Cart
1. Definitions.
1.1. Seller – MB “Mondri darbai”, company ID: 304085969, VAT code: LT100010307014, registration address – Kalvarijų g. 125, LT-08221, Vilnius, Lithuania.
1.2. mondri.lt – an online store located at https://www.mondri.lt.
1.3. Personal data – any information relating to an identified or identifiable natural person, in particular by reference to an identifier such as name and surname, identification number, location data, and online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
1.4. Representative – a person representing Buyers, both individuals and legal entities.
1.5. Inquirer – an individual or Representative interested in the products sold by the Seller or wishing to contact the Seller on other matters.
1.6. Participant – an individual or Representative participating or intending to participate in contests, promotions, games organized by the Seller.
1.7. Data Subject – a Representative, Inquirer, Buyer, or any other individual whose personal data is processed by the Seller.
1.8. Data Subject’s consent – any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
1.9. Service Provider – a physical or legal person who can offer or is offering goods, services, or works to the Seller and is cooperating or has entered into an agreement with the Seller for the sale of goods, services, or works.
1.10. Buyer – an individual or Representative purchasing goods from the Seller or who has entered into a contract with the Seller for the purchase of goods.
1.11. Direct Marketing – activities intended to offer goods or services to individuals by post, telephone, or any other direct means and/or to inquire their opinions regarding offered goods or services.
1.12. Processing of Personal Data – any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
2. General terms.
2.1. The Seller’s Privacy Policy outlines the main rules for the collection, accumulation, and processing of Personal Data by the Buyer using the mondri.lt online store.
2.2. By placing an order, the Buyer confirms that he has read the information provided in the Privacy Policy, understands it, and agrees with it.
2.3. The Privacy Policy is designed to protect and defend the Personal Data of mondri.lt Data Subjects from unauthorized use.
2.4. The Seller collects Personal Data in compliance with the requirements of applicable European Union and Republic of Lithuania legal acts and the instructions of supervisory authorities.
2.5. This Privacy Policy is established in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other acts of the European Union and the Republic of Lithuania. The terms used in the Privacy Policy are understood as they are defined in the General Data Protection Regulation and the Law on Legal Protection of Personal Data of the Republic of Lithuania.
3. Processing of personal data for consultation, inquiry execution purposes.
3.1. The Seller processes the following personal data of Inquirers: name, surname, telephone number, email address.
3.2. Personal data of Inquirers are not transferred to third parties.
3.3. Personal data for the purpose of consultation and inquiry submission are processed based on consent expressed by providing personal data.
4. Processing of personal data for the purpose of selling goods.
4.1. The Seller processes the following personal data of Buyers: name, surname, telephone number, email address, address, payment amount, payment data, other information related to the purchased product.
4.2. Data are obtained directly from Buyers, in the execution of a contract with the Buyer, and/or from other third parties related to the Data Subject. The Seller undertakes not to transfer the Buyer’s personal data to any unrelated third parties, except in the following cases:
4.2.1. If there is the Buyer’s consent for the disclosure of personal data;
4.2.2. When implementing obligations as a goods Seller (e.g., data may be transferred to courier services, logistics, archiving, audit, legal, financial service providers, Service Providers and/or parties related to national, European, and international payment systems, such as SWIFT);
4.2.3. When implementing the Seller’s legitimate interests (e.g., in case of debt collection);
4.2.4. To authorized institutions, as provided by the laws of the Republic of Lithuania (e.g., the tax authorities, social security institutions).
4.3. The Seller may provide Buyers’ and other Data Subjects’ personal data to persons who provide services (perform works) to the Seller and process Buyers’ and Data Subjects’ personal data on behalf of the Seller (e.g., companies providing accounting services, IT service companies). Service providers have the right to process personal data only according to the instructions of the Seller and only to the extent necessary to properly fulfill the obligations set out in the contract.
4.4. Personal data are processed based on the Data Subject’s consent, expressed by providing their data, and/or for the execution of a contract with the Data Subject.
5. Processing of personal data for direct marketing purposes.
5.1. The Seller seeks to share only relevant news and other useful information with newsletter subscribers, implemented in accordance with this Privacy Policy.
5.2. For direct marketing purposes, the following personal data of Buyers and other Data Subjects may be processed: name, surname, email address.
5.3. After sending a newsletter, the Seller may collect statistical data about the Data Subject’s behavior related to the use and content of the newsletter (for example, whether the newsletter was read, which links were opened by the Data Subject).
5.4. The Data Subject’s email address may be used for advertising presentation through Facebook, Google, and other advertising platforms, customizing the advertisement for the target audience.
5.5. Personal data may be transferred only to third parties providing specialized services, to send emails, and customize the nature of advertising ordered through advertising platforms.
5.6. Personal data of Buyers and other Data Subjects are processed based on consent expressed by providing their data and consenting to process personal data for direct marketing purposes, or based on the Seller’s legitimate interest (Article 6(1)(a) and (f) of the General Data Protection Regulation and Article 69(2) of the Law on Electronic Communications of the Republic of Lithuania, when personal data are processed based on the Data Controller’s legitimate interest).
5.7. We inform that the Data Subject has the right to disagree or withdraw his consent to process his personal data for direct marketing purposes at any time without stating reasons for disagreement.
5.8. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
6. Processing of personal data for the purpose of organizing games, promotions, contests.
6.1. The Seller may process personal data for the purpose of conducting games, promotions, contests only with the Data Subject’s consent. The Seller may collect the following personal data of Participants: name, surname, photos, phone number, email.
6.2. Data are obtained directly from Data Subjects participating in games, promotions, contests. By submitting their data, Participants agree and grant the right to the Seller and persons chosen at the Seller’s discretion to publicly announce their names, surnames (or the pseudonyms registered on social networks of the Data Subjects) as prize winners, including photographs. The information may be publicly announced on the internet.
6.3. Personal data are processed based on the consent expressed by submitting their personal data (Article 6(1)(a) of the General Data Protection Regulation).
7. Processing of personal data for the purposes of ensuring the security of staff, customers, and property (video surveillance).
7.1. The Seller processes video data of its staff, Customers, and other individuals entering the video surveillance area for the purposes of ensuring their security and the protection of property (video surveillance) to ensure their and the property’s security.
7.2. We inform you that your video data are captured by the Seller’s video surveillance equipment when visiting the Data Controller’s sales studio located at Verkių g. 29, Vilnius. Video data may only be transferred to law enforcement institutions according to the procedure established by the laws of the Republic of Lithuania and to insurance companies if an incident occurs that may be recognized as an insurable event. Video data are transferred only to the extent that it is related to the investigated incident.
7.3. The Seller may provide video data of its staff, Customers, and other individuals entering the video surveillance area to Service Providers not mentioned in this Policy, who provide services (perform work) for the Data Controller and process video data of the staff, Customers, and other individuals entering the video surveillance area on behalf of the Data Controller.
7.4. Personal data for the purpose of video surveillance are processed based on the Seller’s legitimate interest (Article 6(1)(f) of the General Data Protection Regulation).
8. Data protection and Buyer’s rights.
8.1. Personal data are protected against loss, unauthorized use, and alterations.
8.2. The Seller applies different personal data retention periods, based on legal requirements and considering the purposes of data processing.
8.3. Exceptions for retention periods may be established as long as they do not infringe on the rights of Data Subjects and comply with legal requirements.
8.4. Upon expiry of the set periods, if they were not extended, data will be destroyed in a manner that they cannot be recreated.
8.5. A Data Subject, whose data are processed in the Seller’s operations, has the following rights:
8.5.1. The right to be informed about the processing of their data;
8.5.2. The right to access their data and how they are processed;
8.5.3. The right to rectify or, considering the purposes of personal data processing, to complete incomplete personal data;
8.5.4. The right to erase personal data and the right to “be forgotten,” i.e., to stop processing their data (except for storage);
8.5.5. The right to restrict the processing of personal data under one of the legitimate reasons;
8.5.6. The right to data portability when the Data Subject has provided his personal data to the Seller in a structured, commonly used, and machine-readable format;
8.5.7. The right to object to the processing of personal data when these data are processed or intended to be processed for direct marketing purposes, including profiling to the extent that it is related to such direct marketing;
8.5.8. The right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania.
8.6. Any request or instruction related to the processing of personal data must be submitted to the Seller in writing by one of the following means: by direct delivery at the address: MB “Mondri darbai”, Verkių g. 29, Vilnius; by mail: MB “Mondri darbai”, Verkių g. 29, Vilnius; by email: info@mondri.lt.
8.7. Upon receiving such a request or instruction, the Seller provides a response and carries out the actions specified in the request or refuses to do so no later than one month from the date of the request. If necessary, this period may be extended by another two months, considering the complexity and number of requests. In this case, within one month from the date of receiving the request, the Data Controller informs the Data Subject of such an extension, along with the reasons for the delay.
8.8. The Seller may not create conditions for Data Subjects to exercise the above-listed rights, except for the objection to process personal data for direct marketing purposes, when in cases provided by law, it is necessary to ensure the prevention, investigation, and detection of crimes, breaches of official or professional ethics, as well as the protection of the rights and freedoms of the Data Subject or other persons.
9. Final terms.
9.1. Amendments or changes to the Privacy Policy take effect from the day of their publication.
9.2. If a Data Subject uses the Seller’s services after the amendment or change of the Privacy Policy, it is considered that the Data Subject does not object to such amendments and/or changes.
9.3. If you have any questions regarding the information provided in this Privacy Policy, please contact us by email: info@mondri.lt
