Privacy Policy

PREAMBLE

1. MB „KARŠTAS DŪMAS“, legal entity code 304986974, registered office address L. Ivinskio 18a, LT-45151 Kaunas, Lithuania (hereinafter - the Company) is the operator of the Online Store www.allstarretro.com.
2. The trust of every online store User in the Company, the online store managed by the Company, and the goods sold and/or services provided through it is important for the Company. This trust, among other things, is inseparable from the proper processing and protection of User Personal Data. Therefore, in this section of the online store website, you will find the provisions of the Company's Privacy Policy (hereinafter – Privacy Policy), which regulate the Company's receipt, use, processing, handling, and other actions related to User Personal Data in the Company's activities, as well as the related User rights and Company obligations.
3. Please note that by using the Online Store website and the services provided therein, the User agrees to the provisions of the Privacy Policy. If the User does not agree to abide by the provisions of the Online Store's Privacy Policy, the User may not continue to use the Company's Online Store website.
4. Please note that the Company has the right to unilaterally amend the provisions of the Privacy Policy at any time at its discretion, by notifying the Users of the Online Store website in advance. Any amendment to the Privacy Policy provisions takes effect from the date of its publication on the Online Store website, therefore, we kindly ask you to read the provisions of this Privacy Policy each time before starting to use the opportunities provided by the Online Store. If, after reading the provisions of this Privacy Policy, you decide to continue using the opportunities provided by the Online Store, you confirm that you agree with and accept them.
5. Users with any questions regarding User Personal Data may contact the Company’s Data Protection Officer directly. By email: info@allstarretro.com
6. More detailed information about the Company and the Company's contact details can be found in the „CONTACTS“ sections of the Online Store website, as well as below in this document.
7. Please note that all actions taken with User Personal Data are carried out in accordance with the provisions of applicable European Union and Republic of Lithuania legislation, primarily the General Data Protection Regulation and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

BASIC CONCEPTS

1. Controller – The Company, i.e., MB „KARŠTAS DŪMAS“, legal entity code 304986974, registered office address L.Ivinskio 18a, LT-45151, Kaunas, Lithuania, which determines the purposes and means of data processing.
2. Online store - an online store, accessible at www.allstarretro.com
3. User - a natural person visiting the online store website and/or a natural person who intends to purchase goods sold by the Company and/or receive services provided by the Company, and/or who purchases them.
4. Personal data – any information relating to an identified or identifiable natural person (data subject).
5. Data recipient - a legal or natural person to whom the Data controller provides personal data.
6. An online store account is an account for accessing the online store website, created through the User's active actions following the sequence of actions specified on the online store website, and which stores the User's Personal Data and order history.
7. Cookie – a small text file sent to each User's device, from which they connect to the Online Store website, and temporarily stored on that device.
8. Direct marketing: An activity aimed at offering goods or services to individuals by mail, telephone, or other direct means, and/or inquiring about their opinions on the offered goods or services.
9. A company partner is a person who supplies goods or services to the Company, with whom joint promotions or projects may be carried out.

Methods of Obtaining Personal Data

1. The company obtains User Personal Data in three ways: when:
   The user provides information about themselves.;
   – Data related to the User is generated automatically when the User uses the Online Store website;
   User data is obtained from third parties.
2. The User of the Company's Online Store Website independently provides information to the Company in the following cases:
3. When a user creates an online store account and places an order in the online store;
4. User communication in any form with the Company during.
5. The second method of obtaining personal data involves a situation where the Company automatically collects information using cookies, with the User's consent to process their personal data on a legal basis, while the User is using the Company's Online Store website and its functionalities.
6. The third method of obtaining Personal Data involves a situation where the Company obtains information about the User from third parties, such as Facebook, Inc. and Google, Inc., based on the User's consent. The Company obtains User Personal Data such as the User's image and the name of their www.facebook.com social network account (profile) from Facebook, Inc., while the Company only obtains User image data from Google, Inc.

User Personal Data Processing Purposes

1. The Company processes User Personal Data for the following purposes:
   - For the purpose of operating an e-commerce company's online store website;
   - For the purpose of organizing and conducting contests, promotions, and games;
   - For the purpose of providing services;
   For the purpose of conducting direct marketing;
   For the purpose of evaluating, improving, and ensuring the quality of professional customer service, as well as resolving potential or existing disputes with Users (audio recording is performed).
2. The Company does not process the User's Personal Data for any purposes incompatible with the purposes specified above.

PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS FOR THEIR PROCESSING

1. The company processes the following User Personal Data in its operations:
    Legal basis for the conclusion and execution of contracts: User's Personal Data such as first name, personal identification code, last name, email address, phone number, goods delivery address, internet protocol (IP) address, bank account number, method of payment for purchased goods, order history, place of residence address, „cookie“ text files, personal income amount, personal passport number, personal marital status data. This Personal Data is processed for the purpose of fulfilling the E-commerce Company's Online Store website;
   - Based on user consent: User's Personal Data, such as first name, last name, phone number, email address, internet protocol (IP) address, video, image, text files „cookies“. This Personal Data is processed for the purpose of organizing and conducting contests, promotions, and games;
    Legal basis for the conclusion and execution of contracts: User's Personal Data, such as first name, last name, personal identification code, phone number, email address, workplace address, personal complaints. This Personal Data is processed for the purpose of providing services advertised on the Company's online store website;
   - Based on user consent: User's Personal Data, such as name, surname, email address, city, purchase category, purchase amount data, text file „cookies,“ image data, social network www.facebook.com account name, residential address. This Personal Data is processed for the purpose of direct marketing;
    On the legal basis of the company's legitimate interest: User Personal Data, such as audio recording (call recording) data. This Personal Data is processed for the purpose of evaluating, improving, and ensuring professional service quality, as well as for the purpose of resolving potential or existing disputes with Users.
   2. The Company notes that it does not collect, process or perform any other data processing operations related to the User's sensitive (special) personal information, such as religious or political views, health, etc.

USER RIGHTS AND THEIR ENFORCEMENT PROCEDURES

1. The Company ensures, abides by, and respects the rights of the Users of the Company's Online Store website:
   the right to information, i.e., the right to be informed about the Company's processing of User's Personal Data;
   - the right to receive information related to the User's Personal Data processed by the Company;
   - the right to correction of User's Personal Data if it is inaccurate or incomplete;
   the right to be forgotten when the Personal data are no longer necessary for the purposes for which they were collected or otherwise processed, and/or the User withdraws the consent on which the processing of Personal data was based and there is no other legal ground for processing the Personal data, and/or the User objects to the processing of Personal data and there are no overriding legitimate grounds for processing the Personal data, and/or when the Personal data have been processed unlawfully, and/or the Personal data must be erased in accordance with a legal obligation established by the law of the European Union or by the law of the Member State of the Company, and/or the User's Personal data were collected in the context of offering information society services;
   - the right to restrict the processing of Personal Data when the User disputes the accuracy of the Personal Data for a period during which the Company can verify the accuracy of the Personal Data and/or the processing of Personal Data is unlawful and the User does not consent to the deletion of Personal Data and instead requests the restriction of their use, and/or the Company no longer needs the User's Personal Data for the purposes of processing, but the User needs them for the purpose of establishing, exercising or defending legal claims, and/or the User has objected to the processing of Personal Data until it is verified whether the Company's legitimate reasons override the User's reasons;
   * the right to object to the processing of Personal Data, i.e., for reasons relating to the User's specific situation, the User has the right to object at any time to the processing of Personal Data concerning them, where such processing is carried out for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company, including profiling, or/and the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Company or by a third party, except where such interests or the fundamental rights and freedoms of the User which require protection of Personal Data override them, in particular where the User is a child, including profiling, or/and when Personal Data are processed for direct marketing purposes, including profiling related to direct marketing. The Company hereby states that, with regard to the exercise of the User's right to object to the processing of Personal Data, it shall no longer process the Personal Data, unless the Company demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Company, or for the establishment, exercise or defence of legal claims.
   – the right to data portability, meaning the User has the right to receive personal data relating to them that they have provided to the Company, when the processing of the User's personal data is based on consent and/or a contract and such User's personal data is processed by automated means. The Company hereby states that, by exercising their right to data portability, the User has the right to have the Company, where technically feasible, transmit personal data directly to another data controller, i.e., a natural or legal person who determines the purposes and means of data processing.
   the right to withdraw consent for the processing of Personal Data, where processing is based on the User's consent.
2. The Company informs that the relevant actions to implement the User Rights specified above will be carried out as soon as possible, but no later than 1 (one) month from the date of your request. Please note that if necessary, the 1 (one) month period may be extended by an additional two months, depending on the complexity and number of requests. In such a case, the Company shall inform the User of such extension within 1 (one) month of receiving the request, along with the reasons for the delay.
3. The Company notes that without prejudice to any other administrative or judicial remedy, each User has the right to lodge a complaint with a supervisory authority, in particular in a Member State of the EU in which their habitual residence, place of work or place of the alleged infringement is located, if the User considers that the processing of personal data relating to them infringes applicable data protection law. In the Republic of Lithuania, such a supervisory authority is the State Data Protection Inspectorate, legal entity code 188607912, address A. Juozapavičiaus g.6, LT-09310 Vilnius, Lithuania.
4. If the User wishes for the Company to exercise the above rights, or if the User has questions regarding the exercise of their rights, please contact the Company.

Personal Data Retention Periods

1. The personal data retention periods managed by the company, depending on the purposes of personal data processing, are as follows:
   User's Personal Data, processed for the purpose of operating the e-commerce Company's Online Store website, shall be stored for 5 (five) years from the User's last use of the Company's Online Store;
   User's Personal Data, processed for the purpose of organizing and conducting contests, promotions, and games, shall be stored for 5 (five) years from the User's last participation in a contest, promotion, or game organized by the Company;
   User's Personal Data, processed for the purpose of providing services, shall be stored for 5 (five) years from the User's last use of the Company's services;
   - User's Personal Data, processed for the purpose of direct marketing, shall be stored for 5 (five) years from the date of receipt of User's consent to process their Personal Data for direct marketing purposes; - User's Personal Data, processed for the purpose of assessing, improving, and ensuring professional service quality, and for resolving potential or existing disputes with customers, shall be stored for 3 (three) years from the date of receipt of the relevant Personal Data.
2. The Company makes all reasonable and prudent efforts to protect the User's Personal Data for the periods specified above. Upon the expiration of the Personal Data retention period, the Company shall destroy the User's personal information.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES AND DISCLOSURE OF PERSONAL DATA

1. The company uses the services of reliable third parties established in Lithuania and other European Union countries, and beyond, such as courier services, leasing companies, direct marketing, and companies providing server rental services.
2. The Company informs the User that in order to achieve the Purposes of Personal Data Processing identified in these Privacy Policy, taking into account the specific Purpose of Personal Data Processing, the Company transfers the User's Personal Data to the third parties specified above.
3. User's personal data is transferred to third parties only to the extent necessary for the direct performance of their duties and to ensure the User's legitimate interests.
4. The Company and the third party to whom the Company transferred User's Personal Data act under a separate agreement(s) which regulate the processing of Personal Data transferred to the third party, the technical and organizational security measures to be implemented, and other necessary legal provisions governing the processing of Personal Data.
5. The User undertakes and is obliged to safeguard their password and login name for their account on the Company's Online Store website, as well as other Personal Data. The User undertakes and is obliged not to disclose Personal Data about themselves or about third parties to any other third parties, if such third party Personal Data becomes accessible to them, and to immediately inform the Company of any identified breaches.
6. The Company strives to ensure the confidentiality of User's personal information, and under normal circumstances of the Company's Online Store website usage, the Company is not entitled to disclose the User's Personal Data to any other Data Recipients, unless required by the process of implementing the services provided by the Company.
7. In such a case, if the Company is obliged by law or other legal acts, the Company must disclose information about the User to the competent authorities.

Personal Data Security

1. The Company takes care of the security and confidentiality of User Personal Data. To prevent unauthorized access to or disclosure of Personal Data and to protect the information it possesses, the Company has implemented appropriate technical and organizational security measures.
2. The Company notes that while the Company endeavors to implement appropriate technical and organizational security measures, these or any other measures cannot guarantee complete security and cannot at all times protect against all possible security breaches.
3. The user has the right to request that their collected Personal Data be deleted by informing the Company via email at info@allstarretro.com.

CHILDREN'S PERSONAL DATA AND PRIVACY

1. The Company's Online Store and the services provided therein are intended for individuals aged 18 and over, therefore the Company does not knowingly collect or process personal data of children under 18 years of age.
2. Parents do not have the right to give their consent to the Company if their minor child under 18 years of age wishes to use the Company's Online Store and its features, such as purchasing a product or service.
3. If you learn that your child has provided personal information to the Company without your consent, please contact the Company at.

DIRECT MARKETING

1. The Company, having obtained clear User consents, has the right to send direct marketing messages to the User via email and/or SMS.
2. The user has the right to withdraw their consent(s) given to the Company for processing their Personal Data for direct marketing purposes at any time.
3. If the User does not wish for their Personal Data to be used for Direct Marketing purposes, the User may:
   - Log in to your Account on the Online Store website and in the „Account“ window, uncheck the box next to the statement „Newsletter by email“ and/or the statement „Newsletter by SMS“, and click the „Update“ link;
   – write an email to info@allstarretro.com or call the company's general customer service line at +370 68673611 and state that you do not wish to receive emails and/or SMS messages;
    unsubscribe from the newsletter by clicking the „unsubscribe“ link at the bottom of the newsletter.
4. Sending of electronic mail and/or SMS messages is terminated only to the e-mail addresses and/or phone numbers explicitly specified by the User.
5. The user has the right to object to the processing of their personal data for direct marketing purposes by informing the Company via email at info@allstarretro.com or by calling the customer service line at +370 68673611.

Slippers

1. To provide the User with the Company's Online Store services in full, Cookies may be stored on the User's device used to access the Online Store, with the User's consent.
2. If the User agrees to the installation of Cookies on their terminal device, the User must click „I agree to the use of cookies“, and if the User does not agree to the installation of Cookies, the User must click „I do not agree to the use of cookies“.
3. Cookies used by the Company are for transmitting information over an electronic communications network. Another type of cookie is used to collect information for calculating site traffic (collecting statistical information), to present content that matches the User's interests, and to save browsing history. The Company does not use this type of cookie, but draws the Users' attention that some Company Partners may use this type of cookie, therefore, if a User suspects that this type of cookie is being used without their consent, they should contact the specific Company Partner.
4. If the User agrees to cookies being stored on their device, the User has the right to withdraw their consent at any time by clicking on the „Withdraw Cookie Consent“ link or by changing their internet browser settings. However, in such cases, certain functionalities of the Online Store may not be available to them.

EFFECTIVE DATE OF PRIVACY POLICY

1. These Privacy Policy terms are effective as of May 25, 2018. Any changes to the Privacy Policy will be announced and publicly visible on the Company's Online Store website.

CONTACT INFORMATION
MB „HOT SMOKE“
Legal entity code 304986974
L. Ivinskio St. 18a, Kaunas, LT-45151

+370 68673611
Email info@allstarretro.com

Privacy Policy last updated: July 22, 2020.