Privacy Policy
1. Main Concepts
1.1. The Company or Personal Data Controller – UAB „Thorgloss“, a closed joint-stock company established and operating under the laws of the Republic of Lithuania, legal entity code 307462044, registered office address Gedimino g. 23, Telšiai, Telšiai r. sav.
1.3. E-shop – the Company's electronic store at https://www.thorgloss.lt
1.4. Services – all services provided by the Company.
1.5. Personal Data - any information related to a natural person – the Data Subject, whose identity is known or can be directly or indirectly determined using data such as a personal identification number, or one or more physical, physiological, psychological, economic, cultural, or social characteristics typical of the person.
1.6. Processing of Personal Data - any action performed with personal data: collection, recording, accumulation, storage, classification, grouping, merging, changing (supplementing or correcting), providing, publishing, using, logical and (or) arithmetic operations, searching, dissemination, destruction, or any other action or set of actions.
1.7. Partner – a legal entity providing services to the Company related to the Company's activities, or selling goods to it, or carrying out joint projects with the Company, including but not limited to marketing promotions, joint sales campaigns, loyalty programs, etc., in the media, on websites, in the E-shop, retail stores, trade networks, etc.
1.8. Cookie – a small piece of textual information that is automatically created while browsing a website and is stored on the visitor's computer or other device.
1.9. Direct Marketing – activities intended to offer goods or services to persons by mail, telephone, or other direct means and (or) to inquire their opinion regarding the offered goods or services.
1.10. Privacy Policy – refers to this document, which establishes the principles and rules for the processing of Personal Data when using the E-shop services.
1.11. Account – the main data for the Customer's login to the E-shop, consisting of one email address and a Password.
1.12. Password – a unique combination of numbers, letters, or numbers and letters or other symbols created by the Customer, which, when entered, allows logging into the E-shop.
2. General Provisions
2.1. The Customer grants the Company the right to perform all Personal Data processing actions within the scope and for the purposes provided in this Privacy Policy.
2.2. Personal data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing and protection of Personal Data, as well as this Privacy Policy.
2.3. Personal Data is processed in the Company according to the following principles:
2.3.1. Personal data is collected for specified and legitimate purposes;
2.3.2. Personal data is processed accurately, fairly, and lawfully;
2.3.3. Personal data is adequate and only to the extent necessary for their collection and further processing;
2.3.4. Personal data is constantly updated;
2.3.5. Personal data is stored in a form that allows the identification of the Data Subject for no longer than is necessary for the purposes for which these data were collected and processed;
2.3.6. All information about Personal Data is confidential;
2.3.7. Customer's Personal Data and personal information will not be used for illegal purposes.
2.4. It is considered that the Customer, by purchasing in the E-shop, has read the current version of the Privacy Policy and agrees with it. If the Customer does not agree with any part of the Privacy Policy or the Privacy Policy itself, in such case the Customer must not place an order and not purchase goods in the E-shop.
2.5. The Privacy Policy can be found in the E-shop and printed at any time. The Privacy Policy may be changed, supplemented, or updated at the Company's discretion. A new version of the Privacy Policy is published in the E-shop.
2.6. The Customer can place an order in the E-shop without registration, or through their Account after registering in the E-shop.
2.7. During the initial registration to the E-shop through the Account, the Customer must provide their email address and create a secure Password, as well as provide accurate Personal Data to the E-shop. The Customer is responsible for their correctness. After creating an Account, the Customer is provided with an identification code.
2.8. When using the Services, as well as when purchasing in the E-shop, the Customer must always provide accurate Personal Data to the E-shop and is responsible for their correctness.
2.9. The Customer has the right to change and supplement Personal Data in the Account at any time or contact the e-shop with a request to delete the Account.
2.10. The Customer must not disclose the Password to third parties and must protect it; otherwise, all related responsibility lies with the Customer.
3. Collection, Use, Correction, and Storage of Personal Data
3.1. The Company respects every Customer's right to privacy. The Customer's Personal Data (i.e., name, surname, email address, phone number, delivery address for goods/services, age/year of birth, payment data for goods/services (bank account No., payment method, etc.), purchase history, as well as, with the Customer's consent, age, gender, date of birth, place of residence) are collected and processed for the following purposes:
3.1.1. For the purpose of electronic commerce. The following Personal Data are processed: name, surname, email address, phone number, delivery address for goods/services, age/year of birth, IP address, payment data for goods/services. The storage duration of Personal Data used for e-commerce purposes is 5 (five) years from the day of the last login to the E-shop.
3.1.2. For the purpose of direct marketing. The following Personal Data are processed: name, surname, phone number, email address, address, age, gender, date of birth, place of residence. The storage duration of Personal Data used for Direct Marketing purposes is 5 (five) years from the day of the last login to the E-shop.
3.2. The Customer may grant consent for the processing of their Personal Data (name, surname, phone number, email address, address, age, gender, date of birth, place of residence) for the purpose of Direct Marketing. If, after giving consent to process their data for Direct Marketing purposes and to receive Direct Marketing messages, the Customer later no longer wishes to do so and informs the Company, the Company will no longer process their Personal Data for Direct Marketing purposes and will not send any electronic news to the Customer, except for information related to the Customer's order.
3.3. The Customer has the right at any time to withdraw their consent provided in clause 3.2 for the Company to process the Customer's Personal Data for Direct Marketing purposes by submitting a corresponding notice to the Company by email info@thorgloss.lt and clearly stating that they withdraw their consent to use their Personal Data for Direct Marketing purposes and do not wish to receive any Direct Marketing messages.
3.4. The Customer also has the opportunity to refuse to exercise their right to object to the processing of the Customer's Personal Data for Direct Marketing purposes by clicking on the relevant link found in every sent email.
3.5. The Customer, as a Data Subject, has the following rights listed below related to the procedures for processing the Customer's Personal Data:
3.5.1. to receive information from the Company about the processing of the Customer's Personal Data, to get acquainted with their Personal Data and how they are processed;
3.5.2. to receive information from the Company as to from which sources and which Personal Data of the Customer were collected, for what purpose they are processed, to which recipients they are provided and have been provided at least during the last 1 (one) year;
3.5.3. to demand the correction, destruction of the Customer's Personal Data or the suspension, except for storage, of their Personal Data processing actions when Personal Data are processed without complying with the provisions of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws.
3.6. When exercising their rights, the Customer must provide a passport, identity card, or driver's license. The Company provides information to the Data Subject about the processed Personal Data of the Data Subject free of charge once a year. The Customer can exercise their rights provided in clause 3.5 by contacting via email info@thorgloss.lt. The Company has the right to correct, change, destroy Personal Data or stop Personal Data processing only after identifying the identity of the Customer who applied.
3.7. The Customer's Personal Data is not provided to third parties, except in the following cases:
3.7.1. When the Customer's consent has been obtained, as specified in this Privacy Policy;
3.7.2. Personal data for e-commerce purposes are provided to Partners providing services to the Company related to the Company's activities;
3.7.3. In cases provided by the laws and legal acts of the Republic of Lithuania to competent authorities. 3.7.2. In the E-shop, payments are processed using the makecommerce.lt platform, managed by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), therefore your personal information required for payment execution and confirmation will be transferred to Maksekeskus AS.
3.8. The Customer is aware of their right to object to the processing of their Personal Data for Direct Marketing purposes, i.e., the Customer has the right to express disagreement immediately or later.
3.9. The Customer agrees that their Personal Data would be transferred to Partners in the execution of the Customer's order placed in the E-shop, as well as for the Company providing Services to the Customer, as well as to the Company's Partners, as specified in clause 3.7.
3.10. If the Customer does not agree with the Privacy Policy, the Customer will not have the opportunity to use the E-shop services.
3.11. The Company implements organizational and technical measures intended to protect Personal Data from accidental or illegal destruction, alteration, disclosure, as well as from any other illegal processing.
3.12. The Customer agrees that in cases where it is necessary according to the instructions of competent authorities and/or the Customer's Personal Data were possibly used in carrying out illegal activity, or there are reasonable suspicions regarding identity theft, for which competent law enforcement authorities are conducting a pre-trial investigation, or there are other legal grounds or purposes, their Personal Data would be stored on the Company's servers longer than established in this Privacy Policy.
3.13. Upon receiving an instruction or inquiry from the Data Subject related to Personal Data processing, the Company provides the Customer with an answer, satisfying the request/instruction or reasonably refusing to do so, no later than within 30 (thirty) calendar days from the date of the Data Subject's application. If the Data Subject wishes, the answer must be provided in writing.
3.14. In order for the Company to offer the Customer full-fledged services in the E-shop, with the Customer's consent, Cookies (info) are recorded on the Customer's computer (device), which are used to recognize the Customer as a previous user of the E-shop, collecting statistics on E-shop traffic, and information about the shopping cart. The Customer can at any time review which Cookies are being recorded and can delete some or all of the recorded Cookies.
3.15. To find out more about cookies, for example, how to manage or delete them, you can visit www.allaboutcookies.org.
4. Other Provisions
4.1. The Company has the right to change or supplement the „Privacy Policy“ in whole or in part. Additions or changes to the Privacy Policy take effect from the day of their publication.
4.2. In case of questions, please contact via the following contacts: email: info@thorgloss.lt or tel. +370 604 54254.