Privacy policy
General provisions
This privacy policy (the "Policy") governs the basic principles and procedures for collecting, processing, and storing personal data of users of the website www.dovus.lt (the "Website"), operated by MB „Dovanoteka", company code 306938857.
The Website is administered by MB „Dovanoteka", company code 306938857, acting as the provider of website-related services (the "Provider").
Before using the Website and the services provided through it, you as a user must carefully read and familiarise yourself with this Policy. By using the services provided on the Website, you confirm that you agree to comply with this Policy.
If you do not agree with the Policy or any part of it, you must not use the Website's services. Otherwise, you are deemed to have read and unconditionally agreed to comply with this Policy.
The Provider assumes no risk or liability, and is unconditionally released from it, if the User did not fully review the Policy despite having been given the opportunity to do so.
The Provider has the right to restrict your use of the Website's services without notice if you use the Website in violation of this Policy or attempt to harm the stability and security of the Website.
The Provider follows these data processing principles:
- Personal data must be processed lawfully, fairly, and transparently in relation to the data subject (lawfulness, fairness and transparency).
- Personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes.
- Personal data must be adequate, relevant, and limited to what is necessary for the purposes for which they are processed (data minimisation).
- Personal data must be accurate and kept up to date where necessary (accuracy).
- Personal data must be kept in a form which permits identification of data subjects for no longer than necessary for the purposes for which they are processed (storage limitation).
- Personal data must be processed in a manner that ensures appropriate security, including protection against unauthorised processing and against accidental loss or damage (integrity and confidentiality).
- The data controller is responsible for, and must be able to demonstrate, compliance with the above principles (accountability).
When using third-party services, such as the "Facebook" social network plugin on the Website, third-party terms may apply. We recommend reviewing those terms before using such third-party services.
This Policy is based on Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR"), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legislation of the European Union and the Republic of Lithuania.
Collection, processing, and storage of personal data
By providing your personal data, you agree that the Provider will manage and process it for the purposes, by the means, and in the manner set out in this Policy and applicable law.
By submitting personal data, you grant the Provider the right to collect, accumulate, systemise, use, and process, for the purposes set out in this Policy, all personal data you provide directly or indirectly while visiting the Website and using its services. You are responsible for ensuring that the data you provide is accurate, correct, and complete.
Processing of registered users' personal data
The Provider allows you to subscribe to a newsletter or submit an inquiry form on the Website. In doing so, you may provide the following information: name, company name, email address, phone number, address.
The legal basis for processing this personal data is Article 6(1)(b) GDPR (processing necessary to take steps at the data subject's request prior to entering into a contract).
Data storage procedures and periods
In processing and storing your personal data, the Provider implements organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing. Registration data is stored for as long as necessary to ensure smooth provision of services.
Rights of data subjects
As a data subject, you have the right, at any time, upon request to the Provider, to access the personal data the Provider processes about you and learn how it is processed, to request correction of inaccurate, incomplete, or imprecise personal data, and to request that processing (other than storage) be suspended where data is processed in breach of the law or this Policy.
To the extent that processing is based on consent, you have the right to withdraw that consent at any time.
If you wish to raise a complaint about how the Provider handles your data, you may contact the Provider by email at info@dovus.lt or in person at the Provider's registered office.
If you are not satisfied with the Provider's response, or believe your personal data is being processed in breach of legal requirements, you may lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania.
Final provisions
The law of the Republic of Lithuania applies to legal relationships arising from this Policy.
The Provider has the right to partially or fully amend this Policy. Amendments take effect from the day they are published on the Website. If, after an amendment, the User continues to use the Website and its services, the User is deemed to agree to such amendments.