1.1. These Rules for the Processing of Personal Data (hereinafter – “Rules”) establish the principles and procedures for the collection, processing and storage of personal data of a purchaser or visitor who registers on the website www.sveikasesu.lt (hereinafter – “Website”). Any visitor who submits correct personal data in the forms on the Website shall be considered a Registered Visitor.
1.2. These Rules are prepared in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts.
1.3. The personal data controller is MB Sveikasesu (hereinafter – “Data Controller”). The Data Controller is responsible for lawful collection, processing and storage of personal data.
2.1. The Data Controller confirms that personal data is collected for the purposes of fulfilling online purchases, customer service, and direct marketing, and is processed in accordance with the principles of fairness, transparency, lawfulness, proportionality and security.
2.2. Personal data provided by the Registered Visitor on the Website are collected and used only in accordance with these Rules and only for the purposes specified herein.
2.3. When registering, the Buyer must provide accurate and complete personal data. By registering, the Registered Visitor gives consent to the processing of their personal data for the specified purposes. If the Registered Visitor objects to processing (following the procedure in Section 3.1), the Data Controller will not process personal data for marketing purposes.
2.4. Personal data collected and processed by the Data Controller may include:
Name and surname
Address
Telephone number
Email address
Purchase history
Payment and order information
Other data submitted during registration or ordering
Personal data is processed for the following purposes:
2.4.1. To process and fulfil orders
2.4.2. To issue financial and accounting documents
2.4.3. To resolve issues related to order delivery or quality
2.4.4. For direct marketing (only with consent)
2.4.5. To fulfil contractual obligations between the Buyer and the Seller
2.5. The Data Controller may use anonymised statistical data not linked to specific individuals (e.g., product purchase statistics). Such data does not reveal the identity of the Registered Visitor.
2.6. All information about processed personal data is confidential. The Data Controller may transfer personal data to third parties only:
2.6.1. For proper fulfilment of the purposes listed in section 2.4 (e.g., delivery service providers, payment providers, IT partners).
2.6.2. When required by Lithuanian law or competent authorities.
2.7. Personal data is stored no longer than necessary for the purposes for which it was collected. After the retention period expires, data is securely deleted.
2.8. Personal data is processed using appropriate organisational and technical measures to protect it from accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing.
2.9. Payments are processed through MakeCommerce.lt, operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no. 12268475). Therefore, personal data required for payment execution may be transferred to Maksekeskus AS.
3.1. By registering on the Website, the Registered Visitor agrees to their personal data being processed in accordance with these Rules. A Registered Visitor who wishes to object to data processing (e.g., for direct marketing) may notify the Data Controller by email:
📧 info@sveikasesu.lt
3.2. Upon receipt of such objection, the Data Controller will terminate processing for the disputed purposes and will notify the Registered Visitor.
3.3. The Registered Visitor has the right to update or correct the information provided in the registration form at any time.
3.4. The Registered Visitor has the right to request information about the processing of their personal data.
3.5. The Registered Visitor has the right to request the correction, deletion, restriction of processing, or suspension of processing of inaccurate, incomplete, or incorrect personal data by contacting the Data Controller as described in Section 5.1.
4.1. The Data Controller may update or amend these Rules at any time by publishing an updated version on the Website.
4.2. Changes take effect from the moment they are published on the Website.
4.3. If the Registered Visitor does not agree with the amendments, they have the right to object by contacting the Data Controller according to section 5.1. In the absence of objection, the Registered Visitor is deemed to accept the updated Rules.
5.1. All communication related to personal data processing must be submitted to the Data Controller at:
📧 info@sveikasesu.lt
5.2. The Data Controller will respond to the Registered Visitor no later than 20 working days from receipt of the request.
