Privatumo politika
- Atnaujinta:
1. Data Controller
Vufis, MB, company code 307576959, registered address Titnago g. 10A, LT-02300 Vilnius, Lithuania, email hello@vufis.store. We do not have a dedicated Data Protection Officer — for any questions regarding personal data, please contact us at the email above.
2. What Data We Collect and Why
- Website visitor data: IP address, browser data, cookie information — for website functionality and statistics.
- Inquiry form / email: name, email, message content — to respond to your inquiry.
- Customer (order) data: name, surname, delivery address, phone number, email, payment information (processed by Stripe) — to fulfil and manage your order.
- Marketing data: browsing behaviour linked to Meta and TikTok pixels — to display advertising and measure its effectiveness (only with your consent).
3. Legal Basis
Each purpose relies on an appropriate legal basis: performance of a contract (GDPR Art. 6(1)(b)) — for processing orders; legal obligation (Art. 6(1)(c)) — for accounting records; legitimate interest (Art. 6(1)(f)) — for customer service and website improvement; consent (Art. 6(1)(a)) — for marketing cookies and advertising.
4. Data Recipients
We may share data with the following recipients, to the extent necessary to provide our services:
- Stripe — for payment processing;
- LP Express, Omniva — for parcel delivery;
- Meta (Facebook/Instagram) and TikTok — for displaying advertising and measuring its effectiveness (only with your consent via cookie settings);
- government authorities — where required by law (e.g., for tax administration purposes).
We do not sell your personal data to third parties.
5. Transfers Outside the EU/EEA
We use Meta and TikTok for marketing purposes, and these providers may transfer data outside the EU/EEA. Such transfers rely on safeguards implemented by those providers, such as the European Commission's Standard Contractual Clauses (GDPR Art. 46). More information is available in Meta's and TikTok's own privacy policies. Data handled by our other service providers (Stripe, LP Express, Omniva) is processed within the EU/EEA or under equivalent GDPR-required safeguards.
6. Retention Periods
We retain data no longer than necessary for its purpose:
- customer (order and accounting) data — for as long as required by law (typically up to 10 years for accounting records);
- inquiry/correspondence data — up to 2 years from the last contact;
- marketing/cookie data — until consent is withdrawn, or per the retention period of the specific tool used (Meta, TikTok).
7. Your Rights
You have the right to: access your data (GDPR Art. 15); request correction; request erasure ("right to be forgotten," Art. 17); restrict processing; data portability (Art. 20); object to processing; and withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. Submit requests to hello@vufis.store. We will respond within one month.
8. Complaints
You have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI), L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania, email ada@ada.lt, phone +370 5 279 1445, https://vdai.lrv.lt, if you believe your data is being processed unlawfully.
9. Cookies
We use essential and marketing cookies (Meta Pixel, TikTok Pixel). Optional cookies require separate consent via our cookie banner; you may change your choice at any time. More details are available in our Cookie Policy.
10. Changes
This policy may be updated from time to time. The current version is always published on the vufis.store website, along with its last-updated date.