- KEY TERMS
1.1. Company or Data Controller – UAB “Gera gera”, a private limited liability company established and operating under the laws of the Republic of Lithuania, legal entity code 303298430, with its registered office at Gedimino pr. 54-3, LT-01110 Vilnius.
1.2. Customer or Data Subject – a natural person who is a customer of the Company (including website visitors) whose personal data is collected by the Company.
1.3. Online Store – the Company’s online store at the address https://nikoliakidswear.com.
1.4. Services – all services provided by the Company.
1.5. Personal Data – any information relating to an identified or identifiable natural person, Data Subject, whose identity is or can be directly or indirectly determined through data such as personal code, one or more specific physical, physiological, psychological, economic, cultural, or social characteristics of that person.
1.6. Processing of Personal Data – any operation or set of operations performed on personal data, including collection, recording, storage, classification, grouping, combining, modification (addition or correction), provision, publication, use, logical and/or arithmetic operations, search, dissemination, destruction, or any other action or set of actions.
1.7. Partner – a legal entity that provides services to the Company related to the Company’s activities, or sells goods to the Company, or carries out joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programs, etc., in media outlets, websites, the Online Store, retail stores, trade networks, etc.
1.8. Cookie – a small piece of text-based information automatically created while browsing a website and stored on the visitor’s computer or other device.
1.9. Direct Marketing – activities aimed at offering goods or services to individuals by mail, phone, or other direct means and/or asking for their opinion about the offered goods or services.
1.10. Privacy Policy – this document, which defines the principles and rules of personal data processing when using the Online Store services.
1.11. Account – the main login details for the Customer to access the Online Store, consisting of an email address and Password.
1.12. Password – a unique combination of numbers, letters, or a combination of numbers, letters, or other symbols created by the Customer to log in to the Online Store.
- GENERAL PROVISIONS
2.1. The Customer gives the Company the right to perform all actions related to the processing of Personal Data to the extent and for the purposes set out in this Privacy Policy.
2.2. Personal data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws regulating personal data processing and protection, and this Privacy Policy.
2.3. The Company processes Personal Data in accordance with the following principles:
2.3.1. Personal data is collected for specified and legitimate purposes;
2.3.2. Personal data is processed accurately, fairly, and lawfully;
2.3.3. Personal data is adequate and limited to what is necessary for the purposes for which it is collected and processed;
2.3.4. Personal data is kept up to date;
2.3.5. Personal data is kept in a form that allows the identification of Data Subjects no longer than necessary for the purposes for which the data was collected and processed;
2.3.6. All information about Personal Data is confidential;
2.3.7. The Customer’s Personal Data and personal information will not be used for unlawful purposes.
2.4. It is considered that the Customer, when making a purchase in the Online Store, has read the current version of the Privacy Policy and agrees with it. If the Customer does not agree with any part of the Privacy Policy, they must not place an order or purchase goods from the Online Store.
2.5. The Privacy Policy can be reviewed in the Online Store and printed at any time. The Privacy Policy may be amended, supplemented, or updated at the Company’s discretion. The new version of the Privacy Policy will be published in the Online Store.
2.6. The Customer may place an order in the Online Store without registration or by logging in to their Account.
2.7. Upon initial registration in the Online Store through an Account, the Customer must provide their email address, create a secure Password, and provide accurate Personal Data to the Online Store. The Customer is responsible for their accuracy. Once the Account is created, the Customer will be given an identification code.
2.8. When using the Services, as well as purchasing from the Online Store, the Customer must always provide accurate Personal Data to the Online Store and is responsible for its accuracy.
2.9. The Customer has the right to change or supplement their Personal Data in the Account at any time or to request the deletion of their Account.
2.10. The Customer must not disclose the Password to third parties and must keep it secure; otherwise, the Customer is fully responsible for any consequences related to this.
- COLLECTION, USE, CORRECTION, AND STORAGE OF PERSONAL DATA
3.1. The Company respects each Customer’s right to privacy. The Customer’s Personal Data (i.e., name, surname, email address, phone number, product/service delivery address, age/birth year, payment data for product/service (bank account number, payment method, etc.), purchase history, and, with the Customer’s consent, age, gender, birth date, and residence) is collected and processed for the following purposes:
3.1.1. For electronic commerce purposes. The following Personal Data is processed: name, surname, email address, phone number, delivery address, age/birth year, IP address, payment data for product/service. The retention period for Personal Data used for electronic commerce purposes is 5 (five) years from the last login date to the Online Store.
3.1.2. For direct marketing purposes. The following Personal Data is processed: name, surname, phone number, email address, address, age, gender, birth date, and residence. The retention period for Personal Data used for direct marketing purposes is 5 (five) years from the last login date to the Online Store.
3.2. The Customer may consent to the processing of their Personal Data (name, surname, phone number, email address, address, age, gender, birth date, residence) for direct marketing purposes. If the Customer has given consent to process their data for direct marketing purposes and to receive marketing messages, the Customer can later withdraw their consent, and the Company will no longer process their data for direct marketing purposes and will not send any promotional messages, except for those related to the Customer’s order.
3.3. The Customer has the right to withdraw the consent given in section 3.2 at any time by submitting a request to the Company via email at ieva@nikolia.lt, clearly stating that they are withdrawing consent to use their Personal Data for direct marketing purposes and no longer wish to receive marketing communications.
3.4. The Customer may also refuse to consent to their Personal Data being processed for direct marketing purposes by clicking the corresponding link in each marketing email.
3.5. The Customer, as a Data Subject, has the following rights related to the processing of their Personal Data:
3.5.1. To obtain information from the Company about the processing of their Personal Data, to access their Personal Data, and to know how it is processed;
3.5.2. To receive information from the Company on the sources from which their Personal Data was collected, the purpose of its processing, and the recipients to whom it has been or will be disclosed at least within the last 1 (one) year;
3.5.3. To request correction or deletion of their Personal Data or to suspend, except for storage, processing activities related to their Personal Data if they are processed in violation of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal provisions.
3.6. When exercising their rights, the Customer must submit a passport, ID card, or driver’s license. The Company provides the Data Subject with information about the processing of their Personal Data free of charge once per year. The Customer can exercise their rights as specified in section 3.5 by contacting the Company via email at ieva@nikolia.lt. The Company has the right to correct, change, delete Personal Data or suspend the processing of Personal Data only after verifying the identity of the Customer making the request.
3.7. The Customer’s Personal Data is not shared with third parties, except in the following cases:
3.7.1. When the Customer has given their consent as specified in this Privacy Policy;
3.7.2. Personal data for electronic commerce purposes may be provided to Partners providing services to the Company related to the Company’s operations;
3.7.3. In cases provided by the laws of the Republic of Lithuania and legal acts, to competent authorities.
3.7.4. Payments in the Online Store are processed using the MakeCommerce.lt platform, managed by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), so your personal information necessary for payment execution and confirmation will be transferred to Maksekeskus AS.
3.8. The Customer is aware of their right to object to the processing of their Personal Data for direct marketing purposes, i.e., the Customer has the right to express their objection immediately or later.
3.9. The Customer agrees that their Personal Data will be transferred to Partners for the execution of the Customer’s order placed in the Online Store, as well as for the provision of Services to the Customer by the Company, including to the Company’s Partners as specified in point 3.7.
3.10. If the Customer disagrees with the Privacy Policy, the Customer will not be able to use the services of the Online Store.
3.11. The Company implements organizational and technical measures to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.
3.12. The Customer agrees that in cases where it is necessary according to the instructions of competent authorities and/or the Customer’s Personal Data has possibly been used for illegal activities, or there are reasonable suspicions of identity theft, for which competent law enforcement agencies are conducting a pre-trial investigation, or there are other legitimate grounds or objectives, their Personal Data will be stored on the Company’s servers for a longer period than specified in this Privacy Policy.
3.13. Upon receiving a request or inquiry from the Data Subject related to the processing of Personal Data, the Company will provide the Customer with a response, either fulfilling the request/instruction or reasonably refusing to do so, within 30 (thirty) calendar days from the date of the Data Subject’s inquiry. If the Data Subject wishes, the response will be provided in writing.
3.14. In order for the Company to offer full services in the Online Store, with the Customer’s consent, information in the form of Cookies will be recorded on the Customer’s computer (device), which is used to recognize the Customer as a previous user of the Online Store, gather online store traffic statistics, and information about the shopping cart. The Customer may review which Cookies are recorded at any time and can delete some or all of the recorded Cookies.
3.15. To learn more about Cookies, such as how to manage or delete them, you can visit www.allaboutcookies.org.
4. OTHER PROVISIONS
4.1. The Company has the right to amend or supplement the “Privacy Policy” fully or partially. Any additions or changes to the Privacy Policy take effect from the date of their publication.
4.2. If you have any questions, please contact us at: ieva@nikolia.lt.