Extra Discounts on Orders Over €20 – Automatically Applied at Checkout | Free shipping on orders over €30

PRIVACY POLICY

FOR THE ONLINE STORE WWW.POPINK.COM

1. General Provisions

1.1. This Privacy Policy for the online store www.popink.com (hereinafter referred to as the "Privacy Policy") sets forth the conditions for the processing of personal data of customers who use the online store at www.popink.com (hereinafter referred to as "Popink Store"). This Privacy Policy applies when a customer (hereinafter referred to as the "Buyer") selects, orders, and purchases products offered in the Popink Store or uses other services provided by the Popink Store.

1.2. By registering on the website www.popink.com, the Buyer submits their personal data to POPINK, UAB (legal entity code 306701616; registered office at Lyglaukių g. 10B-2, Vilnius) (hereinafter referred to as the "Company") and, by agreeing to this Policy, grants the Company the right to process this data in accordance with the scope, methods, and purposes specified in this Privacy Policy.

1.3. If the Buyer uses the services of the Popink Store, it is considered that they agree to the processing of their personal data and confirm that all provided information and personal data are accurate and truthful.

1.4. The Buyer's personal data will be used to identify the Buyer, verify that the Buyer and the person to whom the goods are delivered are capable, process the sale and delivery of goods, issue accounting documents, return overpayments and/or funds for returned goods, manage debts, fulfill other obligations arising from the purchase-sale agreement, and ensure the Buyer can use other services of the Popink Store.

1.5. If the Buyer does not agree with this Policy, the Company cannot provide the Buyer with the opportunity to use the Company's services, including selling goods.

1.6. The Company respects the Buyer's privacy, and therefore, the security of the Buyer's personal data is one of the Company's priorities. The Company takes all necessary organizational and technical measures to ensure the protection of the Buyer's personal data and to ensure that the processing of the Buyer's personal data complies with the requirements of applicable laws.

1.7. The Company reserves the right to change this Privacy Policy. The Buyer must review the updated version of the Privacy Policy before placing an order; otherwise, the purchase agreement will not be concluded. Changes to the Privacy Policy apply only to new orders and do not affect orders already placed but not yet fulfilled.

2. Processed Personal Data

2.1. To use the Popink Store and purchase products offered there, the Buyer must fill out a registration form in the Popink Store system. The registration form must include the following personal data of the Buyer: name, surname, email address, delivery address, phone number, and other information necessary for product delivery. If the authorized representative of a legal entity is filling out the form, the legal entity's name must be provided instead of the Buyer's name.

2.2. The Buyer is responsible for ensuring that the data provided in the registration form is accurate, correct, and complete. If any changes occur in the Buyer's registration details, they must update them without delay. The Company is not and will not be responsible for any damages resulting from the Buyer providing inaccurate, incorrect, and/or incomplete personal data, or for failing to update the data after they have changed. The Buyer has the right to change, update, or delete their registration data at any time.

2.3. The legal basis for processing personal data is the Buyer's consent to use the Company's services under the terms set out in the online store's rules at www.popink.com.

2.4. The term for processing personal data is the entire period during which the Buyer uses the Company's services. The Company has the right to store the Buyer's consent and all related evidence for a longer period if necessary to defend the Company from claims, complaints, or lawsuits.

2.5. The Buyer's personal data will be processed for direct marketing purposes only with the Buyer's consent.

3. Profiling of Personal Data in Service Administration

3.1. In administering the services provided by the Company and achieving the objectives set out in the rules of the online store at www.popink.com, the Company has the right to use automated analysis of personal data (including the Buyer's order data) and automated decision-making, including profiling of the Buyer. The Company has the right to group and analyze the Buyer's data based on the products purchased by the Buyer and/or other characteristics relevant to the Buyer (e.g., name, location, etc.). For example, the Company may use the Buyer's purchase data and profiling to correct operational errors, such as identifying incorrect pricing or discounts applied to the Buyer, and correcting any mistakes (e.g., compensating for price differences).

4. Transfer of Personal Data to Third Parties

4.1. The Company has the right to transfer the Buyer's personal data to third parties processing data on behalf of the Company, helping the Company provide and administer its services, and offering services related to the administration of the Buyer's inquiry. Such third parties may include database software providers, database management service providers, data center and hosting service providers, direct marketing service providers, market research or business analytics service providers, and delivery service providers, among others. In each case, the Company will provide only the necessary data to execute the specific task or service. The third-party data processors can process the Buyer's personal data only according to the Company's instructions and cannot use it for other purposes or transfer it to other parties without the Company's consent. Moreover, they are required to ensure the security of the Buyer's data in compliance with applicable laws and written agreements with the Company.

4.2. Payments in the online store are processed using the makecommerce.lt platform, which is operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no. 12268475). Therefore, your personal information necessary for payment processing and confirmation will be transferred to Maksekeskus AS.

4.3. Data may also be provided to competent authorities or law enforcement agencies, such as the police or regulatory bodies, but only upon request and only when required by applicable laws or in cases specified by law, to ensure the Company's rights, the safety of its customers, employees, and resources, or to assert, present, or defend legal claims.

5. Buyer's Rights Related to the Processing of Personal Data

5.1. Right to Access Personal Data: The Buyer has the right to obtain confirmation from the Company as to whether the Company processes their personal data, and to access the personal data held by the Company, along with information about the purposes of data processing, the categories of data processed, the recipients of the data, the retention period, the sources of data, automated decision-making, including profiling, and its significance and consequences for the Buyer.

5.2. Right to Correct Data: If the Buyer's registration data provided to the Company has changed, or if the Buyer believes the information held by the Company is inaccurate or incorrect, the Buyer has the right to request that the information be corrected, updated, or rectified.

5.3. Right to Withdraw Consent: In cases where the Buyer's data is processed based on consent, the Buyer has the right to withdraw consent at any time, and the data processing based on such consent will cease. In certain cases, this may mean that the Company will no longer be able to provide the Buyer with the opportunity to continue using the services.

5.4. Right to Object: The Buyer has the right to object to the processing of their personal data if it is based on the Company's legitimate interests. However, depending on the goals of the Company's services and the balance of legitimate interests between the Buyer (as the data subject) and the Company (as the data controller), the Buyer's objection may result in the Company being unable to provide the Buyer with further access to services based on the legitimate interests of the Company.

5.5. Right to Deletion (Right to Be Forgotten): Under certain conditions specified in applicable data protection laws (e.g., when personal data is processed unlawfully or when the basis for processing has ceased), the Buyer has the right to request the deletion of their personal data.

5.6. The Buyer's registration data will be deleted without the Buyer's separate request, and other data will either be deleted or anonymized securely if the Buyer ceases to use the Company's services.

5.7. The Buyer should send all inquiries and requests to the Company via the contact details provided in the "Contact" section of the online store.

6. Final Provisions

6.1. This Privacy Policy is governed by the laws of the Republic of Lithuania.

6.2. The legal relationships arising from this Privacy Policy are governed by the laws of the Republic of Lithuania.

6.3. In case of damage, the responsible party shall compensate the other party for direct and indirect losses in accordance with the laws of the Republic of Lithuania.

6.4. Any disputes arising from the execution of this Privacy Policy will be resolved through negotiations. If an agreement is not reached, disputes will be settled in accordance with the laws of the Republic of Lithuania.

6.5. The Buyer has the option to resolve disputes with the Company without going to court. The Buyer must first contact the Company in writing and, if the Company does not respond to the complaint or claim within 14 calendar days, or if the complaint is not resolved to the Buyer's satisfaction, the Buyer may submit the complaint to a non-judicial dispute resolution body, i.e., the State Consumer Rights Protection Authority (Vilniaus g. 25, 01402 Vilnius, email: tarnyba@vvtat.lt, phone: +370 52 626 751, website: www.vvtat.lt), or its territorial units, or complete the complaint form via the European Commission’s ODR platform http://ec.europa.eu/odr/.