Shopping Cart
There are no more items in your cart
PRIVACY POLICY
1. GENERAL PROVISIONS
1.1. In this privacy policy (hereinafter referred to as the Privacy Policy ), we provide you with information on how UAB “BRANDAS”, legal entity code 302531629, VAT number LT100005542411, registered office address Drobės g. 29L, LT-45187 Kaunas, Lithuania (hereinafter referred to as the Data Controller ) processes your personal data in the SOFALOVAKĖDĖSTALAS.LT electronic store (hereinafter referred to as the E-store ), when operating in a physical store at the address Drobės g. 29L, LT-45187 Kaunas, Lithuania (hereinafter referred to as the Store ), and in other activities.
1.2. You can contact the Data Controller at the following contacts:
Phone: +37067670609
Email: info@brandas.eu
Address: Drobės St. 29L, LT-45187 Kaunas, Lithuania
2. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?
2.1. The data controller processes the following personal data and for the following purposes:
2.1.1. Purpose: Sale of goods, order fulfillment
oh Personal data processed: Name, surname, address, telephone number, e-mail address.
oh Legal basis: Contract (when the buyer is a natural person) or legitimate interest in carrying out the activity (when the buyer is a legal person).
oh Storage period: 10 years after order fulfillment.
oh Please note that if you pay for the Goods using Inbank leasing, the Data Controller will transfer to AS Inbank filialas (code 305340173, address Kareivių g. 11B, 09133 Vilnius, Lithuania), as an independent personal data controller, some of the personal data provided during your order: Name, surname, e-mail address, telephone number. All personal data related to leasing will be collected and processed by AS Inbank filialas, as an independent personal data controller, therefore, before using Inbank leasing, please familiarize yourself with the Inbank customer data processing rules, which are available at the URL address: https://inbank.lt/documents/inbank/lt/lt/pdf/Principles_of_processing_client_data.pdf .
oh We may transfer the data necessary for the delivery of goods (name, surname, address, telephone number, e-mail address) to the delivery service provider (courier).
2.1.2. Purpose: Refund of payments
oh Personal data processed: Name, surname, bank account number, other details.
oh Legal basis: Contract, legal obligation.
oh Storage period: 10 years after payment order.
oh We may transfer personal data to payment service providers.
2.1.3. Purpose: Sale and administration of gift vouchers
oh Personal data processed: Name, surname, e-mail address, Gift voucher value, date of sale, Gift voucher number, expiry date.
oh Legal basis: Agreement.
oh Storage period: until the Gift Coupon expires or until the Gift Coupon is used.
2.1.4. Purpose: Creation and administration of an account in the E-store
oh Personal data processed: Name, surname, address, e-mail address, telephone number, order history.
oh Legal basis: Agreement.
oh Retention period: as long as the account is active and 24 (twenty-four) months after the last login to the account.
2.1.5. Purpose: Communication with E-shop visitors and other persons
oh Personal data processed: Name, surname, telephone number, e-mail address.
oh Legal basis: To take action at the request of the data subject prior to entering into a contract or legitimate interest to operate and/or ensure quality.
oh Storage period: 1 year after the date of resolution of the request.
2.1.6. Objective: Ensuring the quality of telephone service (recording telephone conversations)
oh Personal data processed: record of telephone conversations, data provided during the conversations, telephone number from which and to which the call is made, date, time and duration of the telephone conversation.
oh Legal basis: Consent.
oh Storage time: 1 month after the date of the interview.
oh Please note that if you do not agree to the recording of a telephone conversation and the processing of personal data for this purpose, please contact the Data Controller by email or submit a request via the website.
2.1.7. Purpose: Direct marketing (newsletters, invitations to events, offering similar products)
oh Personal data processed: Name, surname, e-mail, phone number.
oh Legal basis: Consent or legitimate interest in offering similar products to customers.
oh Storage period: 2 years after consent is received or after the person has purchased the goods.
oh We may transfer personal data to the newsletter sending solution.
2.1.8. Purpose: Social media account administration
oh Personal data processed: Unique ID, IP address, device information.
oh Legal basis: Consent or legitimate interest in communicating with customers.
oh Retention period: As long as the social network visitor is a follower of the accounts.
oh We control the information you provide to us through social media when visiting our accounts (including messages, use of "Like" boxes, and other communications) jointly with the social network operators as joint controllers of personal data.
oh We currently have the following social media accounts:
- Facebook - https://www.facebook.com/sofalovakedestalas.lt , whose privacy notice is available at https://www.facebook.com/privacy/explanation
- Instagram - https://www.instagram.com/sofalovakedestalaslt/ , whose privacy notice is available at https://help.instagram.com/519522125107875
- Pinterest - https://www.pinterest.com/ryushchyk/?invite_code=5f7c3da6ef884ac6af801db4ac9976c9&sender=686095461890928849 , whose privacy notice is available at https://policy.pinterest.com/en/privacy-policy
- Youtube – https://www.youtube.com/@sofalovakedestalasuabbrand1701 , whose privacy notice is available at https://policies.google.com/privacy
We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.
2.1.9. Purpose: Conclusion and execution of other contracts with suppliers, service providers, partners, customers
oh Personal data processed: Name, surname, contact information, content of correspondence, other data contained in the contract.
oh Legal basis: Contract (when a contract is concluded with a natural person) or legitimate interest in carrying out activities (when personal data of a representative of a contractor - a legal entity - are processed).
oh Storage period: 10 years after the end of the contract.
2.1.10. Purpose: Protection of persons and property, investigation of incidents (video surveillance in and around the premises)
oh Personal data processed: image, behavior, assets and other related information (date, time) of persons caught in the camera surveillance image.
oh Legal basis: The Data Controller's legitimate interest in protecting its property and health, that of its employees and visitors, and in having material to assist in investigating any incidents.
oh Shelf life: 14 days.
2.2. Cookies
2.2.1. A cookie is information that a web server sends to your web browser and is stored in the browser. This information is sent to the web server each time the browser requests a website from the server, and it identifies your computer or other device from other devices. Therefore, cookies ensure a more convenient use of the website and allow us to improve it.
2.2.2. Necessary cookies are used automatically, without your separate consent, when you perform certain actions on the website (for example, choosing the language of the website or adding an item to the cart). Other cookies (for example, analytical, advertising) are used only with your consent.
2.2.3. Cookies are used to process your IP address, browsing information, such as website pages visited, time spent on the website, etc.
2.2.4. You can find a list of cookies used on the Website and more detailed information about them in the cookie management tool installed on the Website by selecting "Cookie Settings".
2.2.5. To prevent your personal data from being processed using cookies, you can do so in the cookie management tool installed on the website, you can also change your web browser settings so that cookies are not accepted, or delete saved cookies. If you delete essential cookies and do not allow them to be used in your web browser, some website functions will not work properly and this may prevent you from using the website.
2.2.6. You can change your cookie settings in your browser at any time. All browsers provide the ability to delete cookies, and for more detailed information, please refer to your browser settings.
3. TO WHOM MAY WE TRANSFER YOUR PERSONAL DATA?
3.1. We may transfer information about you to our employees, intermediaries, service providers, such as debt administration or collection companies, archiving services, legal, marketing services, IT service providers or subcontractors, if reasonably necessary for those purposes as set out in this Privacy Policy.
3.2. We may also disclose information about you if we are required to do so by law or in order to protect our rights or interests (including providing your personal data to third parties in order to collect your debts to us), as well as when intending to transfer the E-store, the Store, part of the company's activities or its assets or to reorganize the company or in carrying out these processes, disclosing your personal data to the (potential) acquirer of the E-store, the Store, activities or part thereof, or to other participants in the reorganization.
4. HOW IS YOUR PERSONAL DATA PROCESSED?
Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation (hereinafter referred to as the GDPR ), the Law of the Republic of Lithuania on the Legal Protection of Personal Data and other legal acts. The data controller, both when determining the means of processing personal data and during the data processing itself, implements appropriate technical and organizational data protection measures established in legal acts to protect the personal data being processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unlawful processing. The appropriate measures are established taking into account the risks arising from the processing of personal data.
Below we provide information about your rights in relation to the processing of your personal data by the Data Controller and the cases in which you can exercise these rights. If you would like to receive more information about your rights or exercise them, please contact us at the e-mail address specified in this Privacy Policy.
· You may contact us at any time to inquire about whether we are processing any of your personal data. If we are storing or using your personal data in any way, you have the right to access it. To do so, please submit a written request to us at the email address specified in this Privacy Policy. We may ask you to confirm your identity in order to fulfill your request. When making such a request, please adhere to the principles of fairness and reasonableness.
· If you have provided us with consent to the processing of your data, you can withdraw it at any time by sending an email to the email address specified in this Privacy Policy.
· You have the right to ask us to correct any inaccuracies in the data we hold about you. In such a case, we may ask you to confirm the corrected information.
· You have the right to request that we erase your personal data. This right is exercised in the cases provided for in Article 17 of the GDPR.
· You have the right to ask us to restrict the processing of your personal data or not to process it.
· You have the right to the portability of data processed by automated means and which we have received from you with your consent or for the purpose of entering into a contract. If you exercise this right, we will transfer a copy of the data you provided upon your request.
· You have the right to object to our use of your personal data in accordance with Article 21 of the GDPR.
6. HOW CAN YOU EXERCISE YOUR RIGHTS?
6.1. To exercise your rights, please submit your requests, complaints or requirements to us in writing using the contact details provided in this Privacy Policy.
6.2. We will respond to your requests, complaints or claims in writing in accordance with the procedure and deadlines established by law. We will try to provide you with information as soon as possible, but no later than 30 days from the receipt of your request.
6.3. If, upon receiving a request, complaint or claim, we have suspicions about the identity of the applicant, we have the right to request the applicant's identity document.
If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately by e-mail specified in this Privacy Policy. We ensure that only after receiving your complaint will we contact you within a reasonable period of time and inform you about the progress of the complaint investigation, and later about the result. If the results of the investigation do not satisfy you, you can file a complaint with the supervisory authority: in Lithuania - the State Data Protection Inspectorate ( https://vdai.lrv.lt/ ), and a list of supervisory authorities of other EU Member States can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt .
8. RESPONSIBILITY
You are responsible for ensuring that the data you provide to us is accurate, correct and complete. If the data you provide changes, you must immediately inform us by e-mail. We will not be liable for any damage incurred by you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes.
Privacy Policy updated on January 16, 2025 .