KEY DEFINITIONS

1.1. Seller – MB Magiškas Skveras, company code: 306229610.
1.2. Client – a natural or legal person – a client of the Seller (including website visitors) whose personal data is collected by the Company.
1.3. Online shop – the Company's online shop at Verkių 39-124, Vilnius, Lithuania.
1.4. Product – all services and goods provided by the Seller.
1.5. Personal data – any information relating to a natural person – the Data Subject – whose identity is known or can be determined directly or indirectly using data such as a personal identification number or one or more physical, physiological, psychological, economic, cultural or social characteristics specific to that person.
1.6. Processing of personal data – any operation performed on personal data: collection, recording, accumulation, storage, classification, grouping, combining, alteration (supplementing or correcting), provision, publication, use, logical and/or arithmetical operations, retrieval, dissemination, destruction or any other operation or set of operations.
1.7. Partner – a legal or natural person providing services to the Seller related to the Seller's activities, or selling goods to the Seller, or carrying out joint projects with the Seller, including but not limited to marketing campaigns, joint sales campaigns, loyalty programmes, etc., in the media, on websites, in the Online shop, in retail stores, in retail chains, etc.
1.8. Cookie – a small piece of text information that is automatically created when browsing a website and stored on the visitor's computer or other device.
1.9. Direct marketing – activities aimed at offering goods or services to individuals by post, phone or other direct means and/or asking their opinion about the goods or services offered.
1.10. Privacy policy – this document, which sets out the principles and rules for processing Personal data when using the services of the Online shop.

GENERAL PROVISIONS

2.1. The Client grants the Seller the right to perform all Personal data processing operations to the extent and for the purposes set out in this Privacy policy.
2.2. Personal data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania, other legislation regulating the processing and protection of Personal data, and this Privacy policy.
2.3. The Seller processes Personal data in accordance with the following principles:
2.3.1. Personal data is collected for specified and legitimate purposes;
2.3..2. Personal data is processed accurately, fairly and lawfully;
2.3..3. Personal data is adequate and limited to what is necessary for its collection and further processing;
2.3..4. Personal data is kept up to date;
2.3..5. Personal data is stored in a form that allows the Data Subject to be identified for no longer than is necessary for the purposes for which the data was collected and processed.
2.3..6. All information about Personal data is confidential;
2.3..7. The Client's Personal data and personal information will not be used for unlawful purposes.
2.4. By purchasing in the Online shop, the Client is deemed to have read the current version of the Privacy policy and to agree with it. If the Client does not agree with any part of the Privacy policy or with the Privacy policy as a whole, the Client must not place an order or purchase goods in the Online shop.
2.5. The Privacy policy can be viewed in the Online shop and printed at any time. The Privacy policy may be changed, supplemented or updated at the Seller's discretion. A new version of the Privacy policy is published in the Online shop.
2.6. The Client can place an order in the Online shop without registering.
2.7. When using the Services and purchasing in the Online shop, the Client must always provide accurate Personal data to the Online shop and is responsible for its correctness.

COLLECTION, USE, CORRECTION AND STORAGE OF PERSONAL DATA

3.1. The Seller respects every Client's right to privacy. The Client's Personal data (i.e. first name, last name, email address, phone number, delivery address for goods/services, age/year of birth, payment details for goods/services (bank account no., payment
method, etc.), purchase history and, with the Client's consent, age, gender, date of birth, place of residence) is collected and processed for the following purposes:
3.1.1. For e-commerce purposes. The following Personal data is processed: first name, last name, email address, phone number, delivery address for goods/services, IP address, payment details.
3.1.2. For direct marketing purposes. The following Personal data is processed: first name, last name, phone number, email address, address, place of residence. Personal data used.
3.2. The Client may give consent to the processing of their Personal data (first name, last name, phone number,
email address, address, place of residence) for Direct marketing purposes. If, having given consent to the processing of their data for Direct marketing purposes and to receiving Direct marketing messages, the Client later no longer wishes this and informs the Seller, the Seller will stop processing their Personal data for Direct marketing purposes and will not send the Client any electronic newsletters, except for information related to the Client's order.
3.3. Klientas bet kada turi teisę atšaukti 3.2 punkte esantį savo sutikimą Pardavėjui tvarkyti Kliento Asmens duomenis Tiesioginės rinkodaros tikslu, pateikdamas apie tai atitinkamą pranešimą Pardavėjui elektroniniu paštu info@canele.lt ir aiškiai nurodydamas, kad atšaukia savo sutikimą naudoti jo Asmens duomenis Tiesioginės rinkodaros tikslu bei nepageidauja gauti jokių Tiesioginės rinkodaros pranešimų.
3.4. The Client can also exercise their right to object to the processing of their Personal data for Direct marketing purposes by clicking the relevant link included in every email sent.
3.5. As a Data Subject, the Client has the following rights related to the processing of their Personal data:
3.5.1. to receive information from the Seller about the processing of their Personal data and to access their Personal data and how it is processed;
3.5.2. to receive information from the Seller about the sources from which and which of the Client's personal data was collected, the purposes for which it is processed, and the data recipients to whom it is and has been provided over at least the last 1 (one) year;

3.5.3. to request the correction or destruction of their Personal data, or the suspension of processing operations other than storage, when Personal data is processed in breach of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws.
3.6. When exercising their rights, the Client must present a passport, identity card or driving licence. The Seller provides the Data Subject with information about the processed Personal data free of charge once a year. To exercise the rights set out in point 3.5, the Client
gali kreipiantis elektroniniu paštu info@canele.lt. Pardavėjas turi teisę koreguoti, keisti, naikinti Asmens duomenis arba stabdyti Asmens duomenų tvarkymą tik identifikavus Kliento, kuris kreipėsi, tapatybę.
3.7. The Client's Personal data is not provided to third parties, except in the following cases:
3.7.1. When the Client's consent has been obtained, as set out in this Privacy policy;
3.7.2. Personal data is provided for e-commerce purposes to Partners providing services to the Seller related to the Seller's activities;
3.7.3. To competent authorities in cases provided for by the laws and legislation of the Republic of Lithuania.
3.7.2. Payments in the Online shop are processed using the makecommerce.lt platform, operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), so your personal information required to execute and confirm the payment will be transferred to Maksekeskus AS.
3.8. The Client is aware of their right to object to the processing of their Personal data for Direct marketing purposes, i.e. the Client has the right to object immediately or later.
3.9. The Client agrees that their Personal data may be transferred to Partners when fulfilling the Client's order placed in the Online shop, as well as when the Seller provides Services to the Client, and to the Seller's Partners as set out in point 3.7.
3.10. If the Client does not agree with the Privacy policy, the Client will not be able to use the services of the Online shop.
3.11. The Seller implements organisational and technical measures to protect Personal data against accidental or unlawful destruction, alteration or disclosure, as well as against any other unlawful processing.
3.12. The Client agrees that where this is required by instructions from competent authorities and/or the Client's Personal data may have been used for unlawful activity, or there are reasonable suspicions of identity theft for which the competent law enforcement authorities are conducting a pre-trial
investigation, or there are other legitimate grounds or purposes, their Personal data may be stored on the Seller's servers for longer than set out in this Privacy policy.
3.13. Having received an instruction or request from the Data Subject regarding the processing of Personal data,
the Seller provides the Client with a response, either fulfilling the request/instruction or giving reasons for refusing to do so, no later than 30 (thirty) calendar days from the date of the Data Subject's request. If the Data Subject so wishes, the response must be given in writing

3.14. So that the Seller can offer the Client full-featured products in the Online shop, with the Client's consent information called Cookies is stored on the Client's computer (device). It is used to recognise the Client as a previous user of the Online shop, to collect Online shop traffic statistics, and to store information about the shopping cart. The Client can view at any time which Cookies are stored and can delete some or all of them.
3.15. To find out more about cookies, for example how to manage or delete them, visit www.allaboutcookies.org.

OTHER PROVISIONS

4.1. The Seller has the right to change or supplement the "Privacy policy" in whole or in part. Additions or changes to the Privacy policy take effect from the date of their publication.
4.2. Iškilus klausimams kreipkitės šiais kontaktais: el. paštu: info@canele.lt arba tel.nr. +37060526543