1. General Provisions
This Privacy Policy governs the principles of collection, processing and storage of personal data by MB "Žirniukas LT" (legal entity code 306077595, registered office at Vilniaus g. 55A, Vievis, Lithuania, e-mail: info@zirniukas.lt, tel. +370 655 44244), managing the PeaNest online store at zirniukas.lt.
We respect your privacy and process personal data in strict compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts.
2. What Personal Data We Collect
Depending on how you use our store and services, we collect:
- Order & Delivery Data: name, surname, delivery address, parcel locker terminal details, phone number, email address.
- Payment Details: selected payment method, transaction confirmation details provided by licensed payment gateways (Paysera, Stripe, banking APIs). We do not store full credit card details.
- Customer Account & Inquiries: login email, communication history, customer support queries.
- Technical & Browsing Data: IP address, browser type, cookies necessary for cart persistence and secure checkout.
3. Purposes and Legal Bases for Data Processing
We process your personal data for the following lawful purposes:
- Fulfillment of Purchase Contract: to process, sew, pack, and deliver your orders (GDPR Art. 6(1)(b)).
- Accounting & Legal Obligations: issuing invoices and complying with tax laws (GDPR Art. 6(1)(c)).
- Customer Support: answering inquiries and managing returns (GDPR Art. 6(1)(f)).
4. Data Retention Periods
Personal data related to orders and invoices is stored for 10 years following accounting laws. Inquiry and customer communication data is retained for up to 2 years.
5. Data Processors and Third Parties
To fulfill our services, we transfer necessary data only to trusted partners under strict confidentiality agreements:
- Courier & Delivery Services: Omniva, DPD, LP Express / Lietuvos paštas (for parcel delivery).
- Payment Processing: licensed payment institutions (Paysera, Stripe, bank links).
- Accounting & IT Hosting: certified accounting and server hosting providers.
6. Your Rights under GDPR
You have the right to:
- Access the personal data we hold about you;
- Request rectification of incorrect or incomplete data;
- Request erasure of your data ("right to be forgotten"), subject to statutory tax record retention obligations;
- Request restriction of processing or object to data processing;
- Request data portability;
- Lodge a complaint with the State Data Protection Inspectorate (VDAI) if you believe your rights have been violated.
7. Contact Information
For any questions regarding your personal data or to exercise your GDPR rights, please contact us:
- Email: info@zirniukas.lt
- Phone: +370 655 44244
- Address: Vilniaus g. 55A, 18 Pavilion, Vievis, Lithuania