Privacy policy

 

1. GENERAL PROVISIONS

1.1. This Privacy Policy is intended for the processing of personal data of visitors and buyers of the electronic store managed by the Data Controller, available at www.grand-duchess.com and / or www.grand-duchess.lt (hereinafter referred to as the Electronic Store).
1.2. Data controller – small partnership Grand DU, legal entity code: 305640772, the registered office address is at: St. Stepono Str. 27F-11, Vilnius, E-mail: hello@grand-duchess.com. Data on the Data Controller is collected and stored in the Register of Legal Entities.
1.3. Buyer – a person who orders or purchases goods at the E-shop.
1.4. Visitor – a person who has visited the E-shop / Website.
1.5. Personal data is the information of any content and in any for that can identify an individual.
1.6. By agreeing to this privacy policy, you:
1.6.1. grant us the right to collect, manage, process and store your personal data to the extent and for the purposes set out in this Privacy Policy;
1.6.2. agree that your personal data will be used to fulfill your orders in our E-shop, as well as that your personal data may be transferred to third parties performing the order delivery service.
1.6.3. you agree that your personal data may be used for direct marketing purposes.
1.7. We collect the personal data (name, surname, address, e-mail address, telephone number, bank account details) provided to us by the Buyers and / or E-Shop visitors using: the account registration form when purchasing goods, when they submit their personal data to us online or otherwise.
1.8. The personal data provided to us by Customers and / or Visitors to the E-Shop will be kept to the extent necessary for the purposes set out in this Privacy Policy. Notwithstanding the above retention period, we may retain the personal data provided to us by Buyers and / or E-shop Visitors to the extent necessary if the personal data has been used in the course of an illegal activity.
1.9. In the E-shop, payments are processed using the makecommerce.lt platform, managed by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. No .: 12268475), therefore your personal information required for payment execution and confirmation will be transferred to Maksekeskus AS.

2. MAIN OBJECTIVES OF DATA PROCESSING

2.1. Purposes of collecting and processing personal data provided by Buyers and / or Visitors to the E-shop:
2.1.1. ensuring the smooth operation of the website;
2.1.2. collection and processing of statistic data, settings and analysis of website Visitor’s flow;
2.1.3. The Buyer‘s registration;
2.1.4. concluding and executing the Sale – purchase Agreement of goods;
2.1.5. forming and sending gift vouchers;
2.1.6. exchange or return of goods;
2.1.7. Improving and controlling the quality of Customer Service;
2.1.8. direct marketing;  
2.1.9. communication, administration of inquiries and / or claims;
2.1.10. collection and processing of proposals from partners (including the contact persons of their responsible persons) for cooperation.

3. SECURITY OF PURCHASER'S PERSONAL DATA

3.1. The Buyer's personal data will be processed in accordance with the requirements established by the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts. When processing the Buyer's personal data, the Data Controller implements organizational and technical measures that ensure the protection of personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.
3.2. By reading the Privacy Policy, the Buyer confirms that he understands that the data transmission over the Internet is inherently insecure, and the Data Controller cannot guarantee a completely secure data transmission using our E-shop.

4. COOKIES

4.1. Cookies are information items stored in your web browser. They help to identify you as the previous visitor to our E-shop, to save your visit history, to customize the content of E-shop, to ensure the smooth operation of E-shop, as well as to allow you to monitor the duration and frequency of E-Shop visits and collect statistics on E-shop visit flow. By analyzing this data, we can improve our E-shop and make it more user-friendly.
4.2. Our E-shop uses strictly necessary cookies to ensure suitable functioning of the E-shop. They are used because we have a legitimate interest to ensure the operation of the E-shop, and you will not be able to manage these cookies. We also use statistics, analytics, and advertising cookies intended to better understand consumers, their shopping preferences, and provide customized content (optional cookies). We will use optional cookies only with your consent. You have the right to object to optional cookies being stored on your browser, and you can block optional cookies if you want to browse anonymously. If you agree to the use of optional cookies, you will be able to adjust them on our Website / E-shop at any time.
4.3. You can change the settings on your devices at any time and delete the saved cookies. Most browsers are set to accept cookies automatically. You can disable cookies in your browser. You can find more detailed independent information about cookies on other websites and device manuals. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to decline cookies. For more information on how to manage cookies go to: http://www.allaboutcookies.org/manage-cookies/.
4.4. In addition to the cookies used by the Data Controller, the E-shop may allow certain third parties to set and access cookies on your computer or other device. In this case, the use of cookies is subject to third party privacy rules, such as:
4.4.1. Google Analytics: http://www.google.com/policies/technologies/cookies/;
4.4.2. Facebook: https://www.facebook.com/policies/cookies/.
4.5. Please note that our social network accounts are subject to the relevant social network cookie policy.

5. RIGHTS OF THE BUYER AND / OR VISITOR

5.1. The Buyer and / or the Visitor has the right to request the correction of his/her personal data when they are inaccurate, to request the restriction of his/her personal data processing (in which case the Buyer and / or the Visitor will not be able to purchase our products), to receive the Buyer's and / or Visitor's personal data in a structured and computer-readable format. According to this clause, the data is provided to the Buyer and / or the Visitor free of charge once a calendar year.
5.2. The Buyer and / or the Visitor has the right to know about the processing of his/her personal data, to get acquainted with his / her personal data and how it is processed, to demand the destruction or suspension of his / her personal data (except for the cases provided for in this privacy policy), the right to transfer his/her personal data, the right to object to the processing of his / her personal data or to withdraw his/her consent to the processing of his personal data at any time, or to the processing of personal data for one or more specific purposes, to lodge a complaint against the processing with the competent authority if he / she considers that his/her personal data are being processed in violation of legal requirements.

6. RESPONSIBILITY

6.1. The Buyer and / or the Visitor is responsible for the confidentiality of his / her password and user data and for any actions (data transfer, orders placed, etc.) that are performed in our E-shop while logged in using the Buyer and / or the Visitor login details. The Buyer and/or the Visitor shall not disclose his/ her password to third parties. If the services provided in our E-shop are used by a third party who has logged in using the login data of the Buyer and / or the Visitor, we consider that the Buyer and/or the Visitor has logged in. If the Buyer and/ or the Visitor loses the login data, the Buyer and/or the Visitor must immediately inform us by post, telephone or e-mail. You must change your password every 6 months.
6.2. The Buyer and / or the Visitor is responsible for ensuring that the data provided to us by the Buyer and / or the Visitor is accurate, correct and complete. If the data provided by the Buyer and / or the Visitor changes, the Buyer and / or the Visitor must immediately inform us by changing the relevant data in the registration form or, if the data is not specified in the registration form, by informing us by e-mail. In no event we will be liable for any damages incurred by the Buyer and / or the Visitor as a result of you providing incorrect or incomplete personal data or not informing us of any changes thereto.

7. CHANGES TO THE PRIVACY POLICY

7.1. The Data Controller may update or change this Privacy Policy at any time. Such updated or amended Privacy Policy will take effect from the date of its publication in the E-shop. If significant changes are made to the Privacy Policy, we will notify you in the E-shop. Nevertheless, the Buyer and/or the Visitor should regularly check the current version of the Privacy Policy and make sure that it satisfies the Buyer and / or the Visitor.

8. CONTACT INFORMATION

8.1. If you have any questions regarding the terms of this Privacy Policy, please contact us at the contacts listed in the "Contacts us" section of the E-shop.
8.2. We will respond to the received requests, complaints or requirements in writing in accordance with the procedure and terms established by legal acts. Requests or inquiries regarding the personal data may be submitted by the Buyer and / or the Visitor by e-mail: hello@grand-duchess.com. Replies to such requests shall be provided within 30 working days.
8.3. If, upon receipt of a request, complaint or claim, we have any suspicions as to the identity of the applicant, we have the right to request an identity document from the applicant or otherwise prove his/her identity.
8.4. If we are unable to provide the Buyer and / or the Visitor with the necessary information and / or the Buyer and / or the Visitor have claims regarding the processing of his/her personal data, the Buyer and/or the Visitor have the right to apply with the complaint to the State Data Protection Inspectorate.

The last review of the Privacy Policy is done on the 25th of May 2021.