These regulations enter into force on 02/18/2021
Company – personal data controller of our E-shop, to whom the rights and obligations of your personal data processing are transferred.
Seller/Personal data controller – the company “Rituale Skin Stories”.
E-shop – https://rituale.lt/en website.
Services – all services provided by the Personal data controller, related to online consultations and beauty/cosmetics product e-commerce.
Buyer – https://rituale.lt/en visitor / E-shop customer.
- General provisions.
1.2. Personal data controller of the E-shop https://rituale.lt/en is a company, named after “Rituale Skin Stories”. Legal entity code: 305638013. Address: Vaižganto st. 11F-10, Kaunas, Lithuania. E-mail: email@example.com.
1.3. Company collects and protects personal data of their buyers ensuring the highest standards of data protection and privacy.
1.4. Collected data is protected by the legislation of European Union and Republic of Lithuania. When processing personal data, we do responsibly adhere to the regulations No 2016/679 of the European Parliament and of the Council of April 27th 2016. These regulations are on the protection of individuals with regard to processing of personal data and on the free movement of such data.
1.5. The conditions set out in this document apply irrespectively of the device type: desktop computer, laptop, tablet computer, smartphone, smart TV and others.
1.6. The conditions set out in this document apply each time you visit the E-shop and use our Services: registering to make an order, searching for and ordering goods, communicating with us (e-mails, messages), accepting the special offers newsletter, agreeing upon the policy of cookies and installing them to your devices.
2. Collection of personal data.
2.1. E-shop visitors and Buyers submit their personal data (name, surname, home address, phone number, e-mail address, bank account data) for several purposes: for completing user account registration form, administrating orders, sending inquiry forms, returning goods.
2.2. All information regarding the E-shop visitors’ devices and their types, technical characteristics, operating system versions, browsers, date and time of the connection is collected and stored. This data is automatically retrieved from your browser.
2.3. IP addresses and geographic location data is collected for general information storage and E-shop marketing analysis. It helps us to monitor trends, actions and successfully develop our E-shop activities.
2.4. Collected data can be used for direct marketing purposes only with the consent of the Buyer. The Buyer has the right to cancel such consent by sending us an e-mail with a request.
2.5. Legal grounds for the processing: purchase contract, financial records, archiving, consent on direct marketing purposes, interest in responding to all submitted inquiries.
2.6. Data relating to the purchased goods can be used for statistical purposes. Such data collection does not allow direct or indirect identification of the Buyer. We reserve the right to transfer the statistical data to a third party.
2.7. Third party banner ads, links to their websites are not controlled by us. We are not responsible for the security or privacy of the data collected by third parties. We recommend you to read the following privacy policies that apply to third-party sites.
3. Time limits for the storage of personal data.
3.1. Personal data will be kept for as long as it is necessary to achieve the objectives set out in this Document. An exception applies only when the longer storage of personal data and other related documents is established in accordance with the national regulations. Also, if necessary, for the protection of our legal interests in court.
3.2. Once the Buyer has entered his data into a personal account in our E-shop, it is stored until the account is deleted. 2 (two) years after the evidence of the account being deleted, data is inactively stored in archives for the purposes of possible legal disputes and their settlement.
3.3. After the consent of the Buyer, data collected for direct marketing purposes will be stored for 2 (two) years (starting on a date of the consent) or 1 (one) year after the cancelation of the consent.
3.4. Personal data collected in the section “Contact us” is also stored for 2 (two) years for the purposes of possible legal disputes and their settlement (starting on a date of the request).
3.5. We are responsible for the correct and fair collection of your personal data.
3.6. We assure collecting constantly updated personal data and take all appropriate measures so that outdated or unnecessary information would not be stored at all.
4. Access to personal data.
4.1. Collected personal data is available to a limited number of our employees and to all of the persons that provide IT, audit and legal services to our company. There are strict requirements to ensure security of this sensitive information. The requirements apply to all of the persons mentioned above. Given data is available to these persons only to the extent that is necessary.
4.2. To accomplish the objectives set at this document, collected personal data can be accessible to entities such as: data processors who work on our behalf and in our interests; eligible entities who receive this information in accordance with the legal requirements. For example, companies providing delivery services; institutions belonging to the state of the Republic of Lithuania, which are entrusted with the performance of following the procedures laid down by law; administrating companies; IT experts; transfer agents; accountants; marketing agencies etc.
4.3. We are responsible for the necessary technical measures and organisational arrangements to protect personal data against accidental or unlawful destruction, accidental loss or unauthorised disclosure, alteration, access or any unauthorised form of processing. We will keep you informed about such circumstances.
5. Direct marketing.
5.1. Collected data can be used for direct marketing purposes only with the consent of the Buyer. The consent is given by submitting your e-mail address in the subscription box.
5.2. The buyer has the right to oppose on such processing.
5.3. A refusal does not change your access to our services or goods. You are just no longer provided with special offers and other useful information related to the goods you’ve purchased earlier.
5.4. The refusal can be sent by e-mail: firstname.lastname@example.org.
6. Rules for personal data submission.
6.1. The buyer agrees that all personal data he provided by choice would be processed in accordance with the rules set out in this Document.
6.2. The buyer must complete a data submission form when registering (creating a user account), purchasing goods or subscribing a newsletter.
6.3. You must provide complete and correct information about yourself and update it if something changes.
6.4. If you submit inaccurate, false or misleading information about yourself, we have the right to cancel your registration and delete the data or restrict your ability to use https://rituale.lt/en.
7. Changes and updates of submitted personal data.
7.1. You have the right to modify and update the information provided in the registration form (user account).
7.2. We must have complete and up-to-date information about your personal data so that we can effectively meet your expectations and perform our functions.
8. Amendment of the rules.
8.2. If you will still use our services following these changes, it will be considered that you agree to the given change of the terms.
10. Final provisions.
10.1. These Privacy Terms are governed by the law of the Republic of Lithuania.
10.2. Any disagreement regarding the implementation of these rules shall be resolved by negotiation. Failing to reach an agreement, disputes are resolved in accordance with the procedure established by the laws of the Republic of Lithuania.