Rules for processing personal data

1. General provisions

1.1 These personal data processing rules (hereinafter referred to as the "Rules") regulate the basic principles and procedures for the collection, processing and storage of personal data of the purchaser of the website www.samuel.lt (hereinafter referred to as the "Website"), the visitor, who has entered his/her correct personal data in the form on the Website (hereinafter referred to as the "Registered Visitor").

1.2 These Rules have been drawn up in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts governing the collection, processing and storage of personal data.

1.3 According to these Terms and Conditions, the controller of personal data is CIZZY, MB (hereinafter referred to as the "Data Controller"). The Data Controller shall be liable for the collection, processing and storage of personal data in accordance with the law.

2. Collection, processing, storage of personal data

2.1 The Data Controller confirms that personal data is collected for direct sales and marketing purposes and processed in accordance with the principles of fairness, lawfulness and accuracy, as well as respect for the individual's right to privacy.

2.2 The Data Controller shall collect and automatically use the personal data of the Registered Visitor provided by the Registered Visitor when registering on the Website only in accordance with the procedures set out in these Terms and Conditions and for the purposes of direct marketing set out in these Terms and Conditions.

2.3 The Customer must provide complete and correct personal data at the time of registration in the e-shop. By registering, the Registered Visitor consents to the processing of the data provided by him/her for the stated purposes of data collection and use. In the event of the Registered Visitor's disagreement expressed in accordance with the procedure provided for in Clause 3.1 of these Terms and Conditions, the Data Controller shall not have the right to use this personal data (with the exception of the storage of personal data).

2.4 The Data Controller respects the right to privacy of each Registered Visitor. The Buyer's personal data (name, surname, address, telephone number, email address and other information provided in the e-shop registration form) is collected and processed in order to:

2.4.1. to process the Buyer's orders for goods;

2.4.2. issue financial documents;

2.4.3. to resolve problems with the provision or delivery of goods; 2.4.4. for direct marketing purposes; 2.4.5. to fulfil other contractual obligations.

2.5 The Data Controller may use data not directly related to the Registered Visitor's person for statistical purposes, i.e. data about the goods purchased. Such statistical data will be collected and processed in such a way as to prevent the disclosure of the identity of the Registered Visitor or other personally identifiable data.2.6 All information about the personal data processed is confidential. CIZZY reserves the right to pass on information to third parties:

2.6.1. for the purposes referred to in point 2.4 of this document;

2.6.2. in accordance with the procedure established by the laws of the Republic of Lithuania.

2.7 The personal data of the registered visitor shall be stored for no longer than required by the stated purposes of data processing. After the expiry of the data retention period, the personal data of the Registered Visitor shall be destroyed in accordance with the procedure established by the applicable legislation.

2.8 The personal data of the Registered Visitor shall be processed using secure organisational and technical measures to protect the personal data against accidental or unlawful destruction, alteration, disclosure, use or any other unlawful processing.

2.9 The e-shop processes payments using the makecommerce.lt platform, which is operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475), and therefore your personal information necessary for the execution and confirmation of the payment will be transmitted to Maksekeskus AS3. Registered visitor rights

3.1 By registering on the Website, the Registered Visitor confirms his/her consent to the processing and use of his/her personal data in accordance with the procedures set out in these Terms and Conditions. A registered visitor who does not wish his/her personal data to be processed and used for the purposes indicated has the right to object to the processing of his/her personal data by informing the Data Controller by e-mail: info@samuel.lt

3.2. Upon receipt of the Terms and Conditions

3.1., the Data Controller shall terminate the processing of personal data free of charge and shall inform the Registered Visitor thereof in accordance with the procedure set out in Clauses 5.1 and 5.2 of the Rules.

3.3 The Registered Visitor has the right to change and/or update the information provided in the registration form.

3.4. The registered visitor has the right to access the actions carried out in relation to the processing of his/her personal data.

3.5 A registered visitor shall have the right to request the correction, destruction or suspension of the processing of his/her personal data (except for the storage), if, after consulting his/her personal data, he/she finds that his/her personal data is incorrect, incomplete or inaccurate, by contacting the Data Controller in accordance with the procedure set out in Clause 5.1 of these Rules.

4. Modification of the Rules

4.1 The Data Controller shall have the right to amend these Terms and Conditions, in part or in full, by notifying the Website.

4.2 Amendments or modifications to the Rules shall come into force from the date of their publication on the Website.

4.3 If the Registered Visitor does not agree with the amendments or additions to the Terms and Conditions, he/she shall have the right to express his/her disagreement with the amended or added Terms and Conditions in accordance with the procedure set out in Clause 5.1 of these Terms and Conditions and for the purposes related to the processing of his/her personal data. In the absence of the Registered Visitor's disagreement, the Registered Visitor shall be deemed to have accepted the new version of the Terms and Conditions.

5. Final provisions

5.1 All notifications relating to the processing of personal data shall be made to the Data Controller by e-mail (info@samuel.lt).

5.2 The Data Controller shall reply in the same form in which the notification from the Registered Visitor was received, no later than 20 working days from the date of receipt of the personal referral document.