privacy policy

Privacy policy

The purpose of the privacy policy is to inform how data subjects' personal data are collected and processed, to explain how long they are stored, to whom they are provided, what rights data subjects have and where to apply for their implementation or other issues related to personal data processing.

Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Union (hereinafter - the Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the protection of personal data.

www.Skin 5.lt follows the following basic data management principles:

– personal data is collected only for clearly defined and legitimate purposes;

– personal data is processed only legally and fairly;

– personal data are constantly updated;

– personal data is stored safely and for no longer than the established purposes of data processing or legal acts require;

- personal data is processed only by the Seller's employees who have been granted such a right according to their work functions or by duly authorized data processors.

  1. CONCEPTS

1.1. Data controller - www.Skin5.lt (hereinafter - the Seller), individual activity number 872156 , registration address Šeimyniškių st. 21A LT-09236 Vilnius.

1.2. Data subject - any natural person whose data is processed by the Seller. The Data Controller collects only those data of the data subject that are necessary for the performance of the Seller's activities and/or visiting, using, browsing the Seller's websites, Facebook, Instagram pages, etc. (hereinafter referred to as the Website). The seller ensures that the collected and processed personal data will be secure and will be used only for a specific purpose.

1.3. Personal data - any information directly or indirectly related to a data subject whose identity is known or can be directly or indirectly determined using the relevant data. Processing of personal data is any operation performed on personal data (including collection, recording, storage, editing, modification, granting of access, submission of requests, transmission, archiving, etc.).

1.4. Consent - any voluntary and knowingly given confirmation by which the data subject agrees to the processing of his personal data for a specific purpose.

1.5. Cookies – Small pieces of textual information are used on the Seller's website, which are automatically created when browsing the website and are stored on the computer or other device used by the data subject (website visitor). Cookies are used with the purpose of improving the browsing experience of website visitors, analyzing website visitor traffic and behavior on the website.

  1. SOURCES OF PERSONAL DATA

2.1. Personal data is provided by the data subject himself. The data subject applies to the Seller, uses the services provided by the Seller, purchases goods and/or services, leaves comments, asks questions, subscribes to newsletters, requests information from the Seller, etc.

2.2. Personal data is obtained when the data subject visits the Seller's website. The data subject fills in the forms therein or leaves his contact details etc. for any reason.

2.3. Personal data is obtained from other sources. Data is obtained from other institutions or companies, publicly available registers, etc.

  1. PROCESSING OF PERSONAL DATA

3.1. By submitting personal data to the Seller, the data subject agrees that the Seller will use the collected data to fulfill its obligations to the data subject, providing services that the data subject expects.

3.2. The Seller processes personal data for the following purposes:

3.2.1. Ensuring and continuity of the seller's activities. For this purpose, the following data is processed:

✓ For the purpose of concluding and executing contracts, personal data of suppliers (natural persons) may be processed: name(s), surname(s), personal identification number or date of birth, place of residence (address), telephone number, e-mail address, workplace, responsibilities, the bank current account and the bank where this account is located, the date, amount, currency and other data provided by the person himself, which the Seller receives in accordance with legislation in the course of the Seller's activities and/or which the Seller is required to handle by law and/or other legislation. For example data contained in the business certificate (type of activity, group, code, name, periods of activity performance, date of issue, amount), individual activity certificate number, data or data subject is a VAT payer, etc. data required for the proper performance of the obligations set forth in the contract and/or legal acts.

✓ In order to sell the products sold by the Seller, personal data of customers (natural persons) may be processed: first name(s), last name(s), date of birth, phone number, e-mail address, place of residence (address).

3.2.2. Administration of inquiries, comments and complaints. For this purpose, the following data is processed:

✓ Name(s), surname(s) and/or username, e-mail address, phone number, address, subject of message, comment, feedback or complaint, text of message, comment, feedback or complaint.

3.2.3. Sale of gift vouchers. For this purpose, the following data is processed:

✓ First name(s), last name(s), value of the gift certificate, first name(s), surname(s) of the purchaser of the gift certificate, date of sale, number of the gift certificate, email address, phone number, expiration date of the gift certificate , billing details, coupon recipient name.

3.2.4. Execution of games, contests. For this purpose, the following data is processed:

✓ Name(s), last name(s) and/or username, phone number, e-mail address, data on a person's skin condition, type.

3.2.5. Electronic commerce. For this purpose, the following data is processed:

✓ Name(s), last name(s), date of birth, purchase history, delivery address, residential address, phone number, email address, product/service payment details.

3.2.6. Ensuring the quality of telephone consultations about the services provided by the Seller, improving the quality of customer service, controlling that information is provided in a qualified and prompt manner (recording of telephone conversations). For this purpose, the following data is processed:

✓ Recording of the telephone conversation, phone number from which and to which the call is made, date of the telephone conversation, duration of the telephone conversation.

3.2.7. Direct marketing. For this purpose, the following data is processed:

✓ Name(s), surname(s), date of birth, residential address, e-mail address, telephone number.

3.2.8. For the purpose of ensuring the security of the seller's employees, other data subjects and property (video surveillance). For this purpose, the following data is processed:

✓ Image image. Video surveillance systems do not use facial recognition and/or analysis technologies, the video data captured by them are not grouped or profiled according to a specific data subject (person). The data subject is informed about the ongoing video surveillance by means of information signs with the video camera symbol and the Seller's details, which are provided before entering the monitored territory and/or room. The surveillance field of video cameras does not include premises where the data subject expects absolute protection of personal data.

3.2.9. For other purposes for which the Seller has the right to process the data subject's personal data, when the data subject has expressed his consent, when the data needs to be processed due to the Seller's legitimate interest, or when the Seller is required to process the data by relevant legal acts.

  1. USE OF COOKIES

4.1. The seller uses cookies on the website with the aim of improving and improving the experience of buyers and website visitors.

4.2. The following types of cookies may be used on the Seller's website:

4.2.1. Technical (necessary) cookies - help the website visitor to display the website and its content, help ensure the functionality of the website, create an account, log in to the account and process your orders. Technical cookies are necessary for the proper functionality of the website and their use does not require the consent of the website visitor.

4.2.2. Functional cookies - used to help the website visitor use the Seller's website, to remember choices and preferences made during browsing. Functional cookies are not necessary for the website to be fully functional, but they add functionality and improve your experience of using the Seller's website.

4.2.3. Analytical cookies - used to obtain information about how website visitors use the Seller's website. This is necessary so that we can optimize and improve the Seller's website. With the help of analytical cookies, we can collect data about the web pages you have viewed, which pages you came from, which e-mails you sent. the emails you opened and responded to and information about the date and time. This also means that we may use information about you and how you use this website, such as frequency of visits, number of clicks on a particular page, search terms used, etc.

4.2.4. Commercial (targeted or advertising) cookies - used to provide personalized advertising to the visitor of the Seller's website. This is called "re-marketing" which is based on browsing activities such as the products and/or services you search for, view.

4.3. The Seller's employees, who are responsible for analyzing this data and improving the website, have access to statistical data about visitors to the Seller's website.

4.4. The Seller's partners who provide content management tools for the Seller's website may also have access to the technical records.

4.5. The data collected by cookies are stored at the Seller no longer than is necessary to achieve the purposes of data processing or no longer than is required by the data subjects and/or provided for by legal acts.

4.6. You can find more detailed information about cookies at: AllAboutCookies.org .

4.7. If you do not agree that we use cookies, you have the opportunity to change the settings of your internet browser and control the amount of cookies. Helpful links on how to opt out of cookies can be found below:

  1. USE OF SOCIAL NETWORKS

5.1. All information you submit via social media (including messages, use of the Like and Follow boxes, and other communications) is controlled by the operator of the relevant social network.

5.2. Currently, our Seller has an account on the social network Facebook, whose privacy policy is available at https://www.facebook.com/privacy/explanation ;

5.3. Currently, our Seller has an account on the Instagram social network, whose privacy policy is available at https://help.instagram.com/402411646841720 ;

5.4. We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

  1. SENDING NEWSLETTERS

6.1. The Seller uses Klaviyo services of the third party for sending newsletters. The third party Klaviyo only uses the e-mail address of the recipient of the newsletter for the successful sending of newsletters. postal address. Klaviyo's privacy policy is available at:

6.2. You can opt out of the newsletters sent by clicking the "Unsubscribe" button at the bottom of each email you receive, by replying to the received email or directly by e-mail. after contacting the Seller by mail and expressing the desire to no longer receive newsletters sent by the Seller.

  1. PROVISION OF PERSONAL DATA

7.1. The seller undertakes to observe the duty of confidentiality towards the data subjects. Personal data may be disclosed to third parties only if it is necessary to conclude and execute a contract for the benefit of the data subject, or for other legitimate reasons.

7.2. The Seller may submit personal data to its data processors, who provide services to the Seller and process personal data on behalf of the Seller. Data processors have the right to process personal data only in accordance with the Seller's instructions and only to the extent that it is necessary in order to properly fulfill the obligations set out in the contract. The seller uses only those data processors who sufficiently ensure that appropriate technical and organizational measures will be implemented in such a way that the data processing meets the requirements of the Regulation and ensures the protection of the data subject's rights.

7.3. The seller can also provide personal data in response to requests from the court or state authorities to the extent necessary for the proper execution of valid legal acts and instructions of state authorities.

7.4. The seller guarantees that personal data will not be sold or rented to third parties.

  1. PROCESSING OF PERSONAL DATA OF MINORS

8.1. Persons under the age of 14 may not submit any personal data through the Seller's website. If a person is younger than 14 years of age, in order to use the Seller's services, before providing personal information, it is mandatory to provide the written consent of one of the representatives (father, mother, guardian) regarding the processing of personal data.

  1. PERSONAL DATA STORAGE PERIOD

9.1. Personal data collected by the Seller are stored in printed documents and/or in the Seller's information systems. Personal data is processed no longer than is necessary to achieve the purposes of data processing or no longer than is required by the data subjects and/or provided for by legal acts.

9.2. Although the data subject may terminate the contract and refuse the Seller's services, the Seller must continue to store the data subject's data due to possible future demands or legal claims until the data storage terms expire.

  1. RIGHTS OF THE DATA SUBJECT

10.1. The right to receive information about data processing.

10.2. The right to access the processed data.

10.3. The right to demand rectification of data.

10.4. The right to request deletion of data ("Right to be forgotten"). This right does not apply if the personal data that is requested to be deleted is also processed on another legal basis, such as the processing is necessary for the performance of a contract or is the fulfillment of an obligation according to applicable legislation.

10.5. The right to restrict data processing.

10.6. The right to object to data processing.

10.7. Right to data portability. The right to data portability cannot adversely affect the rights and freedoms of others. The data subject does not have the right to data portability in relation to personal data that is processed manually in systematized files, such as paper files.

10.8. The right to request that a decision based solely on automated data processing, including profiling, not be applied.

10.9. The right to submit a complaint regarding the processing of personal data to the State Data Protection Inspectorate.

  1. PROCEDURE FOR IMPLEMENTATION OF THE RIGHTS OF THE DATA SUBJECT

11.1. The data subject, for the exercise of his rights, can contact the Seller:

11.1.1. when submitting a written request in person, through a representative or by means of electronic communication - e-mail by mail: info@skin5.lt;

11.1.2. in writing - to the address: Šeimyniškių st. 21A-4, LT-09236 Vilnius.

11.2. In order to protect data from illegal disclosure, the Seller, upon receiving a request from a data subject to provide data or exercise other rights, must verify the identity of the data subject.

11.3. The seller's response to the data subject is given no later than one month from the date of receipt of the data subject's request, taking into account the specific circumstances of personal data processing. This period may be extended by another two months if necessary, depending on the complexity and number of requests.

  1. RESPONSIBILITY OF THE DATA SUBJECT

12.1. The data subject has:

12.1.1. inform the Seller about changes in the provided information and data. It is important for the seller to have correct and valid data subject information;

12.1.2. to provide the necessary information so that, at the request of the data subject, the Seller can identify the data subject and make sure that he is really communicating or cooperating with a specific data subject (provide a document confirming the identity of the person or in accordance with the procedure established by legal acts or electronic means of communication that would allow the proper identification of the data subject). This is necessary for data protection of the data subject and other persons, so that the disclosed information about the data subject is provided only to the data subject, without violating the rights of other persons.

  1. FINAL PROVISIONS

13.1. By transferring personal data to the Seller, the data subject accepts this Privacy Policy, understands its provisions and agrees to comply with it.

13.2. In the course of development and improvement of the Seller's activities, the Seller has the right to unilaterally change this Privacy Policy at any time. The seller has the right to unilaterally, partially or completely change the Privacy Policy by announcing it on the website skin5.lt.

13.3. Additions or changes to the privacy policy take effect from the day they are published, that is, from the day they are placed on the website skin5.lt