1. MAIN CONCEPTS
1.1. Company or Personal Data Controller shall mean the MB Mados Kryptis, established and operating in accordance with the laws of the Republic of Lithuania, with the legal company code 305651014, registered office address Smolensko st. 19 Vilnius, Lithuania
1.2. Customer or Data Subject shall mean a natural person – a customer of the Company (including website visitors) whose personal data is collected by the Company.
1.3. E-Shop shall mean the Company’s outerwear e-shop at https://wishnevska.com
1.4. Services shall mean all services provided by the Company.
1.5. Personal Data shall mean any information relating to a natural person – a data subject whose identity is known or can be directly or indirectly established by reference to data such as a personal identification number, one or more personal, physical, physiological, psychological, economic, cultural or social data characteristics.
1.6. Processing of Personal Data shall mean any operation carried out on personal data: collection, recording, storage, retaining, classification, grouping, aggregation, modification (addition or correction), provision, publication, use, logical and/or arithmetic operations, retrieval, dissemination , destruction or other action or set of actions.
1.7. Partner shall mean a legal entity that provides services to the Company related to the Company’s activities, or which sells goods to it, or carries out joint projects with the Company, including, but not limited to, marketing campaigns, joint sales campaigns, loyalty programs, etc., in the media, websites, e-shops, retail stores, retail chains, etc.
1.8. Cookie shall mean a small piece of textual information that is automatically generated when you browse a website and which is stored on a visitor’s computer or other device.
1.9. Direct Marketing shall mean the activity of offering goods and services to individuals and/or seeking their opinion on the goods or services offered by post, telephone or other means.
1.10. Privacy Policy shall mean this document setting out the principles and rules for the processing of Personal Data when using the services of the E-Shop.
1.11. Account shall mean the main data of the Customer’s login to the E-Shop, which consists of one e-mail address and a Password.
1.12. Password shall mean a unique combination of numbers, letters, or numbers and letters or other symbols created by the Customer, which can be entered in order to access the E-Shop.
2. GENERAL PROVISIONS
2.1. The Customer shall grant the Company the right to perform all personal data processing actions to the extent and for the purposes provided for in this Privacy Policy.
2.2. Personal Data shall be processed in accordance with the Republic of Lithuania Law on Legal Protection of Personal Data and other legal acts regulating the processing and protection of Personal Data, as well as this Privacy Policy.
2.3. Personal Data shall be processed in the Company in accordance with the following principles:
2.3.1. Personal Data shall be collected for defined and legitimate purposes;
2.3.2. Personal Data shall be processed accurately, fairly and lawfully;
2.3.3. Personal Data shall be adequate and limited to what is necessary for their collection and further processing;
2.3.4. Personal Data shall be constantly updated;
2.3.5. Personal Data shall be kept in a form which permits identification of Data Subjects for no longer than is necessary for the purposes for which the data were collected and for which they are processed.
2.3.6. All information about Personal Data shall be confidential;
2.3.7. Customer’s Personal Data and personal information shall not be used for unlawful purposes.
2.4. The Customer shall be deemed to have read and agree to the Privacy Policy of the current version when purchasing goods in the E-Shop. If the Customer does not agree with any part of the Privacy Policy or the Privacy Policy as a whole, then the Customer must not place an order and must not buy products in the E-Shop.
2.5. The Privacy Policy shall be available in the E-Shop and may be printed out at any time. The Privacy Policy may be amended, supplemented or updated at the Company’s discretion. The new version of the Privacy Policy shall be published in the E-Shop.
2.6. During the initial registration with the E-Shop through the Account, the Customer must provide his/her name, surname, nickname, e-mail address, come up with a secure Password, and provide accurate Personal Data to the E-Shop. The Customer shall be responsible for their correctness.
2.7. When using the Services, as well as when purchasing in the E-Shop, the Customer must always provide accurate Personal Data to the E-Shop and shall be responsible for their accuracy.
2.8. The Customer shall have the right to amend and supplement the Personal Data in the Account at any time or to apply to the E-Shop with a request to cancel the Account.
2.9. The Customer must not disclose the Password to third parties and protect it; otherwise, all the related liability shall lie with the Customer.
3. COLLECTION, USE, CORRECTION AND STORAGE OF PERSONAL DATA
3.1. The Company shall respect each Customer’s right to privacy. Customer’s Personal Data (i.e. name, surname, e-mail address, telephone number, billing address, delivery address, product/service payment data (bank account number, payment method, etc.), purchase history,) shall be collected and processed for the following purposes:
3.1.1. For the purpose of e-commerce. The following Personal Data shall be processed: name, surname, e-mail address, billing address, telephone number, delivery address, delivery address of the product/service, IP address, payment data of the product/service (payment method, account number, payment amount, payment purpose, payment data). The retention period of Personal Data used for the purpose of e-commerce shall be 5 (five) years from the date of the last connection to the E-Shop.
3.1.2. For Direct Marketing purposes. The following personal data shall be processed: name, surname, e-mail address, purchase history. The retention period of Personal Data used for the purpose of Direct Marketing shall be 5 (five) years from the date of the last connection to the E-Shop.
3.2. The Customer may consent to the processing of his/her Personal Data (name, surname, e-mail address) for the purpose of Direct Marketing. If after giving consent to process his/her data for the purpose of Direct Marketing, as well as to receive Direct Marketing notices, the Customer no longer wishes for such data to be processed and informs the Company thereof, the Company shall no longer process his/her Personal Data for the purpose of Direct Marketing and shall not send the Customer any electronic news, except for the information related to the Customer’s order.
3.3. The Customer shall have the right to revoke his/her consent to the Company to process the Customer’s Personal Data for the purpose of Direct Marketing at any time by notifying the Company by e-mail at info@wishnevska.com and clearly indicating that he/she revokes his/her consent to use his/her Personal Data for the purpose of Direct Marketing and no longer wishes to receive any Direct Marketing notices.
3.4. The Customer shall also have the option to revoke his/her consent to object to the processing of Customer’s Personal Data for the purposes of Direct Marketing by clicking on the appropriate link in each e-mail sent.
3.5. The Customer, as a Data Subject, shall have the following rights related to the processing of the Customer’s Personal Data:
3.5.1. to receive information from the Company about the processing of the Customer’s Personal Data, to get acquainted with his/her Personal Data and how they are processed.
3.5.2. to receive information from the Company, from which sources and which Personal Data of the Customer have been collected, for what purpose they are processed, to which data recipients they have been provided at least during the last 1 (one) year;
3.5.3. to demand the rectification, destruction of the Customer’s Personal Data or the suspension, except for storage, of his/her Personal Data processing actions when the Personal Data is processed without complying with the provisions of the Republic of Lithuania Law on Legal Protection of Personal Data and other laws.
3.6. In order to exercise his/her rights, the Customer must present a passport, personal identity card or driver’s license. The Company shall provide the Data Subject with information on the processing of the Data Subject’s Personal Data once a year free of charge. The Customer, may exercise his/her rights provided for in Clause 3.5 by contacting us by e-mail at info@wishnevska.com. The Company shall have the right to correct, change, delete Personal Data or suspend the processing of Personal Data only after identifying the identity of the Customer who applied.
3.7. The Customer’s Personal Data shall not be provided to third parties, except in the following cases:
3.7.1. When Customer’s consent is obtained as set forth in this Privacy Policy;
3.7.2. Personal Data is provided for the purposes of e-commerce to Partners providing services to the Company related to the Company’s activities;
3.7.3. Personal Data may be provided to the competent authorities in cases provided for by the laws and legal acts of the Republic of Lithuania.
3.7.4. In the E-Shop, payments shall be processed using Paysera.lt Stripe and PayPal platforms.
The Data Controller of Paysera.lt according to the Joint Data Management Agreement 19/09/2018 No. 20180919 shall be the Paysera network. Paysera contact details shall be published on the Paysera website. The contact details of the Data Protection Officer appointed by Paysera are: dpo@paysera.com;
PayPal – Online payments. Location: Headquarters in USA, local presence in many other countries PayPal has separate privacy policies depending on your location, they are listed on the PayPal Legal Agreements page. Transfer out of EEA Safeguard: EU-approved Binding Corporate Rules
We offer Credit Card Payment via Stripe. Provider of this payment service is the Stripe, 185 Berry Street, Suite 550, San Francisco, CA 94107. If you choose to pay via Stripe, the payment details you enter will be sent to Stripe For detailed information on Stipes privacy please refer to the following Link
3.8. The Customer is aware of his/her right to object to the processing of his/her Personal Data for the purpose of Direct Marketing, i.e. the Customer shall have the right to express disagreement immediately, or later.
3.9. The Customer hereby agrees that his/her Personal Data shall be transferred to the Partners when executing the Customer’s order placed in the E-Shop, as well as when the Company provides Services to the Customer, as well as to the Company’s Partners, as specified in Clause 3.7.
3.10. If the Customer does not agree with the Privacy Policy, the Customer shall not be able to use the services of the E-Shop.
3.11. The Company shall implement organisational and technical measures to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.
3.12. The Customer hereby agrees that in cases when it is necessary in accordance with the instructions of the competent authorities and/or the Customer’s Personal Data may have been used in carrying out unlawful activities, or there are reasonable grounds for suspecting identity theft which are the subject of a pre-trial investigation by the competent law enforcement authorities, or there are other legitimate grounds or objectives, his/her Personal Data shall be stored on the Company’s servers for a longer term than that specified in this Privacy Policy.
3.13. Upon receipt of the Data Subject’s instruction or request related to the processing of Personal Data, the Company shall provide the Customer with a response, satisfying the request/instruction or reasonably refusing to do so, no later than within 30 (thirty) calendar days from the Data Subject’s request. If the Data Subject so requests, the response must be provided in writing.
3.14. In order for the Company to offer full services to the Customer in the E-Shop, with the consent of the Customer, the information on Cookies shall be stored on the Customer’s computer (device), which shall be used to identify the Customer as a previous user of the E-Shop when collecting E-Shop traffic statistics, information about the shopping cart. The Customer may at any time view which Cookies are stored and may delete some or all of the Cookies saved on his/her device.
3.15. In order to learn more about Cookies, such as how to manage or delete them, you can visit www.allaboutcookies.org.
3.16 Cookies we use
Learn more about the cookies we use and change your preferences.4. DATA RECIPIENTS
4.1 We shall only transfer your Personal Data to trusted third parties and only for the purpose of providing high quality services and for the proper implementation of the purposes of Personal Data processing. In addition to the recipients of the data listed above, your data may also be transferred:
4.1.1 to our partners providing information technology, electronic communications, digital marketing, auditing, legal and other services;
4.1.2 to Paysera.lt, Stripe and PayPal (our partners providing electronic settlement and payment services). You can get acquainted with the Paysera.lt data protection policy here, you can get acquainted with the Paypal data protection policy here. For detailed information on Stipes privacy please refer to the following Link
4.1.3 to state supervision and law enforcement institutions;
4.1.4 to Google (Google Analytics and Youtube Services); data shall be transferred to the United States of America. The data shall be stored under the Privacy Shield program, which you can read more about here;
4.1.5 to Facebook, Inc.; data shall be transferred to the United States of America. The data shall be stored under the Privacy Shield program, which you can read more about here;
4.1.6 to the Mailchimp (e-mail marketing service) service provider The Rocket Science Group LLC. For more information about Mailchimp’s privacy practices, please visit https://mailchimp.com/legal/privacy/
4.2 We shall only provide all of these Personal Data to all such service providers as is necessary to perform a particular service.
5. OTHER PROVISIONS
5.1. The Company shall have the right to change or supplement the “Privacy Policy” in full or in part. Supplements or amendments to the Privacy Policy shall take effect from the date of their publication.
5.2. This website may contain content (such as videos, pictures, text, etc.) uploaded from other websites. Viewing and handling of such uploaded content on this website shall be equivalent to visiting the websites from which the content has been uploaded. These websites may collect data about you, use cookies, third-party tracking services and monitor your actions with uploaded content, including when you have an account and are logged into those websites.
5.3. If you have any questions, please contact the following contacts: info@wishnevska.com