1. Definitions

For the purposes of this Privacy Policy, the following terms are used:

"Personal Data" or "Data" means any information about a User who is identified or identifiable, directly or indirectly ("Data Subject"). "Processing" means any operation or sequence of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, sorting, organisation, storage, adaptation or alteration, retrieval, access, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination with other data, restriction, erasure or destruction. The "Data Controller" is UAB "NMF Home", company code 145770565, registered office at J. Basanavičiaus g. 103C, Šiauliai, Republic of Lithuania, which establishes the purposes and means of processing of Your Data as defined in this Privacy Policy. "Website" means the website of the Data Controller whose address is https://www.nmfhome.lt. "You", "Your", "Your", "You" or "User" means the natural person who has visited the Website of the Data Controller and whose Data is processed in accordance with this Privacy Policy. "Newsletter" means the newsletter sent by the Data Controller about the latest offers or sales of the Data Controller, which Users can order on the Website. "Privacy Policy" means this Privacy Policy, which sets out the Controller's basic rules for the collection, collection, processing and storage of Personal Data applicable to Users' use of the Website. "Regulation" means Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which comes into force in the European Union on 25 May 2018 and repeals Directive 95/46/EC. "Cookies" are small text documents with a unique identification number that are transmitted from the Website to the hard drive of the User's computer to enable the Data Controller to distinguish the User's computer and to view the User's online activity. "Consent" means any freely given, specific and unambiguous duly informed expression of your will, by a statement or unambiguous action, by which you consent to the processing of Personal Data relating to you. In this Privacy Policy, the terms mentioned and hereinafter used shall be understood as defined and explained in the Regulation, which can be consulted by clicking on the following link here.


2. Key information

2.1. This Privacy Policy sets out the terms and conditions for the processing of your Personal Data when using the Data Controller's Website.
2.2. The terms and conditions set out in this Privacy Policy apply each time you access the content and/or service we provide and purchase goods sold in our online shop.
2.3. We confirm that this Privacy Policy has been drawn up and your Personal Data is processed on this Website in accordance with the requirements of the Regulation and the legislation of the Republic of Lithuania.
2.4. We use all technical and administrative safeguards available to us on our Website to protect the Personal Data we collect about you from loss, unauthorised use and transfer.
2.5. Please read this Privacy Policy carefully, as by using our Website and by purchasing goods from our Website, you consent to our use of your Personal Data for the purposes and by the means stated in this Privacy Policy.


3. Information we collect about you:

3.1. In order to properly provide our services, we collect the following information about you on the Website:
3.1.1. the personal data you provide:

  • Name;
  • Surname;
  • your place of residence (address); postal code;
  • telephone number;
  • email address information relating to the payment you have made (name of the bank, bank account number and other information required in the accounts).

3.1.2. Automatically collected data:

  • On our Website, we use Cookies, which also collect Data that reveals the characteristics of the use of our services or automatically generated visit statistics.

3.1.3. Data from third party sources:

  • We may obtain information about you from public and commercial sources (to the extent permitted by applicable law) and link it to other information we receive from or about you. We may also receive information about you from third party social networking services when you access them, for example, through your Facebook account.

3.1.4. Additional Data:

  • With your separate Consent, we may also collect and process other, additional Data about you, your device or your use of our Website content or services.

3.2. You may choose not to provide us with certain Data (e.g. information requested when registering in our online shop), but in certain cases such non-provision of Data may prevent you from using the online shopping service we offer.

4. Purpose of use of personal data

4.1. We process the Personal Data about you that you provide and that we collect for the following purposes:
 4.1.1. to register you on our system in order for you to use our online purchase service;
 4.1.2. for the payment of your shopping cart through the external banking service provider of your choice;
 4.1.3. to fulfil your order and to deliver the purchased goods to the address you have specified;
 4.1.4. subject to your separate Consent, for direct marketing purposes, such as sending you a Newsletter, promotional offers and notifications of promotions or news from us;
 4.1.5. for billing and accounting purposes;
 4.1.6. to improve the performance of our Website;
 4.1.7. to contact you, answer your questions, share information or send you a newsletter about news and offers if you have subscribed.

5. Disclosure of personal data

5.1. We undertake not to disclose or transfer your Personal Data to unaffiliated third parties, except as follows:
 5.1.1. if this transfer is subject to your specific consent;
 5.1.2. where it is necessary for the performance of our contract with you and the proper provision of our services, to our partners who provide delivery or other services related to your order. We will only provide these service providers with as much of your Personal Data as is necessary to fulfil the specific obligation;
 5.1.3. the transfer of Data is mandatory upon request to law enforcement authorities in accordance with the procedure established by the legislation of the Republic of Lithuania;
 5.1.4. in other cases provided for in the Regulation and the legislation of the Republic of Lithuania.

6. Data retention periods

6.1. The Data Controller undertakes to store the Users' personal data for the specific period of time specified in the applicable laws and regulations of the Republic of Lithuania and/or in this Privacy Policy, but no longer than is necessary under the applicable laws and regulations of the Republic of Lithuania or in accordance with the purposes of this Privacy Policy for the purpose of Data processing.
6.2. If you register on our Website, but do not make any payment and do not purchase any of the products offered by us, we will retain the Personal Data provided by you on our Website for a maximum period of 2 (two) years. In this case, 5 (five) calendar days before the expiry of the 2 (two) year period, we will send an enquiry to the email address you have provided to ask you whether you agree to the further processing of your Data. If you do not agree or do not reply within the aforementioned 5 (five) calendar days, we will delete all Data relating to you, including your account in the system.
6.3. after you have registered on our Website and have made at least one payment within 2 (two) years for the purchase of goods offered by us, or have purchased goods offered on the Website without having previously registered (shopping as a guest), we will retain the Personal Data you have provided on the Website for 10 (ten) years from the moment of your last order, in accordance with Clause 10.15 of the order of the Archivist of the Government of the Republic of Lithuania dated 9 March 2011 "On the Approval of the Index of General Terms of Retention for Documents". In this case, 5 (five) calendar days before the expiry of the 10 (ten) year period, we will send an inquiry to the email address you have provided as to whether you agree to the further processing of your Data. If you do not agree or do not reply within the aforementioned 5 (five) calendar days, we will delete all Data relating to you, including your account in the system.
6.4. Once you have registered on our Website and subscribed to our Newsletter, we will store your Data and send you the Newsletter in accordance with the procedures and time limits set out in clauses 6.2 and 6.3 of this Privacy Policy.
6.5. If you do not register on our Website, but subscribe to our Newsletter by providing your email address, we will protect your Data (email address) and send the Newsletter in accordance with the procedures and time limits set out in clauses 6.2 and 6.3 of this Privacy Policy.

7. Your rights

7.1. When using our Website as a User, you have the following rights in relation to the processing of your Data:
 7.1.1. to know what Personal Data we process and for what purpose;
 7.1.2. to request the rectification or completion of your Personal Data (right to rectification);
 7.1.3. to request the transfer of the Personal Data to another controller (right to transfer);
 7.1.4. to destroy any Data we process about you (the "right to be forgotten");
 7.1.5. request that we restrict the processing of your Personal Data on one of the following legitimate grounds (right to restrict);
 7.1.6. to object to the processing of your Personal Data where it is processed or intended to be processed for direct marketing purposes.
7.2. Based on the Personal Data you have provided, profiling of your Personal Data for the purpose of direct marketing may be carried out in order to provide you with customised solutions and offers. You may withdraw or object to the processing of your Personal Data by automated processing, including profiling, at any time by contacting us using the contact details provided in this Privacy Policy.
7.3. You have the right to submit any request or instruction relating to the processing of your Personal Data to the Data Controller in writing at the contact details (email or postal address) provided in this Privacy Policy.
7.4. Upon receipt of such a request or instruction, the Data Controller shall, no later than within 30 (thirty) days from the date of the request, provide a response and perform the actions specified in the request or refuse to perform them, stating the reasons for refusal. Where necessary, the time limit may be extended by a further two months, depending on the complexity and number of requests. In this case, the Data Controller shall inform the User of such extension within 30 (thirty) days of receipt of the request, together with the reasons for the delay.
7.5. If the User notices unlawful processing of his Data or if a dispute arises with the Data Controller, he shall have the right at any time to apply to the out-of-court dispute resolution authority in Lithuania, the State Data Protection Inspectorate, in accordance with the procedure set out in its website, which is accessible here.
7.6. The Data Controller may refuse to allow the User to exercise the rights listed above, except for the refusal to consent to the processing of Personal Data by means of direct marketing, and to apply to an out-of-court dispute resolution body, where, in the cases provided for by law, it is necessary to ensure the prevention, investigation, and detection of crimes, breaches of official or professional ethics, as well as the protection of the data subject's or other persons' rights and freedoms.

8. Newsletter

8.1. On our Website, Users can subscribe to the Newsletter by registering and creating an account or without registering, by providing their email address and consenting to the processing of Personal Data by the Data Controller for direct marketing purposes.
8.2. Before consenting to the processing of Personal Data, the User shall be informed of this Privacy Policy and shall confirm that he/she is at least 14 years old.
8.3. The User may at any time unsubscribe from the Newsletter sent by the Data Controller by writing to the postal address indicated on the Website or by selecting the "Unsubscribe" section at the bottom of the Website.
8.4. The procedure and time limits for sending the Newsletter are set out in clauses 6.4 and 6.5 of this Privacy Policy.

9. Technical and security measures

9.1. Personal data shall be protected against loss, unauthorised use and alteration. We have put in place physical and technical measures to protect all information we collect for the purposes of providing our services. We remind you that although we take reasonable steps to protect your Data, no website, online transaction, computer system or wireless connection is completely secure.

10. Third party websites, services and products on our websites

10.1. When you use our Website, you may be redirected to websites that are not under our control. We may also allow third party websites or applications to link to our Website. We are not responsible for the privacy policies of such third parties or any content on other websites. We encourage you to read and become familiar with the privacy policies and other legal documents of such countries and websites.

11. Changes to the Privacy Policy

11.1. The Data Controller may, at its sole discretion, amend this Privacy Policy from time to time.
11.2. The Data Controller recommends that you regularly visit the Data Controller's Website to find the most up-to-date version of the Privacy Policy. The Data Controller may notify you of changes to the Privacy Policy using the contact details you provide.

12. Contact information

12.1. If you have any questions regarding this Privacy Policy or Personal Data, you may contact us at the contact details provided on the Data Controller's website or by email at [email protected].