PRIVACY POLICY

1. GENERAL PROVISIONS

This privacy policy outlines how www.aistesot.com (hereinafter – the Online Store) collects, uses, and stores personal data of the Buyer. The data controller is Aistė Sotvaraitė, individual activity certificate No. 1081805, registered at Titnago g. 7-217, Vilnius (hereinafter – the Seller).

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts.

2. WHAT DATA WE COLECT

When placing an order, the Buyer is asked to provide the following data:

* full name;

* email address;

* phone number;

* delivery address;

* residence address (if different from delivery address).

3. PURPOSE OF DATA USE

The Buyer's personal data is used solely for the following purposes:

* to conclude and fulfill the purchase-sale contract;

* to prepare and deliver orders;

* to issue invoices and process payments;

* to fulfill legal obligations (e.g., accounting, warranties, dispute resolution).

Personal data is not collected or used for marketing purposes.

4. LEGAL BASIS FOR DATA PROCESSING

Personal data is processed based on:

* performance of a contract (Article 6(1)(b) GDPR);

* compliance with legal obligations (Article 6(1)(c) GDPR);

* legitimate interest – to ensure website operation and customer service (Article 6(1)(f) GDPR).

5. DATA RETENTION PERIOD

Buyer's data is retained:

for *10 years** from the date of the transaction, in accordance with the accounting and archival regulations of the Republic of Lithuania;

* for a longer period if required by law or in the event of a legal dispute.

6. DATA SHARING

Personal data may be shared with third parties only to the extent necessary for order fulfillment or as required by law:

* with courier services (for delivery);

* with payment platforms (e.g., Stripe, Paysera);

* with the website hosting platform (Hostinger);

* with the Lithuanian Assay Office, if required by legal acts;

* with government authorities, courts, or other bodies where legally required or upon lawful request.

Data is not transferred outside the European Union without the Buyer's consent.

7. BUYER'S RIGHTS

The Buyer has the following rights:

* to access their personal data;

* to request correction of inaccurate or outdated data;

* to request deletion of data where there is no legal basis for retention;

* to restrict data processing;

* to lodge a complaint with the State Data Protection Inspectorate.

To exercise these rights, the Buyer may contact: a.sotvaraite@gmail.com

8. COOKIES

The Online Store uses cookies for analytical purposes – to analyze user behavior and improve website performance. For this, the Google Analytics service is used, which may collect IP addresses, visit duration, page views, and other information.

Analytical cookies are set only with the user’s consent. A cookie banner is displayed on the website, allowing the user to choose whether to accept cookies.

Cookie preferences can be managed at any time via browser settings.

9. CHANGES TO THE PRIVACY POLICY

The Seller reserves the right to modify this Privacy Policy. Any updates become effective upon their publication on the Online Store. It is recommended to review this policy periodically.

---

Last updated: 2025-06-02