Personal data is any type of information that can be used to identify you as an individual (data subject). Personal data examples can be your name, home address, telephone number, information about your access to our website and other information. When you use our services, you trust us with your personal information. This Privacy Policy explains how information about website visitor is collected, used and protected with respect to the access and use of our website www.liucijapmu.com and services. Please take a moment to read this Privacy Policy carefully.

Website personal data controller is Permanent Makeup of Baltics, Ltd. Company code – 302893279, address – Savanorių ave. 139, Kaunas, Lithuania. Tel. +370 647 00109, e-mail: [email protected]

Website personal data processor is Solidus kodas, Ltd. Company code – 304447806, address – Pramonės st. 15, LT-78137 Siauliai. Tel. +3706 405 2717, e-mail: [email protected]

Personal information we collect

We may collect personal data from you when you buy a product from our shop, create an account on our website, when you contact us or use our website. Accordingly, we may collect the following information:

• Your name, surname, home country, home address, e-mail address, telephone number, gender, profile image, account registration date;

• Information about your health. We will collect information about your health only if you have given your consent;

• Information about your purchases of our products and services;

• Information about your use of our website (cookies);

• The communications you exchange with us through website chat service, e-mails and social media;

• Location of your electronic device through your IP Address depending on the real-time

  geographic location. After consent that is given by ticking a box, we can find that consent in database along with IP address from which the consent was given.

• For providing products and services you request us. We use your personal data in order to fulfill your requests, provide the relevant product or service;

• To send you important notices related to the services we are providing and any changes to these services. This information is important to your communication with us, for this reason you may not opt out of receiving these notices;

• We use your data for marketing purposes and statistical analysis, systems and website testing, maintenance and development of our website. Moreover, we may use your personal information in order to deal with a dispute, complaint or claim;

• Generally improve our customer service. We use your personal information to manage our relationship with you as our customer and to operate, improve, develop our products and services;

• Your data may be used for marketing purposes. Sometimes we will contact you with special offers or information related to our services. You will have the choice to opt in or opt out of receiving such offers or information. If you no longer want to receive our direct marketing messages, please specify that in our e-mail.

How long do we use your personal data

We store your personal data only as long as necessary to fulfil the purpose it is being processed for. After reaching mentioned purpose, we will destroy your personal data. To define the appropriate retention and preservation time for your personal information, we consider the amount, nature, and sensitivity of the managed data, the potential risk of disclosure of your personal information and the purposes for which we process your personal data. In any case, we do not store your personal data for more than two years and if it is possible, we will try to reduce the personal data that we manage through this period of time.

Data subject rights

Right to request and access information. You have the right to obtain from the controller confirmation as to whether or not personal data about you are being processed, and, if so, what that information is. You can access that information by receiving a copy of the personal data we hold about you. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs.

Right to request correction. You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data. You have the right to have incomplete or inaccurate personal data corrected.

Right to erasure (‘right to be forgotten’). You have the right to obtain from the controller the erasure of your personal data when: data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; data subject withdraws consent on which the processing is based; there is no other legal ground for the processing; data subject objects to the processing pursuant; personal data have been unlawfully processed; personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; personal data have been collected in relation to the offer of information society services.

Right to object. You have the right to object on legitimate processing of your personal information in particular situation. You also have a right to object processing when personal data are processed for direct marketing purposes.

Right to object to automated decision-making including profiling. You have the right not to be subject to a decision based solely on automated processing, including profiling.

Right to restriction of processing. You have the right to obtain from the controller restriction of processing your personal information, for example when the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

Right to data portability. You have the right to receive the personal data that has been provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without interference from the controller to which the personal data have been provided.

If you would like to exercise any of these rights, please contact data controller at [email protected]

Sharing personal information

We do not share your personal data with other parties unless we have your consent or sharing personal data is necessary for legal reasons.

If you engage with our website content through social media platforms, we may have access to your information associated with social media account such as your name, e-mail address, people you follow and other contained data. For information on controlling access to your personal information through third-party sites, we recommend you to review their privacy policies and terms of use.

Information security

We pay a lot of attention and effort in order to protect our website users from disclosure or destruction of information we collect. Website user information is secured in the data base. User can access this information only by using his username and password. All passwords are encoded. For this reason, outsider could not inspect or recognize passwords even if he would connect to our database.

We encrypt our services using SSL (Secure Sockets Layer). SSL is security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private. SSL create trust by developing a secure connection.

We analyse our data collection and storage practices, including physical security measures, in order to guard against possible data breaches. Unfortunately, no method of transmission over the internet or electronic storage is 100% secure.

Personal data breach

Personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

In the case of a personal data breach, we shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.

When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, we shall communicate the personal data breach to the data subject without undue delay.

Cookies

www.liucijapmu.comwebsite uses cookies. Cookies allow web applications to respond to you as an individual. The web application can customize its operations to your needs by gathering and remembering information.

We use cookies to identify which pages are being used. Unique identifier allows the system to distinguish and identify the user and collects information about user behaviour on the site. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. The aim of this information gathering is to maintain website functionality, performance and learn about user’s behaviour patterns. Mentioned data are using only for statistical analysis purposes and then the data is removed from the system no later than two years after received information.

We also use Google Analytics. Google Analytics gathers information about website use by means of cookies. The gathered information is used to create reports about the use of our website. You can review Google's privacy policyhere: https://www.google.com/policies/privacy/. If you do not want Google Analytics Tools to record your online behaviour, you can use the Google Analytics Browser Add-on https://tools.google.com/dlpage/gaoptout/

Cookies we use:

Permission to store cookies can be disabled in your internet browser. If you want to know how to do it, read about it at www.aboutcookies.org. However, it’s important to remember that our website may not function properly in addition to cookies disabling.