FITODENTA PRIVACY POLICY
4 July 2023
This Privacy Policy (hereinafter – the Privacy Policy) provides information on how UAB “Fitodenta”, registration number 305460265, registered office at Raudondvario pl. 148, 47175 Kaunas, Lithuania (hereinafter – the Data Controller), processes your personal data in the online store https://fitodenta.com/. You can contact the Data Controller using the following contact details:
Telephone: +(370) 686 69366
Email: info@fitodenta.com
Address: Raudondvario pl. 148, 47175 Kaunas, Lithuania
What personal data do we process?
This Privacy Policy (hereinafter – the Privacy Policy) provides information on how UAB “Fitodenta”, registration number 305460265, registered office at Raudondvario pl. 148, 47175 Kaunas, Lithuania (hereinafter – the Data Controller), processes your personal data in the online store https://fitodenta.com/. You can contact the Data Controller using the following contact details:
Telephone: +(370) 686 69366
Email: info@fitodenta.com
Address: Raudondvario pl. 148, 47175 Kaunas, Lithuania
What personal data do we process?
| Purpose | Personal data | Legal basis | Retention period | May be disclosed to |
|---|---|---|---|---|
| Order delivery | First name, last name, telephone number, email address, address, pick-up point details, shipment number | Contract | Ten years after expiry of the contract | Courier / delivery / postal service providers |
| Processing returns | First name, last name, bank account number, other information | Contract, legal obligation | Ten years after the return | Payment service providers |
| Creating and managing website user accounts | First name, last name, account username and password, telephone number, email address, address | Contract | Two years after the last login to the account | - |
| Communication with website visitors | First name, last name, telephone number, email address | Steps at the request of the data subject prior to entering into a contract / Legitimate interest in conducting business and/or ensuring quality | One year after resolution of the enquiry | - |
| Direct marketing (sending newsletters / event invitations, offering similar goods / services) | First name, last name, email address, telephone number | Consent / Legitimate interest in offering customers similar goods or services | Two years after consent / Two years after purchase of goods or services | Newsletter delivery solutions |
| Managing social media accounts | Unique ID, IP address, device information | Consent / legitimate interest in communicating with customers | For as long as website visitors are followers of such social media accounts | Social networks (joint data controllers) |
How is your personal data processed on social media websites?
Information that you provide to us when visiting our social media pages (including messages, use of the “Like” and “Follow” buttons or other communications) will be controlled by us and the social media operators as joint controllers.
We currently have the following social media accounts:
● “https://www.facebook.com/profile.php?id=100094518212754” on Facebook; its privacy policy is available at https://www.facebook.com/privacy/explanation
● “https://www.linkedin.com/in/fitodenta-uab-b01407282/” on LinkedIn; its privacy policy is available at https://www.linkedin.com/legal/privacy-policy
● “https://www.youtube.com/@Fitodenta” on YouTube; its privacy policy is available at https://policies.google.com/privacy
Please read the privacy policies of third parties and contact the service provider directly if you have any questions about how they use your personal data.
To whom may we disclose your personal data?
We may disclose information about you to our employees, agents and service providers such as debt administration / collection companies or archiving service providers, as well as legal / marketing / IT service providers or subcontractors, where reasonably necessary for the purposes set out in this Privacy Policy.
In addition, we may disclose your personal information where required by law or in order to protect our rights or interests (including where your personal data is transferred to others for debt collection purposes), as well as where part of the company’s business or assets is intended to be sold or the company is to be reorganised (and during such processes) and we are requested to disclose your personal data to any (potential) purchaser of such business or assets or to other participants in the reorganisation.
How is your personal data processed?
Your personal data will be processed in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements. When determining the means of processing personal data and carrying out such processing, the Data Controller shall implement appropriate technical and organisational measures required by legislation to protect personal data against accidental or unlawful destruction, damage, alteration, loss, disclosure or any other unlawful processing, and shall take appropriate measures having regard to the risks associated with such processing of personal data.
What are your rights?
The following provides information about your rights in relation to the processing of your personal data by the Data Controller and how these rights may be exercised. If you would like more information about your rights or wish to exercise them, please contact us at the email address specified in this Privacy Policy.
● You may contact us at any time and ask whether we process any of your personal data. If your personal data is stored or used in any way, you have the right to access such data. To exercise this right, please send us a written request to the email address specified in this Privacy Policy. We may ask you to confirm your identity in order to fulfil your request. When submitting such a request, please observe the principles of reasonableness and good faith.
● If you have given us consent to process your personal data, you may withdraw such consent at any time by sending us an email to the address specified in this Privacy Policy.
● You have the right to ask us to correct any inaccuracies in your personal data. In such a case, we may ask you to confirm the corrected information.
● You have the right to ask us to erase your personal data. This right may be exercised in the cases described in Article 17 of the GDPR.
● You have the right to ask us to restrict / refrain from processing your personal data.
● You have the right to data portability if such data is processed by automated means and we received it from you on the basis of your consent or for the purpose of entering into a contract. If you decide to exercise this right, at your request we will provide a copy of the data you supplied.
● You have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR.
How can you exercise your rights?
To exercise your rights, you may submit requests, complaints or claims to us in writing using the contact details specified in this Privacy Policy.
We will respond to your request, complaint or claim in writing in accordance with applicable law and will make every effort to provide you with the necessary information as soon as possible, but no later than within 30 (thirty) days of receipt of your request.
If, after receiving your request, complaint or claim, we have doubts about your identity, we may ask the applicant to provide an identity document.
Complaints
If you believe that your rights as a data subject have been and/or may be infringed, please contact us immediately at the email address specified in this Privacy Policy. We assure you that, upon receiving your complaint, we will inform you within a reasonable period about the progress of the investigation and subsequently about its outcome. If you are not satisfied with the outcome of such investigation, you may lodge a complaint with the supervisory authority – the State Data Protection Inspectorate (https://vdai.lrv.lt/).
Responsibility
You are responsible for ensuring that the information you provide is accurate, correct and complete. If the data provided changes, you must notify us immediately by email. We are therefore not liable for any damage resulting from your failure to provide accurate or complete personal data or to notify us of changes to such data. This Privacy Policy was updated on 4 July 2023.
Information that you provide to us when visiting our social media pages (including messages, use of the “Like” and “Follow” buttons or other communications) will be controlled by us and the social media operators as joint controllers.
We currently have the following social media accounts:
● “https://www.facebook.com/profile.php?id=100094518212754” on Facebook; its privacy policy is available at https://www.facebook.com/privacy/explanation
● “https://www.linkedin.com/in/fitodenta-uab-b01407282/” on LinkedIn; its privacy policy is available at https://www.linkedin.com/legal/privacy-policy
● “https://www.youtube.com/@Fitodenta” on YouTube; its privacy policy is available at https://policies.google.com/privacy
Please read the privacy policies of third parties and contact the service provider directly if you have any questions about how they use your personal data.
To whom may we disclose your personal data?
We may disclose information about you to our employees, agents and service providers such as debt administration / collection companies or archiving service providers, as well as legal / marketing / IT service providers or subcontractors, where reasonably necessary for the purposes set out in this Privacy Policy.
In addition, we may disclose your personal information where required by law or in order to protect our rights or interests (including where your personal data is transferred to others for debt collection purposes), as well as where part of the company’s business or assets is intended to be sold or the company is to be reorganised (and during such processes) and we are requested to disclose your personal data to any (potential) purchaser of such business or assets or to other participants in the reorganisation.
How is your personal data processed?
Your personal data will be processed in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements. When determining the means of processing personal data and carrying out such processing, the Data Controller shall implement appropriate technical and organisational measures required by legislation to protect personal data against accidental or unlawful destruction, damage, alteration, loss, disclosure or any other unlawful processing, and shall take appropriate measures having regard to the risks associated with such processing of personal data.
What are your rights?
The following provides information about your rights in relation to the processing of your personal data by the Data Controller and how these rights may be exercised. If you would like more information about your rights or wish to exercise them, please contact us at the email address specified in this Privacy Policy.
● You may contact us at any time and ask whether we process any of your personal data. If your personal data is stored or used in any way, you have the right to access such data. To exercise this right, please send us a written request to the email address specified in this Privacy Policy. We may ask you to confirm your identity in order to fulfil your request. When submitting such a request, please observe the principles of reasonableness and good faith.
● If you have given us consent to process your personal data, you may withdraw such consent at any time by sending us an email to the address specified in this Privacy Policy.
● You have the right to ask us to correct any inaccuracies in your personal data. In such a case, we may ask you to confirm the corrected information.
● You have the right to ask us to erase your personal data. This right may be exercised in the cases described in Article 17 of the GDPR.
● You have the right to ask us to restrict / refrain from processing your personal data.
● You have the right to data portability if such data is processed by automated means and we received it from you on the basis of your consent or for the purpose of entering into a contract. If you decide to exercise this right, at your request we will provide a copy of the data you supplied.
● You have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR.
How can you exercise your rights?
To exercise your rights, you may submit requests, complaints or claims to us in writing using the contact details specified in this Privacy Policy.
We will respond to your request, complaint or claim in writing in accordance with applicable law and will make every effort to provide you with the necessary information as soon as possible, but no later than within 30 (thirty) days of receipt of your request.
If, after receiving your request, complaint or claim, we have doubts about your identity, we may ask the applicant to provide an identity document.
Complaints
If you believe that your rights as a data subject have been and/or may be infringed, please contact us immediately at the email address specified in this Privacy Policy. We assure you that, upon receiving your complaint, we will inform you within a reasonable period about the progress of the investigation and subsequently about its outcome. If you are not satisfied with the outcome of such investigation, you may lodge a complaint with the supervisory authority – the State Data Protection Inspectorate (https://vdai.lrv.lt/).
Responsibility
You are responsible for ensuring that the information you provide is accurate, correct and complete. If the data provided changes, you must notify us immediately by email. We are therefore not liable for any damage resulting from your failure to provide accurate or complete personal data or to notify us of changes to such data. This Privacy Policy was updated on 4 July 2023.