1.1. Company or Personal Data Controller – MB “EJRA”, a private limited liability company established and operating under the laws of the Republic of Lithuania, legal entity code 305063484, registered office address: Dariaus ir Girėno g. 149, Vilnius, Lithuania.
1.2. Customer or Data Subject – a natural person who is a customer of the Company (including website visitors) whose personal data is collected by the Company.
1.3. Online Store – the Company’s online store available at: https://www.8boxes.lt
1.4. Services – all services provided by the Company.
1.5. Personal Data – any information relating to a natural person – the Data Subject – whose identity is known or can be directly or indirectly identified using such data as a personal identification number or one or more physical, physiological, psychological, economic, cultural or social characteristics specific to the individual.
1.6. Processing of Personal Data – any operation performed on Personal Data, including collection, recording, accumulation, storage, classification, grouping, linking, modification (supplementing or correcting), disclosure, publication, use, logical and/or arithmetic operations, search, dissemination, destruction or any other operation or set of operations.
1.7. Partner – a legal entity providing services to the Company related to the Company’s activities, supplying goods, or implementing joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programs, etc., in media channels, websites, the Online Store, retail stores, retail chains, etc.
1.8. Cookie – a small piece of text information automatically created while browsing the website and stored on the visitor’s computer or other device.
1.9. Direct Marketing – activities intended to offer goods or services to individuals by mail, telephone or other direct means and/or to request their opinion regarding offered goods or services.
1.10. Privacy Policy – this document defining the principles and rules for processing Personal Data when using the services of the Online Store.
1.11. Account – the primary login details of the Customer for accessing the Online Store, consisting of one email address and a Password.
1.12. Password – a unique combination of numbers, letters, or numbers and letters and/or other symbols created by the Customer and used to log into the Online Store.
2.1. The Customer grants the Company the right to perform all Personal Data processing actions to the extent and for the purposes provided in this Privacy Policy.
2.2. Personal Data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania, other legal acts regulating Personal Data processing and protection, and this Privacy Policy.
2.3. Personal Data is processed by the Company in accordance with the following principles:
2.3.1. Personal Data is collected for specified and legitimate purposes;
2.3.2. Personal Data is processed accurately, fairly and lawfully;
2.3.3. Personal Data is adequate and only of such scope as is necessary for collection and further processing;
2.3.4. Personal Data is continuously updated;
2.3.5. Personal Data is stored in a form that permits identification of the Data Subject for no longer than necessary for the purposes for which the data was collected and processed;
2.3.6. All information relating to Personal Data is confidential;
2.3.7. The Customer’s Personal Data and personal information will not be used for unlawful purposes.
2.4. By purchasing goods in the Online Store, the Customer confirms that they have read and agree with the current version of the Privacy Policy. If the Customer does not agree with any part of the Privacy Policy, the Customer must not place an order or purchase goods in the Online Store.
2.5. The Privacy Policy is available in the Online Store and may be printed at any time. The Company reserves the right to modify, supplement or update the Privacy Policy at its discretion. The updated version of the Privacy Policy is published in the Online Store.
2.6. The Customer may place orders in the Online Store without registration or by registering and using their Account.
2.7. During the initial registration in the Online Store via an Account, the Customer must provide an email address, create a secure Password and provide accurate Personal Data. The Customer is responsible for the accuracy of the submitted information. Once the Account is created, the Customer is assigned an identification code.
2.8. When using the Services and purchasing goods in the Online Store, the Customer must always provide accurate Personal Data and is responsible for its accuracy.
2.9. The Customer has the right to change and supplement Personal Data in the Account at any time or request deletion of the Account.
2.10. The Customer must not disclose the Password to third parties and is responsible for its security.
3.1. The Company respects every Customer’s right to privacy. The Customer’s Personal Data (name, surname, email address, telephone number, delivery address, age/year of birth, payment information, purchase history, and, subject to consent, gender, birth date and place of residence) is collected and processed for the following purposes:
Processed Personal Data:
The retention period for Personal Data used for e-commerce purposes is 5 (five) years from the date of the last login to the Online Store.
Processed Personal Data:
The retention period for Personal Data used for direct marketing purposes is 5 (five) years from the date of the last login to the Online Store.
3.2. The Customer may give consent for the processing of their Personal Data for direct marketing purposes. If the Customer later withdraws consent, the Company will no longer process Personal Data for direct marketing purposes or send marketing communications, except for information related to the Customer’s orders.
3.3. The Customer may withdraw consent for direct marketing at any time by sending an email to info@8boxes.lt clearly stating the withdrawal of consent.
3.4. The Customer may also unsubscribe from direct marketing communications by clicking the relevant link in any marketing email.
3.5. The Customer, as the Data Subject, has the following rights:
3.5.1. To receive information regarding the processing of Personal Data and access their Personal Data;
3.5.2. To obtain information about the sources of collected Personal Data, purposes of processing and recipients of the data;
3.5.3. To request correction, deletion or suspension of processing of Personal Data where processing violates legal requirements.
3.6. To exercise these rights, the Customer must provide a passport, identity card or driving licence for identification. Information regarding processed Personal Data is provided free of charge once per calendar year. Requests may be submitted via email to info@8boxes.lt.
3.7. The Customer’s Personal Data is not disclosed to third parties except in the following cases:
3.7.1. Where Customer consent has been obtained;
3.7.2. Where Personal Data is provided to Partners involved in e-commerce operations and service provision;
3.7.3. Where disclosure is required by laws or competent authorities of the Republic of Lithuania.
3.7.4. Payments in the Online Store are processed through the Paysera platform operated by UAB Paysera; therefore, information necessary for payment processing may be transferred to Paysera.
3.8. The Customer is informed of their right to object to processing of Personal Data for direct marketing purposes.
3.9. The Customer agrees that Personal Data may be transferred to Partners for the execution of orders and provision of Services.
3.10. If the Customer disagrees with the Privacy Policy, they may not use the Online Store services.
3.11. The Company implements organisational and technical measures to protect Personal Data from accidental or unlawful destruction, alteration, disclosure or other unlawful processing.
3.12. Where required by competent authorities or where Personal Data may have been used in unlawful activities or identity theft investigations, the Company may retain Personal Data longer than specified in this Privacy Policy.
3.13. The Company shall respond to requests relating to Personal Data processing within 30 (thirty) calendar days from the date of the request.
3.14. To ensure full functionality of the Online Store, Cookies may be stored on the Customer’s device with the Customer’s consent. Cookies are used to recognise returning visitors, collect traffic statistics and store shopping cart information. Customers may review and delete Cookies at any time.
3.15. For more information about Cookies, including how to manage or delete them, please visit:
www.allaboutcookies.org
4.1. The Company reserves the right to modify or supplement this Privacy Policy in whole or in part. Amendments become effective from the date of publication.
4.2. If you have any questions, please contact us at:
info@8boxes.lt