PRIVACY POLICY

I. DEFINITIONS:

1. Seller– Rimtoma, JSC, Vilnius, Lithuania, 124560250, LT245602515

2. eu.rimtoma.lt – e-shop at the address J. Kubiliaus str. 23, 09108 Vilnius, Lithuania.

3. Buyer – 1) a legally capable natural person, i.e. a person that has reached the age of majority and whose capacity has not been restricted by court; 2) a minor between the ages of fourteen to eighteen who has the consent of parents or custodians, except for the cases where they have been emancipated; 3) a legal person; 4) duly authorized representatives of the abovementioned persons.

4. Account – the result of the Buyer’s registration in this e-shop, which creates an account storing the Buyer’s personal data and order history (account).

5. Services – all services provided to the Buyer.

6. Cookie – it is a small file, which is sent to the device when a person visits this e-shop. This definition includes not only cookies, but also the usage of other similar means.

7. Password – a unique sequence of letters and numbers created by the Buyer and known only by them, which is entered for the first time when registering in the e-shop, and then used in order to log-in to the Account.

8. Browser – a program designed to display web pages (websites) on the web or on personal computer.

9. Personal Data – any information relating to a natural person (data subject) whose identity is known or can be established, directly or indirectly, using data such as a personal identification number, one or more characteristics specific to the person’s physical, physiological, psychological, economic, cultural or social character.

10. Personal Data Controller – provide your company name or your Name and Surname, if you are a natural person.

11. Privacy Policy – this document, which contains the basic rules for collection, storage, and processing of Personal Data, using the domain you specify.

12. Administrator – the person who is responsible for this e-shop and who manages it.

13. IP Address – a unique number, known as an Internet Protocol (IP) address, assigned to each computer connected to the Internet. Since these numbers are usually assigned by country blocks, the IP address can often be used to identify the country where the computer is connected to the Internet.

14. Rules – adopted and valid “The Rules of Sale-Purchase of Goods in the E-Shop”.

15. Direct Marketing – the activity of offering goods and services to persons by post, telephone or other means and/or seeking their opinion on the goods or services offered.

II. GENERAL PROVISIONS

16. The Privacy Policy sets out the basic rules for the collection, storage and processing of Personal Data by the Buyer when using  eu.rimtoma.lt the Services offered.

17. The Privacy Policy is designed to protect and defend Buyers’ Personal Data against unauthorised use. Privacy Policy also applies to the Accounts of  eu.rimtoma.lt.

18. The Buyer shall be deemed to have read this Privacy Policy and read it when they express their consent to the processing of their Personal Data.

The Privacy Policy can be accessed and printed at any time eu.rimtoma.lt.

19. The Buyers should note that eu.rimtoma.lt contains links to the websites of other persons, companies or organisations, and that the Seller is not responsible for the content of such websites and/or the methods they use to ensure the Privacy Policy, therefore, before submitting information about themselves, the Buyer should get acquainted with the rules of the respective website, Privacy Policy and other documents.

20. The Buyer can perform purchase actions by registering in eu.rimtoma.lt, as well as without registering. The Buyer who has not registered is required to provide the following Personal Data – name, surname, telephone number, e-mail address, delivery address. The Buyer is responsible for providing their Personal Data.

21. Persons wishing to register at eu.rimtoma.lt, must provide their e-mail address and the created Password. An Account is created at the time of registration. In their Account, the Buyer themselves enter their data – name, surname, gender, date of birth, phone number, e-mail address, therefore, only they are responsible for the correctness of the data. The Buyer may at any time:

21.1. edit and/or fill in Personal Data in their Account. The Buyer is responsible for the correctness of the edited and/or supplemented data;

III. PROCEDURES FOR STORAGE AND USE OF PERSONAL DATA

22. The Buyer agrees that their name, surname, e-mail address, telephone number, IP Address eu.rimtoma.lt are processed for the purposes of business analysis. Accordingly, during registration at eu.rimtoma.lt or when placing an order, eu.rimtoma.lt gives the Buyer the right to express their consent or disagreement to their name, surname, e-mail address, telephone number, IP Address eu.rimtoma.lt also being processed for Direct Marketing purposes.

23. The Seller confirms that the Buyer’s Personal Data shall only be processed in order to properly provide the Buyers with the services provided in the e-shop eu.rimtoma.lt (including the right to participate in promotions or projects). The Seller also confirms that the Personal Data provided by the Buyer shall be processed for the purposes of the Seller’s business analysis and Direct Marketing, if such consent is provided by the Buyer and shall not be revoked by the Buyer. The retention period of the Personal Data to be used for Direct Marketing purposes shall be set at three calendar years from the moment when such data were provided.

24. The Seller shall undertake not to disclose the Buyer’s Personal Data to third parties, except in the following cases:

24.1. if there is the Buyer’s consent for disclosure of Personal Data;

24.2. when executing an order or providing other services – to the Seller’s partners providing delivery of goods or other services ordered by the Buyer;

24.3. for the purposes of Direct Marketing – for the Seller’s partners eu.rimtoma.lt after having taken care of the written obligations of the Seller’s partners to comply with the provisions of the Law on Legal Protection of Personal Data of the Republic of Lithuania;

24.4. for law enforcement institutions in accordance with the procedure provided for in the legal acts of the Republic of Lithuania;

24.5. if it is necessary to prevent or investigate criminal offences.

25. The Buyer shall have the following rights:

25.1. having submitted a request to the Seller to receive in writing information about the sources and type of their Personal Data collected, the purpose for which the data are processed, which data recipients were provided with the data and which data were provided for at least during the last 1 (one) year. The information shall be provided to the Buyer at the e-mail address specified by them;

25.2. disagreeing with the Privacy Policy to object to the processing of their Personal Data. In this case, the Buyer will not have the possibility to purchase goods and/or services in the e-shop eu.rimtoma.lt;

25.3. expressing their objection both immediately and by submitting a subsequent notification in the prescribed manner to object to the processing of their Personal Data for the purposes of Direct Marketing.

26. At the time of collection from the Seller, an employee of the public limited liability company Lietuvos paštas, or a Goods collection centre employee, the Buyer’s identity document and the Buyer’s data contained in it shall be used only for proper verification of the Buyer’s identity.

27. By agreeing to this Privacy Policy, the Buyer agrees that their Personal Data will be used to fulfill their order, regardless of whether they order the goods and/or services from eu.rimtoma.lt as the Seller or from their Partners; the Buyer also agrees that their Personal Data will be transferred to the Seller’s partners, as well as to the Seller or the data processor appointed by the Seller for the purposes of order execution or business analysis.

28. The Buyer’s Personal Data shall be provided to the European Union Member States or to other foreign states under the same conditions and in accordance with the same procedure as to entities located in the Republic of Lithuania and only for the purposes specified in this Privacy Policy.

29. The Seller shall store Personal Data to the extent a person uses eu.rimtoma.lt services, except for the cases specified in this Privacy Policy. After the termination of the Account, in order to implement the requirements of the Privacy Policy, the Buyer’s Personal Data may be stored on the server of the Personal Data Controller for a period of up to twelve months from the last active action (order) of the Buyer, except for the specified cases and legitimate requirements of law enforcement authorities to protect data.

30. By means of internal organisational and technical measures, the Seller ensures that Personal Data eu.rimtoma.lt provided by the Buyer is protected from any illegal actions, such as unlawful alteration, disclosure or destruction of Personal Data, identity theft, fraud, and that the level of protection of Personal Data would meet the requirements of legal acts of the Republic of Lithuania.

31. Personal Data shall be protected against unauthorised use and alterations. All Buyers’ Passwords are encrypted, servers that are related to Personal Data can only be logged in by persons authorised by the Personal Data Controller and only through a secure certificate, as well as all eu.rimtoma.lt pages that require Personal Data input are carried out via https://protocol.

32. The Buyer undertakes and must store their eu.rimtoma.lt login Password and login name, as well as other data. The Buyer undertakes and shall not disclose Personal Data to other third parties, either about themselves or about third parties, if such Personal Data of the third parties were available to them, and immediately inform the Seller about visible violations.

33. The Buyer agrees in advance that the Seller shall have the right to keep their Personal Data on the server to the extent necessary according to the peculiarities of eu.rimtoma.lt activities, if the data provided by the Buyer was (i) used in committing illegal activity or (ii) it was suspected that an identity theft or other violation occurred due to which an investigation by appropriate law enforcement authorities was or will be conducted, (iii) if the Seller has received complaints related to the relevant Buyer, or if the Seller has noticed violations of the Rules commited by a certain Buyer, or (iv) if there are other lawful purposes for storing Personal Data. These data shall be destroyed upon receipt of lawful instructions from law enforcement or other authorised institutions.

34. When managing eu.rimtoma.lt and diagnosing possible malfunctions, the Administrator may use the IP Addresses of the Buyers.

IV. CORRECTION, ADDITION, AND DELETION OF PERSONAL DATA

35. The Buyer shall give the right to  eu.rimtoma.lt to collect, manage, process and store the Buyer’s Personal Data to the extent and for such purposes as provided in the Privacy Policy and other eu.rimtoma.lt documents.

36. Giving or withdrawing the consent to collect, manage, process and store the Buyer’s Personal Data is valid only from the point forward.

37. If, upon familiarising with their Personal Data, the Buyer determines that Personal Data has been collected or received from illegal sources, or that Personal Data is processed for purposes other than the purposes for which they are provided, the Buyer shall have the right to apply to  eu.rimtoma.lt with an e-mail requesting to suspend the processing of such Personal Data. The Buyer who uses eu.rimtoma.lt without registering, and having received a reply from eu.rimtoma.lt, in which the Buyer notices inaccuracies or errors in their Personal Data, shall have the right to request that their Personal Data be revised and corrected as soon as possible, but not later than within 5 (five) working days. The Buyer, who uses eu.rimtoma.lt after registering, shall correct Personal Data by logging into their Account themselves. eu.rimtoma.lt has the right to correct, supplement, or delete Personal Data or suspend the processing of Personal Data only upon verification of the identity of the Buyer who requested such actions.

38. If  eu.rimtoma.lt has doubts about the correctness of Personal Data provided by the Buyer, they may suspend the processing of Personal Data of such Buyers, check and correct the data. Such Personal Data shall only be used to verify their correctness.

39. When exercising the above rights, the Buyer can contact eu.rimtoma.lt by e-mail  [email protected].

V. COLLECTION AND STORAGE OF PERSONAL DATA

40. In order to provide the Buyer with fully-fledged e-shop eu.rimtoma.lt services, Cookies may be stored to the Buyer’s computer (device). The Seller uses the stored information to identify the Buyer as a previous eu.rimtoma.lt e-shop visitor, to store information about purchases added to the Buyer’s shopping cart, to collect e-shop eu.rimtoma.lt traffic statistics. By confirming the Privacy Policy, the Buyer agrees that the Cookies provided in this Privacy Policy will be stored on their computer (device). The Buyer may withdraw this consent at any time by changing the settings of his web browser, but in this case certain functions of the e-shop eu.rimtoma.lt may not work for them.

Another type of Cookies is used to collect information to calculate traffic (collect statistical information), provide content that is relevant to the Buyers’ interests and save the visit history

VI. FINAL PROVISIONS

41. This Privacy Policy enters into force on the 3rd of April, 2020. Any changes to the Privacy Policy shall be communicated in paragraph 42 of this Privacy Policy.