Privacy Policy
-
1. General Provisions
1.1. MB ALDA Luxe (hereinafter referred to as the “Company”) respects the privacy rights of all its service purchasers and potential clients (those who tried the services but did not become clients), and is committed to protecting the personal data submitted and received. The Company also ensures the rights of clients as data subjects.
1.2. This privacy policy governs the main principles and procedures for the collection, processing, and storage of the Company’s clients’ personal data.
1.3. By using the Website, ordering, or otherwise using the Company’s services and providing your personal data to the Company, you agree to the provisions of this Privacy Policy. Clients are deemed to be familiar with the Privacy Policy when, during registration on the Website, they tick the box indicating agreement with the Company’s privacy policy. The privacy policy can be reviewed again at any time on the Website via the appropriate link.
1.4. When processing the Client’s personal data, we comply with all applicable laws, including those of the EU, the Law on Legal Protection of Personal Data of the Republic of Lithuania (ADTAĮ), and other relevant legal acts regulating personal data protection.
2. Definitions
2.1. Personal data – any information about a natural person whose identity is identified or can be identified (data subject); a person whose identity can be determined, directly or indirectly, particularly via an identifier such as a name, personal ID number, location data, online identifier, or through physical, physiological, genetic, mental, economic, cultural, or social identity features.
2.2. Data subject – a natural person, the Company’s client (including Website visitors), whose personal data is collected by the Company.
2.3. Data subject’s consent – any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, agree to the processing of personal data related to them.
2.4. Data processing – any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, sorting, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
2.5. Data processor – a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller.
2.6. Data controller – MB ALDA Luxe, a company established and operating under the laws of the Republic of Lithuania, code 306988874, registered in Vilnius, Republic of Lithuania, whose data is collected and stored in the Register of Legal Entities.
2.7. Direct marketing – activities aimed at contacting the Client by mail, phone, or other direct means to offer goods or services and/or inquire about their opinion regarding the offered goods or services, including by automated means.
3. Use of Cookies
3.1. What is a cookie? – Small files sent to the user’s web browser and placed on their devices upon first visiting the website. These are later used to identify the user's computer and simplify access to the website and its content, ensuring the best user experience.
3.2. These cookies are used on the Website and in related Company systems to properly and effectively serve the Client.
3.3. To ensure a more convenient and efficient browsing experience and provide useful offers, we use the following cookies: PHPSESSID (session data), "CookieInfoScript" (cookie consent), _gat, _ga, _git, __utma, __utmb, __utmc, __utmt, __utmz (Google Analytics), datr, fr, sb, locale, reg_ext_ref, reg_fb_gate, reg_fb_ref (Facebook Pixel), and "GPS", "PREF", "VISITOR_INFO1_LIVE", "YSC" (YouTube video streaming cookies).
3.4. Client's right to refuse cookies – Clients may delete or block some or all cookies on their devices by adjusting browser settings. More information can be found on the browser provider’s website. Note that doing so may limit or disable some Website functions. The Client understands that third-party plugins (e.g., partners, analytics, communication systems) may also use cookies. The Website owner is not responsible for third-party cookie usage or privacy practices; users are encouraged to review each separately.
4. What Personal Data We Collect
4.1. The Company collects and processes personal data you provide when using or ordering services via the Website or by other means: name, surname, personal ID code (optional), address, email, phone number, and other data related to the service order. You provide this data voluntarily when registering or managing services.
4.2. The Client’s personal data is stored for the duration of cooperation (service provision) and for 10 (ten) years thereafter, unless a shorter period is justified legally.
5. Purpose and Method of Personal Data Processing
5.1. The Company processes Client data lawfully, fairly, and transparently.
5.2. The personal data specified above is processed for order processing and administration, accounting, communication related to contractual obligations, and (with prior consent) for direct marketing purposes.
5.3. We ensure that personal data is processed for legitimate purposes, is adequate, relevant, accurate, and, where necessary, updated, and stored securely to prevent unauthorized access, accidental loss, destruction, or damage (principle of integrity and confidentiality).
6. Data Subject Rights
6.1. Clients have the right to withdraw their consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal. Consent withdrawal must be as easy as giving it.
6.2. You have the right to access, correct inaccurate data, and supplement incomplete data.
6.3. Clients have the right to request data erasure if the data is no longer needed, consent is withdrawn, data is unlawfully processed, or on other legal grounds; to restrict processing; to receive their personal data in a structured, commonly used, and machine-readable format; to request the transfer of data to another controller; or to object to data processing (e.g., for direct marketing).
7. Direct Marketing Data Processing
7.1. The Company contacts Clients only with prior consent, under the Law on Electronic Communications, the Law on Legal Protection of Personal Data, and GDPR. We may send newsletters or request service feedback via email or phone.
7.2. For direct marketing, we process: name, email, phone number.
7.3. Personal data is stored for direct marketing purposes until the Client unsubscribes (a link is provided in every message).
8. Disclosure of Personal Data
8.1. Only employees with a duty to do so can access Client data, and only after committing to confidentiality.
8.2. The Company may disclose Client data to data processors (service providers), law enforcement (when legally justified), and third parties with the Client’s consent. These processors may only process data as instructed by the Company.
8.3. Personal data may also be disclosed in response to lawful requests from state authorities or courts, after verifying the legitimacy of such requests.
