In this Privacy Policy (hereinafter referred to as the Privacy Policy), we provide you with information such as UAB “Melcon”, legal entity code 304436980, registered office at address Didžioji str. 30, Vilnius, 01128 Lithuania (hereinafter referred to as the Data Controller) processes your personal data in the e-shop at https://odoredamore.net.
You can contact the Data Controller by the following contacts:
Tel.: +370 669 11287
Email: info@odoredamore.net
Address: Didžioji str. 30, Vilnius, 01128 Lithuania
What personal data do we process?
| Purpose | Data | Legal basis | Storage time | Who can we transfer to? |
| Conclusion and performance of contracts with legal entities | Name, surname, contact information, content of correspondence, other data in the contract. | Legitimate interest in operating | 10 years after the end of the contract | - |
| Conclusion and performance of contracts with natural persons | Name, surname, address, e-mail address. | Contract | 10 years after the end of the contract | Payment service providers |
| Order delivery | Name, telephone number, address, information of the self-service terminal of consignments, consignment number. | Contract | 10 years after the end of the contract | Courier services, delivery service providers, post office |
| Direct marketing (newsletters, invitations to events, offering similar goods or services) | Name, surname, e-mail, tel. No. | Consent ----- Legitimate interest in offering similar goods / services to customers. | 2 years after obtaining consent ----- 2 years after the person purchased the goods or services | Newsletter sending solution |
| Administration of social network accounts | Unique ID, IP address, device information. | Consent / Legitimate interest in communicating with customers | As long as the social site visitor is an account follower | Social Network (shared managers) |
How do we process your personal data on social networks?
We control the information you provide to us on social media through access to our accounts (including notifications, use of the Like fields and other communications) in conjunction with social network managers as general controllers of personal information.
We currently have the following social networking accounts:
- Facebook – Odore d’amore, whose privacy notice is available at https://www.facebook.com/privacy/explanation
- Instagram – a shop whose privacy notice is available at https://help.instagram.com/519522125107875
We recommend you to read third-party privacy notices and contact service providers directly if you have any questions about how they use your personal information.
To whom can we transfer your personal data?
We may share information about you with our employees, intermediaries, service providers, such as debt administration or collection companies, companies providing archiving services, companies or subcontractors providing legal services, marketing services, IT services, if reasonably necessary for the purposes set out in this Privacy Policy.
We may also disclose information about you if we are required to do so by law or to protect your rights or interests (including disclosing your personal data to third parties in order to recover your debts to us), as well as to transfer part of the company`s activities or its assets or to reorganize the company or in the course of these processes, disclosing your personal data to the (potential) acquirer of the activity or part thereof and to other participants in the reorganization.
How is your personal data processed?
Your personal data will be processed in accordance with the requirements established by the General Data Protection Regulation (hereinafter – GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts. The Data Controller shall implement appropriate technical and organizational data protection measures, laid down in legislation, both in determining the means of processing personal data and in the processing itself, to protect the personal data processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any other illegal processing. The appropriate measures shall be determined taking into account the risks arising from the processing of personal data.
What are your rights?
Below you will find information about your rights in relation to the processing of your personal data by the Data Controller and the cases in which you may realize these rights. For more information about your rights or to realize them, please contact us by the e-mail address provided in this Privacy Policy.
- You can contact us at any time to ask if we process any of your personal data. If we store or use your personal data in any way, you have the right of access to them. To do so, please provide us with a written request by the e-mail address provided in this Privacy Policy. We may ask you to verify your identity for the purpose of fulfilling your request. Follow the principles of fairness and reasonableness when making such a request.
- If you have given us consent to the processing of your data, you may cancel it at any time by the e-mail address provided in this Privacy Policy.
- You have the right to ask us to correct any inaccuracies in the data available. In this case we may ask you to confirm the corrected information.
- You have the right to ask us to delete your personal data. This right is exercised in the cases provided for in Article 17 of the GDPR.
- You have the right to ask us to restrict or not process your personal data.
- You have the right to transfer data that is processed by automated means and that we have received from you with your consent or for the purpose of concluding a contract. If you realize this right, we will transfer at your request a copy of the data you provide.
- You have the right do not consent to our use of your personal data in accordance with the procedure laid down in Article 21 of the GDPR.
How can you realize your rights?
To realize your rights, requests, complaints or claims, please provide us in writing by the contacts listed in this Privacy Policy.
We will respond to the received requests, complaints or claims in writing in accordance with the procedure and terms established by legal acts. We strive to provide you with information as soon as possible, but no later than within 30 days after receiving your request.
If, upon receipt of a request, complaint or claim, we have a suspicion as to the identity of the applicant, we have the right to request an identity document from the applicant.
Complaints
If you believe that your rights as a data subject are and (or) may be violated, please contact us immediately by the e-mail address provided in this Privacy Policy. We ensure that only after receiving your complaint we will contact you within a reasonable time and inform you of the progress of the complaint investigation and, subsequently, of the outcome. If you are not satisfied with the results of the investigation, you will be able to submit a complaint to the supervisory authority – the State Data Protection Inspectorate (www.vdai.lrv.lt/).
Responsibility
You are responsible for ensuring that the information you provide to us is accurate, correct and complete. If the data you provide changes, you must notify us immediately by e-mail. In no event we will be liable for any damages caused to you as a result of your providing incorrect or incomplete personal information or not informing us on any such change.
Privacy Policy Updated on July 29, 2021