1. General provisions
1.1 UAB "Aromika" ("Company") protects and respects the users of the electronic store ("Persons") privacy.
1.2 Person - 1) competent natural person, i.e. a person who has reached the age of majority, whose capacity is not limited by court order; 2) legal entity; 3) duly authorized representatives of all the above-mentioned persons.
1.4 This Policy applies to all Persons, including Persons who have not registered in the electronic store, as far as this does not conflict with the Purchase Rules and the legal acts of the Republic of Lithuania.
1.6 Individuals can perform purchase actions after registering at aistra.eu, as well as without registration.
1.6.1 The Person who has not registered is required to provide the following Personal data - name, surname, phone number, e-mail address. mailing address, delivery address. The person is responsible for the correctness of his Personal Data.
1.6.2 Persons wishing to register on aistra.eu must provide their e-mail address and invented Password. An Account is created during registration. In the account, the Person enters his own data - name, surname, phone number, e-mail address, delivery address, therefore only he is responsible for the correctness of this data. A User ID is assigned to the individual. A person can at any time:
184.108.40.206. correct and/or fill in Personal data in the Account. The Person is responsible for the correctness of the corrected and/or supplemented data;
220.127.116.11 contact the Company at the e-mail address firstname.lastname@example.org the cancellation of the Account.
1.7 For the purposes of the Law on Legal Protection of Personal Data of the Republic of Lithuania, the data controller is UAB "Aromika", a Lithuanian company duly registered and operating in the Republic of Lithuania, legal entity code 300011010, VAT taxpayer code LT100000900111, registered office address Piliakalni st. 3, Kaunas.
2. Information the company collects about individuals
2.1 The Company may collect and process the following information about Individuals:
(a) information that Individuals indicate when filling out forms in this electronic store, at www.aromika.lt (“Site”). This information includes information provided when filling out the registration form, registering in the online store, placing an order, subscribing to news, sending messages in the system or applying for the provision of additional services or reporting malfunctions in the online store. The Company may also ask you to fill out certain forms so that the Person can participate in contests, promotions and games organized by the Company;
(b) all correspondence between the Individuals and the Company (both on the Website and by email);by mail);
(c) data related to transactions concluded in the electronic store and the fulfillment of Individual orders;
(d) data on the browsing history of Individuals in the online store and related data;
(e) Individuals' IP Addresses
2.2 Personal data is collected and processed only in the cases provided for in Part 4 of the Policy for the purposes provided for in Part 6.
2.3 Personal data related to e-commerce are stored for 2 (two) years from the date of the Person's last connection to the electronic store system or the Person's last purchase on the Website.
2.4 The data of persons who have submitted a request in the form indicated on the Website are stored for 1 (one) year) from the last action performed by the Person (request, sending a response or other).
2.5 The duration of storage of personal data to be used for direct marketing purposes is 5 (five) years from the last connection to the electronic store system, and if the Person has not registered in the electronic store - 5 (five) years from the date of submission of such data.
3.2 Cookies are small text files which, with the consent of the Person, are stored in the Person's browser or device.
3.3 The cookies used in the Company's activities allow the Company to recognize and count visitors, allow visitors to see their actions in the electronic store, and improve the operation of the electronic store.
3.5 A person can delete or block cookies by selecting the appropriate settings in their browser that allow them to refuse all or part of cookies. It should be noted that using such browser settings that block cookies (including necessary cookies), the Person may have problems using all or part of the functions of the electronic store.
4. Cases of personal data processing
Personal data may be processed if:
(a) The Person, using the Company's Website and/or services provided by the Company, provides the Company with information about himself (except for data processing actions that require the consent of a separate Person);
(b) Person gives consent;
(c) entering into or executing a contract with the Company where one of the parties is a Person;
(d) aims to protect the fundamental interests of the Person;
(e) they need to be processed for a legitimate interest pursued by the Company or a third party to whom the Personal Data is provided and if the interests of the Individual are not overriding.
5. Storage of personal data
5.1 All data provided by Individuals is securely stored on the Company's servers. All payment transactions are encrypted. In the event that Individuals are provided with passwords (or when Individuals choose them themselves), which enable Individuals to use certain functions of the electronic store, Individuals are responsible for the confidentiality of passwords. The Company kindly asks the Individuals not to disclose or share their passwords with third parties.
5.2 If the Company has doubts about the correctness of the Personal Data provided by the Person, the Company has the right to suspend the processing of this Person's data, to check and clarify this data.
5.3 Despite the fact that the Company makes all reasonable efforts to protect Personal data, the Company cannot guarantee the safe transfer of data to the electronic store. Any data transfer procedures are carried out exclusively at the risk of the Individual. From the moment of receiving the data, the Company applies extremely strict Personal Data Protection procedures and technical and organizational measures to ensure protection against unauthorized access to Personal Data.
6. Use of personal data
6.1 The Company uses Personal Data in order to:
(a) would ensure that the content of the electronic store is presented in the most efficient and suitable way for Individuals;
(b) provide the Individuals with information, goods or services that the Individuals desire or that may be of interest to the Individuals in the event that the Individuals have given their consent to be informed for this purpose;
(c) could fulfill obligations under contracts concluded with Individuals, including, but not limited to, providing the data of the Individual and his representatives (whose consents the Individual has received) to the bank selected by the Company and to the technical provider of the Bank's payment portal service for the purpose of electronic commerce, with consent to be processed by them. The Company informs that Individuals have the right to demand restriction of the processing of Personal Data by the technical provider of the Bank and the Payment Portal;
(d) it would be possible for Individuals to use the interactive functions of the electronic store, if the Individuals so desire;
(e) Individuals would be informed about changes in the services provided by the Company.
6.2 The Company may send information related to the Company's goods and services via electronic means (e-mail) to persons who, during the sale of goods or in a special form, have given their consent to use their data for marketing purposes. In the event that the Person does not wish to receive such offers, he may inform the Company about the rejection of such offers by e-mail email@example.com or by clicking on the relevant link in any notification about offers already sent to the Person.
6.3 The Company's offers will be sent by electronic means to Persons who have not provided their contact details during the sale of goods only if the Persons have expressly consented to such processing of their data.
6.4 Consent to receive the Company's offers, as specified in clauses 6.2 and 6.3 of this Policy, may be expressed by Individuals:
(a) by ticking the appropriate selection when placing an order for the Goods;
(b) by subscribing to the Company's newsletter.
7.1 The Company has the right to disclose Personal Data to third parties when it is necessary to fulfill/deliver the Personal Order. Personal data is transferred to logistics companies and banking institutions selected by the Company.
7.2 Personal data may be disclosed to State Institutions in cases where it is required by the Laws of the Republic of Lithuania.
8. Rights of individuals
8.1 Individuals have the right to apply to the Company and refuse the processing of their personal data for the purposes of direct marketing and marketing research. The Company informs the Individuals (before collecting data) about their possible use for direct marketing purposes or their possible disclosure to third parties.
8.2 In order to exercise his right to refuse the processing of his data for direct marketing purposes, the Person must select the appropriate link in the direct marketing offers sent or contact the Company at the e-mail address hi@aromikalt and notify him of his refusal.
8.3 Individuals have the right to:
(a) be informed about the processing of their data;
(b) after submitting a request to the Company, to the e-mail address firstname.lastname@example.org, to receive information from which sources and what personal data is collected, for what purpose it is processed, for what data are provided to recipients and have been provided during the last 1 (one) year. Information is provided to Individuals at their specified e-mail addresses no later than within 7 (seven) days from the date of the Individuals' application to provide such data.
(c) upon submission of a request email@example.com to demand the correction of incorrect, incomplete, inaccurate Personal Data and/or to stop the processing of such Personal Data, except for storage, if the Person determines that his personal data are incorrect, incomplete or inaccurate or processed illegally and unfairly. The Company immediately informs the Person about the correction, destruction or suspension of personal data processing performed or not performed at his request.
8.4 Complaints of individuals regarding improper or illegal processing of Personal Data are examined by the State Data Protection Inspectorate, registered office address A. Juozapavičiaus str. 6, LT-09310 Vilnius, www.ada.lt.
9. Policy Changes
Any changes to this Policy will be posted in this Policy and, in certain cases, Individuals will be notified by email.
10. Contact Information
Questions, comments and wishes of individuals related to the Policy can be submitted to the e-mail address firstname.lastname@example.org