Processing of Personal Data

1. Scope of Data Processing. The provisions outlined in this section apply to the personal data submitted by the Buyer and/or their representatives via the bactohouse.eu website during the ordering of goods (purchase and conclusion of the sales contract) in the store.

2. Data Collection and Purpose. When the Buyer registers on bactohouse.eu, they must provide personal data (name, surname, email address, phone number, delivery address, and order details). This data is essential for e-commerce purposes, specifically for the ordering and delivery of selected goods. The Buyer acknowledges that providing this data is necessary to conclude and execute the purchase-sale contract. Without this information, the Buyer will not be able to place orders.

3. Usage and Legal Basis. The Seller confirms that the personal data provided will be used exclusively for e-commerce purposes, including the ordering and delivery of goods selected in the bactohouse.eu e-store. The legal basis for processing this data is:

   • Article 6(1)(b) of the Regulation, which states that processing is necessary for the performance of a contract to which the data subject is a party.
   • Article 6(1)(c) of the Regulation, which states that processing is necessary for compliance with a legal obligation to which the Seller is subject, such as maintaining accounting records.

   The Buyer’s data will be processed for the duration of the purchase-sale agreement and stored for 10 years after the completion of the agreement.

4. Communication. The Buyer understands that after placing an order, informational messages necessary to fulfill the order and/or deliver the goods will be sent to the provided contact details (email and/or phone).

5. Data Sharing with Third Parties. The Buyer is aware that personal data provided to bactohouse.eu during the ordering process may be transferred to third-party parcel delivery service providers (e.g., UAB “Omniva LT”, AB “Lietuvos paštas”). The Buyer understands that to ensure proper identification and secure delivery of the goods, the Seller and/or the third-party delivery service may request a personal identification document (e.g., passport, identity card, or new model driver’s license) upon pickup. The Buyer and their representatives acknowledge that during this process, the Seller and/or the third-party delivery service may copy the personal identification data (e.g., document number) and process this data to confirm the correct delivery of the order.

6. Data Transfer to Data Processors. The Buyer is informed that their personal data may be transferred to third parties (data processors) who assist in administering the Website and storing data. These data processors may include database software providers, database administration service providers, cloud service providers, and others. Additionally, personal data may be transferred to competent government and/or law enforcement authorities (e.g., courts, police, supervisory authorities), legal and/or debt collection service providers, and goods manufacturers (in the case of warranty services), but only as required by applicable legislation and in accordance with legal procedures, or to protect the Seller’s rights, employee safety, and resources, and to file, submit, or defend legal claims.

7. Data Security Measures. The Seller applies appropriate technical and organizational security measures to ensure the protection of all processed personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and other forms of unlawful processing.

8. Buyer’s Data Subject Rights. The Buyer (if a natural person) and/or their representatives are informed about their rights as data subjects, which include: 8.1. Requesting access to and receiving a copy of their personal data. 8.2. Requesting correction or limitation of inaccurate or incomplete personal data. 8.3. Requesting deletion or restriction of redundant or unlawfully processed personal data. 8.4. Objecting to the processing of their personal data. 8.5. Requesting the transfer of their personal data in a structured, computer-readable format (“right to data portability”). 8.6. Withdrawing consent at any time when data processing is based on the data subject’s consent (Article 6(1)(a) of the Regulation). Withdrawal of consent does not affect the legality of data processing prior to the withdrawal. 8.7. Submitting a complaint to the State Data Protection Inspectorate (ada@ada.lt).

9. Exercising Data Subject Rights. The Buyer, upon proper identification, can exercise their rights by contacting the Seller via email at info@bactohouse.eu or by registered mail at Kretingalės st. 3, Kalotė, LT-92284 Klaipėda district.

10. Response to Data Subject Requests. Upon receiving a request regarding the data subject’s rights, the Seller will respond promptly, but no later than within one (1) month from the date of the request. If necessary, considering the complexity and number of requests, this period can be extended by another month, with the Buyer being informed of the extension and reasons within the first month. The information will be provided free of charge. However, if the requests are manifestly unreasonable or disproportionate, particularly due to their repetitive nature, the Seller may charge a reasonable fee, considering the administrative costs, or refuse to act on the request.