Privacy policy

1.1. Company or Controller of Personal Data – Pupelė puodelyje, MB, a small partnership established and operating under the laws of the Republic of Lithuania, legal entity code 306229592, registered office at Perkūnkiemio g. 19, LT-12120 Vilnius.

1.2. Customer or Data Subject – a natural person, a customer of the Company (including visitors to the website), whose personal data is collected by the Company.

1.3. E-shop – the Company's electronic store at the address https://coffeebean.lt

1.4. Services – all services provided by the Company.

1.5. Personal Data – any information relating to a natural person – the Data Subject, whose identity is known or can be directly or indirectly determined using such data as a personal code, one or more physical, physiological, psychological, economic, cultural, or social characteristics specific to the person.

1.6. Processing of Personal Data – any operation performed with personal data: collection, recording, accumulation, storage, classification, grouping, combining, alteration (supplementing or correcting), disclosure, publication, use, logical and/or arithmetic operations, search, dissemination, destruction, or any other action or set of actions.

1.7. Partner – a legal entity providing services to the Company related to the Company’s activities, or selling goods to the Company, or carrying out joint projects with the Company, including but not limited to marketing promotions, joint sales campaigns, loyalty programs, etc., in media, websites, the E-shop, retail stores, retail chains, etc.

1.8. Cookie – a small piece of text information that is automatically created while browsing the website and is stored on the visitor's computer or another device.

1.9. Direct Marketing – an activity designed to offer goods or services to persons by mail, telephone, or any other direct means and/or to seek their opinion on the goods or services offered.

1.10. Privacy Policy – means this document, which establishes the principles and rules for the processing of Personal Data when using the services of the E-shop.

1.11. Account – the Customer's primary login data for the E-shop, consisting of one email address and a Password.

1.12. Password – a unique combination of numbers, letters, or a combination of numbers and letters or other characters created by the Customer, which allows access to the E-shop upon entry.

2.1. The Customer grants the Company the right to perform all actions for the processing of Personal Data within the scope and for the purposes provided for in this Privacy Policy.

2.2. Personal Data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing and protection of Personal Data, as well as this Privacy Policy.

2.3. In the Company, Personal Data is processed in accordance with the following principles:

2.3.1. Personal Data is collected for specified and legitimate purposes;

2.3.2. Personal Data is processed accurately, fairly, and lawfully;

2.3.3. Personal Data is adequate and only of such scope as is necessary for its collection and further processing;

2.3.4. Personal Data is constantly updated;

2.3.5. Personal Data is stored in such a form that the identity of the Data Subject can be determined for no longer than is necessary for the purposes for which these data were collected and processed;

2.3.6. All information about Personal Data is confidential;

2.3.7. The Customer's Personal Data and personal information will not be used for illegal purposes.

2.4. By purchasing in the E-shop, the Customer is considered to have read the current version of the Privacy Policy and agrees to it. If the Customer does not agree with any part of the Privacy Policy or the Privacy Policy itself, the Customer must not place an order or purchase goods in the E-shop.

2.5. The Privacy Policy can be accessed in the E-shop and printed at any time. The Privacy Policy may be changed, supplemented, or updated at the Company's discretion. The new version of the Privacy Policy is published in the E-shop.

2.6. The Customer can place an order in the E-shop without registration or through their Account, after registering in the E-shop.

2.7. During the initial registration in the E-shop via an Account, the Customer must provide their email address, create a secure Password, and provide accurate Personal Data to the E-shop. The Customer is responsible for their correctness. After creating an Account, the Customer is assigned an identification code.

2.8. When using the Services, as well as when purchasing in the E-shop, the Customer must always provide accurate Personal Data to the E-shop and is responsible for its correctness.

2.9. The Customer has the right to change and supplement Personal Data in their Account at any time or to contact the E-shop with a request to delete the Account.

2.10. The Customer is obliged not to disclose their Password to third parties and to keep it safe; otherwise, all liability related to this rests with the Customer.

3.1. The Company respects every Customer's right to privacy. The Customer's Personal Data (i.e., name, surname, email address, phone number, delivery address for goods/services, age/year of birth, payment data for goods/services (bank account number, payment method, etc.), purchase history, as well as, with the Customer's consent, age, gender, date of birth, place of residence) is collected and processed for the following purposes:

3.1.1. For the purpose of electronic commerce. The following Personal Data is processed: name, surname, email address, phone number, delivery address for goods/services, age/year of birth, IP address, payment data for goods/services. The retention period for Personal Data used for electronic commerce purposes is 5 (five) years from the date of the last login to the E-shop.

3.1.2. For the purpose of direct marketing. The following Personal Data is processed: name, surname, phone number, email address, address, age, gender, date of birth, place of residence. The retention period for Personal Data used for Direct Marketing purposes is 5 (five) years from the date of the last login to the E-shop.

3.2. The Customer may provide consent for their Personal Data (name, surname, phone number, email address, address, age, gender, date of birth, place of residence) to be processed for the purpose of Direct Marketing. If, after giving consent to the processing of their data for the purpose of Direct Marketing, as well as receiving Direct Marketing communications, the Customer subsequently does not wish this and informs the Company, the Company will no longer process their Personal Data for the purpose of Direct Marketing and will not send the Customer any electronic newsletters, except for information related to the Customer's order.

3.3. The Customer has the right to withdraw their consent mentioned in clause 3.2 for the Company to process the Customer's Personal Data for the purpose of Direct Marketing at any time by sending a corresponding notice to the Company via email at info@coffeebean.lt and clearly stating that they withdraw their consent to use their Personal Data for the purpose of Direct Marketing and do not wish to receive any Direct Marketing communications.

3.4. The Customer also has the possibility to opt-out of their Personal Data being processed for the purpose of Direct Marketing by clicking on the corresponding link located in each sent email.

3.5. The Customer, as a Data Subject, has the following rights related to the procedures for processing the Customer's Personal Data:

3.5.1. to receive information from the Company about the processing of the Customer's Personal Data, to access their Personal Data, and to learn how it is being processed;

3.5.2. to receive information from the Company as to which sources their Personal Data has been collected from, for what purpose it is being processed, and to which recipients it is being or has been provided, at least within the last 1 (one) year;

3.5.3. to demand the correction or destruction of the Customer's Personal Data or to suspend, except for storage, the processing actions of their Personal Data when the Personal Data is processed without complying with the provisions of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other laws.

3.6. To exercise their rights, the Customer must provide a passport, personal identity card, or driver's license. The Company provides the Data Subject with information about the processed Personal Data of the Data Subject free of charge once a year. The Customer may exercise their rights provided for in clause 3.5 by contacting info@coffeebean.lt. The Company has the right to correct, change, delete Personal Data, or suspend the processing of Personal Data only after identifying the identity of the Customer who has applied.

3.7. The Customer's Personal Data is not provided to third parties, except in the following cases:

3.7.1. When consent has been received from the Customer, as specified in this Privacy Policy;

3.7.2. Personal Data for electronic commerce purposes is provided to Partners providing services to the Company related to the Company’s activities;

3.7.3. In cases provided for by the laws and legal acts of the Republic of Lithuania to competent authorities.

3.7.4. Payments in the E-shop are processed using the makecommerce.lt platform, managed by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475); therefore, your personal information necessary for the execution and confirmation of payment will be transferred to Maksekeskus AS.

3.8. The Customer is aware of their right to object to their Personal Data being processed for the purpose of Direct Marketing, i.e., the Customer has the right to express an objection immediately or later.

3.9. The Customer agrees that their Personal Data may be transferred to Partners when executing the Customer's order placed in the E-shop, as well as when the Company provides Services to the Customer, and also to the Company's Partners as specified in clause 3.7.

3.10. If the Customer does not agree with the Privacy Policy, the Customer will not be able to use the services of the E-shop.

3.11. The Company implements organizational and technical measures intended to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.

3.12. The Customer agrees that in cases where it is necessary according to the instructions of competent authorities and/or the Customer's Personal Data may have been used in committing illegal activities, or there are reasonable suspicions of identity theft, due to which competent law enforcement authorities are conducting a pre-trial investigation, or there are other legal grounds or purposes, their Personal Data may be stored on the Company's servers longer than established in this Privacy Policy.

3.13. Upon receiving a directive or inquiry from the Data Subject related to the processing of Personal Data, the Company shall provide a response to the Customer, fulfilling the request/directive or providing a reasoned refusal to do so, no later than 30 (thirty) calendar days from the date of the Data Subject's application. If the Data Subject so wishes, the response must be provided in writing.

3.14. In order for the Company to be able to offer the Customer full-featured services in the E-shop, with the Customer's consent, information is recorded on the Customer's computer (device) – Cookies, which is used to identify the Customer as a previous user of the E-shop, collecting statistics on E-shop traffic and information about the shopping cart. The Customer can view which Cookies are being recorded at any time and can delete some or all recorded Cookies.

3.15. To learn more about cookies, for example, how to manage or delete them, you can visit www.allaboutcookies.org.

4.1. The Company has the right to change or supplement the "Privacy Policy" in whole or in part. Additions or changes to the Privacy Policy take effect from the day of their publication.

4.2. In case of questions, please contact us at the following contacts: info@coffeebean.lt