GENERAL INFORMATION
Data Controller – AUTENT SHIATSU SPA, UAB BFC KOSMETIKA ensures the confidentiality of the Client. The data provided by the Client during the purchase is used only for the smooth execution of the service provision Legal basis for data processing. This Privacy Policy provides information about the processing of personal data – how we collect, process, and protect your personal data. We understand the importance of personal data protection, therefore we respect the privacy of our Clients and protect personal data.
E-commerce execution
Consent and order fulfillment.
Name, surname, email address, mobile phone number, payment method, payment card holder details, payment card number, card expiry date, delivery address, purchased goods, their price, date and time of purchase.
Payments in the online store are processed using the makecommerce.lt platform, which is managed by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475), therefore your personal information required for payment execution and confirmation will be transferred to Maksekeskus AS.
What rights does the Customer have and how can they exercise them?
Execution of the contract, compliance with legal requirements.
You have the right to access your personal data and how they are processed, to request correction, completion or destruction of the personal data provided, as well as to suspend their processing (withdraw your consent). You also have the right to request that the personal data controller restrict the processing of personal data, the right to data portability, to file a complaint with the State Data Protection Inspectorate and to object to the processing of the personal data provided.
How long do we store personal data?
Execution of the contract, compliance with legal requirements.
We store personal data for no longer than is required for the purposes of data processing or as provided for by law, if a longer retention period is provided for in law. Personal data may be stored for a longer period than specified, if required by law or when necessary for the company to defend itself against claims, demands or lawsuits brought against it, as well as when personal data is required for an investigation or as evidence in civil, administrative or criminal proceedings.