Privacy & Cookie Policy

How should you read this Privacy Policy?

This Privacy & Cookie Policy (the “Privacy Policy”) will answer the most important questions you may have on how we collect, use and store information about you. We also explain your rights regarding the personal data you provide to us. This is important to you – please read this Privacy Policy carefully.

This Privacy Policy applies to the website and our services (the “Services”).

Who are we?

The data controller is Ritel Art, business registration number 01055012, e-mail address ritelartstudio@gmail.com (the “we” or “us”).

How do we process your information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To provide products/services, administration of payments: (i) to deliver and facilitate delivery of Products/Services to you; (ii) to fulfill and manage your orders.
For direct marketing purposes: to send you marketing and promotional communications.
To organize and conduct contests, promotions, and games: (i) to organize contests, promotions, and games; (ii) to choose the winner, contact, and award them.
To evaluate, improve, and ensure service quality: (i) to request feedback; (ii) to identify usage trends.
To resolve inquiries and disputes with users: (i) to respond to user inquiries; (ii) to offer support to users.

What information do we collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when participating in activities on the Services, or otherwise when you contact us.

The personal information We collect may include the following:

User details: name, surname, e-mail address, phone number, residence address.
Payment details: card type, card number (full digit), card expiration date, and card verification code (CVC).
Shopping card details: payment history, user payment profile (profiling, i.e., management of browsing behavior, payment habits, interests, etc.), and information about owned products/services.
Device details: device type (phone, computer, tablet, etc.), device name/model/OS/browser, IP address.
Browser details: browsing or search history, browser interactions/clicks (including on ads), browser connection source (from which page it came), browser requests or other information, and browsing statistics.
Social network details: name, surname or social network profile, e-mail address, phone number, IP address, and device details.

What legal basis do we rely on to process your information?

We only process your personal information when we believe it is necessary and has a valid legal basis. As such, we may rely on the following:

Consent. We may process your information if you have permitted us (i.e., consent) to use your personal data for a specific purpose (e.g., direct marketing). You can withdraw your consent at any time.
Performance of a contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Products/Services or at your request before entering a contract with you.
Legal obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
Legitimate interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests, and those interests do not outweigh your interests and fundamental rights and freedoms.

How long do we keep your information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a more extended retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Your personal data is stored considering the purpose of data processing:

To provide products/services, administration of payments – store 10 (ten) years.
For direct marketing purposes, store up to 2 (two) years from the receipt of the consent or until the consent is withdrawn.
To organize and conduct contests, promotions, and games – store no longer than 2 (two) years from the end of the competition, and in the case of winning prizes – no longer than 10 (ten) years from awarding the prize.
To evaluate, improve, and ensure the quality of service – store no longer than 2 (two) years from the date of receipt of consent or until the consent is withdrawn.
To resolve inquiries and disputes with users – store no longer than 2 (two) years from the end of the dispute, and in the case of a full or partial refund of the goods – no longer than 10 (ten) years from the date of refund.

When and with whom do we share your personal information?

We may need to share your personal information for these subjects:

For service providers and our other business partners. In cases where we may need to use other service providers, such as couriers, payment intermediaries, etc., to provide Products/Services to you.
For supervisory or law enforcement authorities. In cases where we are required to do so by law or when authorities make legitimate requests.
Note that your personal information will not be transferred outside the EEA.

Do we use cookies?

Yes, we use the following cookies:

Essential cookies. These are strictly necessary to ensure that we can provide you with the service you expect. We do not require your consent to use such essential cookies, but you may still block or delete them.
Functional cookies. These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.
Analytical cookies. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
Targeting cookies. These cookies may be set through our site by our advertising partners, and those companies may use them to build a profile of your interests and show you relevant adverts on other sites.
Social media cookies. These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They can track your browser across other sites and build up a profile of your interests, which may impact the content and messages you see on other websites.

How can you manage cookies?

You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies, you may be unable to access certain areas or features of our website. For information on adjusting or changing your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org.

For information on policy and control options for third-party cookies, please read the cookie policies of such third parties.

Your data protection rights

Under GDPR and other national laws, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to processing your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organization, or you, in certain circumstances.
Your right to complain – You also have the right to lodge complaints with the appropriate Data Protection Supervisory Authority. The competent authority in Lithuania is the State Data Protection Inspectorate.
You are not required to pay any charge for exercising your rights. We try to reply to all legitimate requests under this Privacy Policy within one month of receiving them. In some cases (for example, if the matter is particularly complex or you send us multiple requests), it may take us longer than a month. In such cases, we will notify you accordingly and keep you updated.
Please get in touch with us at ritelartstudio@gmail.com if you wish to make a request.

Children’s Privacy

Our Service does not address anyone under 14, and we do not knowingly collect personally identifiable information from anyone under 14. If you are a parent or guardian and know that your child has provided us with personal data, please get in touch with us.

We may become aware that we have collected personal data from anyone under the age of 14 without verification of parental consent. In that case, we remove that information from our servers.

Links to other websites

Our Service may contain links to other websites not operated by us, and you will be directed to that third party’s site if you click on a third-party link. We strongly advise you to review every site you visit for privacy and cookies policies.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to this Privacy Policy

At our discretion, we reserve the right to change, modify, add and/or remove portions of this Privacy Policy at any time. We additionally seek to ensure it is updated promptly if we make a materially relevant alteration to our processes or practices. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. This Privacy Policy changes are effective when posted on this page.

We hope this Privacy Policy has helped set out how we handle your data and your rights to control it.