PRIVACY POLICY

1. GENERAL PROVISIONS

1.1. We care about your privacy and the security of your personal data, which is why we have prepared this Privacy Policy to explain how we process and safeguard your personal data, ensure your rights, and provide additional information on data management.

1.2. In this Privacy Policy, "personal data" (hereinafter referred to as "Personal Data") means any information or set of information from which we can identify you directly or indirectly, such as your name, surname, email address, phone number, etc.

1.3. In processing your Personal Data, we adhere to the General Data Protection Regulation No. 2016/679 (EU) (hereinafter referred to as the GDPR) alongside the legal requirements of the Republic of Lithuania and instructions from controlling authorities.

1.4. The Privacy Policy applies when you visit our online store at skandiamo.lt (hereinafter referred to as the Website), engage with our social media accounts on Facebook, LinkedIn, and Instagram (hereinafter referred to as the Social Accounts), review information, order our goods and services, contact us by phone, email, express interest in our offers, make enquiries, etc.

1.5. The Website may contain links to external sites—either our business partners’ sites or sites promoting our products. Please note that these sites have their separate privacy policies and this Privacy Policy does not apply to them. Review the privacy policies of these sites before providing your Personal Data or engaging with their services.

1.6. By ordering goods from us or otherwise using the Website, visiting our Social Accounts, contacting us, or subscribing to our news, you acknowledge that you have read and agreed to the Privacy Policy's terms, purposes, methods, and procedures for using Personal Data. If you disagree with the Privacy Policy, you are not permitted to use the Website, Social Accounts, or contact us for product offers.

1.7. The Privacy Policy is subject to change, and we encourage you to visit the Website periodically to review the latest version.

2. WHO ARE WE?

2.1. The controller of your personal data is UAB "INTERJERO DIZAINAS", company code 302873262, address: Rukeliškių g. 29B-2, 10101 Vilnius, data collected and processed in the State Enterprise "Registrų centras" Register of Legal Entities (hereinafter referred to as the Company or we).

2.2. We manage the Website and Social Accounts, acting as a Personal Data Controller while offering and delivering goods and services, conducting the Company’s daily operations, or fulfilling legal obligations.

3. WHAT PERSONAL DATA DO WE PROCESS?

3.1. We process your Personal Data obtained in the following ways:

3.1.1. When you provide Personal Data to us by registering on the Website, ordering goods, entering contracts with us, contacting by email or phone, etc. ;

3.1.2. When we collect your Personal Data while you use the Website or Social Accounts, like your IP address, web page visit history, preferences, opened URL links, etc.

3.1.3. When we receive Personal Data from other parties, such as public registers, state or local authorities, partners delivering goods to you, other third-party providers, like payment institutions concerning processed payments, etc.

3.1.4. When your personal data is provided to us by your family or acquaintances with your consent, or by companies (e.g., employers), for instance, when they list your contact for goods collection or name you as a recipient or authorised person.

3.2. We process your Personal Data to offer and provide services to you, fulfil our contractual obligations, pursue legitimate interests for ourselves or third parties, and comply with legal instructions or duties.

3.3. When you provide Personal Data to us, you are responsible for its accuracy, completeness, and relevance. You must provide complete, detailed, and accurate information about yourself in the Website's registration/request forms. If you provide inaccurate, false, or misleading Personal Data, we reserve the right to cancel your registration, delete such data, or restrict your access to the Website and our services.

3.4. When you provide Personal Data about others, such as your relatives, you are responsible for its accuracy, completeness, and relevance, and for ensuring that they consent to providing their Personal Data to us. If you provide such data, we may ask you to confirm your right to do so, for example, when filling out product ordering or registration forms on the Website. If necessary, such as when an individual inquires about their Personal Data acquisition, we will identify you as the provider of that data.

3.5. We process your Personal Data for the following purposes and under these conditions:

PURPOSE OF PROCESSING PERSONAL DATA	PERSONAL DATA PROCESSED	TERMS OF PERSONAL DATA PROCESSING	LEGAL BASIS FOR PERSONAL DATA PROCESSING
Registration for the e-store and use of a registered user account.	Name, surname, email, password, phone number, address/delivery address, relationship with a legal entity (when goods are purchased by a legal entity), account visitation history, and other information provided during registration.	Throughout the usage of the account and for 5 years following the last account login. Personal data processed with consent is retained as mentioned above unless the individual withdraws their consent.	Consent of the data subject for such data processing (Article 6 of the GDPR) Processing of data is essential for the formation and execution of a contract (Article 6(a) of the GDPR). 1(b)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).
Selling goods and providing services, including placing bespoke orders and delivering goods.	Name, surname, email, phone number, address/delivery address, relationship with a legal entity (when goods are purchased by a legal entity), method of payment, account number, payment details, custom order information, shopping basket history, and other necessary order execution information.	During the contract/order duration and 10 years after the contract/order completion.	Data processing is essential for contract formation and performance (Article 6 of the GDPR). 1(b)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).
Execution of warranty commitments, handling of product quality issues.	Name, surname, email, phone number, address/delivery address, relationship with a legal entity (when goods are purchased by a legal entity), account number, payment details, custom order information, and information needed for warranty servicing.	During the warranty service/quality issue management period and for 5 years post the conclusion of warranty service/quality administration or last contact.	Data processing is essential for contract formation and performance (Article 6 of the GDPR). 1(b)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).
Sales of goods via instalments.	Name, surname, address, email, billing account number, payment details, payment confirmation, order details, and communication with the customer.	Personal data is stored for 10 years from the date of purchase on the website; accounting documents are retained for periods determined by law.	Data processing is essential for contract formation and performance (Article 6 of the GDPR). 1(b)); Processing is necessary to meet a legal requirement to which the controller is subject (Article 6(c) of the GDPR). 1(c)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).
Consultations regarding our products and services, as well as managing your inquiries.	Name, surname, email, phone number, affiliation with a legal entity (when making enquiries on behalf of a legal entity), address/delivery address (if needed for providing information), content of the inquiry and the response.	Throughout the consultation period and for 5 years following the consultation's completion or the last contact. Personal data processed with consent is retained as mentioned above unless the individual withdraws their consent.	Consent of the data subject for such data processing (Article 6 of the GDPR) Point 1(a) of the GDPR; Legitimate interests of the data controller or a third party (Article 6 GDPR). 1(f).
Formulating and executing agreements necessary for our operations, alongside other internal management activities.	Name, surname, personal identification number (if necessary), phone number, email, address, name of the represented legal entity, connection to the represented legal entity, bank account number, payment details, business registration number, and other information essential for collaboration.	Throughout the duration of service provision/collaboration and for 5 years afterwards, unless specified otherwise by Order No. V-100 issued by the Chief Archivist of the Republic of Lithuania on March 9, 2011. The Index of General Document Retention Periods approved by Order No. V-100 requires a longer retention period.	Data processing is essential for contract formation and performance (Article 6 of the GDPR). 1(b)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).
Execution of financial transactions, accounting, and debt management.	Name, surname, email, phone number, address, name of the represented legal entity, connection to the represented legal entity, bank account number, financial institution, payment details, debt information, and data provided by the company administrating the collection of payments and payment confirmations.	In accordance with the applicable legal regulations and Order No. V-100 issued by the Chief Archivist of the Republic of Lithuania on March 9, 2011. The Index of General Document Retention Periods approved by Order No. V-100; When data does not fit the aforementioned retention period — the contract's validity/cooperation duration and 10 years thereafter.	Data processing is essential for contract formation and performance (Article 6 of the GDPR). 1(b)); Processing is necessary to meet a legal requirement to which the controller is subject (Article 6(c) of the GDPR). 1(c)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).
Assessment and selection of candidates for the available positions.	Name, surname, email, phone number. Address, educational and professional background, CV contents, and any other information necessary for the candidate’s selection/assessment or provided by the candidate.	The duration of the selection process and an additional 3 months thereafter; If data is received for non-specific selection, it is retained for 3 months post-receipt. Personal data processed with consent is retained as mentioned above unless the individual withdraws their consent.	Consent of the data subject for such data processing (Article 6 of the GDPR) Point 1(a) of the GDPR; Legitimate interests of the data controller or a third party (Article 6 GDPR). 1(f).
Management, operation, and enhancement of electronic information delivery channels (website, social media accounts).	IP address, data collected via website cookies and settings, browser information, login date and time, mobile device model and manufacturer, mobile device operating system (iOS, Android), password usage details, and data collected through social media account integration.	Website data are retained as described in the "Cookies and other tracking technologies" section of this privacy policy; Website data not covered by cookie information are stored for no longer than 1 year from collection unless consent is withdrawn (where data are processed based on consent); Information on social media accounts is stored according to the conditions set by the network owner.	Consent of the data subject for such data processing (Article 6 of the GDPR) Point 1(a) of the GDPR; Legitimate interests of the data controller or a third party (Article 6 GDPR). 1(f).
Carrying out direct marketing initiatives.	Name, surname, email address, phone number.	Data processing occurs for 2 years following consent acquisition unless consent is withdrawn by the individual.	Consent of the data subject for such data processing (Article 6 of the GDPR) Point 1(a) of the GDPR; Legitimate interests of the data controller or a third party (Article 6 GDPR). 1(f).
Organising promotional contests, games, and promotions.	Name, surname, email address, phone number, details requested in the contest/promotion/game advertisement or form, social media account information, and messages shared with us by the account holder.	Data are retained for the entire duration of the game, promotion, or competition and for an additional year after they conclude. Personal data processed with consent is retained as mentioned above unless the individual withdraws their consent.	Consent of the data subject for such data processing (Article 6 of the GDPR) Point 1(a); Legitimate interests of the data controller (Article 6 GDPR). 1(f).
Resolution of disputes and complaints.	Name, connection to the represented legal entity, content of the claim or similar document, information/documents related to the dispute/claim.	For the entire duration of dispute/claim resolution and for 3 years following the conclusion of the out-of-court dispute/claim process, and for 10 years after judicial proceedings conclude.	Data processing is necessary for compliance with legal obligations imposed on the data controller (Article 6 GDPR). 1(c)); Legitimate interests of the controller or a third party (Article 6(f) of the GDPR). 1(f).

You have the right to object or revoke your consent for processing your data at any time, where the data processing is based on your consent.

3.6. We provide information about ourselves and our activities on social media accounts, and we may also host games and promotions there. In addition to our Privacy Policy, users of social media accounts are also bound by the privacy policies and terms of the social networks where these accounts are hosted. When you contact us through Social Accounts, we may view certain information from your account, depending on the privacy settings you have selected for your social network. If you share information while interacting with us on Social Accounts, this information may become public depending on your selected privacy settings (for instance, it may be displayed on our specific Social Account).

3.7. Occasionally, we might send you messages or call you regarding the order or sale of products. For example, we might notify you of order confirmations, deliveries, or changes in delivery details if we need to clarify the delivery location. Such notifications are essential for fulfilling orders correctly. These are not considered promotional messages.

3.8. You have the right to modify and update the information you have provided to us. Occasionally, such as when processing your orders, it is crucial that we have accurate and current information about you, so we may ask you from time to time to verify the accuracy of the information we hold.

4. HOW DO WE UTILISE YOUR PERSONAL DATA AND WHAT PRINCIPLES DO WE ADHERE TO?

4.1. We collect and process only the Personal Data necessary to achieve our specified purposes.

4.2. In processing your Personal Data, we:

4.2.1. Comply with the applicable legal requirements, including those of the GDPR;

4.2.2. Process your Personal Data in a lawful, fair, and transparent way;

4.2.3. Collect your Personal Data for specific, clear, and legitimate purposes and do not process it in ways incompatible with those purposes, except as permitted by law;

4.2.4. Take all reasonable steps to ensure that Personal Data which is inaccurate or incomplete, considering the purposes of its processing, is swiftly corrected, added, ceased from processing, or removed;

4.2.5. Maintain the data in a form that allows your identification no longer than necessary for the purposes for which the Personal Data is processed;

4.2.6. Do not share Personal Data with third parties and will not disclose it, except as detailed in the Privacy Policy or applicable legal requirements;

4.2.7. Ensure that your Personal Data is handled securely.

5. WHO DO WE SHARE YOUR PERSONAL DATA WITH AND WHEN?

5.1. We will only share your Personal Data as outlined in this Privacy Policy.

5.2. Your Personal Data may be shared with:

5.2.1. Our partners or advisors, such as auditors, lawyers, tax consultants, etc., as well as Personal Data processors we employ, including supplementary service providers, IT companies, advertising and marketing service providers, and accounting service providers. We demand data processors to safeguard, handle, and treat Personal Data as responsibly as we do, and only in line with our instructions.

5.2.2. To share your content on Social Media accounts, we relay data to the following social media platform operators: Facebook Ireland Ltd. (Ireland) and Facebook, Inc. (USA) (data is transferred securely by signing EU's standard contractual clauses for data transfer outside the EEA, as approved by the European Commission).

5.2.3. State or local government bodies, legal and pre-trial investigation agencies, courts, and other dispute resolution institutions, and other entities fulfilling functions assigned by law, as per the legal acts of the Republic of Lithuania. We provide these entities with mandatory information as required by law or specified by the entities themselves;

5.2.4. Other third parties, such as payment institutions, etc.;

5.2.5. If needed, to companies interested in purchasing or acquiring the Company's business, engaging in joint activities with us, or cooperating in other forms, as well as our established companies.

5.3. We predominantly process Personal Data within the EEA, yet in some instances, your Personal Data might be transferred outside the EEA. Your Personal Data is only transferred outside the EEA if:

5.3.1. It is transferred solely to our trusted partners, ensuring the provision of our services to you;

5.3.2. Agreements on data processing or provision have been signed with these partners, ensuring the security of your Personal Data.

5.3.3. A special permit has been obtained from the State Data Protection Inspectorate of the Republic of Lithuania to execute such transfers.

5.3.4. The European Union Commission has made a decision on the adequacy of the country where our partner is based, ensuring an adequate level of security; or

5.3.5. You have given your consent for your Personal Data to be transferred outside the EEA.

6. WHAT RIGHTS DO YOU HAVE?

6.1. As a data subject, you have the following rights concerning your Personal Data:

6.1.1. To be informed about the processing of your Personal Data (right to know).

6.1.2. To access your Personal Data and understand how it is processed (right of access).

6.1.3. To request the correction or addition of incomplete Personal Data, considering the purposes of their processing (right to rectification).

6.1.4. To request the deletion of your Personal Data or the halting of processing your Personal Data (except for storage) (right to erasure and right to be forgotten).

6.1.5. To request that we limit the processing of Personal Data on one of the legal grounds (right to restriction).

6.1.6. The right to data portability. This right will only be implemented if there are justifiable reasons and appropriate technical measures in place to ensure that transferring the requested Personal Data does not pose a security risk to other individuals' data.

6.1.7. To object to the processing of your personal data when we process it based on the legitimate interest of the Company or a third party, including profiling. If you object, we can only continue processing your Personal Data for compelling legitimate reasons that outweigh your interests, rights and freedoms, or for the establishment, exercise, or defence of legal claims.

6.1.8. Withdraw your consent for the processing of your Personal Data when it is processed or planned to be processed for direct marketing purposes, including profiling to the extent it relates to such direct marketing (based on the Personal Data you provide, profiling may be used to offer you individually tailored solutions and offers). You may withdraw your consent for the automated processing of personal data, including profiling, at any time or object to it.

6.2. If you do not wish for your personal data to be processed for direct marketing purposes, including profiling, you can refuse such processing without stating the reasons for your refusal. Simply send an email to info@skandiamo.lt or use another method specified in the message you received (such as clicking the relevant link in the newsletter).

6.3. We may decline to exercise the rights listed above, except for objections to processing your Personal Data for direct marketing purposes or in other cases where Personal Data is processed with your consent, if the GDPR provisions allow us to do so, or when required by law to ensure the prevention, investigation, and detection of crimes, breaches of official or professional ethics, or the protection of the rights and freedoms of the data subject, us, and others.

6.4. You can submit any request or instruction related to the processing of Personal Data to us in writing via email info@skandiamo.lt. When making such a request, we may ask you to fill out necessary forms to better understand your request and to provide identification documents or other information to verify your identity. If you submit a request via email, depending on its content, we may ask you to visit us in person or send a written request.

6.5. Upon receiving your request or instruction regarding the processing of Personal Data, we will respond within 1 month from the date of the request and will carry out the actions specified or inform you why we cannot do so. If necessary, this period may be extended by an additional 2 months, depending on the complexity and number of requests. In such cases, we will notify you of the extension within 1 month from receiving the request.

6.6. If you request the deletion of Personal Data, we will retain only copies of information necessary to protect our legitimate interests and those of others, comply with governmental obligations, resolve disputes, identify disruptions, or adhere to agreements you have with us.

7. WILL WE SEND YOU NEWS?

7.1. With your consent, we may use your Personal Data for direct marketing purposes to provide you with newsletters, offers and information about our goods or services that we think may interest you. We may also ask about the quality of the goods or services we provide.

7.2. News can be sent to the email address you provide. With your consent, we may enquire about the quality of our services via email and invite you to complete quality assessment surveys. Your contact details may be shared with our partners/processors who provide us with newsletter delivery or quality assessment services.

7.3. We will endeavour not to abuse the right you've given us to share news. After sending out newsletters, we may gather information about the recipients, such as which messages were opened and which links were clicked. This information is collected to offer you more relevant and tailored news.

7.4. Even if you have consented to the processing of Personal Data for direct marketing, you can easily withdraw this consent at any time for all or part of the processing activities. To do this, you can:

7.4.1. Inform us of your withdrawal using the method provided in electronic messages and/or offers (for example, by clicking the "unsubscribe" link in the newsletter); or

7.4.2. Send us a notice to the email address specified in this Privacy Policy. If you choose to withdraw your consent in this manner, we may need to confirm your identity.

7.5. Withdrawing consent does not automatically require us to delete your Personal Data or to provide you with details about the Personal Data we process. If you wish for these actions to be taken, please make a separate request.

8. HOW DO WE ORGANISE GAMES, DISCOUNTS, AND COMPETITIONS?

8.1. Participation in our announced games, discounts, or competitions is voluntary. To join a competition, game, or promotion announced by us, you must provide the information we specify, which includes personal data. Otherwise, you won't be able to participate in the game, competition, or promotion.

8.2. You are entitled to opt out of our games, competitions, and promotions, and withdraw your consent for the use of your personal data for these purposes at any time. This can be done by emailing us at info@skandiamo.lt or through alternative methods, such as clicking the relevant link in an email. Upon withdrawing your consent, you will be taken off the participant list for the game, promotion, or competition and will no longer be part of it.

8.3. If you're participating in our games, competitions, and promotions, we're entitled to use the contact information you've given to liaise with you, and/or to publish details about you as a winner on our Website, Social Media Accounts, or other channels specified in the event rules.

8.4. We may employ a program based on automated decision-making for processing registration or determining winners in our games, promotions, or competitions. This will be communicated in the rules of the game, promotion, or competition, or it will be evident from the links we provide. If you prefer not to be subject to automated decision-making, you will not be able to take part in the game, promotion, or competition.

9. HOW DO WE SAFEGUARD YOUR PERSONAL DATA?

9.1. Your personal data is handled with responsibility, securely maintained, and safeguarded from loss, unauthorised use, and alterations. We have set up both physical and technical measures to secure the information we gather from accidental or illicit destruction, damage, modification, loss, disclosure, as well as from any other unlawful processing. Personal data security measures are established by assessing the risks associated with processing personal data.

9.2. Our staff have committed in writing not to disclose or distribute your personal data to any unauthorised third parties.

10. HOW DO WE UTILISE COOKIES AND OTHER TRACKING TECHNOLOGIES?

10.1. Cookies are small text files storing information (typically a sequence of numbers and letters identifying the device, but may include other data as well) utilised by device browsers (e.g., Google Chrome, Internet Explorer, Firefox, Mozilla, Opera) according to their settings, saved on the hard drive. In this Privacy Policy, "cookies" refers to cookies and similar technologies, such as pixel tags. web beacons ("Web Beacons") network data collectors ("clear GIF"). The implementation of cookies ensures a more efficient and effective operation of the Website and improves compatibility with Social Accounts.

10.2. We utilise cookies to analyse information flow and user behaviour, to bolster trust and security, assure effective Website functioning, improve user experience, remember your preferences, personalise displayed content, and connect the Website with Social Accounts.

10.3. You can decide whether to accept cookies. If you disagree with cookies being stored in your browser, you can specify this in the cookie consent bar, adjust your browser settings, and disable cookies (all at once, individually, or in groups). To decline cookies on your mobile device, refer to the official instructions for that particular device. Please be aware that declining cookies might, in some cases, slow down browsing speeds, limit website functionality, or block access to certain sites. Further information can be found at http://www.AllAboutCookies.org or https://www.google.com/privacy_ads.html.

10.4. We may use essential cookies necessary for the website's operation, analytical cookies, functional cookies that analyse website visits, remember user preferences, and adjust them accordingly for enhanced functionality. We also use performance cookies, third-party cookies utilised by external parties, and advertising cookies to deliver tailored and general advertisements.

11. CONTACT US

11.1. If you have any questions regarding the information provided in this Privacy Policy, please contact us:

By email: info@skandiamo.lt

By phone: +370 644 11 141

11.2. If you would like to make a complaint about our Personal Data processing, please submit it in writing with as much detail as possible. We are committed to collaborating with you to swiftly resolve any issues.

11.3. If you believe your rights have been breached under GDPR, you may file a complaint with our supervisory authority, the State Data Protection Inspectorate. Further information and contact details can be found on the inspection website. We aim to amicably and promptly resolve all disputes, encouraging you to contact us first.

12. FINAL PROVISIONS

12.1. We may revise this Privacy Policy. We will inform you of any updates on the website by posting the revised policy or through other standard communication methods. Changes or additions to the Privacy Policy will take effect on the specified update date, unless otherwise stated.

12.2. By continuing to use the website, purchase goods from us, use our social accounts, or contact us following amendments to the Privacy Policy, you consent to the updated terms.

Last updated: 27th April 2022.