Privacy Policy

1. General Provisions

1.1. The data controller is UAB “EX FACTORY JEWELRY”, company code 305228434, VAT payer code LT100012672216, registered address Fabijoniškių g. 5C-1031, Vilnius, Lithuania, email address [email protected], telephone number +37060772010, the company’s data being collected and stored in the Register of Legal Entities of the Republic of Lithuania (hereinafter – the Company). The Company, through the website / online store at https://www.marrymebyribas.lt/ (hereinafter – the Online Store), sets out in this Privacy Policy the principles on which the Company collects, processes and stores personal data collected about visitors to the Online Store and/or purchasers in the Online Store (hereinafter – the Individuals), or provided to the Company by the Individuals themselves, as well as how the Company processes Individuals’ data when visiting the Online Store, registering an account, ordering goods, subscribing to newsletters and/or direct marketing communications.

1.2. This Privacy Policy applies to all Individuals, including Individuals who have not created a personal account in the Online Store and/or have not placed an order with the Company. This Privacy Policy forms an integral part of the Terms and Conditions for the Purchase of Goods in the Online Store.

1.3. The data controller of personal data is the Company.

2. Personal Data Processed by the Company

2.1. Data provided by Individuals to the Company when completing the Online Store account creation and goods order forms, which are necessary for concluding and performing sale and purchase agreements for goods sold by the Company and for delivering the goods, as well as data provided by Individuals when submitting requests, notices and/or complaints to the Company: first name and surname, date of birth, address, goods delivery address, telephone number and email address, IP address, and other data that may be relevant for concluding a sale and purchase agreement and/or delivering ordered goods or handling enquiries, requests or disputes.

2.2. Data provided by Individuals to the Company when subscribing to newsletters and/or advertising communications (including direct marketing), participating in loyalty programmes and/or announced promotions: telephone number, email address, IP address and, depending on the terms of the loyalty programme or promotion, also first name and surname, date of birth and goods delivery address.

2.3. Data provided to the Company automatically by Individuals when browsing the Online Store using cookies, data about Individuals’ browsing history on the Online Store and related data (number of visits, information viewed, browser type used, IP address, etc.).

2.4. Data provided by Individuals to the Company during correspondence (whether through the Online Store, by email or by regular mail).

2.5. Data may be obtained from third parties on the basis of the Individual’s consent or in accordance with the procedure established by law.

2.6. When processing personal data in accordance with this Privacy Policy and applicable legislation, the Company performs the collection, recording, accumulation, storage, classification, modification (supplementation or correction), consolidation, transfer and deletion of Individuals’ personal data.

The Company may use Individuals’ personal data for profiling only after obtaining the Individual’s prior written consent. When processing Individuals’ personal data for the purposes specified in this Privacy Policy, the Company does not use automated decision-making processes, including profiling, which may produce legal effects concerning the Individual or similarly significantly affect the Individual.

With the Individual’s consent, the Company may process personal data by automated means, including profiling, for the purpose of assigning the Individual to an appropriate customer category and providing individual commercial offers tailored to the Individual’s needs.

3. Purposes and Legal Basis for Processing Personal Data

3.1. For the purpose of concluding a sale and purchase agreement (accepting an order), properly performing it and properly servicing the Individual – on the basis of the Individual’s consent, the Individual’s request to conclude an agreement and the proper performance of the agreement concluded between the Company and the Individual: the Individual’s first name, surname, date of birth, address, email address, telephone number, selected delivery method, delivery address, payment method, order details, information contained in order invoices, the fact and amount of payment for the order, etc., the Individual’s comments regarding the performance of the order, the fact and content of correspondence between the Company and the Individual, and the IP address (for security verification and interface language adaptation).

Providing this data is necessary for the Individual to conclude a sale and purchase agreement with the Company (place an order) and for the Company to properly perform the sale and purchase agreement (accepted order). If the Individual does not provide this data, the goods order cannot be accepted or fulfilled.

3.2. For the purpose of creating the Individual’s personal account in the Online Store – on the basis of the Individual’s consent: email address or social network account data (first name, surname, profile photo, email address, account identification number) obtained from third parties if the account is registered using third-party authentication tools or subsequently linked to third-party accounts (e.g. “Facebook”, “Google” or others).

3.3. For the purposes of sending newsletters, direct marketing communications, survey questionnaires, reminders or enquiries, and implementing the Individual’s participation in loyalty programmes – solely on the basis of the Individual’s consent: email address, telephone number and shopping data (goods purchased, prices of goods).

The Individual may consent to receiving the Company’s newsletters, offers or advertising communications by selecting the relevant option when placing an order or by subscribing to the Company’s newsletters and notifications about offers.

If the Individual no longer wishes to receive the Company’s newsletters, offers or advertising communications, they may inform the Company at any time by email at [email protected] or by following the instructions provided in each communication sent to the Individual.

3.4. For the purposes of ensuring the functionality of the Online Store, collecting statistical information, analysing activities, and personalising the content and information displayed in the Online Store – on the basis of the Individual’s consent: data about the Individual’s browsing history and actions in the Online Store and related data (number of visits, information viewed, browser type used, etc.), IP addresses.

3.5. For the purpose and on the basis of properly fulfilling the Company’s legal obligations, in compliance with applicable legal requirements and/or lawful and justified requests from state, municipal or other public authorities or institutions, financial institutions or other entities.

4. Transfer of Personal Data and Data Recipients

4.1. All Individuals’ data is stored on the Company’s servers. All payment transactions are encrypted.

4.2. The Company has the right to transfer Individuals’ personal data to a subsidiary of the Company or a company controlling the Company, as well as to a successor to the Company’s rights and/or obligations.

4.3. The Company transfers Individuals’ personal data to third parties only to the extent necessary for the proper fulfilment of the Company’s contractual obligations towards the Individual (fulfilment of an order, delivery of goods, etc.), as well as for compliance with legal requirements, where the Company’s service providers process the Company’s accounting or IT systems, ensure the proper operation and servicing of the Online Store, process data or ensure proper payment administration.

4.4. Where necessary for the proper implementation of rights and obligations, the Company may transfer Individuals’ personal data to data processors providing services to the Company (information technology providers, virtual cloud storage providers, direct marketing service providers, accounting service providers, etc.), data recipients providing services (payment institutions, postal or courier services, etc.), state or municipal authorities and institutions, financial institutions and other public authorities in accordance with the procedure established by law.

4.5. On a lawful basis, Individuals’ personal data may also be transferred to and processed outside the European Economic Area (hereinafter – the EEA) by Company employees, suppliers or service providers located in such territory (where the Company’s data processors or personal data recipients are established outside the EEA), or where this is necessary for the proper fulfilment of the Individual’s order, processing of the Individual’s payment data or provision of other services by the Company.

4.6. By providing their personal data, Individuals consent to the transfer and processing of personal data as set out in this Privacy Policy.

5. Period of Processing and Storage of Personal Data

5.1. Personal data related to the placing of orders in the Online Store, conclusion and performance of sale and purchase agreements shall be stored and processed for 3 (three) years from the date of the Individual’s last login to their personal Online Store account or the date of the Individual’s last purchase in the Online Store, unless applicable legislation requires the Company to retain such personal data for a longer period.

5.2. Individuals’ data provided and/or obtained when the Individual submits an enquiry to the Company shall be stored and processed for 1 (one) year from the date of the last action taken in relation to the relevant enquiry.

5.3. Personal data provided for the purpose of creating the Individual’s personal account in the Online Store shall be stored and processed for 1 (one) year from the date of the Individual’s last login to their personal Online Store account.

5.4. Personal data used with the Individual’s consent for the purposes of sending newsletters and direct marketing shall be stored and processed until the Individual withdraws their consent, but for no longer than 5 (five) years from the date of the Individual’s last login to their personal Online Store account, placement of an order or provision of such data to the Company.

5.5. Personal data collected using cookies shall be stored and processed for as long as the relevant cookie remains valid or until the Individual withdraws their consent to the use of cookies.

6. Rights of Individuals

6.1. Individuals who have properly verified their identity have the right to request that the Company (the data controller) provide access to the personal data held and processed by the Company, rectify or delete such data (where processing of such data is no longer necessary for the purpose for which it was lawfully obtained), suspend or restrict the processing of data, submit a request for data portability, receive information, object to the processing of data or withdraw consent previously given, and request that the Individual not be subject to automated individual decision-making, including profiling.

Individuals may contact the Company regarding the exercise of their rights or complaints by email at [email protected] or using the contact details provided in the “Contact” section of the Online Store, or contact the State Data Protection Inspectorate.

6.2. Information shall be provided to the Individual no later than within 30 (thirty) days from the date of the Individual’s request. The Company shall provide such data to the Individual free of charge 1 (one) time per calendar year.

An Individual’s request may be rejected if the relevant personal data is processed on a legal basis other than the Individual’s consent, or if the Company is required by law to process and retain such data, or if this is necessary for the proper fulfilment of the Company’s obligations towards the Individual.

The Company has the right to request a reasonable fee if the Individual’s requests are manifestly unfounded, repetitive or excessive.

6.3. Individuals have the right to refuse the processing of their personal data for the purposes of the Company’s direct marketing, sending newsletters and offers, and conducting marketing research.

To exercise the right to refuse the processing of their data for these purposes, the Individual must send a request to the Company by email at [email protected] and notify the Company of their refusal, or follow the instructions provided in each communication sent to the Individual.

The Company informs Individuals that, after submitting a refusal (withdrawing consent), the Individual may lose the opportunity to use the Company’s loyalty programme, applicable discounts or other services, the provision of which was linked to the Individual’s consent and/or the processing of the relevant personal data.

6.4. If an Individual believes that their rights have been violated, the Individual may contact the Company by email at [email protected] or using the other contact details provided in the “Contact” section of the Online Store.

Complaints by Individuals concerning improper or unlawful processing of personal data are examined by the State Data Protection Inspectorate, registered office: A. Juozapavičiaus g. 6, LT-09310 Vilnius, Lithuania, website: www.ada.lt.

7. Amendments to the Privacy Policy

7.1. Any amendments to this Privacy Policy shall be published in the Online Store.

7.2. The Company has the right to unilaterally amend this Privacy Policy. The amended Privacy Policy shall enter into force from the moment it is published in the Online Store. When an Individual purchases goods in the Online Store, the version of the Privacy Policy applicable at the time the order was placed shall apply.

8. Contact Information

8.1. All notices, complaints or requests to the Company shall be submitted by email at [email protected]. Other contact information of the Company is provided in the “Contact” section of the Online Store.