Privacy Policy

We, the legal entity MB Baltic Shea, legal entity code 305945133, address Striūpų 11, Šakiai (hereinafter referred to as the Company or We), care about the security and privacy of our client, the user of the Baltic Shea online store and the website www.balticshea.com (hereinafter referred to as You or User) (hereinafter referred to as the E-store).

This Privacy Policy is intended to provide information on how the Company processes and protects your data when you use the E-store.

The collection, processing, and storage of your personal data, in relation to your use of the E-store, is regulated by this Privacy Policy, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts.

1. Definitions

1.1. Personal Data – means any information that can directly or indirectly identify you. The following personal data are processed:

• Buyer's first name and last name;

• The first name and last name of the person who will collect the goods;

• Buyer's contact details – email address and phone number, address;

• Buyer's delivery information – the address where the goods will be delivered or any other delivery/collection option chosen by the Buyer;

• Buyer's selected payment method and payment data entered;

• The history of your orders in the E-store;

• IP address;

• Network and location data, when provided by you;

• Your inquiries and complaints history;

• Other publicly available data shared by you while visiting the online store.

1.2. Processing of Personal Data – means any operation performed on personal data (such as data collection, editing, modification, recording, storage, access, inquiries, archiving, etc.).

1.3. Data Controller – MB Baltic Shea, legal entity code 305945133, address Striūpų 11, Šakiai.

1.4. Data Subject – any individual whose data is processed by the Company.

1.5. Website – www.balticshea.com.

2. Processing of Your Personal Data When Using the E-store and Visiting the Website

2.1. By providing data to the Company, the Data Subject agrees that the Personal Data will be used by the Company to ensure the functioning of the E-store as requested by the Data Subject.

2.2. The Company processes your personal data on the following grounds:

• The Company receives your explicit consent to process your data, i.e., when you create a user account;

• You place an order in the E-store, which is accepted and processed, thereby concluding and executing a contract with you;

• In cases where the Company must process your data to fulfill a legal obligation;

• The Company’s legitimate interests are being implemented. We will process your personal data if we have a legitimate interest, and such data processing does not infringe your rights and interests.

2.3. The Company processes your data for the following purposes:

• For the efficient, optimal, and convenient functioning of the E-store;

• To ensure smooth administration of the E-store;

• For the registration and maintenance of your account;

• For the proper provision of services you have ordered;

• To provide you with relevant information, respond to your inquiries, and handle requests;

• To conduct statistical and other analyses aimed at improving the E-store’s operations and enhancing your user experience;

• When visiting the Website, the Company may process your IP address, network, and location data. These personal data are collected using cookies and other similar technologies, based on the User’s consent;

• Other purposes that may be indicated to you at the time of providing your data.

3. Disclosure of Personal Data to Third Parties

3.1. We are committed to maintaining the confidentiality of your Personal Data. Your Personal Data may be disclosed to third parties only when necessary for the execution of the contract in the interest of the Data Subject or for other legitimate reasons.

3.2. The Company may provide Personal Data to its data processors who provide services to the Company and process personal data on behalf of the Company. Such data processors are only authorized to process Personal Data according to the Company's instructions and only to the extent necessary to fulfill the obligations specified in the contract between the Company and the service provider. We assure you that the Company cooperates only with those data processors who guarantee appropriate organizational and technical measures for data processing and ensure the processing of Personal Data in compliance with legal requirements.

3.3. The Company may also provide Personal Data in response to requests from courts or government authorities, to the extent necessary to comply with applicable laws and instructions from public institutions.

4. Data Retention Period

4.1. We store your personal data only for as long as necessary to achieve the purposes outlined in this Privacy Policy.

4.2. If you have not been active in your E-store user account for 3 years, your personal data will be deleted.

4.3. You may also request that your account in the E-store be deleted.

5. Personal Data of Minors

5.1. We are committed to protecting the privacy of minors. Our E-store and Website are not designed for individuals under the age of 18.

5.2. Individuals under the age of 18 are not allowed to provide any Personal Data in the E-store or on the Website.

5.3. If an individual is under the age of 18 and wishes to use the E-store or Website, they must obtain written consent from at least one legal representative (parent or guardian) before submitting Personal Data.

6. Rights of Data Subjects

6.1. As a Data Subject, you have the following rights:

• 6.1.1. The right to receive information about data processing (“right to know”).

• 6.1.2. The right to access the processed data (“right to access”).

• 6.1.3. The right to request data correction (“right to rectify”).

• 6.1.4. The right to request data deletion (“right to be forgotten”). This right does not apply if the personal data requested to be deleted are processed on another legal basis, such as data processing necessary for the execution of a contract or compliance with legal obligations.

• 6.1.5. The right to restrict data processing (“right to restrict”).

• 6.1.6. The right to object to data processing.

• 6.1.7. The right to data portability. The right to data portability cannot negatively impact the rights and freedoms of others. The Data Subject does not have the right to data portability for personal data processed in non-automated, structured records, such as paper files.

• 6.1.8. The right to request that automated decision-making, including profiling, is not applied.

• 6.1.9. The right to submit a complaint regarding personal data processing to the State Data Protection Inspectorate.

6.2. To exercise your rights, you can submit an inquiry or request in writing: info@balticshea.com. Upon receiving such a request or inquiry, we may ask you to complete the required forms and provide a notarized copy of your identity document, necessary to verify your identity and prevent the disclosure of Personal Data.

6.3. After receiving your request or inquiry regarding the processing of Personal Data, we will provide a response and take the requested actions no later than within 1 month from the date of submission. If necessary, this period may be extended by an additional 2 months due to the complexity and number of requests. In such a case, you will be informed of the extension within 1 month of receiving the request.

6.4. If Personal Data is deleted upon your request, we will retain only the copies of information necessary to protect our legitimate interests, comply with obligations from state institutions, resolve disputes, detect issues, or fulfill any agreements with you.

6.5. If you believe your rights as a Data Subject have been violated, you may file a complaint with the Data Protection Authority – the State Data Protection Inspectorate. More information and contact details can be found on the inspectorate’s website: www.ada.lt.

7. Cookies Policy

7.1. Our Website may use cookies and other tracking technologies. Cookies allow our Website to remember your actions and preferences for a certain period of time (e.g., registration details, language preferences, and display settings).

7.2. We use cookies and other tracking technologies for security purposes.

7.3. You can control cookies on the Website. You have the right to choose whether to accept cookies and other tracking technologies we use, disable all of them, or disable only certain cookies.

7.4. More general information about cookies can be found at AllAboutCookies.org or www.google.com/privacy_ads.html. If you decide to disable all or certain cookies on our Website, it may affect the performance of the Website, slow down its functionality, or limit access to certain features. You will also need to reset some preferences each time you visit the Website.

7.5. We use the following categories of cookies:

• Cookie type: Functional cookies; storage period: 3 years.

8. Final Provisions

8.1. Please note that our Website may contain links to other websites, including third-party websites, which are not subject to this Privacy Policy. Please review the privacy policies of those websites before providing any personal data.

8.2. If necessary, we may update and amend this Privacy Policy in consideration of the data protection measures we apply. You will be informed of any changes by a separate notification or by publishing an updated version on our Website.