Privacy Policy - craftershop.eu

I. TERMS USED

Seller – UAB “MANFIRA”, a private legal entity registered in the Register of Legal Entities of the Republic of Lithuania, legal entity code 302812448, VAT payer code LT100006981110, registered address: Eišiškių pl. 127, Vilnius.
UAB “MANFIRA” – the electronic store located at CrafterShop.eu.
Buyer – (1) a natural person with legal capacity, i.e. a person who has reached the age of majority and whose legal capacity has not been restricted by court order; (2) a minor between fourteen and eighteen years of age having parental or guardian consent, unless emancipated; (3) a legal entity; (4) duly authorised representatives of all of the above.
Seller’s Partner – a legal entity which (1) sells goods or provides services on CrafterShop.eu, or is engaged for execution of the Buyer’s order; (2) jointly carries out promotions or projects on CrafterShop.eu, on its own websites or in any media channels where the joint action is described or promoted.
Account – the result of the Buyer’s registration on CrafterShop.eu, creating a personal account containing personal data and order history.
CrafterShop.eu Accounts – CrafterShop.eu accounts on Facebook, Twitter, LinkedIn and other social networks providing information about CrafterShop.eu and the Services, including sharing content published by Buyers.
Services – all services provided to the Buyer on CrafterShop.eu.
Cookie – a small file sent to the user’s device upon visiting CrafterShop.eu. This term also includes similar tracking technologies.
Password – a unique combination of letters and numbers created by the Buyer and known only to the Buyer, entered upon initial registration and later used to log in to the Account.
Browser – software used to display web pages on the internet or on a personal computer.
Personal Data – any information relating to a natural person (data subject) whose identity is known or can be directly or indirectly determined using such data as personal code or one or more factors specific to physical, physiological, psychological, economic, cultural or social characteristics.
Personal Data Controller – CrafterShop.eu.
Privacy Policy – this document, which sets out the fundamental rules for collection, storage, processing and retention of Personal Data when using CrafterShop.eu.
Administrator – the person responsible for CrafterShop.eu marketing.
IP Address – a unique number assigned to each computer connected to the internet, known as the Internet Protocol (IP) address. As these numbers are usually allocated by country blocks, an IP address can often be used to identify the country of connection.
Rules – the approved and valid “Terms and Conditions of Purchase and Sale in the CrafterShop.eu Online Store”.
Direct Marketing – activities intended to offer goods or services to persons by post, telephone or other direct means and/or to request opinions regarding the offered goods or services.

II. GENERAL PROVISIONS

The CrafterShop.eu Privacy Policy sets out the basic rules for the collection, accumulation and processing of Personal Data when the Buyer uses the Services provided on CrafterShop.eu.
The Privacy Policy is intended to protect and safeguard the Personal Data of CrafterShop.eu Buyers against unlawful use. The Privacy Policy also applies to CrafterShop.eu Accounts.
The Buyer is deemed to have read and familiarised themselves with this Privacy Policy once they express consent for their Personal Data to be processed.

The Privacy Policy can be reviewed and printed at any time on CrafterShop.eu. Buyers will be informed of all future amendments and/or supplements by publishing the updated version on CrafterShop.eu and by providing the technical possibility to read and confirm it upon the first login after the update.

Buyers should note that CrafterShop.eu contains links to external websites of other persons, companies or organisations, and the Seller is not responsible for the content or privacy practices of such websites. Before submitting Personal Data, the Buyer must review the applicable rules, Privacy Policy and other documents of that particular website.
Purchases at CrafterShop.eu may be made with or without registration. Non-registered Buyers must provide the following Personal Data: name, surname, telephone number, e-mail address, delivery address. The Buyer is responsible for the accuracy of the Personal Data provided.
Persons wishing to register on CrafterShop.eu must provide their e-mail address and create a Password. An Account is then created. In the Account the Buyer enters their name, surname, gender, date of birth, telephone number, e-mail address — therefore the Buyer is solely responsible for accuracy. A User ID is assigned. The Buyer may at any time:

24.1. correct and/or supplement Personal Data in the Account; the Buyer is responsible for accuracy;

24.2. request deletion of the Account by contacting info@CrafterShop.eu.

The personal identification number is requested only when goods or services are purchased on instalment or when buying additional services requiring such data (e.g. insurance, extended warranty).

III. PROCEDURE FOR STORAGE AND USE OF PERSONAL DATA

The Buyer agrees that their name, surname, e-mail address, telephone number and IP address may be processed on CrafterShop.eu for operational analysis purposes. CrafterShop.eu grants the Buyer the right, upon registration or order placement, to indicate consent or refusal for the same data to be used for Direct Marketing purposes.
If, after purchasing goods and/or services, the Buyer does not want the data listed in clause 26 to be used for Direct Marketing or analytics, the Buyer must log in to their Account on CrafterShop.eu and remove the check mark near “News by e-mail” and/or “News by SMS/Viber”, then click “Update”. The Buyer may also at any time send an e-mail to info@CrafterShop.eu or call +370 604 88 141 requesting cessation of e-mail and/or SMS/Viber communication. Cessation applies only to explicitly listed e-mail addresses and/or telephone numbers.
The Seller confirms that Personal Data will be processed solely for proper provision of services on CrafterShop.eu (including the right to participate in promotions and projects). The Seller also confirms that Personal Data will be processed for operational analysis and Direct Marketing if such consent is granted and not withdrawn. Personal Data used for Direct Marketing shall be stored for three (3) calendar years from the moment of provision.
The Seller undertakes not to disclose the Buyer’s Personal Data to third parties, except where:

29.1. the Buyer has given consent;

29.2. data is required for order fulfilment or service provision — to Seller’s Partners;

29.3. for Direct Marketing — to Seller’s Partners under clause 29.1 and subject to written undertakings to comply with data protection law;

29.4. disclosure is required by law to competent authorities;

29.5. disclosure is necessary to prevent or investigate criminal offenses.

The Buyer has the right to:

30.1. submit a written request to access their Personal Data held by the Seller — information is provided to the Buyer’s e-mail address;

30.2. submit a written request to obtain information on sources, categories, purposes and recipients of their Personal Data for the preceding 1 (one) year — information is provided to the Buyer’s e-mail address;

30.3. submit a written request to info@CrafterShop.eu or via phone +370 604 88141 to delete the Account or suspend processing where processing is unlawful, except as provided in this Policy;

30.4. refuse the processing of Personal Data by not agreeing with this Privacy Policy — in such case the Buyer cannot purchase in CrafterShop.eu;

30.5. object at any time to processing for Direct Marketing under clause 27.

When collecting Goods, the identity document presented to the Seller, postal worker, courier or collection point employee is used solely for identity verification.
By agreeing to this Privacy Policy, the Buyer consents to processing of Personal Data for order fulfilment whether purchasing from CrafterShop.eu or its Partners, and to the transfer of Personal Data to Partners and/or data processors for order execution analytics.
Personal Data may be transferred to EU Member States or foreign countries under the same conditions and for purposes specified in this Privacy Policy.
The Seller stores Personal Data for as long as the Buyer uses CrafterShop.eu services, unless provided otherwise. After Account deletion, Personal Data may be retained on the controller’s server for up to six months, except as required under clause 38 or lawful demands of authorities.
The Seller ensures, through organisational and technical means, protection of Personal Data against unlawful alteration, disclosure, destruction, identity theft, fraud, and ensures compliance with data protection legislation.
Personal Data is protected from loss, unauthorised use or alteration. All Passwords are encrypted. Access to servers with Personal Data is granted only to authorised persons through secure, password-protected certificates. All CrafterShop.eu pages requiring Personal Data operate via HTTPS.
The Buyer must protect login credentials and not disclose Personal Data of themselves or others. Any violations must be reported to the Seller immediately.
The Buyer agrees in advance that the Seller may retain Personal Data where necessary for activities of CrafterShop.eu if: (i) used in unlawful activity; (ii) identity theft or violation is suspected or under investigation; (iii) complaints or rule breaches were detected; or (iv) other lawful grounds exist. Data is destroyed upon lawful instruction of authorities.
Any request relating to Personal Data must be submitted to the Seller either: (1) in person at Savanorių pr. 193, Vilnius; or (2) by e-mail to info@CrafterShop.eu from the e-mail given under clause 26. The Seller responds within 30 calendar days and performs or refuses the requested action. Upon request, the reply is provided in writing.
When administering CrafterShop.eu and diagnosing malfunctions, the Administrator may use Buyers’ IP addresses.

IV. CORRECTION, COMPLETION AND DELETION OF PERSONAL DATA

The Buyer grants CrafterShop.eu the right to collect, manage, process and store the Buyer’s Personal Data to the extent and for the purposes defined in this Privacy Policy and other CrafterShop.eu documents.
The granting or withdrawal of consent to collect, manage, process and store Personal Data is valid only for the future. Upon receipt of such notification by e-mail or other means provided herein, CrafterShop.eu immediately suspends processing and disables the Account; however, this does not obligate CrafterShop.eu to delete or destroy Personal Data if there is a lawful basis for retention, particularly where required for national security and defence, public order, crime prevention, investigation, detection or prosecution, protection of essential state economic or financial interests, or protection of the rights and freedoms of others.
The Buyer has the right to access their Personal Data by presenting a document confirming identity (passport, ID card or driving licence). To request information about which Personal Data have been collected or received, from which sources, for what purposes they are processed and to whom they have been disclosed, the Buyer must first contact CrafterShop.eu at the e-mail address indicated in this Policy. CrafterShop.eu shall respond whether Personal Data are being processed and provide the requested data no later than within 30 calendar days. Such data shall be provided free of charge once per calendar year.
If, upon review, the Buyer determines that Personal Data were collected or obtained unlawfully or processed for purposes not intended, the Buyer has the right to request suspension of such processing. A Buyer using CrafterShop.eu without registration who receives a response containing inaccuracies has the right to demand correction within 5 business days. A registered Buyer corrects Personal Data personally in the Account. CrafterShop.eu may correct, supplement, delete or suspend processing only after identifying the Buyer’s identity.
If CrafterShop.eu doubts the accuracy of Personal Data, processing may be suspended and such data verified. These data are used only to confirm accuracy.
To exercise the above rights the Buyer may contact CrafterShop.eu at: info@CrafterShop.eu.

V. COLLECTION AND STORAGE OF PERSONAL DATA

For the purpose of providing full functionality of CrafterShop.eu services, Cookies may be stored on the Buyer’s device. Stored information may be used to recognise returning visitors, to retain cart contents, and to collect traffic statistics. The Buyer may view and delete some or all Cookies. By confirming the Privacy Policy, the Buyer agrees to the use of Cookies on their device. This consent may be withdrawn by changing browser settings; however, certain functions may not operate. The Buyer must also inform themselves of Cookies used by Partners.

Cookies are intended to transmit information via electronic communications networks. Cookies may be deleted or blocked through browser settings; however, in such cases some functions of CrafterShop.eu may not operate.

A second type of Cookies is used for statistical purposes, interest-based content and visit history. CrafterShop.eu does not use such Cookies, but notes that certain Partners may. If the Buyer suspects their use without consent, they should contact the relevant Partner directly.