Privacy Policy

PRIVACY POLICY

I. PRIVACY POLICY DOCUMENT. This Privacy Policy of the Online Store (hereinafter referred to as the Policy) is of an informational nature, which means that it does not impose any obligations on Customers who use the Online Store (it is not a contract or rules). The purpose of the policy is to clearly present the operating principles of the Online Store, as well as the principles of personal data processing.

II. CONTROLLER OF PERSONAL DATA. The data controller is the company MB "Princesėms.lt", whose registered office and address for correspondence is at Justiniškių st. 28A, Vilnius, registered in the Center of Registers of Public Enterprises. Taxpayer code 304887677. Contact details: above address, e-mail e-mail: info@princesems.lt, contact phone number (+370) 657 67765 (calls are charged according to the rates set by the relevant operator), hereinafter referred to as the "Data Controller", which also acts as the Seller.

III. HOW WE HANDLE YOUR DATA. The data manager takes care of the security and legality of the processing of personal data of customers. The customer's personal data is processed in accordance with the 2016 April 27 Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data and which repeals Directive 95/46/EC (Official Gazette No. 119, p. 1) (hereinafter also called GDPR) and other currently valid norms, i.e. i.e. during the entire period of data processing, the legal provisions of personal data protection are followed.

Personal Data means information about an identified or identifiable natural person (hereinafter referred to as "Personal Data"). An identifiable natural person is a person whose identity can be determined directly or indirectly, in particular by an identifier such as a name, a personal identification number, location data, an Internet identifier, or by one or more of that natural person's physical , signs of physiological, genetic, mental, economic, cultural or social identity.

The Data Controller, understanding the importance of ensuring customer privacy, protects not only users who visit the Online Store, but also Customers who have submitted their personal data to the Data Controller through other communication channels.

IV. PURPOSES OF USE OF INFORMATION. Your personal data may be processed for various purposes and on various legal bases, depending on which functions of the online store you use, in particular for concluding and implementing contracts with you, for marketing activities, market and statistical analysis, improving the quality of services, relevant legal obligations assumed Execution for the data controller.

V. ACCOUNT IN THE ONLINE STORE. Your personal data that you provided when registering your Account, as well as other data collected in relation to your activity in the Online Store and the use of our services (in particular: name, surname; e-mail address; contact telephone number; address [street, house number, apartment number, postal code, city, country], residential / business / registered office address [if different from the delivery address], bank account number, may be processed for the following purposes: 1) to maintain your account so that you can enjoy its benefits (e.g. , when placing orders you do not have to fill in forms every time, see your purchase history, manage consents on the website, etc.) and providing the opportunity to use other services provided on our website - legal basis: Article 6 point 1 point b GDPR, i.e. i.e. the need to fulfill the contract that you enter into by creating an Account and agreeing to the provisions of the Online Store; 2) For the marketing, analytical and statistical purposes of the Data Controller, e.g. to provide you with offers (discount offers) as well as tailored interests based on profiling (we analyze your actions in a simplified manner in order to better tailor messages to specific, general to our customer groups, but we do not limit the opportunity for various customer groups to familiarize themselves with interesting offers and do not significantly influence their decisions). However, our actions do not have a significant impact on your decisions, e.g. shopping - legal basis: Article 6 point 1 point f of the GDPR, i.e. i.e. legitimate interest of the Data Controller or a third party; 3) determination, defense and execution of disputes, as part of the relationship between you and the Data Controller, and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. Providing personal data is voluntary, but necessary to register in the Online Store.

Normally, we process your data for as long as you use the account (however, in order to ensure greater protection of data, it can be deleted after three years from the time you last performed actions in the Online Store), and in the case of marketing actions - until you state that you do not agree to data processing , you will unsubscribe from the Newsletter or withdraw your consent (on which the data processing is based), except in cases where we are required by law to process that data for a longer period of time, or we will keep it for a longer period in case claims are made, the statute of limitations, in particular the Civil Code period.

VI. SUBMISSION OF ORDER. The controller of your Personal Data is the entity specified in point II of this Policy.

Your personal data that you provided during the Order, as well as other data collected in relation to your activity in the Online Store and the use of our services (in particular: name, surname; e-mail address; contact telephone number; address [street, house number, apartment number, postal code, city, country], address of residence / company / office [if different from the delivery address], bank account number, are or may be processed for the following purposes: 1) Execution of your order and concluded contract - in particular confirmation of its presentation and reservation (if such an option is available and you have chosen it) or sending it to you or to the pick-up point of the selected item, as well as, if necessary, to contact you in this regard - legal basis: Article 6 point 1 point b GDPR, i.e. i.e. the need to execute the sales contract that you enter into when placing an order or concluding an order contract (if such an option is available and you have chosen it); 2) For marketing, analytical and statistical purposes of the data controller or entities cooperating with the company (third parties), e.g. to provide you with offers (discount offers), as well as interests tailored to your needs, based on profiling (we analyze your actions in a simplified manner for , so that we can better tailor messages to specific, general groups of our customers, but we do not limit the opportunity for various customer groups to get acquainted with offers of interest and do not significantly influence their decisions). However, our actions do not have a significant impact on your decisions, e.g. shopping - legal basis: GDPR, Article 6, Clause 1, Clause f, vol. i.e. legitimate interest of the Data Controller or a third party; 3) determination, defense and execution of disputes, as part of the relationship between you and the Data Controller, and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of GDPR, i.e. i.e. a legitimate interest pursued by the Data Controller or a third party; 4) issuance and storage of invoices and accounting documents, as well as consideration of complaints and refunds in accordance with the law, especially the Civil Code - legal basis: Article 6, point 1, point f of the GDPR, i.e. the need to fulfill the legal obligation of the Data Controller.

Providing personal data is voluntary, but necessary to place an order.

For the purpose of fulfilling your order, we will process your data for the period of validity of the contract, as well as the term required by law (e.g. tax, accounting), and in the case of marketing actions - until you state that you do not agree with data processing, unsubscribe from the Newsletter or withdraw your consent ( on which the data processing is based), except in cases where we will keep them longer in case claims are made, during the statute of limitations period established by the law, especially the Civil Code.

VII. COMPLAINT FORM. Your data, which you have provided for the purposes of handling the Complaint (in the Complaint form) and collected during possible further communication, are or may be processed for the following purposes: 1) Handling of your complaint, accounting management and settlement of pending complaints - legal basis: GDPR Article 6 Clause 1 Clause c , i.e. i.e. the need to fulfill the legal obligation of the Data Controller; 2) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary for the realization of the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. The provision of personal data is voluntary, but necessary to file a complaint. We will process your data during the period of processing your complaint, except in cases where according to the law (e.g. tax, accounting) we are obliged to process that data for a longer period of time, or we will keep it for a longer period in case claims are made, established by laws, especially the Civil Code during the limitation period.

VIII. CONTACT FORM. Your personal data, which you provided when filling out the contact form and which were collected during further communication, are or may be processed for the following purposes: 1) to communicate with you and respond to your messages - legal basis: GDPR Article 6, Clause 1, Clause f, i.e. i.e. legitimate interest of the Data Controller; 2) taking into account the content of the message, to take steps to examine your requests before concluding the relevant contract - legal basis: Article 6, point 1, point b of the GDPR, i.e. i.e. the need to take action before the conclusion of the contract; 3) depending on the content of your message, the Data Controller, or entities cooperating with the company (third parties) for marketing, analytical and statistical purposes - legal basis: GDPR Article 6, Clause 1, Clause f, i.e. i.e. legitimate interest of the Data Controller or a third party; 4) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. The provision of personal data is voluntary, but necessary to submit a message. We process your data in order to be able to communicate with you and respond to your message - the basis of data processing is the legitimate interest of MB "Princesiems.lt" as the Data Controller. Depending on the content of your message, the basis for processing your data may also be the legitimate interest of the Data Controller or a third party, i.e. the interest of MB "princesėms.lt" itself or the entities cooperating with the company, with which you may disagree or, before concluding the contract, request that actions be taken according to your request.

IX. NEWSLETTER. Your personal data, including those submitted during the Newsletter subscription, are or may be processed for the following purposes: 1) Execution of the Newsletter subscription contract - legal basis: Article 6, point 1, subparagraph b of the GDPR, i.e. i.e. the need to fulfill the concluded contract (Newsletter subscription rules) so that we can send you e.g. e-mails or sms, mms messages that are tailored to your phone number (e.g. Messenger, WhatsApp), attractive advertisements and offers (discount offers). Of course, you can unsubscribe from the Newsletter. 2) For marketing, analytical and statistical purposes of the data controller or entities cooperating with the company (third parties), e.g. to provide you with offers (discount offers), as well as interests tailored to your needs, based on profiling (we analyze your actions in a simplified manner for , so that we can better tailor messages to specific, general groups of our customers, but we do not limit the opportunity for various customer groups to get acquainted with offers of interest and do not significantly influence their decisions). However, our actions do not have a significant impact on your decisions, e.g. shopping - legal basis: Article 6 point 1 point f of the GDPR, i.e. i.e. legitimate interest of the Data Controller or a third party; 3) determination, defense and execution of disputes, as part of the relationship between you and the Data Controller, and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. Providing personal data is voluntary, but necessary to order a subscription to the Newsletter.

We will generally process your data until you unsubscribe from the Newsletter, state that you do not agree with data processing, and data that is processed on the basis of your consent - until you withdraw your consent, except in cases where we are required by law to process the data for longer, or we we will keep it longer in case we are sued during the statute of limitations, especially the Civil Code.

X. SOCIAL NETWORK PROFILES. Your personal data, including those you leave when visiting our social network profiles (including comments, ratings, online identifiers), are or may be processed for the following purposes: 1) Marketing, analytics and statistics of the Data Controller or entities cooperating with the company (third parties) for purposes such as providing you with offers (discount offers) as well as interests tailored to your needs. However, our actions do not have a significant impact on your decisions, e.g. shopping - legal basis: Article 6 point 1 point f of the GDPR, i.e. i.e. legitimate interest of the Data Controller or a third party; 2) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary for the realization of the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. The provision of personal data is voluntary, but necessary to fully use the functions of our profiles on social networks.

We will process your data in principle until the communication with you is finished, and in the case of marketing actions - until you state that you do not agree to the data processing, except in cases where we are required by law to process that data for a longer period of time, or we will keep it longer for this purpose in the event that claims are made, within the statute of limitations period established by laws, especially the Civil Code.

XI. ONLINE CHAT. Your personal data, including those submitted during an online chat, are or may be processed for the following purposes: 1) submission of a message during an online chat (LiveChat) - legal basis: GDPR Article 6, Clause 1, Clause f, i.e. i.e. legitimate interest of the Data Controller; 2) taking into account the content of the message, to take steps to examine your requests before concluding the relevant contract - legal basis: Article 6, point 1, point b of the GDPR, i.e. i.e. the need to take action before the conclusion of the contract; 3) depending on the content of your message, the Data Controller or entities cooperating with the company (third parties) for marketing, analytical and statistical purposes - legal basis: GDPR Article 6, Clause 1, Clause f, i.e. i.e. legitimate interest of the Data Controller or a third party; 4) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. The provision of personal data is voluntary, but necessary to submit a message during an online chat (LiveChat). We process your data in order to be able to communicate with you and respond to your message - the basis of data processing is the legitimate interest of MB "Princesiems.lt" as the Data Controller. Depending on the content of your message, the basis for processing your data may also be the legitimate interest of the Data Controller or a third party, i.e. the interest of MB "Princesiems.lt" itself or the entities cooperating with the company, with which you may disagree or request that actions be taken according to your request before concluding the contract.

XII. NOTICE OF PRODUCT AVAILABILITY. Your personal data, submitted together with the desire to use the service when notifying about product availability, is or may be processed for the following purposes: 1) sending a notification about product availability - legal basis: GDPR Article 6, Clause 1, Clause f, i.e. i.e. the need to fulfill the service contract and notify the availability of the product; 2) For marketing, analytical and statistical purposes of the data controller or entities cooperating with the company (third parties), e.g. to provide you with offers (discount offers), as well as interests tailored to your needs. However, our actions do not have a significant impact on your decisions, e.g. shopping - legal basis: Article 6 point 1 point f of the GDPR, i.e. i.e. legitimate interest of the Data Controller or a third party; 3) determination, defense and execution of disputes, as part of the relationship between you and the Data Controller, and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. The provision of personal data is voluntary, but necessary to receive notification of product availability. We will process your data in principle until the communication with you is finished, and in the case of marketing actions - until you state that you do not agree to the data processing, except in cases where we are required by law to process that data for a longer period of time, or we will keep it longer for this purpose in the event that claims are made, within the statute of limitations period established by laws, especially the Civil Code.

XIII. ORGANIZATION OF COMPETITIONS. If you decide to participate in a contest organized by the Data Controller, your data will be processed or may be processed for the following purposes: 1) during the execution of the contest, selection of winners and distribution of prizes - legal basis: Article 6, point 1, subparagraph f of GDPR, i.e. i.e. legitimate interest of the Data Controller; 2) Implementation of the legal obligations of the data controller, especially those arising from the provisions governing tax obligations - legal basis: GDPR Article 6, Clause 1, Clause c, i.e. i.e. the need to fulfill the legal obligation of the Data Controller; 3) For marketing, analytical and statistical purposes of the data controller or entities cooperating with the company (third parties), e.g. to provide you with offers (discount offers), as well as interests tailored to your needs. However, our actions do not have a significant impact on your decisions, e.g. shopping - legal basis: Article 6 point 1 point f of the GDPR, i.e. i.e. legitimate interest of the Data Controller or a third party; 4) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary to realize the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. Providing personal data is voluntary, but necessary to participate in the competition.

We will process your data essentially until the competition takes place, the winners are chosen and the prizes are awarded, and in the case of marketing actions - until you state that you do not agree to the data processing, except in cases where we are required by law to process that data for longer, or we we will keep them for longer in the event that claims are made, during the statute of limitations period set by the law, especially the Civil Code.

XIV. CUSTOMER SATISFACTION SURVEY. Your data, provided to us when checking your satisfaction with our services, is or may be processed for the following purposes: 1) For customer satisfaction research (using various types of surveys), improving the online store and improving the quality of the services offered by the Data Controller - legal basis: GDPR Article 6 1 paragraph (f), vol. i.e. legitimate interest of the Data Controller or a third party; 2) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary for the realization of the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. Providing data is voluntary, but if you do not do so, you will not be able to participate in the satisfaction survey. The survey will allow us to learn your opinion about our services and improve the services provided by the Online Store. We will process your data for the period required to conduct a satisfaction survey and for the development and implementation of solutions aimed at improving the quality of the services provided by the Online Store, as well as the term required by law, and in the case of marketing actions - until you state that you do not agree to data processing, except in the cases , when we will keep them for a longer period of time in the event that claims are made, during the statute of limitations period set by the law, especially the Civil Code.

XV. LOYALTY PROGRAM. Your Personal Data (provided when creating an Account or later joining the Loyalty Club, and collected during participation in the Loyalty Program, we process or may process for the following purposes: 1) Provide loyalty program services, including advertising, offers and promotions (discounts) tailored to your preferences, submission, creation, assignment and execution, as well as for automated decision-making - legal basis: Article 6, point 1, point b of the GDPR, i.e. the need to fulfill a contract related to participation in the Loyalty Program; 2) determination, defense and execution of disputes as part of the relationship between you and the Data Controller and other purposes necessary for the realization of the legitimate interests of the Data Controller or a third party - legal basis: Article 6, point 1, subparagraph f of the GDPR, i.e. i.e. legitimate interest pursued by the Data Controller or a third party. 3) Implementation of the legal obligations of the data controller, especially those arising from the provisions governing tax obligations - legal basis: GDPR Article 6, Clause 1, Clause c, i.e. i.e. the need to fulfill the legal obligation of the Data Controller. The provision of personal data is voluntary, but necessary in order to join and participate in the Loyalty program (conclusion and execution of the contract related to participation in the loyalty program of MB Princesses.lt).

We will process your data for as long as you participate in the Loyalty Program (we may delete it three years after your last activity), as well as the period required by law, unless we are required by law to process that data longer, or we will keep it longer if claims would be made, during the statute of limitations set by law, especially the Civil Code, or for other purposes arising from our legitimate interests. In each case, a longer period of storage of Personal Data is decisive.

XVI. DO YOU HAVE TO PROVIDE YOUR PERSONAL DATA? The Customer voluntarily provides Personal Data in the Online Store, but it is necessary to use certain functions of our store, for example, for the Customer to place an Order and pay for it (Conclusion and Execution of the Sales Agreement), create an Account or make a Reservation (Conclusion and Execution of the Service Agreement), subscribe Newsletter or use the acts we offer.

Each time, the scope of the data required to conclude the relevant contract is specified in advance in the Online Store (we mark the data, the submission of which is necessary to conclude the contract / use a certain function), in other channels of communication with the Customer or in the Rules. Failure to provide Personal Data may make it impossible to properly perform the above steps.

XVII. IS YOUR DATA PREFILLED? In order to present general advertisements, offers or promotions (discounts) for all Customers, adapted to the interests of a specific Customer, the Data Controller may learn about the Customer's preferences, for example by analyzing how often the Customer visits the Online Store, whether and what products the Customer buys or reserves for the Data Controller in owned stationary stores. This allows the Data Controller to better understand the Client's expectations and adapt to his needs, without significantly influencing his decisions. When the data controller uses advanced technologies, the system will often perform the aforementioned actions automatically, so the sent content will be the most relevant, and the Client will be able to get to know it quickly.

The Data Controller may also process information about the Customer's preferences, which may sometimes have the nature of personal data and which the Customer voluntarily provided to the Data Controller using the functions of the Mobile App or in the Online Store, including information aimed at limiting the Products or Promotions presented to a specific amount (e.g. shoe or clothing size) or to specific categories.

The analysis of visits to our website and the information we collect about the use of our website can also help us identify fraud.

XVII. TO WHOM YOUR DATA MAY BE TRANSFERRED. Each time, the list of Personal Data recipients managed by the Data Controller is mainly determined by the scope of services used by the Client. The list of data recipients also depends on the customer's consent or the provisions of legal acts and is determined by the actions performed by him in the Online Store.

Partners of the Data Controller may participate in the processing of Personal Data to a limited extent, in particular, providing technical support necessary to ensure the effective operation of the Online Store, including communication with our customers (for example, they help us send emails, and in advertising activities, as well as in marketing shares), providers of website hosting services or telephone communication and IT services, carriers or representatives carrying out orders, entities handling electronic payments or payment card settlements in the Online Store, software service companies, entities assisting the Data Controller in marketing campaigns, as well as legal and consulting services provider.

XVIII. ARE YOUR DATA TRANSFERRED TO THIRD COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA. Since the Data Controller uses tools necessary to support operations, such as Google, the Customer's Personal Data may be transferred to countries outside the European Economic Area where the Personal Data processing tools of the entity cooperating with the Data Controller are located.

The Data Controller ensures adequate security of the submitted Personal Data by using the standard data protection provisions approved by the European Commission's decision and contracts for the transfer of data processing that meet GDPR requirements. In cases where the data is transferred outside the European Economic Area, some entities there can additionally ensure an appropriate level Protection of personal data.

XIX CUSTOMER RIGHTS. 1) submit a complaint to the State Data Protection Inspectorate; 2) to transfer Personal data that have been transferred to the Data Controller and are processed automatically and which are processed on the basis of consent or according to a contract (e.g. to another Data Controller); 3) get acquainted with Personal Data (also, for example, receive information that Personal Data is being processed); 4) request correction of data and limitation of data processing (e.g. if Personal Data are incorrect) or deletion of Personal Data (e.g. if they are processed illegally); 5) to withdraw any consent given to the Data Controller, to object to data processing at any time; withdrawal of consent does not affect the data processing carried out by the Data Controller in accordance with the law before its withdrawal; 6) do not consent to the processing of his Personal data for the purpose of implementing the legitimate interests of the Data Controller or a third party, in particular, data processing for marketing purposes, including profiling (if there are no other legitimate grounds for data processing that override the interests of the client).

XX. WILL YOU BE SENT COMMERCIAL INFORMATION (BY EMAIL OR SMS). The data controller has the technical ability to communicate with the customer remotely (e.g. by e-mail, SMS).

Commercial information related to the commercial activities of the Data Controller or entities cooperating with him can be sent only on the basis of the Client's consent, including upon his consent to comply with the Newsletter subscription rules.

XXI. HOW YOUR DATA IS STORED. The data controller, taking into account the level of technical knowledge, the costs of implementation and the nature, scope, context and purposes of data processing and the risk of various probability and seriousness to the rights and freedoms of natural persons, implements appropriate technical and organizational measures to ensure the security of processed Personal Data according to the risk and categories of protected data, and in particular protects data from illegal access to them, illegal receipt, processing in violation of applicable laws, and their change, loss, damage or destruction. Disclosure of information about the technical and organizational security measures used may reduce their effectiveness, and this endangers the adequate protection of Personal Data.

The Data Controller applies, for example, the following technical measures to prevent unauthorized access to electronically transmitted Personal Data: 1) data protection against unauthorized access; 2) An SSL certificate is installed on the pages of the online store that contain Personal Data; 3) when using the online store, personal authorization data is encrypted; 4) access to the Account is granted only after entering an individual login name and password.

XXII. LINK TO OTHER SITES. The online store may contain links to other websites. The administrator encourages you to familiarize yourself with the terms of use and privacy policies of other websites. This Policy applies only to the specified activities of the Data Controller.

XXIII. IF THIS POLICY MAY BE CHANGED AND HOW YOU WILL KNOW. The Data Controller may change the provisions of the Policy in the future. Each time, the Data Controller publishes information about changes to the Policy in the Online Store. After making the change, a new version of the Privacy Policy will be published with a new date.

XXIV. WHEN DOES THIS VERSION OF THE PRIVACY POLICY APPLY. This version of the Privacy Policy is valid from 09/01/2024