Tootekataloog

Privaatsuspoliitika

 UAB „ENIF GROUP“ PRIVACY POLICY

PREAMBLE

UAB „Enif Group“, company code 302328372, registered office at Gariūnų g. 68, LT-02300, Vilnius, Lithuania (hereinafter referred to as the Company) is the operator of the online store www.luminaris.lt.
The Company values the trust of every user of the online store in the Company, the online store it manages, and the goods sold and/or services provided through it. This trust is closely connected to the proper processing and protection of the user’s personal data. Therefore, this section of the online store’s website contains the Company’s Privacy Policy (hereinafter referred to as the Privacy Policy) provisions regulating the collection, use, processing, and other personal data processing activities related to the Company’s operations, as well as the related rights of users and obligations of the Company.
Please note that by using the online store website and services, the user agrees to the provisions of the Privacy Policy. If the user does not agree to comply with the Privacy Policy provisions, the user cannot continue using the Company’s online store website.
The Company reserves the right to unilaterally change the provisions of the Privacy Policy at any time at its discretion, giving prior notice to the users of the online store website. Any changes to the Privacy Policy shall take effect from the date of publication on the website. Therefore, we kindly ask you to read these Privacy Policy provisions each time before using the online store’s services. If, after reading the Privacy Policy provisions, you decide to continue using the online store’s services, you confirm your acceptance of them.
If the user has any questions related to their personal data, they may contact the Company’s Data Protection Officer directly by email: info@luminaris.lt
More detailed information about the Company and its contact details can be found in the online store’s “CONTACTS” section, as well as below in this document.
All actions performed with the user’s personal data are carried out in accordance with the applicable European Union and Lithuanian legislation, primarily the General Data Protection Regulation and the Lithuanian Personal Data Legal Protection Act.

MAIN TERMS

  • Controller – The Company, i.e., UAB „Enif Group“, company code 302328372, registered office at Gariūnų g. 68, LT-02300, Vilnius, Lithuania, determining the purposes and means of data processing.
  • Online store – The online store accessible at www.luminaris.lt
  • User – A natural person visiting the online store website and/or seeking to purchase goods sold by the Company and/or to receive services provided by the Company, and/or purchasing them.
  • Personal data – Any information relating to an identified or identifiable natural person.
  • Data recipient – A legal or natural person to whom the data controller provides personal data.
  • Online store account – An account for accessing the online store website created by active user actions according to the sequence of actions specified on the website, where the user’s personal data and order history are stored.
  • Cookie – A small text file sent to the device of each user who connects to the online store website and temporarily stored on that device.
  • Direct marketing – Activity aimed at offering goods or services directly to individuals by mail, telephone, or other direct means and/or requesting their opinions about the offered goods or services.
  • Company partner – A person supplying goods or services to the Company, with whom joint promotions or projects may be conducted.

METHODS OF COLLECTING PERSONAL DATA

The Company collects users’ personal data in three ways:

  • The user provides information about themselves;
  • Data related to the user are generated automatically when using the online store website;
  • Data about the user are obtained from third parties.

The online store user independently provides information to the Company in the following cases:

  • When creating an online store account and placing an order;
  • During any form of communication with the Company.

The second method involves automatic collection of data by the Company via cookies, based on the user’s consent to process their personal data when using the online store and its services.

The third method involves data obtained by the Company from third parties (e.g., Facebook, Inc., Google, Inc.), based on the user’s consent. The Company receives user image data and Facebook profile name from Facebook, Inc., and only user image data from Google, Inc.

PURPOSES OF PROCESSING PERSONAL DATA

The Company processes users’ personal data for the following purposes:

  • Execution of e-commerce activities via the online store;
  • Organization and execution of contests, promotions, and games;
  • Provision of services;
  • Direct marketing;
  • Assessment, improvement, and assurance of professional service quality, and resolution of potential or arising disputes with users (including audio recording).

The Company does not process users’ personal data for any purposes incompatible with the above.

PROCESSED PERSONAL DATA AND LEGAL BASES FOR PROCESSING

The Company, in its operations, processes the following personal data of users:

  • On the basis of contract conclusion and performance: User personal data such as name, personal identification number, surname, email address, phone number, delivery address, internet protocol (IP) address, bank account number, payment method for purchased goods, order history, residential address, cookies, income amount, passport number, marital status. These data are processed for the purpose of carrying out e-commerce on the Company’s online store website.

  • On the basis of user consent: User personal data such as name, surname, phone number, email address, IP address, video, image, cookies. These data are processed for the purposes of organizing and conducting contests, promotions, and games.

  • On the basis of contract conclusion and performance: User data such as name, surname, personal identification number, phone number, email address, work address, user complaints. These data are processed for the provision of services published on the Company’s online store website.

  • On the basis of user consent: User personal data such as name, surname, email address, city, purchase category, purchase amount, cookies, image data, Facebook profile name, residential address. These data are processed for direct marketing purposes.

  • On the basis of the Company’s legitimate interest: User personal data such as audio recording (call recording) data. These data are processed for the assessment, improvement, and assurance of professional service quality and for the resolution of potential or actual disputes with users.

The Company notes that it does not collect, process, or perform any other operations with user’s sensitive (special) personal information, such as religious or political beliefs, health, etc.

USER RIGHTS AND THEIR IMPLEMENTATION PROCEDURE

The Company ensures, observes, and respects the rights of users of the Company’s online store website:

  • The right to information, i.e., the right to be informed about the processing of their personal data by the Company;
  • The right to access information related to the user’s personal data processed by the Company;
  • The right to rectification of the user’s personal data if they are inaccurate or incomplete;
  • The right to be forgotten, when personal data are no longer necessary for the purposes for which they were collected or otherwise processed and/or the user withdraws consent on which processing is based and there is no other legal basis for processing, or the user objects to processing and there are no overriding legitimate grounds, or the data were processed unlawfully, or personal data must be deleted for compliance with a legal obligation under EU or member state law, or the data were collected in relation to the offer of information society services to a child;
  • The right to restrict processing, when the user contests the accuracy of data for a period enabling the Company to verify accuracy, or processing is unlawful and the user opposes erasure and requests restriction instead, or the Company no longer needs the data but they are required by the user for legal claims, or the user has objected to processing pending verification of whether the Company’s legitimate grounds override those of the user;
  • The right to object to processing, i.e., the user has the right, on grounds relating to their particular situation, to object at any time to processing of personal data when processing is carried out for public interest or in the exercise of official authority vested in the Company, including profiling, or is necessary for the legitimate interests of the Company or a third party, except where such interests are overridden by the user’s interests or fundamental rights and freedoms requiring data protection, especially where the user is a child, including profiling, or when data are processed for direct marketing purposes, including profiling related to direct marketing. The Company states that, upon the user’s exercise of the right to object, it will no longer process the data except for compelling legitimate grounds or for legal claims.
  • The right to data portability, i.e., the user has the right to receive personal data provided to the Company, when processing is based on consent or contract and is carried out by automated means. The user may request the Company to transmit their data directly to another controller, where technically feasible.
  • The right to withdraw consent for data processing, when processing is based on user consent.

The Company informs that the actions to implement the above rights will be carried out as soon as possible, but no later than 1 (one) month from the date of your request. If necessary, this period may be extended by two months depending on complexity and number of requests. In such a case, the Company will inform the user within 1 (one) month from receipt of the request, giving the reasons for the delay.

The Company notes that, without prejudice to other legal remedies, every user has the right to lodge a complaint with a supervisory authority, particularly in the EU member state of their habitual residence, place of work, or place of the alleged infringement if the user believes their data are processed unlawfully. In Lithuania, this authority is the State Data Protection Inspectorate, legal entity code 188607912, address A. Juozapavičiaus g.6, LT-09310 Vilnius, Lithuania.

If the user wishes to exercise the above rights or has questions about their implementation, please contact the Company.

PERSONAL DATA RETENTION PERIODS

Personal data retention periods, depending on the purpose of data processing, are as follows:

  • User personal data processed for e-commerce purposes are retained for 5 (five) years from the last use of the Company’s online store;
  • User data processed for contests, promotions, and games are retained for 5 (five) years from the last participation;
  • User data processed for the provision of services are retained for 5 (five) years from the last use of services;
  • User data processed for direct marketing are retained for 5 (five) years from the date consent is given for direct marketing;
  • Data processed for assessment, improvement, and assurance of service quality and dispute resolution are retained for 3 (three) years from the date of receipt.

The Company makes all reasonable efforts to protect user personal data during these periods. After the retention period expires, the Company destroys the user’s personal information.

PERSONAL DATA TRANSFER TO THIRD PARTIES AND DISCLOSURE

The Company uses reliable third parties established in Lithuania and other EU countries (and beyond), such as courier services, leasing companies, direct marketing companies, and server hosting providers.

To achieve the purposes identified in this Privacy Policy, the Company transfers user personal data to the above-mentioned third parties as necessary. Data are transferred only as much as is needed to fulfill their obligations and ensure the user’s legitimate interests.

The Company and each third party to whom data are transferred act on a separate agreement regulating data processing, implementing necessary technical and organizational security measures and other legal requirements.

The user must keep their online store account password and username confidential, as well as other personal data. The user must not disclose personal data about themselves or others to any third parties, and must promptly inform the Company of any identified breaches.

The Company aims to ensure confidentiality of user personal information and, under normal circumstances, will not disclose personal data to other recipients unless required for provision of services. If required by law, the Company must disclose information about the user to competent authorities.

PERSONAL DATA SECURITY

The Company is committed to the security and confidentiality of user data. To prevent unauthorized access or disclosure and to protect stored information, the Company has implemented appropriate technical and organizational security measures.

However, while the Company strives to implement suitable security measures, no system can guarantee absolute security at all times.

The user has the right to request the deletion of personal data by informing the Company at info@luminaris.lt

CHILDREN'S PERSONAL DATA AND PRIVACY

The Company’s online store and its services are intended for persons aged 16 and older, and the Company does not knowingly collect or process personal data of children under 16.

However, parents may provide consent if their child under 16 wishes to use the online store and its services.

If you learn that your child has provided personal information to the Company without your consent, please contact the Company.

DIRECT MARKETING

With clear user consent, the Company may send direct marketing messages via email and/or SMS.

The user may withdraw consent for direct marketing at any time. If the user no longer wishes their data to be used for direct marketing, they may:

  • Log into their account and uncheck the options for receiving news via email/SMS, then click “Update”;
  • Email info@luminaris.lt stating they do not wish to receive emails and/or SMS;
  • Unsubscribe via the link at the bottom of newsletters.
    Messages will only be discontinued for the email addresses and/or phone numbers specified by the user. The user may also object to the use of their data for direct marketing by informing the Company at info@luminaris.lt.

COOKIES

To provide full functionality of the online store, cookies may be stored on the user’s device with their consent. By clicking “I agree to the use of cookies”, the user consents; by clicking “I do not agree”, the user declines.

Cookies are used to transmit information over electronic networks. Other cookies may be used to gather statistical information, present personalized content, and store browsing history. The Company does not use these types of cookies, but some partners might. If the user suspects such cookies are used without their consent, they should contact the specific partner.

The user may withdraw cookie consent at any time by clicking “Withdraw cookie consent” or by changing browser settings; however, some website functions may not work properly.

EFFECTIVE DATE OF THE PRIVACY POLICY

This Privacy Policy is effective from March 18, 2023. Any changes will be published and visible on the Company’s online store website.

CONTACT DETAILS

UAB "Enif Group"
Company code: 302328372
Gariūnų g. 68, LT-02300, Vilnius
Email: info@luminaris.lt