I. DEFINITIONS:
Seller – UAB “MANFIRA”, a private legal entity registered with the Legal Entities Register of the Republic of Lithuania, Vilnius branch, under code 302812448, VAT payer code LT100006981110, registered address Eišiškių pl. 127, Vilnius.
UAB “MANFIRA” – the online store located at CrafterShop.eu.
Buyer – 1) a legal adult, i.e., an individual who has reached adulthood and whose legal capacity is not restricted by a court; 2) a minor between the ages of fourteen and eighteen, who has the consent of their parents or guardians, unless the minor is emancipated; 3) a legal entity; 4) duly authorized representatives of the above-mentioned persons.
Seller’s Partner – a legal entity: 1) selling products or providing services on CrafterShop.eu, or a legal entity engaged to fulfill the Buyer’s order; 2) with whom joint promotions or projects are conducted on the CrafterShop.eu online store, or on the website of this legal entity, or in any media where the promotion or project of CrafterShop.eu and this legal entity will be described or advertised.
Account – the result of the Buyer’s registration on CrafterShop.eu, which creates an account storing their personal data and order history.
CrafterShop.eu accounts – CrafterShop.eu’s accounts on Facebook, Twitter, LinkedIn, and other social networks, where information about CrafterShop.eu and its services is provided, and content shared by Buyers.
Services – all the services provided to the Buyer by CrafterShop.eu.
Cookie – a small file sent to the device when someone visits CrafterShop.eu. This term refers to not only cookies but also the use of similar tools.
Password – a unique combination of letters and numbers created by the Buyer and known only to them, which is entered for the first time during registration on CrafterShop.eu and later used to access their account.
Browser – a program used to display web pages (websites) on the internet or on a personal computer.
Personal Data – any information related to a physical person – the data subject, whose identity is known or can be directly or indirectly identified by using such data as a personal identification number, one or more characteristics specific to the person’s physical, physiological, psychological, economic, cultural, or social identity.
Data Controller – CrafterShop.eu.
Privacy Policy – this document that outlines the basic rules for collecting, accumulating, processing, and storing personal data when using CrafterShop.eu.
Administrator – the person responsible for CrafterShop.eu marketing.
IP Address – a unique number assigned to each computer connected to the internet, known as an Internet Protocol (IP) address. Since these numbers are typically assigned by country blocks, the IP address can often be used to identify the country from which the computer is connected to the internet.
Rules – the approved and valid “Goods Purchase and Sale Rules on CrafterShop.eu”.
Direct Marketing – activity aimed at offering goods or services by mail, phone, or other direct means, and/or inquiring about the opinion of persons regarding the offered goods or services.
II. GENERAL TERMS
The Privacy Policy of CrafterShop.eu outlines the basic rules for the collection, accumulation, and processing of personal data when using the services offered by CrafterShop.eu.
The Privacy Policy is designed to protect and safeguard the personal data of CrafterShop.eu Buyers from unlawful use. The Privacy Policy also applies to CrafterShop.eu Accounts.
The Buyer is considered to have read and agreed to this Privacy Policy once they consent to the processing of their personal data.
The Privacy Policy can be reviewed and printed at any time on CrafterShop.eu. Any future changes and/or additions to the Privacy Policy will be communicated to the Buyers by publishing the new version of the Privacy Policy on CrafterShop.eu, and providing the technical opportunity for Buyers to read and confirm the new Privacy Policy version when first logging into CrafterShop.eu.
Buyers should note that CrafterShop.eu may contain links to websites of other individuals, companies, or organizations, and that the Seller is not responsible for the content of those websites or the privacy policy enforcement methods used there. Therefore, before providing personal information, the Buyer should review the relevant website’s rules, privacy policy, and other documents.
The Buyer may perform purchase actions on CrafterShop.eu by registering or without registration. If not registered, the Buyer must provide the following personal data: name, surname, phone number, email address, and delivery address. The Buyer is responsible for the accuracy of the provided personal data.
Individuals wishing to register on CrafterShop.eu must provide their email address and create a password. During registration, an account is created. The Buyer enters their data into the account – name, surname, gender, date of birth, phone number, email address, and is responsible for the accuracy of this information. The Buyer is assigned a User ID. The Buyer may at any time:
24.1. correct and/or update personal data in the account. The Buyer is responsible for the accuracy of any updated data.
24.2. contact CrafterShop.eu at info@CraftShop.lt to request account cancellation.
- The provision of the personal identification number is only required by CrafterShop.eu when the Buyer orders goods on an installment basis from CrafterShop.eu or its partners, or purchases additional services that require the submission of the personal identification number (e.g., insurance for goods, extending the warranty for the product).
III. PERSONAL DATA PROCESSING AND USAGE PROCEDURES
The Buyer agrees that their name, surname, email address, phone number, and IP address may be processed by craftershop.eu for the purposes of activity analysis. Accordingly, craftershop.eu grants the Buyer the right to express consent or objection during registration on craftershop.eu or when placing an order, regarding the processing of their name, surname, email address, phone number, and IP address for direct marketing purposes.
If, after purchasing goods and/or services, the Buyer does not wish the Personal Data specified in point 26 to be used for Direct Marketing or activity analysis purposes, the Buyer must log in to their Account on craftershop.eu and uncheck the box next to the statement “News via email” and/or “News via SMS/Viber” in the Account window, then click the “Update” link. Alternatively, the Buyer may send an email to info@craftshop.lt or call the general craftershop.eu customer service phone number +370 604 88 141 to request that they no longer receive emails and/or SMS/Viber messages. The sending of emails and/or SMS/Viber messages will cease only for the Buyer’s explicitly listed email addresses and/or phone numbers.
The Seller confirms that the Personal Data provided by the Buyer will be processed only for the purpose of properly providing the services offered on the craftershop.eu online store (including the right to participate in promotions, projects). The Seller also confirms that the Buyer’s Personal Data will be processed for the Seller’s activity analysis and Direct Marketing purposes, if the Buyer provides consent and does not revoke it. The retention period for Personal Data used for Direct Marketing purposes is set to be three calendar years from the moment the data is provided.
The Seller undertakes not to disclose the Buyer’s Personal Data to third parties, except in the following cases:
29.1. if there is the Buyer’s consent for the disclosure of Personal Data;
29.2. when fulfilling an order or providing other services – to the Seller’s partners providing goods delivery or other services ordered by the Buyer;
29.3. for Direct Marketing purposes – to the Seller’s partners, in accordance with the condition set out in point 29.1 of the Privacy Policy, ensuring that the Seller’s partners commit to comply with the legal provisions of the Lithuanian Republic on the legal protection of Personal Data;
29.4. to law enforcement authorities in accordance with the procedure provided by the laws of the Lithuanian Republic;
29.5. if necessary to prevent criminal activities or to investigate them.
- The Buyer has the following rights:
30.1. upon submitting a written request to the Seller, to familiarize themselves with the Personal Data held by the Seller. The information will be provided to the Buyer at their specified email address;
30.2. upon submitting a written request to the Seller, to obtain information on the sources from which their Personal Data was collected, the purposes for which it is processed, and to whom the data has been or will be provided, at least during the last 1 (one) year. The information will be provided to the Buyer at their specified email address;
30.3. upon submitting a written request to the Seller via email at info@craftshop.lt, by phone at +370 604 88141, to request the deletion of their Account or suspension of the processing of Personal Data, when such data is being processed in violation of the Personal Data Protection Law or other applicable laws, except for cases specified in the Privacy Policy;
30.4. if they do not agree with the Privacy Policy, to object to the processing of their Personal Data. In this case, the Buyer will not be able to purchase goods and/or services from the craftershop.eu online store;
30.5. both immediately expressing their disagreement and in accordance with the procedure specified in point 27 of the Privacy Policy, submitting a later notification to object to the processing of their Personal Data for Direct Marketing purposes.
Upon collecting the goods, the document confirming the Buyer’s identity presented to the Seller, employees of the Lithuanian Post, courier service workers, or Goods Collection Center employees will only be used for proper identification of the Buyer’s identity.
By agreeing to this Privacy Policy, the Buyer agrees that their Personal Data will be used to fulfill their order, regardless of whether they are ordering goods and/or services from craftershop.eu as the seller or from Partners, as defined in point 4 of the Privacy Policy, including agreeing that their Personal Data will be transmitted to the Seller’s partners, as defined in point 4 of the Privacy Policy, as well as processed by the Seller or their designated data processor for order fulfillment activity analysis purposes.
The Buyer’s Personal Data may be provided to EU member states or other foreign countries under the same conditions and procedure as for entities within the Lithuanian Republic, and only for the purposes specified in this Privacy Policy.
The Seller stores Personal Data for as long as the person uses craftershop.eu services, except in cases specified in this Privacy Policy. After the Account is deleted, in order to comply with the requirements of point 38 of this Privacy Policy, the Buyer’s Personal Data may be stored on the Personal Data Controller’s server for up to six months, except in cases specified in point 38 of the Privacy Policy and for legitimate law enforcement requests to store such data.
The Seller ensures the protection of the Buyer’s Personal Data submitted to craftershop.eu from any unlawful actions: unlawful alteration, disclosure, or destruction, identity theft, fraud, and that the level of Personal Data protection meets the requirements of the laws of the Lithuanian Republic.
Personal Data is protected from loss, unauthorized use, and alteration. All Buyer’s passwords are encrypted, and access to servers related to Personal Data is only allowed to authorized personnel of the Personal Data Controller via a secure certificate, which is additionally protected by a password. Also, all pages on craftershop.eu that require Personal Data input are executed via the https:// protocol.
The Buyer agrees and is obligated to keep their login password and username secure and to ensure that Personal Data regarding themselves or third parties, if such data became available to them, is not disclosed to any third party, and to immediately inform the Seller of any breaches.
The Buyer agrees in advance that their Personal Data may be stored by the Seller on the server for as long as necessary based on the specific nature of craftershop.eu’s operations, if the Buyer’s provided data was (i) used to commit an illegal act, or (ii) if identity theft or another violation is suspected, and an investigation by the relevant law enforcement authorities is or will be conducted, (iii) if the Seller has received complaints related to the relevant Buyer, or if the Seller has noticed violations of the Rules by the Buyer, or (iv) for other legitimate purposes of data retention. These data will be deleted upon receiving lawful instructions from law enforcement or other authorized institutions.
Any request or instruction related to the processing of Personal Data must be submitted to the Seller in writing in one of the following ways: 1) by delivering such request or instruction directly to the Seller at Savanorių pr. 193, Vilnius; 2) by sending such request or instruction via email to info@craftshop.lt from the email address specified in point 26 of this Privacy Policy. The Seller, upon receiving such a request or instruction from the Buyer, will respond and take the requested actions or refuse to do so within 30 (thirty) calendar days. The response to the Buyer will be provided in writing.
While administering craftershop.eu and diagnosing potential disruptions, the Administrator may use the Buyer’s IP addresses.
IV. CORRECTION, ADDITION, AND DELETION OF PERSONAL DATA
The Buyer grants permission to CrafterShop.eu to collect, manage, process, and store the Buyer’s personal data to the extent and for the purposes specified in the Privacy Policy and other documents of CrafterShop.eu.
Granting or withdrawing consent for the collection, management, processing, and storage of the Buyer’s personal data applies only going forward. Once CrafterShop.eu receives such a notification from the Buyer via email or other means specified in the Privacy Policy, it will immediately stop processing the Buyer’s personal data and delete their Account. However, this does not mean that CrafterShop.eu must delete or destroy the personal data from the server if there is a legal basis to retain it, especially when it is necessary to ensure national security and defense, public order, the prevention, investigation, detection, or prosecution of crimes, defending important economic or financial interests of the state, or protecting the rights and freedoms of others.
The Buyer has the right to access their personal data by providing a document confirming their identity to CrafterShop.eu (to confirm their identity, the Buyer must submit a Lithuanian Republic citizen’s passport, Lithuanian passport, identity card, or driver’s license). To find out what personal data CrafterShop.eu has collected or received and from which sources, for what purposes it is being processed, to whom it has been or will be provided, or whether all of the Buyer’s personal data is complete and correct, the Buyer must contact CrafterShop.eu in advance via the email address provided in this Privacy Policy. Once CrafterShop.eu receives such a request, it will respond whether the Buyer’s personal data is being processed and provide the requested information within 30 (thirty) calendar days from the day of receiving the Buyer’s request. According to this provision, data will be provided free of charge once per calendar year.
If, upon reviewing their personal data, the Buyer finds that it has been collected or received from illegal sources or is being processed for purposes other than those for which it was provided, the Buyer has the right to contact CrafterShop.eu via email, requesting that such processing be stopped. A Buyer who uses CrafterShop.eu without being registered, and upon receiving a response from CrafterShop.eu, notices inaccuracies or errors in their personal data, has the right to request that their personal data be corrected or updated as soon as possible, but no later than 5 (five) working days. A Buyer who uses CrafterShop.eu with registration can correct their personal data by logging into their Account. CrafterShop.eu has the right to correct, supplement, delete personal data, or suspend data processing actions only after identifying the Buyer who made the request.
If CrafterShop.eu doubts the accuracy of the personal data provided by the Buyer, it may suspend the processing of such data, verify, and correct it. Such personal data is used only to verify its accuracy.
To exercise the aforementioned rights, the Buyer can contact CrafterShop.eu at the email address info@CraftShop.lt.
V. COLLECTION AND STORAGE OF PERSONAL DATA
- In order to provide the Buyer with full access to the CrafterShop.eu online store services, cookies may be stored on the Buyer’s computer (device). [The Seller uses this information to recognize the Buyer as a previous visitor to the CrafterShop.eu online store, to store information about the items added to the Buyer’s shopping cart, and to collect statistics on the online store’s traffic.] The Buyer has the option to view what information (cookies) the Seller or its partners store and may delete some or all of the stored cookies. By confirming the Privacy Policy, the Buyer agrees to the storage of cookies on their computer (device) as outlined in this Privacy Policy. This consent may be revoked by the Buyer at any time by changing their web browser settings. However, in such cases, certain functions of the CrafterShop.eu online store may not work. The Buyer should personally check what cookies are used by the Seller’s partners.
Cookies are intended for transmitting information via electronic communications networks. By adjusting the browser settings, you can delete or block all these cookies or some of them, but in such cases, certain functions of the CrafterShop.eu website may not work.
The second type of cookie is intended for collecting information to calculate traffic (gather statistical information), provide content relevant to the Buyer’s interests, and store browsing history. CrafterShop.eu does not use this type of cookie but points out that some CrafterShop.eu partners may use this type of cookie. If the Buyer suspects that such cookies are being used without their consent, they should contact the specific CrafterShop.eu partner.
VI. FINAL PROVISIONS
- This Privacy Policy comes into effect on January 26, 2018. Any changes to the Privacy Policy will be communicated in the manner specified in paragraph 20 of this Privacy Policy.