Privacy policy

GENERAL PROVISIONS

1. The controller of personal data – the owner of the Merrelldepot.com MB "Gisko", registered in the Register of Legal Entities of the Republic of Lithuania, the legal entity code 307015673, the address of the registered office at V. Nagevičiaus g. 3, LT-08237, Vilnius m. Lithuania, e-mail [email protected] (hereinafter also referred to as the Company or the Merrelldepot.com).

2. These Rules (hereinafter also referred to as the Policy; Privacy Policy) establish the obtaining, use, and processing of personal data of Merrelldepot.com customers, other personal data processing activities in the activities of the Company, as well as the related rights of customers and the obligations of the Company.

3. By visiting Merrelldepot.com and making a purchase, the customer agrees to the provisions of this Policy, and if the customer does not agree to comply with the provisions of this Policy, the customer cannot continue to use the Merrelldepot.com.

4. The amendment to this policy takes effect from the date of publication on Merrelldepot.com. Each time you visit the Merrelldepot.com, the current version of the policy is valid.

5. The customer, having familiarized himself with this policy, confirms that the terms of this policy are acceptable to him.

6. Individuals who have questions about the processing of their personal data when visiting Merrelldepot.com can apply by e-mail.

7. The Company ensures that all actions performed with the customer's personal data are performed in accordance with the applicable provisions of the legal acts of the European Union and the Republic of Lithuania, in particular, the General Data Protection Regulation and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

8. If there is any inconsistency between this Privacy Policy and Steelshape otherwise applicable contractual or business terms, the provisions of this privacy policy shall prevail.

BASIC CONCEPTS

9. Online store – a store is available at the address Merrelldepot.com where you can order the goods offered.

10. Customer – a natural person visiting Merrelldepot.com (who only browses the website and/or who intends to purchase goods or who purchases goods).

11. 'Personal data' means any information relating to a natural person, a data subject whose identity is known or can be directly or indirectly identified.

12. 'Data recipient' means a legal or natural person to whom the data controller (i.e. Merrelldepot.com) provides personal data.

13. Cookies are small text files sent to each user's device from which a website is accessed and temporarily stored on that device.

14. Direct marketing is an activity the purpose of which is to offer goods or services to individuals by post, telephone, or other direct means and/or to seek their opinion on the goods or services offered.

PROCESSING OF PERSONAL DATA

15. A company receives personal data from customers when:

(a) The customer himself provides his personal data (when performing an order Merrelldepot.com or in any other way by providing personal data himself by various means of communication);

(b) the customer's data is generated automatically when using the website (on a legal basis – with the help of cookies, when the customer gives his consent to save certain cookies and continues to browse the website);

Purpose of processing the customer's personal data

16. The Company processes the Personal Data of the customers only for the following purposes:

(a) in the case of a sale and purchase transaction, including order fulfillment, delivery, returns, exchanges, and refunds;

(b) for the purpose of providing services and ensuring the functionality and performance of the website;

(d) resolving disputes with customers and providing customer support, including responding to inquiries and complaints;

(e) improving products, services, and overall customer experience through analysis of user behavior and feedback;

(f) conducting surveys and collecting feedback to enhance services and products;

Personal data processed and the legal bases for their processing

Legal basis	Aim	Personal data of the customer	Term of storage
Conclusion and execution of the contract	Conducting online trading	name, surname, personal identification number, e-mail address, telephone number, purchased goods, price, discount applied, delivery address of goods, IP address, bank account number, method of payment, address of residence, "cookies"	10 (ten) years after the conclusion of the purchase and sale agreement
Customer's consent	Direct marketing	Customer's name, surname, e-mail address, city, purchased item, "cookies", image data, social network account name, residential address.	As long as the consent is valid
Consent provided by the Customer when confirming the cookie selections	Improving the quality of your browsing	Browsing session ID, browsing data (all data is anonymized)	As long as the consent is valid
Performance of the contract; legitimate interest	Examination of inquiries, disputes	Name, personal identification number, surname, e-mail address, telephone number, other means of communication specified by the customer, data of the concluded purchase and sale agreement, correspondence with the Customer	Until the inquiry or complaint is resolved and for another 3 years after examination; in the case of a dispute, 10 years after the settlement of the dispute

17. At the end of the term of storage of personal data, the Company destroys the processed personal data.

18. The Company does not process any special category of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, health data or data on the sex life and sexual orientation of a natural person.

Access to data and hosting

19. You may visit our websites without providing any personal information. Each time you visit the website, the web server automatically saves only the so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the visit, the amount of data transferred and the provider that made the request (access data), and documents the visit. This access data is only evaluated to ensure the smooth operation of the website and to improve our services. The aim is to protect our legitimate interests in the proper presentation of our proposal. All access data is deleted no later than seven days after the end of your visit to the site.

Data management when concluding and executing a contract

20. We collect personal data if you voluntarily provide it to us at the time of ordering or by contacting us (e.g. by using a contact form or e-mail). The fields are mandatory because in such cases the data is necessary for us to perform the contract or to contact you, and you cannot complete the order or send the request without providing the specified contact details. What data we collect can be learned from the relevant input forms. We use the data you provide to process the contract and your inquiries (including inquiries about and handling possible warranty and quality claims for services or goods).

21. You can find more information about the processing of your data, in particular about its transfer to our service providers for the purposes of ordering, payment, and dispatch, in the following sections of this Privacy Policy.

22. Data on the concluded contract are stored to the extent that it is important for the purposes of tax declaration or claim. Specific terms are specified in this policy.

Contacting us

23. When communicating with customers, we collect personal data in order to process your inquiries if you voluntarily provide us with this data by contacting us (e.g. through a contact form or by e-mail). Fields are mandatory because in such cases we need the data to contact you and process your request. What data we collect can be learned from the relevant input forms. After your request has been fully processed, your data will be deleted unless you expressly consent to the further use of your data, or we reserve the right to use the data in a manner permitted by law and of which we inform you in this policy (for example, to protect your legitimate interest in the event of a claim).

Processing of data for the purpose of processing consignments

24. In order to perform the contract, we transfer your data to the shipping service provider who is charged with the delivery of the goods, if this is necessary for the delivery of the ordered goods.

25. If you have given us your explicit consent at the time of the order or after the order (our goods can only be delivered through courier services, therefore, by confirming the order, you agree to the delivery of the goods to you by the parcel delivery service of our choice), based on this consent, your name, delivery address, e-mail address and telephone number so we will hand it over to the shipping provider so that the latter can contact you before delivery to notify you of the delivery or to coordinate its progress. You can withdraw your consent at any time by sending a message to the e-mail address specified in this Policy. After the cancellation, we will delete your data provided for this purpose, unless you expressly consent to the further use of your data, or we reserve the right to use the data for this purpose, to the extent permitted by law and specified in this policy.

26. Parcel services whose services we use to deliver goods to you:

(a) United Parcel Service, Inc

(b) FedEx

Processing payment data

27. When making payments in our online store, we cooperate with partners: technical service providers, credit institutions, and payment service providers.

28. Depending on the chosen payment method, we transfer the data necessary to carry out the payment transaction to our technical service providers who provide us with services in the field of order processing, or to authorized credit institutions, or to the selected payment service provider, if this is necessary to make the payment. This is necessary during the performance of the contract.

29. In some cases, payment service providers themselves collect the data necessary to process the payment, e.g. on their website or by technically integrating it into the ordering process. In this regard, the privacy policy of the relevant payment service provider applies. If you have any questions about our payment processing partners and the basics of our cooperation with them, please use the option described in this Privacy Policy to contact us.

30. Where applicable, we provide our service providers with additional data that they use together with the data necessary to process the payment, as processors of our data, in order to prevent fraud and optimize our payment processes (e.g. invoicing, processing of disputed payments, keeping records). The aim is to protect our legitimate interests in protecting us from fraud or in the effective management of payments, which take precedence in the context of the balance of interests.

Advertising by e-mail

31. If you sign up for our newsletter, we will use the data necessary for this purpose or provided separately by you to regularly send you our newsletter by email based on your consent. You can unsubscribe from the newsletter at any time by sending a message to the e-mail address specified in this Policy or by using the link provided in the newsletter for this purpose. If you opt out of the newsletter, we will delete your email address from the recipients' list unless you expressly consent to the further use of your data, or we reserve the right to use the data in a manner permitted by law and of which we inform you in this Policy.

32. We would like to point out that when we send a newsletter, we value your user's behavior. To this end, we also analyze your interactions with the newsletter by measuring, storing, and estimating the number of opens and clicks to prepare upcoming newsletter campaigns. For this assessment, outgoing emails use single-pixel technologies (e.g. web beacons, tracking pixels) that are stored on our website. In our assessment, we first of all link this newsletter data from which it was requested to open the website page (the so-called referring URL), the date and time of the referral, the description of the type of internet browser used, the IP address of the computer that made the request, the email address, the date and time of registration and confirmation, and the single-pixel technology with your e-mail address or IP address and, if applicable, individual ID. Links in the information letter may also contain this ID. If you do not wish to receive newsletters, you can unsubscribe from the newsletter at any time – as described above. Your data provided when you subscribe to the newsletter will be stored until you unsubscribe from the newsletter.

Cookies and other technologies (Cookie Policy)

33. In order to make visiting our website convenient and to allow for the use of certain features, we use technologies, including so-called cookies, on various pages. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your terminal device and allow us to recognize your browser on your next visit (persistent cookies). More information about cookies can be found in the Cookie settings.

34. When you use our online services, we use the technologies that are necessary to provide the telemedia services that you have explicitly requested. In this regard, consent is not required for the storage of information on your terminal device or for access to information already stored on your terminal device.

35. If the features are not required, your consent is required to store the information on your terminal device or to access the information already stored on your terminal device. We would like to point out that if you do not give your consent, it may not be possible to use some features of the site indefinitely. Any consent you give will remain in effect until you adjust or reset the appropriate settings for your terminal device.

36. We use technologies that are necessary to use certain features of our website (e.g., the shopping cart feature). These technologies collect and process your IP address, time of visit, device and browser information, as well as information about your use of our website (e.g. information about the contents of your shopping cart). According to the principle of balance of interests, this serves the more important legitimate interests associated with the optimal presentation of our proposal.

37. In addition, we use technology to comply with legal obligations that apply to us (e.g. to demonstrate consent to the processing of your personal data), as well as for internet analytics and online marketing. For more information on this, including the relevant legal basis for data processing, please refer to the following sections of this Privacy Policy.

38. If you have consented to the use of technology, you can withdraw your consent at any time by sending a message to the e-mail address specified in this Privacy Policy.

39. If you have given your consent, we use these cookies and other third-party technologies on our website. At the end of the purpose and if we stop using the technology in question, the data collected in this context will be deleted. You can withdraw your consent at any time, it is valid for the future. For more information, including the basis for our collaboration with individual service providers, please refer to the description of individual technologies in this policy. If you have any questions about service providers and the basis for our cooperation with them, please use the option described in this Privacy Policy to contact us.

Use of social networking services for web analytics and advertising purposes

40. We use the Pixel service, an ad tracking and analysis tool provided by different providers. Pixel tags – (web beacons, clear GIFs) are hidden software codes. Pixel's tag collects information with short snippets of software that transfer this information to a small graphic image (usually invisible, which we insert into our web page) about your actions on our website. The information collected is forwarded to the Pixel service provider's server. This service allows us to monitor and measure the effectiveness of advertising through different web pages, and mobile applications. This code tracks the actions of users, such as page views, purchases of goods, or placing orders, and transmits this information to the Pixel service provider. In this way, we can get a variety of information about our audience, and user actions, we can measure the success of an advertising campaign, create target audiences for future promotions, and remarketing offers to potential customers – those visitors to our online store who have already visited us.

Social media plugins

41. Our website uses buttons on social networks. They are integrated into the page only as HTML links, so when we call our website, no connection is established with the servers of the respective provider. After clicking on one of the buttons, the site of the corresponding social network opens in a new browser window. In it, you can, for example, click on the "Like" or "Share" button.

Our presence on social networks Facebook, Instagram, TikTok

42. If you have given your consent to the relevant social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our website on the aforementioned social networks, from which usage profiles are created using pseudonyms. They can be used, for example, to place advertising on and off platforms that are likely to be in your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the relevant social media operator, as well as the contact capability and your rights and identification options in this regard, in order to protect your privacy, please refer to the providers' data protection notices below. If you still need help with this, you can contact us.

43. Facebook is a service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (Meta Platforms Ireland). The information automatically collected by Meta Platforms Ireland about how you use Facebook is usually transmitted to the server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there.

44. Instagram is a service provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (Meta Platforms Ireland). The information automatically collected by Meta Platforms Ireland about how you use Instagram is usually transmitted to the Meta Platforms, Inc. server located at 1 Hacker Way, Menlo Park, California 94025, USA, and stored there.

45. TikTok is a service provided by TikTok Technology Ltd, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

46. Our collaboration with Meta Platforms Ireland Ltd, Meta Platforms, Inc., and TikTok Technology Ltd." is based on standard data protection provisions applicable in the European Union.

47. More information about the data processing carried out by Facebook, Instagram and TikTok can be found in the privacy policy of Facebook, Instagram, and TikTok, respectively.

RIGHTS OF THE DATA SUBJECT (CUSTOMER) AND THE PROCEDURE FOR THEIR IMPLEMENTATION

48. The customer has the right to:

(a) to obtain information on the processing of their personal data;

(b) to have access to the processing of their personal data;

d) to request the erasure of your personal data ("right to be forgotten"), if:

- personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

- The customer withdraws his consent to the processing of personal data on which the data processing is based, and there is no other reason to process the data;

- The customer does not agree with the processing of data and there are no overriding legitimate reasons for processing the data;

(e) to restrict processing where:

- personal data are inaccurate;

- the processing of personal data is illegal, but if the customer does not agree, the data would be deleted;

- The Company no longer needs personal data for the purposes of data processing, but they are needed by the customer in order to assert, execute or defend legal claims;

- The Customer objects to the processing of data if the Company's legitimate reasons do not take precedence over the customer's reasons;

(f) data portability where the processing is based on consent or a contract and the data are processed by automated means;

g) to disagree with the processing of personal data for reasons related to its specific case, when such processing is carried out in the legitimate interests of the controller or a third party, unless the Company proves that the data are processed for compelling legitimate reasons that take precedence over the interests, rights, and freedoms of the customer, or for the purpose of establishing, exercising or defending legal claims.

49. Without prejudice to other administrative or judicial remedies, each data subject (the customer) shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State where he or she has his or her habitual residence, place of work or place where the alleged infringement occurred, if that data subject considers that the processing of personal data relating to him or her is being carried out in breach of this Regulation. In the Republic of Lithuania, such a supervisory authority is the State Data Protection Inspectorate, legal entity code 188607912, address A. Juozapavičiaus g. 6, LT-09310 Vilnius, Lithuania.

50. A customer who wishes Merrelldepot.com to exercise the above rights or who has questions regarding the implementation of his rights can inquire by e-mail.

CONTACTS

51. If you have any questions about this Privacy Policy or Merrelldepot.com privacy practices, you can contact Merrelldepot.com with the contact details below:

Gisko, MB

V. Nagevičiaus g. 3, LT-08237

[email protected]