Privacy Policy

In this privacy policy (hereinafter - Privacy Policy), we provide you with information on how MB ST Home, legal entity code 307060259, registered office address Žirgo g. 2-40, 10221 Vilnius (hereinafter - Data Controller) processes your personal data in the https://kilimunamai.lt/ online store.

You can contact the Data Controller using the following contacts:

Tel.: +(370) 677 11954

Email: info@kilimunamai.lt

Address: Žirgo g. 2-40, 10221 Vilnius

1. What personal data of yours do we process?

· Purpose: Conclusion and execution of contracts with legal entities

o Processed personal data: Name, surname, date of birth, contact information, content of correspondence, other data contained in the contract.

o Legal basis: Legitimate interest to carry out activities.

o Storage period: 10 years after the expiration of the contract.

· Purpose: Conclusion and execution of contracts with natural persons

o Processed personal data: Name, surname, date of birth, address, phone number, email address.

o Legal basis: Contract.

o Storage period: 10 years after the expiration of the contract.

o We may transfer personal data to payment service providers.

· Purpose: Order delivery

o Processed personal data: Name, surname, phone number, email address, address, parcel locker information, parcel number.

o Legal basis: Contract.

o Storage period: 10 years after order delivery.

o We may transfer personal data to courier services, delivery service providers.

· Purpose: Payment refund

o Processed personal data: Name, surname, bank account number, other details.

o Legal basis: Contract, legal obligation.

o Storage period: 10 years after the payment order.

o We may transfer personal data to payment service providers.

· Purpose: Creation and administration of user accounts on the website

o Processed personal data: Name, surname, account name and password, phone number, email address, address.

o Legal basis: Contract.

o Storage period: 2 years after the date of the last login to the account.

· Purpose: Communication with website visitors

o Processed personal data: Name, surname, phone number, email address.

o Legal basis: Aim to take action at the request of the data subject before concluding a contract or legitimate interest to carry out activities and/or ensure quality.

o Storage period: 1 year after the date the request is resolved.

· Purpose: Direct marketing (newsletters, invitations to events, offering similar goods or services)

o Processed personal data: Name, surname, email, phone number.

o Legal basis: Consent or legitimate interest to offer similar goods/services to customers.

o Storage period: 2 years after receiving consent or after the person has purchased goods or services.

o We may transfer personal data for the newsletter sending solution.

· Purpose: Administration of social media accounts

o Processed personal data: Unique ID, IP address, device information.

o Legal basis: Consent or legitimate interest to communicate with customers.

o Storage period: As long as the social media visitor is a follower of the accounts.

o The information you provide to us through social media when visiting our accounts (including messages, use of "Like" fields, and other communication) is jointly controlled by us and the social media administrators, as joint controllers of personal data.

o We currently have the following social media accounts:

- "Facebook" - Kilimunamai, whose privacy notice is available at https://www.facebook.com/privacy/explanation

- "Instagram" - Kilimunamai, whose privacy notice is available at https://help.instagram.com/519522125107875

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

2. To whom may we transfer your personal data?

2.1. We may transfer information about you to our employees, intermediaries, service providers, such as companies performing debt administration or recovery, archiving service providers, individuals or subcontractors providing legal, marketing, or IT services, if reasonably necessary for the purposes stated in this Privacy Policy.

2.2. We may also disclose information about you if we are required to do so by law or to protect our rights or interests (including providing your personal data to third parties for the purpose of recovering your debts to us), as well as when intending to transfer the company's operations or part of its assets or reorganize the company, or during these processes, by disclosing your personal data to the (potential) acquirer of the operations or part thereof, and other participants in the reorganization.

3. How is your personal data processed?

3.1. Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation (hereinafter - GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts. The Data Controller, both when determining the means of personal data processing and during the data processing itself, implements appropriate technical and organizational data protection measures established by legal acts, intended to protect the processed personal data from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any other unlawful processing. Appropriate measures are determined taking into account the risks arising from the processing of personal data.

4. What are your rights?

4.1. Below is information about your rights related to the processing of your personal data by the Data Controller and the cases when you can exercise these rights. If you want more information about your rights or to exercise them, please contact us at the email address provided in this Privacy Policy.

· You can contact us at any time to inquire whether we are processing any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do this, submit a written request to us at the email address provided in this Privacy Policy. For the purpose of fulfilling your request, we may ask you to confirm your identity. When submitting such a request, adhere to the principles of fairness and reasonableness.

· If you have given us consent for the processing of your data, you can withdraw it at any time at the email address provided in this Privacy Policy.

· You have the right to ask us to correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.

· You have the right to ask us to erase your personal data. This right is exercised in the cases provided for in Article 17 of the GDPR.

· You have the right to ask us to restrict the processing of your personal data or not to process it.

· You have the right to data portability for data processed by automated means and which we have received from you with your consent or for the purpose of concluding a contract. If you exercise this right, we will transfer a copy of the data you provided at your request.

· You have the right, in accordance with the procedure established in Article 21 of the GDPR, to object to our use of your personal data.

5. How can you exercise your rights?

5.1. To exercise your rights, submit requests, complaints, or demands to us in writing using the contact details provided in this Privacy Policy.

5.2. We will respond to received requests, complaints, or demands in writing in accordance with the procedure and terms established by legal acts. We strive to provide you with information as quickly as possible,but no later than within 30 days from the receipt of your request.

5.3. If, upon receiving a request, complaint, or claim, we have doubts about the identity of the person making the request, we have the right to ask for the identity document of the person making the request.

6. Complaints

6.1. If you believe that your rights as a data subject are and/or may be violated, please contact us immediately via the email address provided in this Privacy Policy. We guarantee that upon receiving your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation, and later about the result. If the investigation results do not satisfy you, you can submit a complaint to the supervisory authority: in Lithuania – the State Data Protection Inspectorate (https://vdai.lrv.lt/), and a list of supervisory authorities in other EU member states can be found on the European Data Protection Board website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt.

7. Liability

7.1. You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you provided changes, you must immediately inform us about it via email. We will in no case be liable for damages incurred by you due to your provision of incorrect or incomplete personal data or your failure to inform us of changes to them.

Privacy Policy updated on February 19, 2025.

This Privacy Policy was created using the business document preparation tool Dokas. Dokas legal, MB owns all copyrights to the Privacy Policy, and grants MB ST Home the right to use the Privacy Policy in the https://kilimunamai.lt/ online store. Copying or otherwise using the Privacy Policy or any part thereof without the written consent of Dokas legal, MB is prohibited. All terms of the granted rights are discussed in Part 2 of the Dokas rules. Personal data is processed in accordance with the procedure specified in the Dokas privacy policy.