Privacy policy

  1. GENERAL PROVISIONS

Welcome to the Privacy Policy (hereinafter referred to as the "Privacy Policy") of the Online Shop www.qbuilds.lt/en (hereinafter referred to as the "Online Shop")! We are committed to ensuring the security of the data of every natural and legal entity (hereinafter referred to as "Data Subjects"). For this reason, we strive to apply a transparent, fair and lawful use of personal data, only for the purposes set out in this Privacy Policy.

Personal data is collected and processed in accordance with the following principles:

  • accurate, fair and lawful; 
  • for specified and explicit purposes;
  • only to the extent necessary for the performance of contractual obligations;
  • kept up to date;
  • kept in a form which permits identification of the Data Subject for no longer than is necessary;
  • maintaining confidentiality.

The Data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania, the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as "GDPR") and other legal acts regulating the processing and protection of Personal Data.

The Data Subject shall be deemed to have read and understood this Privacy Policy when he/she gives his/her consent to the processing of his/her Personal Data. If the Data Subject disagrees with any part of the Privacy Policy or with the Privacy Policy itself, he/she must not place an order and must not purchase goods from the Data Controller's Online Shop.

The Customer may place an order in the Online Shop without any registration.

UAB “Qbuild” acts as a Data Controller when conducting e-commerce.

The purpose of the Privacy Policy - to provide a natural or legal person with information on how Customer Personal Data is processed, stored, for what purposes and to what extent it is used.

  1. BASIC CONCEPTS

The brief definitions below will provide an introduction to the terms used in the Privacy Policy:

Company or Data Controller - UAB "Qbuild", legal entity code: 306632903, VAT payer code LT100016473415, registration address Savanorių pr. 178B, LT-03154 Vilnius, tel. no.: +370 669 44108, e-mail: info@qbuilds.lt.

Customer or Data Subject - any natural or legal entity who visits the Online Shop, purchases the goods offered and whose personal data is processed by the Data Controller.

Online Shop - the Company's electronic shop at www.qbuilds.lt/en.

E-Commerce - means the online sale of all goods offered in the Online Shop.

Personal Data means any information relating to the direct or indirect identification of a natural or legal person - Data Subject: personal identification number, name, surname, telephone number, e-mail address, delivery address, Internet IP address, payment details of the goods (bank account number, method of payment, etc.). 

Management and processing of personal data means any action or set of actions performed on the data provided by a natural or legal person: collection, storage, grouping, modification (rectification or addition), recording, retrieval, logical and/or arithmetical operations, use for commercial purposes, erasure and any other action or set of actions.

Third party - a natural or legal person providing services to the Data Controller (not the Data Subject) in connection with the Company's activities, marketing campaigns, joint sales campaigns, loyalty programmes, etc., through different media: websites, social networks, Online Shop, etc.

Cookie - a piece of textual information that is automatically created when browsing the Online Shop and stored on the Customer's device (phone, computer or tablet).

Direct marketing - information sent to Data Subjects by email, telephone or other direct means about the Company's products and/or to ask their opinion about the products offered.

  1. COLLECTION OF PERSONAL DATA

By purchasing goods in the Online Shop, the Data Subject confirms that he/she has read and accepted this Privacy Policy, provides accurate Personal Data in the Online Shop and is fully responsible for its accuracy. The Data Controller shall not be liable for incorrectly provided Personal Data and shall not be liable for any damage caused to the Data Subject or to Third Parties.

The Company respects the right to privacy of each Customer. The Customer's Personal Data (name, surname, e-mail address, telephone number, delivery address), data required for payment of the goods (bank account number, payment method, etc.), purchase history, as well as other additional information provided voluntarily (age, gender, area of residence, etc.) shall be collected and processed for the purposes set out below.

The Data Subject voluntarily provides Personal Data for the purposes of e-commerce. The lawful grounds for processing Personal Data are:

Consent: Where you explicitly consent to us processing your Personal Data for certain purposes (Article 6(1)(a) GDPR).

Performance of a contract: When the processing is necessary for the formation or performance of a contract (Article 6(1)(b) of the GDPR).

Legitimate interest: When the processing is necessary for our legitimate interests, which are not overridden by your rights and freedoms (Article 6(1)(f) of GDPR).

When purchasing the Data Controller's goods in the Online Shop, the following Personal Data is collected for the purpose of order fulfilment: 

  • name;
  • surname;
  • telephone number;
  • e-mail address;
  • delivery address;
  • IP address;
  • the details needed to pay for the goods (bank account number, method of payment, etc.).

The Data Subject consents to the collection of the following Personal Data for the purposes of administering the enquiry, where the enquiry is made via third party applications by email or social networks, written, oral or other means of consultation regarding the sale of goods: 

  • name;
  • surname;
  • telephone number;
  • email address;
  • IP address;
  • the content of the request.

With the written, electronic or verbal consent of the Data Subject, the Data Controller may collect this Personal Data for direct marketing purposes, such as providing information about promotions and offers by subscribing to the newsletter:

  • name;
  • surname;
  • telephone number;
  • email address;

The Data Subject is aware of the right to object to the processing of Personal Data voluntarily provided by him/her for Direct Marketing purposes and may withdraw the consent given to the collection of Personal Data by the Data Controller for Direct Marketing purposes and to receive Direct Marketing Communications. The Customer has the right to object immediately or at a later date.

To stop receiving emails, it is possible to click on the "unsubscribe" link contained in each email. If communications reach the Customer by other means of communication and the Customer no longer wishes to receive them, the Customer must inform the Company by sending an email to info@qbuilds.lt stating explicitly that he/she withdraws his/her consent to the use of his/her Personal Data for the purposes of Direct Marketing and that he/she no longer wishes to receive any Direct Marketing communications. In this case, the Company will no longer process the Customer's Personal Data for Direct Marketing purposes, with the exception of information related to the Customer's order. 

  1. RIGHTS OF THE DATA SUBJECT

Data Subjects have the following rights in relation to the processing of their Personal Data:

  1. Right to receive information: Data Subjects have the right to receive clear and comprehensible information about how their Personal Data is processed (Articles 13-14 GDPR).
  2. Right of access to data: data subjects have the right to obtain confirmation as to whether their Personal Data is being processed and access to their Personal Data and information about its processing (Article 15 GDPR).
  3. Right to rectification: Data subjects have the right to request the rectification of inaccurate or incomplete Personal Data that we process (Article 16 GDPR).
  4. Right to be forgotten (right to demand data erasure): Data subjects have the right to demand to have their Personal Data erased if it is no longer necessary for the purpose for which it was collected or if the processing is unlawful (Article 17 of GDPR).
  5. Right to restrict data processing: Data subjects have the right to restrict data processing in certain circumstances, such as when they contest the accuracy of the data or object to data processing on legitimate grounds (Article 18 GDPR).
  6. Right to data portability: Data subjects have the right to receive their Personal Data in a structured, commonly used and computer-readable format and to have this data transmitted to another controller where this is technically feasible (Article 20 of GDPR).
  7. Right to object to data processing: Data subjects have the right to object at any time to the processing of their Personal Data on the grounds of legitimate interest, including direct marketing (Article 21 GDPR).
  8. The right not to be subject to automated decision-making: data subjects have the right not to be subject to decisions based solely on automated processing, including profiling, where such a decision produces legal effects or has significant implications for the individual (Article 22 GDPR).

The Data Controller must respond to such requests in accordance with the procedures and deadlines laid down by law, no later than 30 calendar days from the date of receipt of the request. The Company shall provide the Data Subject with the information relating to the request concerning the processing of the Personal Data of the Data Subject. The Company shall have the right to destroy, rectify or modify the Personal Data or to suspend the processing of the Personal Data only after the identity of the Customer who contacted the Company has been identified.

In exercising his/her rights, the Customer must present a passport, identity card, driving license or other personal identification document. In order to exercise his/her rights under clause 4, the Customer may contact the Company by e-mail at info@qbuilds.lt.

  1. USE OF PERSONAL DATA

The Personal Data provided when purchasing goods from the Online Shop is used to successfully complete the Data Subject's order, to ensure that the goods in the basket are properly packed and delivered. In this case, the following Personal Data is used: 

  • name;
  • surname;
  • telephone number;
  • email address;
  • delivery address;
  • IP address.

You may also provide any other data necessary for the delivery of the goods or any additional information to facilitate the delivery. Except where the order is made by the Data Subject himself, by logging into his personal bank account, or upon request, for invoicing and shipping purposes. 

Personal data is used to ensure effective marketing activities by sending:

  • newsletters;
  • personal offers;
  • automated emails;
  • information on current promotions, competitions, discounts;
  • newsletters. 

Personal data is used to provide effective customer service and to disseminate communications about:

  • items left in the shopping cart;
  • changes to the privacy policy;
  • a new version of the Online Shop;
  • changes to the terms and conditions of the newsletter subscription.

The Data Controller shall send all promotional and informative communications, requests, requirements and other information to the Data Subject at the email address provided at the time of order confirmation or by any other means by which the Customer can be reached. 

The Data Controller shall not be liable for any interruptions in the Internet connection, in the networks of the email service providers or any other interruptions which prevent the Customer from receiving order confirmation or informational emails from the Company. The Parties agree that the existence of a copy of an email or other communication to the Buyer on the Controller's server, database or other information storage device shall be sufficient evidence of the sending of any information to the Buyer.

The Data Subject may send all demands, requests, questions and notifications to the contacts indicated in the "Contact" section of the Online Shop.

  1. THIRD PARTIES

The Customer's Personal Data is not disclosed to Third Parties, except as set out below:

  • the Customer's consent has been obtained as set out in this Privacy Policy;
  • for commercial purposes, to partners who provide the Company with merchandise services related to the Company's business activities;
  • required by the competent authorities in accordance with the laws and regulations of the Republic of Lithuania;
  • payments in the Online Shop are processed using the makecommerce.lt platform, which is operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), and therefore the Personal Data necessary for the execution and confirmation of the payment is transferred to Maksekeskus AS.

The Customer consents to the transfer of his/her Personal Data to Third Parties for the purpose of fulfilling the Customer's order placed at the Online Shop and the provision of services to the Customer by the Company.

The Customer agrees that the Seller is not and will not be liable for any malfunction of the Online Shop and any loss or damage suffered by the Customer or third parties as a result thereof, unless otherwise provided by the legislation of the Republic of Lithuania and this Privacy Policy. 

If the Customer does not agree to this Privacy Policy, he/she shall lose the possibility to use all the services of the Online Shop and shall not be able to purchase goods from the Company and its cooperating partners.

If Personal Data is transferred outside the European Economic Area, the Data Controller shall ensure that it is adequately protected, either through the application of the EU Standard Contractual Clauses or on the basis of an adequacy decision of the European Commission (Articles 44-49 GDPR).

  1. STORAGE OF PERSONAL DATA

The Data Controller shall keep the Data Subject's personal data only for as long as necessary to achieve the stated purposes. As soon as the data is no longer required, it will be securely erased or anonymized. The specific retention periods are determined in accordance with legal requirements and our internal policies (Article 5(1)(e) GDPR).

The Data Controller shall store all Personal Data received for 5 (five) years from the last purchase of goods sold by the Data Subject in the Online Shop or the last request sent, in accordance with the requirements set out in the Law on the Legal Protection of Personal Data of the Republic of Lithuania and in accordance with other legislation. After the expiry of the period of processing of Personal Data, in this case 5 years, or if the need to process Personal Data ceases to exist, or if the Data Subject requests that Personal Data no longer be collected or deleted, such Personal Data shall be destroyed in accordance with the procedures and conditions laid down by law.

The Data Controller shall process and store Personal Data through organizational and technical measures to ensure the protection of Personal Data against accidental or unlawful destruction, alteration, disclosure or any other unlawful processing.

  1. COOKIES

In order to enable the Customer to use the Online Shop without any problems, to purchase goods and to enable the Company to offer a comprehensive user experience according to the Customer's preferences, cookies are stored on the device used by the Customer (computer, phone or tablet) with the Customer's consent. For more information on the Company's use of Cookies, please refer to the Cookie Policy available at: www.qbuilds.lt/en/pages/cookies-policy.

  1. FINAL PROVISIONS

The Privacy Policy is available in the Online Shop and can be printed at any time.

In the course of the development of the Company's activities, the Data Controller reserves the right to modify this Privacy Policy at any time by giving prior notice in the Online Shop at www.qbuilds.lt/en or by sending an e-mail to the provided e-mail address. The modifications or additions to the Privacy Policy shall take effect from the date of publication, when notice is given in the Online Shop at www.qbuilds.lt/en or by sending an e-mail to the indicated e-mail address.

If you have any questions regarding the terms of the Privacy Policy, you may contact the Data Controller using the contact details below:

UAB “Qbuild”

Company code: 306632903

Address of registration: Savanorių pr. 178B, LT-03154 Vilnius

E-mail: info@qbuilds.lt 

Phone: +370 669 44108

If you believe that your rights under the General Data Protection Regulation (GDPR) have been infringed, you have the right to lodge a complaint with the competent supervisory authority. In the Republic of Lithuania, the supervisory authority is the State Data Protection Inspection (https://www.vdai.lrv.lt/), e-mail: ada@ada.lt.

This section doesn't currently include any content. Add content to this section using the sidebar.