Privacy Policy

This Privacy Policy, together with the https://silelis.com website's terms of use, governs your use of UAB Sponge's website https://silelis.com (hereinafter - the Website).

This privacy policy informs you about the main purposes of personal data collection and processing, explains how long data is stored, to whom it is provided, what rights data subjects have, and where to apply for their implementation or other issues related to personal data processing.

Personal data is processed in accordance with the European Union's General Data Protection Regulation (EU) 2016/679 (hereinafter - the Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts regulating personal data protection.

UAB Sponge adheres to the following main data processing principles:

personal data is collected only for clearly defined and legitimate purposes;
personal data is processed only lawfully and fairly;
personal data is regularly updated;
personal data is stored securely and no longer than required by the established data processing purposes or legal acts;
personal data is processed only by those Company employees who have been granted such a right by their work functions or by properly authorized data processors.

1. Definitions

1.1. Data Controller – UAB Sponge (hereinafter - the Company), legal entity code 302494020, registered office address Molėtų pl. 47F, Vilnius, LT-08409.

1.2. Data Subject – any natural person whose data is processed by the Company. The Data Controller collects only those data subject's data that are necessary for the Company's activities and/or for visiting, using, browsing the Company's websites, Facebook, Instagram pages, etc. (hereinafter - the Website). The Company ensures that collected and processed personal data will be secure and used only for a specific purpose.

1.3. Personal Data – any information directly or indirectly related to a data subject whose identity is known or can be directly or indirectly identified by using relevant data. Personal data processing is any operation performed with personal data, including collection, recording, storage, editing, modification, granting access, submitting inquiries, transfer, archiving, etc.

1.4. Consent – any freely and consciously given affirmation by which the data subject agrees to the processing of their personal data for a specific purpose.

2. Sources of Personal Data

2.1. Personal data is provided by the data subject themselves. The data subject contacts the Company, uses the services provided by the Company, buys goods and/or services, participates in a loyalty program, lotteries or contests, surveys or research, leaves comments, asks questions, subscribes to newsletters, contacts the Company requesting information, etc.

2.2. Personal data is obtained when the data subject visits the Company's website. The data subject fills in the forms on it or for some reason leaves their contact details, etc.

2.3. Personal data is obtained from other sources. Data is obtained from other institutions or companies, publicly available registers, etc.

3. Processing of Personal Data

3.1. By providing personal data to the Company, the data subject agrees that the Company may use the collected data to fulfill its obligations to the data subject, providing services that the data subject expects.

3.2. The Company processes personal data for the following purposes:

3.2.1. Purchase Data

Purchase data is processed for the purposes of concluding and executing contracts, organizing and conducting public procurement procedures.

We collect personal information that you have provided to us when purchasing goods on the Silelis.com website:

first name, last name;
contact details: phone number, email address;
delivery address;
payment data, including but not limited to bank account number;
IP address;
gender;
purchase history.

3.2.1.1. Payment Processing

Payments in the e-shop are processed using the makecommerce.lt platform, which is managed by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), therefore your personal information necessary for payment execution and confirmation will be transferred to Maksekeskus AS.

3.2.2. Registration Data

The processing of such personal data is carried out based on the agreement for the use of the Silelis.com website, concluded between you and Silelis.com.

Mandatory registration data:

email address.

Alternative data that you provide solely at your discretion:

first name, last name;
phone number;
delivery address.

When creating your account on the Website, you can provide additional personal data that is not necessary to use the Silelis.com website.

3.2.3. Cookies

Your browsing and behavior history on the Silelis.com website.

3.2.4. Communication Preferences

Communication preferences data is processed based on the agreement for the use of the Silelis.com website, concluded between Silelis.com and you.

This includes your choices regarding receiving our marketing offers and your communication preferences. We collect the following data about you:

first name(s), last name(s);
contact details: phone number, email address;
history of your publicly expressed opinions about products sold by Silelis.com;
wish list;
history of our mutual communication;
IP address;
shopping cart data;
survey response history;
purchase data, order history, payment history.

3.2.5. Administration of Inquiries, Comments, and Complaints

For this purpose, the following data is processed:

first name, last name or only first name;
contact details: phone number, email address;
text of the question, comment, or complaint.

3.2.6. Marketing Data

Marketing data is processed based on your consent. To provide you with general offers of our products and our organized lotteries, promotions, and projects, we process the following personal data:

first name, last name;
contact details: phone number, email address.

3.2.7. Content You Share

You are allowed to share content on the Silelis.com website. We collect the content you create and upload it to our website. Please note that you publish the content yourself, therefore you are fully responsible for the content you share.

4. Provision of Personal Data

4.1. The Company undertakes to observe the duty of confidentiality with respect to data subjects. Personal data may be disclosed to third parties only if necessary to conclude and execute a contract for the benefit of the data subject, or for other legitimate reasons.

4.2. The Company may provide personal data to its data processors who provide services to the Company and process personal data on behalf of the Company. Data processors have the right to process personal data only according to the Company's instructions and only to the extent necessary to properly fulfill the obligations set forth in the contract.

The Company transfers personal data to the payment processing service provider Maksekeskus AS, operating through the makecommerce.lt platform, when this is necessary for payment execution and confirmation.

4.3. The Company may also provide personal data in response to requests from courts or state authorities to the extent necessary to properly comply with applicable legal acts and instructions from state authorities.

4.4. The Company guarantees that personal data will neither be sold nor rented to third parties.

5. Processing of Minors' Personal Data

Individuals under 14 years of age may not provide any personal data through the Company's website. If a person is under 14 years of age, to use the Company's services, written consent from a representative, father, mother, or guardian must be provided for the processing of personal data before submitting personal information.

6. Personal Data Storage Period

6.1. Personal data collected by the Company is stored in printed documents and/or in the Company's information systems. Personal data is processed no longer than necessary to achieve the purposes of data processing or no longer than required by data subjects and/or provided for by legal acts.

6.2. You have the right to request that we stop processing your personal data and delete it. Your personal data will be deleted upon receipt of your request.

6.3. Your personal data will not be deleted from our database if, after receiving your request, we determine that:

Your personal data is necessary to achieve the purposes for which it was collected or processed;
You have not withdrawn your consent to the processing of your personal data;
You have not consented to the processing of your personal data, but such data processing is necessary for our legitimate interests;
We are obliged to process your personal data by applicable European Union and national legal acts;
We need to process your data for the purpose of establishing, exercising, or defending legal claims.

You can submit a request for the deletion of your personal data:

by email: vilnius@silelis.com
by phone: +370 611 13332

7. Data Subject Rights

7.1. Right to receive information about data processing.
7.2. Right to access processed data.
7.3. Right to request data rectification.
7.4. Right to request data erasure ("Right to be forgotten"). This right does not apply if the personal data requested to be erased is processed on another legal basis, such as processing necessary for the performance of a contract or compliance with legal obligations under applicable laws.
7.5. Right to restrict data processing.
7.6. Right to object to data processing.
7.7. Right to data portability. The data subject does not have the right to data portability for personal data processed in non-automated structured files, such as paper files.
7.8. Right to demand that decisions based solely on automated data processing, including profiling, not be applied.
7.9. Right to lodge a complaint regarding personal data processing with the State Data Protection Inspectorate.

8. Company's Responsibility

The Company must enable the data subject to exercise the above-mentioned data subject rights, except in cases prescribed by law when it is necessary to ensure state security or defense, public order, prevention, investigation, detection or prosecution of criminal offenses, important economic or financial interests of the state, prevention, investigation and detection of official or professional ethical violations, as well as the protection of the rights and freedoms of the data subject or other persons.