PRIVACY POLICY

KEY DEFINITIONS

1.1. Company or Data Controller – MB Be Festive, a private limited liability company incorporated and operating under the laws of the Republic of Lithuania, company registration number 306760874, registered address I. Simonaitytės g. 6-9, Vilnius.
1.2. Customer or Data Subject – a natural person who is a customer of the Company (including website visitors) whose personal data is collected by the Company.
1.3. Online Store – the Company's online store at festive.lt.
1.4. Services – all services provided by the Company.
1.5. Personal Data – any information relating to a natural person whose identity is known or can be directly or indirectly determined using data such as a personal identification number or one or more physical, physiological, psychological, economic, cultural, or social characteristics.
1.6. Processing of Personal Data – any operation performed on personal data: collection, recording, accumulation, storage, classification, grouping, combining, modification (supplementing or correcting), provision, publication, use, logical and/or arithmetic operations, retrieval, dissemination, destruction, or any other operation or set of operations.
1.7. Partner – a legal entity providing services to the Company related to its activities, or selling goods to it, or carrying out joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programmes, etc., in media, websites, the Online Store, retail stores, retail networks, etc.
1.8. Cookie – a small piece of text information that is automatically created when browsing a website and stored on the visitor's computer or other device.
1.9. Direct Marketing – activities aimed at offering goods or services to persons by post, telephone, or other direct means and/or requesting their opinion on the goods or services offered.
1.10. Privacy Policy – means this document setting out the principles and rules for processing Personal Data when using the Online Store's services.
1.11. Account – the Customer's primary login credentials for the Online Store, consisting of one email address and a Password.
1.12. Password – a unique combination of numbers, letters, or symbols created by the Customer that can be used to log in to the Online Store.

GENERAL PROVISIONS

2.1. The Customer grants the Company the right to carry out all Personal Data processing operations to the extent and for the purposes set out in this Privacy Policy.
2.2. Personal Data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws and regulations governing the processing and protection of personal data, as well as this Privacy Policy.
2.3. Within the Company, Personal Data is processed in accordance with the following principles:
2.3.1. Personal Data is collected for defined and lawful purposes;
2.3..2. Personal Data is processed accurately, fairly, and lawfully;
2.3..3. Personal Data is adequate and only to the extent necessary for the purposes for which it is collected and further processed;
2.3..4. Personal Data is kept up to date;
2.3..5. Personal Data is stored in a form that allows the identity of the Data Subject to be determined for no longer than is necessary for the purposes for which the data was collected and processed.
2.3..6. All information about Personal Data is confidential;
2.3..7. The Customer's Personal Data and personal information will not be used for unlawful purposes.
2.4. By making a purchase in the Online Store, the Customer is deemed to have read and agreed to the current version of the Privacy Policy. If the Customer does not agree with any part or all of the Privacy Policy, the Customer must not place an order or purchase goods in the Online Store.
2.5. The Privacy Policy is available in the Online Store and can be printed at any time. The Privacy Policy may be amended, supplemented, or updated at the Company's discretion. A new version of the Privacy Policy is published in the Online Store.
2.6. The Customer may place an order in the Online Store without registration, or via their Account after registering in the Online Store.
2.7. Upon initial registration in the Online Store via an Account, the Customer must provide their email address, create a secure Password, and submit accurate Personal Data to the Online Store. The Customer is responsible for the accuracy of this information. Once an Account is created, the Customer is assigned an identification code.
2.8. When using the Services and making purchases in the Online Store, the Customer must always provide accurate Personal Data to the Online Store and is responsible for its accuracy.
2.9. The Customer has the right to change or update their Personal Data in the Account at any time, or to contact the Online Store with a request to delete the Account.
2.10. The Customer must not disclose their Password to third parties and must keep it secure; otherwise all related liability rests with the Customer.

COLLECTION, USE, CORRECTION AND STORAGE OF PERSONAL DATA

3.1. The Company respects each Customer's right to privacy. The Customer's Personal Data (i.e. first name, last name, email address, phone number, delivery address, age/year of birth, payment details (bank account number, payment method, etc.), purchase history, and, with the Customer's consent, age, gender, date of birth, place of residence) is collected and processed for the following purposes:
3.1.1. For e-commerce purposes. The following Personal Data is processed: first name, last name, email address, phone number, delivery address, age/year of birth, IP address, payment details. Personal Data used for e-commerce purposes is stored for 5 (five) years from the date of the last login to the Online Store.
3.1.2. For direct marketing purposes. The following Personal Data is processed: first name, last name, phone number, email address, address, age, gender, date of birth, place of residence. Personal Data used for direct marketing purposes is stored for 5 (five) years from the date of the last login to the Online Store.
3.2. The Customer may give consent for their Personal Data (first name, last name, phone number, email address, address, age, gender, date of birth, place of residence) to be processed for direct marketing purposes. If a Customer who has given consent to process their data for direct marketing purposes and to receive direct marketing messages subsequently withdraws that consent and informs the Company, the Company will no longer process their Personal Data for direct marketing purposes and will not send the Customer any electronic newsletters, except for information relating to the Customer's order.
3.3. The Customer has the right to withdraw their consent under section 3.2 at any time by sending an appropriate notice to the Company by email at [email protected], clearly stating that they are withdrawing consent to use their Personal Data for direct marketing purposes and do not wish to receive any direct marketing messages.
3.4. The Customer also has the option to exercise their right to object to the processing of their Personal Data for direct marketing purposes by clicking the relevant link included in every email sent to them.
3.5. The Customer, as a Data Subject, has the following rights relating to the processing of their Personal Data:
3.5.1. to obtain from the Company information about the processing of their Personal Data, and to access their Personal Data and how it is processed;
3.5.2. to obtain from the Company information on the sources from which and the types of Personal Data collected, the purpose for which they are processed, the data recipients to whom they have been or are being provided over at least the past 1 (one) year;
3.5.3. to request the correction, destruction, or suspension (except storage) of the processing of their Personal Data where Personal Data is being processed in breach of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other statutory provisions.
3.6. When exercising their rights, the Customer must present a passport, national identity card, or driving licence. The Company provides the Data Subject with information about the Personal Data being processed free of charge once per year. The Customer may exercise the rights set out in section 3.5 by contacting the Company by email at [email protected]. The Company has the right to correct, amend, delete, or suspend the processing of Personal Data only after verifying the identity of the Customer who has made the request.
3.7. The Customer's Personal Data is not disclosed to third parties, except in the following cases:
3.7.1. Where the Customer's consent has been obtained as set out in this Privacy Policy;
3.7.2. Personal Data for e-commerce purposes is provided to Partners providing services to the Company related to its activities;
3.7.3. In cases provided for by the laws and regulations of the Republic of Lithuania, to competent authorities.
3.7.2. Payments in the Online Store are processed using the makecommerce.lt platform, operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475); therefore, your personal information required to process and confirm the payment will be transferred to Maksekeskus AS.
3.8. The Customer is aware of their right to object to the processing of their Personal Data for direct marketing purposes, i.e. the Customer has the right to express their objection immediately or at any later time.
3.9. The Customer agrees that their Personal Data may be transferred to Partners for the purpose of fulfilling the Customer's order placed in the Online Store, as well as when the Company provides Services to the Customer, and to the Company's Partners as set out in section 3.7.
3.10. If the Customer does not agree with the Privacy Policy, the Customer will not be able to use the Online Store's services.
3.11. The Company implements organisational and technical measures designed to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, and from any other unlawful processing.
3.12. The Customer agrees that where required by the instructions of competent authorities and/or where Personal Data may have been used in connection with unlawful activities, or where there are reasonable grounds to suspect identity theft and competent law enforcement authorities are conducting a pre-trial investigation, or where there are other lawful grounds or purposes, their Personal Data may be stored on the Company's servers for longer than specified in this Privacy Policy.
3.13. Upon receiving a Data Subject's instruction or enquiry relating to the processing of Personal Data, the Company shall provide the Customer with a response either granting or giving reasoned grounds for refusing the request/instruction no later than 30 (thirty) calendar days from the date of the Data Subject's contact. If the Data Subject so requests, the response must be provided in writing.
3.14. In order for the Company to offer the Customer a full range of services in the Online Store, with the Customer's consent, information in the form of Cookies is recorded on the Customer's computer (device) and is used to recognise the Customer as a previous user of the Online Store, to collect statistics on Online Store visits, and information about the shopping basket. The Customer may at any time view which Cookies are stored and delete some or all of them.
3.15. To learn more about cookies, such as how to manage or delete them, please visit www.allaboutcookies.org.

OTHER PROVISIONS

4.1. The Company has the right to change or supplement the Privacy Policy in whole or in part. Amendments or changes to the Privacy Policy take effect from the date of their publication.
4.2. If you have any questions, please contact us at: [email protected]