Privacy policy
GENERAL PROVISIONS
1. The controller of the online store www.irankiuturgus.com, the irankiuturgus.com Facebook and Instagram social media accounts, and the irankiuturgus.com YouTube account (hereinafter jointly referred to as the “Accounts”) is MB Vespula, legal entity code 305184895, registered address J. Savickio g. 4-7, LT-01108 Vilnius, Lithuania (hereinafter also referred to as the “Company”).
2. These privacy rules (hereinafter referred to as the “Rules”) have been prepared in accordance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts and regulations of the European Union and the Republic of Lithuania, and govern the receipt, use, management, processing and other actions related to the processing of personal data of Account users, as well as the rights of Account users and the obligations of the Company.
3. By using the Accounts and the services provided therein, the Account user agrees to the provisions of these Rules. If the Account user does not agree with the provisions of the Rules, he or she is prohibited from further using the Accounts and the services provided therein.
4. The Company has the right, unilaterally and at its sole discretion, to change the provisions of the Rules at any time by publishing such changes in the “News” section of the online store www.irankiuturgus.com. Any amendment to the provisions of the Rules shall enter into force from the day of its publication in that section.
5. Information regarding the processing of personal data and other related matters is provided by email at info@irankiuturgus.com and by phone at +370 635 76667.
6. Definitions:
6.1. Controller – MB Vespula, legal entity code 305184895, registered address J. Savickio g. 4-7, LT-01108 Vilnius;
6.2. Accounts – the Account user’s account in the online store www.irankiuturgus.com, the Company’s Facebook and Instagram social media accounts, the Company’s account on the YouTube video-sharing platform, and any other Company accounts on social media or similar platforms that may be created in the future;
6.3. Account user – a natural or legal person entitled to use the Accounts in accordance with these Rules and the Website use and goods purchase-sale rules approved by the Company;
6.4. Personal data – any information relating to a natural person whose identity can be established directly or indirectly by using data identifying the person (name, surname, address, personal code, etc.) or based on characteristics specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity;
6.5. Data recipient – a natural or legal person to whom the Controller provides personal data;
6.6. Personal account – the personal account of an Account user on the website www.irankiuturgus.com, voluntarily created by the user by following the instructions provided by the Controller. The online store account stores the Account user’s Personal Data and information about orders.
6.7. Cookie – a small data file stored on the Account user’s computer or other device used to access the Accounts, helping to provide the content of the Accounts more quickly and reliably and to use the services provided therein. Cookies are also used for advertising or direct marketing purposes.
6.8. Company partners – natural or legal persons providing goods or services to the Controller.
PURPOSES OF PROCESSING THE ACCOUNT USER’S PERSONAL DATA
7. The Controller processes the Personal Data of Account users for the following purposes:
7.1. carrying out e-commerce in the online store www.irankiuturgus.com;
7.2. organising and conducting games, contests, promotions and other marketing measures;
7.3. direct marketing;
8. The Company does not process the Account user’s Personal Data for any purposes other than those specified in Clause 7 of these Rules.
PROCESSED PERSONAL DATA AND LEGAL GROUNDS FOR PROCESSING
9. The Company processes the following Personal Data in the course of its activities:
9.1. Personal Data necessary for concluding and performing a purchase-sale agreement: name, surname, personal code (if applicable), email address, phone number, delivery address of the goods, internet protocol (IP) address, bank account number, payment method for the purchased goods, goods order history, residential address, Cookies, amount of personal income (if applicable), passport number (if applicable), data on marital status (if applicable);
9.2. Subject to the Account user’s consent, the following Personal Data are collected for organising and conducting games, contests, promotions and other marketing measures: name, surname, phone number, email address, internet protocol (IP) address, video recording, image, Cookies;
9.3. Subject to the Account user’s consent, the following Personal Data are collected for carrying out direct marketing measures: name, surname, email address, city, purchase category, purchase amount data, Cookies, image data, login names for social networks www.facebook.com, www.instagram.com, www.youtube.com or other social networks, residential address.
10. The Company does not collect, process or carry out any other data processing operations related to the Account user’s sensitive (special category) personal information, such as religious or political views, health data, etc.
USER RIGHTS AND THE PROCEDURE FOR THEIR IMPLEMENTATION
11. The Company ensures the following rights of Account users:
11.1. the right to information, i.e. the right to be informed about the Company’s processing of Personal Data;
11.2. the right to obtain information related to the Account user’s Personal Data processed by the Company;
11.3. the right to rectification of the Account user’s Personal Data if they are inaccurate or incomplete;
11.4. the right to be forgotten where the Personal Data are no longer necessary for achieving the purposes for which they were collected or otherwise processed, and/or the Account user withdraws the consent on which the processing of Personal Data was based and there is no other legal basis for processing the Personal Data, or/and the Account user objects to the processing of Personal Data and there are no overriding legitimate grounds for processing the Personal Data, or/and where the Personal Data have been processed unlawfully, or/and the Personal Data must be erased in order to comply with a legal obligation laid down by European Union or Lithuanian law, or/and the user’s Personal Data were collected in relation to the offer of information society services;
11.5. the right to restrict the processing of his or her Personal Data where the accuracy of the Personal Data is contested for a period enabling the Company to verify the accuracy of the Personal Data, and/or where the processing of Personal Data is unlawful and the Account user opposes the erasure of the Personal Data and requests the restriction of their use instead, or/and where the Company no longer needs the Account user’s Personal Data for processing purposes, but they are required by the Account user for the establishment, exercise or defence of legal claims, or/and the Account user has objected to the processing of Personal Data pending the verification whether the Company’s legitimate grounds override those of the Account user;
11.6. the right to object to the processing of his or her Personal Data, i.e. the Account user shall have the right, on grounds relating to his or her particular situation, at any time to object to the processing of Personal Data concerning him or her where such processing is carried out for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company, including profiling, or/and where the processing of Personal Data is necessary for the purposes of the legitimate interests pursued by the Company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Account user which require protection of Personal Data, in particular where the Account user is a child, including profiling, or/and where the Personal Data are processed for direct marketing purposes, including profiling related to such direct marketing. Following the implementation of the Account user’s right to object to the processing of Personal Data, the Company shall no longer process the Personal Data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Company, or for the establishment, exercise or defence of legal claims;
11.7. the right to data portability, i.e. the Account user shall have the right to receive the Personal Data concerning him or her, which he or she has provided to the Company, where the processing of his or her Personal Data is based on consent and/or a contract and such Personal Data are processed by automated means. In exercising the right to data portability, the Account user shall have the right to have the Personal Data transmitted directly by the Company to another data controller, where technically feasible, i.e. to a natural or legal person determining the purposes and means of the processing of data;
11.8. the right to withdraw consent to the processing of Personal Data where such processing is based on the Account user’s consent.
12. Appropriate actions implementing the above-mentioned rights of Account users shall be carried out as soon as possible, but no later than within 1 (one) month from the date of the Account user’s request. Where necessary, the 1 (one) month period may be extended by a further two months, taking into account the complexity and number of the requests. In such a case, the Company shall inform the Account User of such extension within 1 (one) month from receipt of the request, together with the reasons for the delay.
13. Without prejudice to the possibility of any other administrative or judicial remedy, each Account user shall have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of his or her habitual residence, place of work or the place of the alleged infringement, if the person considers that the processing of Personal Data relating to him or her infringes the applicable legal acts on data protection. In the Republic of Lithuania, such supervisory authority is the State Data Protection Inspectorate, legal entity code 188607912, address A. Juozapavičiaus g. 6, LT-09310 Vilnius, Lithuania.
PERSONAL DATA RETENTION PERIODS
14. The retention periods for Personal Data processed by the Company, taking into account the purposes of the processing of Personal Data, are as follows:
14.1. the Account user’s Personal Data processed for the purpose of carrying out e-commerce in the Company’s online store www.irankiuturgus.com shall be retained for 5 (five) years from the last use of the Company’s online store;
14.2. the Account user’s Personal Data processed for the purpose of organising and conducting contests, promotions and games shall be retained for 5 (five) years from the Account user’s last participation in the relevant contest, promotion or game;
14.3. the Account user’s Personal Data processed for the purpose of carrying out direct marketing shall be retained for 5 (five) years from the date of receipt of consent to process his or her Personal Data;
15. The Company makes all reasonable and justified efforts to ensure that the Account user’s Personal Data are protected during the above-mentioned periods. Upon expiry of the Personal Data retention period, the Account user’s personal information is destroyed.
TRANSFER OF PERSONAL DATA TO THIRD PARTIES AND DISCLOSURE OF PERSONAL DATA
16. The Company uses the services of reliable third parties established in Lithuania and other European Union Member States and beyond, such as courier services, leasing companies, companies providing direct marketing services and server rental services.
17. The Company informs the Account user that, in order to achieve the purposes of processing Personal Data identified in these Privacy Rules, and taking into account the specific purpose of processing Personal Data, the Company transfers his or her Personal Data to the above-mentioned third parties.
18. The Account user’s Personal Data shall be transferred to third parties only to the extent necessary for the direct fulfilment of their duties and for ensuring the legitimate interests of the Account user.
19. The Company and the third party to whom the Company has transferred the Account user’s Personal Data shall act in accordance with a separate agreement or agreements regulating the processing actions concerning the Personal Data transferred to the third party, the technical and organisational security measures to be implemented, and other necessary legal provisions governing the processing of Personal Data.
20. The Account user undertakes and is obliged to keep safe his or her Personal account login password and username, as well as other Personal Data. The Account user undertakes and is obliged not to disclose Personal Data either about himself or herself or about third parties to any other third parties if such third-party Personal Data have become accessible to him or her, and to immediately inform the Company about identified violations.
21. The Company does not disclose the Account user’s Personal Data to any other Personal Data recipients unless this is required by the process of providing the Company’s services.
22. Where the Company is required by laws or other legal acts, it must disclose information about the Account user to the competent authorities.
PERSONAL DATA SECURITY
23. The Company takes care of the security and confidentiality of the Account user’s Personal Data. In order to prevent unlawful access to or unlawful disclosure of Personal Data and to protect the information held, the Company has implemented appropriate technical and organisational security measures.
24. The Account user has the right to request that the accumulated Personal Data be deleted by informing the Company thereof by email at info@irankiuturgus.com.
CHILDREN’S PERSONAL DATA AND PRIVACY
25. The Company’s online store www.irankiuturgus.com and the services provided therein are intended for persons aged 18 and over, therefore the Company does not collect or process the Personal Data of minors under 18 years of age, except in cases where parental or guardian consent is provided or where minors have the right, in accordance with the procedure established by legal acts, to independently dispose of their funds.
DIRECT MARKETING
26. The Company, having obtained the Account user’s explicit consent, has the right to send him or her Direct Marketing messages by email and/or SMS text message.
27. The Account user has the right at any time to withdraw the consent given for the processing of his or her Personal Data for Direct Marketing purposes.
28. If the Account User no longer wishes his or her Personal Data to be used for Direct Marketing purposes, he or she may:
28.1. log in to his or her Personal account and, in the “Newsletters” section, untick the box next to the text “Subscribers” and click the “Save” link;
28.2. send an email to info@irankiuturgus.com stating that he or she does not wish to receive emails and/or SMS messages;
28.3. unsubscribe from the newsletter by clicking the “unsubscribe” link at the bottom of the newsletter.
29. The sending of emails and/or SMS messages shall be terminated only upon receipt of a message from the Account user’s clearly indicated email address.
COOKIES
30. In order for the services of the Company’s online store www.irankiuturgus.com to be provided to the Account user in full, Cookies may be stored on the Account user’s device used to access this online store, subject to the Account user’s consent.
31. If the Account user agrees that Cookies may be stored on the terminal device used by him or her, the User must click “I agree”. If the Account user does not agree to the use of Cookies, further browsing of the Accounts is prohibited.
32. The Cookies used by the Company are intended for the transmission of information over electronic communications networks. Another type of Cookies is intended to collect information to calculate traffic (collect statistical information), provide content corresponding to the Account user’s interests and save browsing history. The Company does not use this type of Cookies, however some of the Company’s partners may use them, therefore if the Account user believes that this type of Cookies is being used without his or her consent, he or she should contact the relevant Company partner.
33. If the Account user has agreed that Cookies may be stored on the terminal device used by him or her, he or she has the right at any time to withdraw the consent given by changing the settings of his or her internet browser, however in such a case certain functions of the online store www.irankiuturgus.com may not work for him or her.
ENTRY INTO FORCE OF THE PRIVACY RULES
34. These privacy rules shall enter into force on 31 December 2025. Any changes to the Rules shall be published in the “News” section of the online store www.irankiuturgus.com.