Privacy policy

I. DEFINITIONS

1. We or the Seller or OXFORD – UAB Pora batų, a private legal entity registered in the Register of Legal Entities of the State Enterprise "Registrų centras" of the Republic of Lithuania, legal entity code 304928191, registered office address at Malūnų g. 6-9, Vilnius.

2. Store – OXFORD online store: www.oxford.lt.

3. You or Buyer – any person purchasing goods in the Store. A natural person may be a Buyer only if they have reached the age of majority (18 years). A minor between fourteen and eighteen years of age may be a Buyer only with the consent of their parents or guardians.

4. Account – the result of the Buyer's registration in the Store, creating an account that stores their personal data and order history.

5. Cookie – a small file that is sent to a device when any person visits the Store. This concept covers not only cookies but also the use of similar tools.

6. Password – a unique combination of letters and numbers created by you and known only to you, which is entered when you first register in the Store and later used to log in to the Account.

7. Browser – a programme designed to display internet pages (websites) on your device.

8. Personal Data – any information about a natural person whose identity has been established or can be established.

9. Personal Data Controller – UAB Pora batų, 304928191, Malūnų g. 6-9, Vilnius.

10. Privacy Policy – this document, which sets out the main rules for processing Personal Data when using the Store.

11. IP address – a unique number assigned to every computer connected to the Internet, known as an Internet Protocol (IP) address. Since these numbers are usually assigned according to country blocks, an IP address can often be used to identify the country in which the computer connects to the Internet.

12. Rules – the approved valid rules for the purchase and sale of goods in the online store of UAB Pora batų.

13. Direct marketing – activity intended to offer goods or services to individuals by post, by telephone or by other direct means and/or to ask for their opinion about the goods or services offered.

II. GENERAL PROVISIONS

14. This Privacy Policy sets out the main rules for the processing of Personal Data when you use the Store.

15. By using the OXFORD website and Store, you confirm that you have read the Privacy Policy and that your Personal Data will be processed in accordance with the procedure set out in the Privacy Policy. If you do not agree with this Privacy Policy, you have the right not to use the Store. The Privacy Policy can be viewed and printed at any time in the Store. You will always be informed about any future changes and/or additions to the Privacy Policy by publishing the new version of the Privacy Policy in the Store and giving you the opportunity to read and familiarise yourself with it. In the event that you connect to the Store using services provided by other third parties, by connecting to the Store you also confirm that you have read the Privacy Policy and give your consent to the processing of your Personal Data in accordance with the procedure set out in the Privacy Policy. In such a case, we have the right to collect and receive information, which may include Personal Data, about you from these other sources and add it to your Account, as well as to use such information, including your Personal Data, in the manner and within the time limits set out in this Privacy Policy.

16. Please note that if the Store contains links to websites of other individuals, companies or organisations, we are not responsible for the content of such websites and/or the methods they use to ensure privacy. Therefore, before providing information about yourself or your Personal Data, you should familiarise yourself with the rules, privacy policy and other documents of the relevant website.

17. Persons wishing to register in the Store must provide their email address and a chosen Password. An Account is created when you register. You enter your own data in your Account – name, surname and email address – so you are solely responsible for the accuracy of this data. Upon registration, you will be given a User ID. You may at any time:

17.1. amend and/or supplement the Personal Data in the Account. You are responsible for the accuracy of the amended and/or supplemented data;

17.2. contact OXFORD at the email address info@oxford.lt regarding the cancellation of your Account.

III. WHAT PERSONAL DATA DO WE PROCESS?

18. OXFORD.lt processes (when you provide them) the following Personal Data:

• name, surname;
• residential address;
• email address;
• mobile phone number;
• your IP address, and the time and date of connection to the OXFORD website;
• your Facebook profile photo, name, surname, nickname (when connecting using your Facebook account).

19. Other Personal Data may also be processed for direct marketing purposes: data confirming the right to participate in promotional campaigns and documents confirming the fulfilment of the conditions of promotional campaigns (games, quizzes, competitions), insofar as this is related to participation in promotional campaigns or the right to participate in a game.

20. If you do not want the Personal Data referred to in clause 18 to be processed for Direct Marketing purposes, when registering simply do not click the button "I agree to receive OXFORD news and offers by email". If, after purchasing goods and/or services, you do not want the Personal Data specified in clause 18 to be used for Direct Marketing purposes, you can log in to your Account in the Store and opt out of receiving such news. You may also, in all cases, send an email to info@oxford.lt

IV. FOR WHAT PURPOSES DO WE USE YOUR PERSONAL DATA?

21. We use your Personal Data for the following purposes:

• to enable you to use our Store and the services we provide;
• to conclude and perform a contract with you;
• to fulfil and deliver goods purchased using the information provided in this Store;
• to issue and send you reports and invoices;
• to manage debts and collect payments from you;
• to send you notifications and to correspond with you;
• for Direct Marketing purposes (with your consent);
• to send our news and other information related to our services, which we believe is useful for you, by post, email or other means (you may opt out of such news and information at any time by notifying us by email or by clicking the interactive link at the bottom of the message you receive if you no longer wish to receive Direct Marketing messages in the future).

V. TO WHOM DO WE TRANSFER YOUR PERSONAL DATA?

22. We undertake not to disclose your Personal Data to third parties, except in the following cases:

22.1. when fulfilling orders for goods or providing other services, as well as for the maintenance of the e-store, to our partners who deliver goods or provide other services ordered by you, including providers of payment processing and/or payment intermediary services and data storage and transmission services, where such disclosure of data is necessary in order to process payments for the goods and/or services we offer;

22.2. For direct marketing purposes – to our partners, subject to the condition set out in clause

22.1. of the Privacy Policy and provided that we have obtained written undertakings from our partners to comply with the provisions of the Law on the Legal Protection of Personal Data of the Republic of Lithuania;

22.3. to law enforcement authorities in accordance with the procedure laid down by the legal acts of the Republic of Lithuania;

22.4. where it is necessary to prevent or investigate criminal acts;

22.5. where we have obtained your consent to the disclosure of Personal Data;

23. OXFORD will not transfer your Personal Data to third countries (i.e. countries which are not established in the European Economic Area).

VI. YOUR RIGHTS

24. You have the following rights:

• to submit a written request (by post, by e-mail or by submitting it at our office) asking us to inform you whether data relating to you are being processed and, if such data are being processed, to access your Personal Data and the following information: the purposes of the data processing; the categories of Personal Data concerned; the recipients or categories of recipients to whom your Personal Data have been or will be disclosed; where possible, the envisaged retention period for the Personal Data or, if this is not possible, the criteria used to determine that period;
• to request that inaccurate Personal Data relating to you be rectified or that incomplete data be completed;
• to request that we erase your Personal Data. However, this right is not absolute and applies only where at least one of the following grounds exists: the Personal Data are no longer needed to achieve the purposes for which they were collected or otherwise processed; you have decided to withdraw your consent to the processing of your Personal Data where your Personal Data are processed solely on the basis of consent and there is no other legal ground for processing your Personal Data; in the cases provided for by law you object to the processing of your Personal Data and there are no overriding legitimate grounds for the processing of the data; your Personal Data have been processed unlawfully; your data must be erased where we are under a legal obligation to do so.
• to request that the processing of your Personal Data be restricted where one of the following applies: you contest the accuracy of the data for a period enabling us to verify the accuracy of your Personal Data; the processing of your Personal Data is unlawful and you do not agree to the erasure of your data and instead request the restriction of their use; we no longer need your data for processing purposes, but you need them in order to submit, exercise or defend legal claims. When the processing of your Personal Data is restricted, we may process such data, other than storing them, only with your consent or in order to submit, exercise or defend legal claims and/or to protect your or another person's rights, or for reasons of public interest;
• to withdraw your consent to the processing of your Personal Data where the Personal Data are processed solely on the basis of your consent;
• to request that the Personal Data processed about you be transferred to another data controller, where this is technically possible;
• to lodge a complaint with us or with the State Data Protection Inspectorate if you believe that your rights as a Personal Data subject have been and/or may be infringed.

VII. HOW CAN YOU EXERCISE YOUR RIGHTS?

25. To exercise your rights, please submit your requests, complaints or demands to us in writing:

• by e-mail info@oxford.lt;
• by sending them by post to Malūnų g. 6 – 9, Vilnius, Republic of Lithuania;
• by visiting the OXFORD office at Malūnų g. 6 – 9, Vilnius, Republic of Lithuania.

26. We will reply to your requests, complaints or demands in writing, in accordance with the procedure and time limits laid down in legal acts, and will seek to provide you with the information as soon as possible, but in any event no later than within 30 (thirty) days of receiving your request. In exceptional cases, this time limit may be extended for another 30 (thirty) days, and you will be informed accordingly. VII. How long will your Personal Data be processed?

27. Your Personal Data for e-commerce purposes (name, surname, e-mail address, telephone number, delivery address of the goods, payment data for the goods/services (bank account number, payment method, etc.), purchase history (purchased goods, price, etc.)) will be processed for the period laid down by law.

28. Your Personal Data (name, surname and e-mail address) will be processed for direct marketing purposes for 6 (six) months from the date of your last active use of our Store (such as logging in to the Website, registering and/or performing other active actions in the Store).

29. We will take internal organisational and technical measures to help ensure that the Personal Data you provide in the Store is protected against any unlawful actions, including unauthorised alteration, disclosure or destruction of Personal Data, identity theft and fraud. We also aim to ensure that the level of Personal Data protection meets the requirements of the laws of the Republic of Lithuania and the European Union.

30. Personal Data is protected against loss, unauthorised use and alteration by applying standard electronic and other security measures.

VIII. USE OF COOKIES

31. To provide you with the full range of Store services, Cookies may be placed on your computer (device). We will use the stored information to recognise you as a returning visitor to the Store, to retain information about purchases placed in the Buyer's shopping basket, and to collect statistics on visits to the Store. You can view which information (Cookies) We or our partners store and you can delete some or all of the stored Cookies. By confirming your acceptance of the Privacy Policy, you agree that the Cookies specified in this Privacy Policy may be stored on your computer (device). You can withdraw this consent at any time by changing your web browser settings, but in this case some (or all) of the functions of the Store may no longer work for you.

32. The following Cookies are used in the Store:

Cookie name	Description	Created	Expiry		Data used
PHPSESSID	Standard cookie used to maintain the user's session.	When entering the page	Until the website window is closed		Unique identifier
p_popup_uh	Cookie used to store information about the pop-up windows viewed and hidden by the user.	On first visit to the page	1 year		Unique identifier
rated_[integer]	Cookie used to collect information, for the website content management system, about the survey response chosen by the user.	On first visit to the page	1 year		Unique identifier
C, cid, TPC, GCM, uid	Cookies generate a random ID for each visiting user so that we can identify which users return to the site. These Cookies help to identify users' browsing habits on the website.	On first visit to the page	Until the website is closed or for up to 60 days		Unique identifier
_utma, _utmb, _utmc	Tracking Cookies from Google Analytics. Information is sent to the server anonymously. Cookies identify unique visitors and track user sessions. For more information, see the Google website.	On first visit to the page	30 minutes, 6 months and 2 years respectively		IP addresses and unique ID numbers are used for statistical analysis. The resulting data is statistical. Counting is carried out via Google Analytics.
_utmz	Tracking Cookies from Google Analytics. Information is sent to the server anonymously.	On first visit to the page	Until the browser is closed		IP addresses and unique ID numbers are used for statistical analysis. The resulting data is statistical. Counter statistics are recorded using Google Analytics.
gtest, gdyn	These cookies are used to store information about the pages viewed by the user and the duration of the visit, and can be used to anonymously describe user characteristics based on browsing habits.	On first visit to the page	5 years		Unique identifier
UID	This cookie collects information about logged-in users and is used to distinguish unique users by assigning them a unique identifier (ID).	On first visit to the page	Up to 60 days		Unique identifier
adnKeyTarget…	This cookie collects information about logged-in users and is used to distinguish unique users by assigning them a unique identifier (ID).	On first visit to the page	5 years		Unique identifier
ntsprnt	DMP group identifier.	On first visit to the page	Up to 30 days		Unique identifier
LimitatorInformer_Engine…	This cookie collects information about logged-in users and is used to distinguish unique users by assigning them a unique identifier (ID).	On first visit to the page	1 year		Unique identifier
_vwu_uuid _vis_opt_test_cookie _vis_opt_exp_71_combi debug_vis_opt_s _vis_opt_s	These cookies collect information about users and allow us to monitor their browsing habits.	On first visit to the page	3 months		Unique identifier
splitVar2	This cookie collects information about users and is used to compare their browsing habits.	On first visit to the page	2 years		Unique identifier
Inspectlet cookies: _insp_identity _insp_norec_sess _insp_nv _insp_ref _insp_slim _insp_targlptx _insp_targlpu _insp_uid _insp_wid	These cookies collect information about users' actions while browsing the website and using its functionalities (videos, forms, buttons, etc.). These cookies allow us to assess the user's browsing experience and identify any shortcomings in the website's functionality.	On first visit to the page	1 year		Unique identifier
Google Tag Manager and Google Analytics cookies:
_dc_gtm_UA-4238681-1	This cookie collects information about user behaviour on the website and is used to optimise and display offers on other websites.	When you enter the page	8 hours		Unique identifier
_dc_gtm_UA-4238681-28	This cookie collects information about user behaviour on the website and is used to optimise and display offers on other websites.	When you enter the page	8 hours		Unique identifier
_ga	This cookie collects information about user behaviour on the website and is used to store statistical information.	On first visit to the page	2 years		Unique identifier
_gat_UA-4238681-28	This cookie collects information about user behaviour on the website and is used to distinguish unique users by assigning them a unique identifier (ID).	When you enter the page	8 hours		Unique identifier
viewedOuibounceModal	This cookie is used to present surveys published on the website to users and ensures that each survey is shown to the user only once.	When you enter the page	Until the website window is closed		Unique identifier

33. We use "third-party cookies" on our website, which are cookies that are not controlled by us, such as [Facebook, Google Analytics, Hotjar]. We use these cookies to obtain statistical information about how the website is used and to run online advertising based on your behaviour.

34. We also use technical cookies that help us display our website to you, ensure that it functions properly, process your orders and so on. These technical cookies are necessary for the proper functioning of our website, and we do not need to obtain your separate consent for their use.

VI. FINAL PROVISIONS

35. This Privacy Policy takes effect on the date of its publication. Any changes to this Privacy Policy will be communicated in accordance with the procedure set out in clause 15 of this Privacy Policy.

"Disputes concerning improper performance or non-performance of the contract are examined out of court by the State Consumer Rights Protection Service in accordance with the Law on Consumer Rights Protection of the Republic of Lithuania, at the following address: Vilniaus g. 25, 01402 Vilnius, e-mail: tarnyba@vvtat.lt, tel. (8 5) 262 67 51, website www.vvtat.lt. You can submit a request electronically via the ODR platform http://ec.europa.eu/odr/."