing, publishing, using, logical and/or arithmetic operations, searching, dissemination, destruction or any other action or set of actions.

7. Cookie is a specific file with a unique identification number that is transferred from the Online Store website to the hard drive of the Online Store visitor's computer in order for the Online Store administrator to distinguish the visitor's computer and see their activity in the Online Store, as well as to maintain the proper functionality of the Online Store.

8. Direct marketing is an activity aimed at offering goods or services to individuals by post, telephone or other direct means, and/or to inquire about their opinion on the offered goods or services.

9. Privacy policy refers to this document, which sets out the principles and rules for the processing of personal data when using the Online Store services.

10. Account is the main user data for logging in to the Online Store, consisting of one email address and a Password.

11. Password is a unique combination of numbers, letters, or numbers and letters or other symbols that, when entered, allows you to log in to the Online Store.

II. General provisions

12. By purchasing in the Online Store or registering an Account, the Customer grants the Controller the right to perform all data processing actions specified in this Privacy Policy.

13. Personal data is processed in accordance with the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other laws and regulations governing the processing and protection of personal data, this Privacy Policy.

14. In the Controller, personal data is processed in accordance with the following principles:

14.1 Personal data is collected for specific and lawful purposes;

14.2 Personal data is processed accurately, fairly and lawfully;

14.3. Personal data is adequate and only to the extent necessary for their collection and further processing;

14.4. Personal data is updated on an ongoing basis;

14.5. Personal data is stored in such a way that the Data Subject's identity can be identified for no longer than is necessary for the purposes for which such data was collected and processed..

14.6.All information about personal data is confidential;

14.7.The Customer's personal data and personal information will not be used for illegal purposes.

15. It is considered that the Customer, by purchasing in the Online Store, has read the current version of the Privacy Policy and agrees to it. If the Customer does not agree with any part of this Privacy Policy or with the Privacy Policy, in this case the Customer must not place an order and not buy a product in the Online Store.

16. The Privacy Policy can be found in the Online Store and can be printed out at any time. The Privacy Policy may be amended, supplemented or updated by the Controller at its discretion. The new version of the Privacy Policy is published in the Online Store.

17. The Customer can place an order by logging in to the Online Store through their Account.

18. During the initial registration for the Online Store via the Account, the Customer must provide their email address and come up with a secure Password, and provide accurate Personal Data to the Online Store. The Customer is responsible for their accuracy.

19. When using the Services, as well as when purchasing in the Online Store, the Customer must always provide accurate Personal Data to the Online Store and is responsible for their accuracy.

20. The client has the right to change or supplement the personal data in the account or to delete the account at any time.

21. The client must not disclose the password to third parties and keep it safe, otherwise all related liability shall be borne by the client.

III. Collection, use, correction and storage of personal data

22. The company respects the privacy of each customer. Customer personal data is collected and processed for the following purposes:

22.1. For the purpose of electronic commerce. The following personal data is processed: name, surname, place of residence (address), email address, phone number.

22.2. For the purpose of direct marketing. The following personal data is processed: name, surname, place of residence (address), email address, mobile phone number; date of birth, gender.

22.3. For the purpose of managing electronic inquiries. The following personal data is processed: name, surname, email address, phone number.

23. Both when registering in the Online Store for the first time and when placing each order, the Customer can give his consent to the processing of his Personal Data (name, surname, date of birth, place of residence (address), gender, telephone number, e-mail address) for the purpose of Direct Marketing. If, after giving consent to process his Personal Data for the purpose of Direct Marketing, as well as to receive Direct Marketing messages (e-news with offers and articles, SMS messages), the Customer no longer wishes to do so and informs the Company about this in accordance with the procedure set out below, the Company will no longer process his Personal Data for Direct Marketing purpose and will not send the Customer any electronic news, except for information related to the Customer's order.

24. The Company confirms that the Personal Data specified by the Client will be processed only in order to properly provide the Clients with the services provided in the serjarom.lt electronic store (including the right to participate in promotions, projects). The Company also confirms that the Personal Data specified by the Client will be processed for the purposes of analyzing the Company's activities and Direct Marketing, if the Client gives such consent and does not withdraw it. The duration of storage of Personal Data for Direct Marketing purposes is determined - three calendar years from the moment of submission of such data.

25. The Customer has the right to revoke his consent to the Company processing the Customer's Personal Data for the purpose of Direct Marketing at any time, by submitting an appropriate notification to the Company by e-mail at info@serjarom.lt, clearly stating that he revokes his consent to the use of his Personal Data for the purpose of Direct Marketing and does not wish to receive no Direct Marketing messages (e-news with offers and articles, SMS messages).

26. The Customer also has the option to refuse to exercise his right to object to the processing of the Customer's Personal Data for the purpose of Direct Marketing by clicking on the relevant link in each e-mail sent

27. The Customer, as a Data Subject, has the following rights listed below in relation to the procedures for processing the Customer's Personal Data:

27.1. to receive information from the Company about the processing of the Client's Personal Data, to get acquainted with his Personal Data and how they are processed;

27.2. to receive information from the Company, from which sources and which personal data of the Client was collected, for what purpose it is processed, to which recipients the data is provided and has been provided for at least the last 1 (one) year;

27.3. demand correction, destruction of the Customer's Personal Data, or suspension, except for storage, of the processing of his Personal Data, when the Personal Data is processed in violation of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws.

27.4 to receive the personal data relating to you that you have provided to the Company in a structured, commonly used, and computer-readable format, and to forward this data to another data controller, or to request that the Company directly forward such personal data to another data controller, when technically possible (right to data portability ).

28. When exercising his rights, provided for in clause 26, the Customer must present a passport, identity card, or driver's license. The customer can exercise his rights provided for in point 26 by sending an email to info@serjarom.lt. The Company has the right to correct or delete Personal Data or stop the processing of Personal Data only after identifying the identity of the Client who applied.

29. Complaints of individuals regarding improper or illegal processing of Personal Data are examined by the State Data Protection Inspectorate, registered office address A. Juozapavičiaus str. 6, LT-09310 Vilnius, www.ada.lt.

30. The Customer's Personal Data is not provided to third parties, except in the following cases:

30.1. when the Client's consent is received, as specified in this Privacy Policy;

30.2. personal data for e-commerce purposes are provided to Partners who provide the Company with services related to the Company's activities;

30.3. to partners belonging to the same group of companies located in a member state of the European Union, regarding IT solutions, financial/accounting;

30.4. to the competent authorities in the cases provided for by the laws and legal acts of the Republic of Lithuania.

31. The customer is aware of his right not to consent to the processing of his personal data for the purposes of direct marketing, i.e. The customer has the right to express disagreement immediately or later.

32. The Customer agrees that his Personal Data will be transferred to the Partners when fulfilling the Customer's order submitted in the Electronic Store, as well as when the Company provides Services to the Customer, as well as to the Company's Partners, as specified in clause 28.

33. If the Customer does not agree with the Privacy Policy, the Customer will not be able to use the services of the Electronic Store. The customer can express his disagreement with this Privacy Policy in accordance with the procedure set forth in point 24.

34. The Company implements organizational and technical measures to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing. The level of personal data protection measures applied by the company meets the requirements of the law of the Republic of Lithuania.

35. Personal data is protected against loss, unauthorized use and changes. All Buyers' Passwords are encrypted, only persons authorized by the Personal Data Controller can connect to servers related to Personal Data and only through a secure certificate, which is additionally protected by a password, as well as all pages of serjarom.lt that require the entry of Personal Data are accessed via https :// protocol.

36. The Client agrees that in cases where it is necessary according to the instructions of the competent authorities and/or the Client's Personal Data may have been used in the course of illegal activities, or there are reasonable suspicions of identity theft for which the competent law enforcement authorities are conducting a pre-trial investigation, or there are other legitimate grounds or purposes, his Personal Data would be stored on the Company's servers longer than specified in this Privacy Policy.

37. Upon receiving the Data Subject's instruction or inquiry related to the processing of Personal Data, the Company provides the Client with an answer, satisfying the request/instruction or refusing to do so with reasons, no later than within 30 (thirty) calendar days from the date of the Data Subject's request. If the Data Subject wishes, the answer must be given in writing.

38. In order for the Company to be able to offer the Customer full-fledged services in the Electronic Store, information (Cookies) is recorded on the Customer's computer (device), which is used to identify the Customer as a previous user of the Electronic Store, to collect the statistics of visits to the Electronic Store, information about the shopping cart. The customer has the opportunity to view what information (Cookies) the Company records and can delete part or all of the recorded Cookies. By approving the Privacy Policy, the customer agrees to have the Cookies specified in this Privacy Policy stored on his computer (device). The Customer can revoke this consent at any time by changing the settings of his internet browser, but in this case certain functions of the serjarom.lt online store may not work for him.

IV. Final Provisions

48. The company has the right to change or supplement the Privacy Policy in whole or in part. Additions or changes to the privacy policy take effect from the date of their publication, i.e. i.e. from the day they are published in the Electronic Store.