1. General provisions

1.1 UAB „Juvelyrikos oazė“ (hereinafter – the “Company”) protects and respects the privacy of visitors to the website and online shop https://royalgold.lt/ (hereinafter, together or separately – the “Online Shop”), of persons registered in it, and of visitors to our physical store (hereinafter, together or separately – the “Visitor”, the “Person” or the “Buyer”).

1.2 This document, together with the documents referred to in it (hereinafter – the “Privacy Policy”), sets out the basis on which the Company collects, processes and stores personal data obtained when Persons use the Online Shop or place orders in the Company’s physical store. Please read this Policy carefully to understand the Company’s views and practices regarding personal data and how such data will be processed.

1.3 This Privacy Policy does not apply to any third-party websites or applications, even if you can access our Online Shop through them. It does not apply to information collected and used by third parties for which we are not responsible. Before using third-party websites or applications, you should read the privacy policies and rules published there.

1.4 If you do not agree with our Privacy Policy, please do not use any of the Company’s services, including but not limited to our Online Shop, as otherwise we cannot ensure that our services comply with the laws of the Republic of Lithuania. The current version of the Privacy Policy applies to all information in the Online Shop (accounts, contracts/orders, enquiries, etc.), regardless of when it was submitted or updated.

1.5 The scope, submission and storage procedures and retention periods of personal data required for the preparation of financial and accounting documents are governed by the Law on Accounting, the Law on Value Added Tax and other laws of the Republic of Lithuania.

1.6 The scope, submission and storage procedures and retention periods of personal data required for the prevention of money laundering are governed by the Law on the Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania.

1.7 You can contact our data protection officer by e-mail at rokas@royalgold.lt or by phone at +370 625 08993 (on working days from 10:00 to 18:00).

2. Security of data transfer and payments

2.1 Safe browsing and shopping in the Online Shop is ensured by an SSL (Secure Socket Layer) certificate issued by a trusted international certification authority. With an SSL certificate, information sent between the Visitor’s browser and the Online Shop is encrypted. A padlock icon shown in the browser address bar confirms that the page is secure.

2.2 Buyers of the Online Shop enter their e-banking, electronic payment system and/or payment card login details:

2.3 No payment-related information of the Visitor and/or Buyer is available to the Company.

3. Cases of personal data processing

3.1 Personal data may be processed if:

  • the Person, when using the Company’s services, provides the Company with information about himself or herself (directly, through the Online Shop or a social network);
  • a contract is concluded and/or performed with the Company to which the Person is a party;
  • the Person gives consent to the processing of his or her data;
  • a Visitor of the Company’s physical store or office (including Company employees) enters the field of view of video surveillance cameras installed to ensure the safety of persons and property and to comply with applicable legal obligations;
  • personal data must be processed due to a legitimate interest of state authorities/institutions (e.g. the State Tax Inspectorate, the Financial Crime Investigation Service).

4. Information collected and retention periods

4.1 The Company may collect and process the following information:

  • a) data the Person may provide when creating an account in the Online Shop: name, surname, e-mail address, phone number and, if delivery is planned, delivery address;
  • b) data the Person must provide when placing an order in the Online Shop: name, surname, e-mail address, phone number and, if delivery is ordered, delivery address;
  • c) data the Person must provide when placing an order/concluding a contract in the physical store: name, surname, phone number and, if delivery is ordered, delivery address;
  • d) data the Person may provide when submitting enquiries, requests and complaints: name, e-mail address, text of the enquiry, order number (if the enquiry concerns an order) and other data;
  • e) data the Person may provide when intending to take part in contests or promotions organised by the Company: social network account name, name, surname, e-mail address, phone number and other data requested under the rules of the contest or promotion;
  • f) data about Visitors’ browsing in the Online Shop, including but not limited to IP addresses. More details are provided in the “Use of cookies” section of this Privacy Policy;
  • g) video data, if the Person visiting the Company’s store or office entered the field of view of video surveillance;
  • h) any other personal data the Person has provided to us at any time through the Online Shop or when communicating with the Company in various ways;
  • i) for the purposes of concluding, performing and administering contracts or transactions and issuing VAT invoices, the Company processes the following data of customers, suppliers, partners and representatives, employees, agents or other persons of other contracting parties: name, surname, personal identification number, residential or delivery address, signature, e-mail address, phone number and other personal data.

4.2 The following retention periods apply:

  • data specified in points 4.1.a, 4.1.d, 4.1.f and 4.1.h are stored for no longer than 12 months from the Visitor’s last action in the Online Shop (registration/login and/or enquiry and/or fulfilment/cancellation of a contract/order);
  • data specified in point 4.1.g are stored for no longer than 6 months from the date of recording;
  • data specified in point 4.1.e are stored for no longer than 3 months from the announcement of the results of the contest or promotion in which the Person took part;
  • data specified in points 4.1.b, 4.1.c and 4.1.i are stored for as long as necessary to achieve the purposes for which they are processed, in accordance with the periods set in the General Index of Document Retention Periods approved by the Chief Archivist of Lithuania and the data retention requirements of the legislation of the Republic of Lithuania. However, data specified in point 4.1.b may not be stored in the Online Shop system for longer than: (i) 12 months from the last action initiated by a Buyer with an account (account creation and/or fulfilment/cancellation of an order); (ii) 6 months from the last action initiated by a Buyer without an account (login and/or fulfilment/cancellation of an order).

4.3 Personal data are collected and processed only for the purposes set out in this Policy.

4.4 The Company may use data not directly related to a person, i.e. data about purchased goods, for statistical purposes. Such statistical data will be collected and processed in a way that does not allow personal identification.

5. Storage of personal data

5.1 Data in the Online Shop collected by the Company in the cases specified in point 4.1 are stored in Lithuania and/or in territories within the European Economic Area.

5.2 Staff processing personal data may be involved, among other things, in order fulfilment, processing of payment data and provision of support services.

5.3 Where the Visitor is given a password (or chooses one), enabling the Visitor to use certain functions of the Online Shop, the Visitor is personally responsible for keeping the password confidential and must not disclose or share it with third parties.

5.4 If the Company has doubts about the accuracy of the data provided by a person, it has the right to suspend the processing of that person’s data and to verify and correct the data.

5.5 Although the Company makes every reasonable effort to protect personal data, it cannot guarantee the secure entry of data on the Visitor’s device or the transfer of data to the Online Shop. Any data transfer is carried out solely at the Visitor’s own risk.

6. Use of personal data

6.1 The Company uses personal data:

  • for the purpose of e-commerce, i.e. to sell goods and services, process orders, issue financial documents, deliver goods, provide warranty and other services, exchange goods or refund money, resolve issues related to purchases and perform other obligations;
  • to provide the Visitor with goods or services, as well as information the Visitor requests or which may be of interest to the Visitor;
  • to fulfil obligations under contracts concluded with Visitors and other persons, including but not limited to providing the data of the person and his or her representatives to the bank chosen by the Company and/or the technical provider of the bank’s payment portal for e-commerce purposes, with consent to their processing of such data;
  • to provide the Visitor with necessary information about the Company and the terms and conditions of purchase;
  • to ensure that the content of the Online Shop is presented in the most effective and appropriate way for Visitors.

6.2 To Visitors and persons who provided their contact details at the time of sale, the Company may send, by electronic means (e-mail or SMS), information about goods and services similar to those sold when the contact details were obtained. If a person does not wish to receive such offers, he or she may inform the Company by e-mail or by clicking the relevant link in any message already sent.

6.3 Persons who did not provide their contact details at the time of sale will receive offers from the Company and its partners by electronic means only if they have given clear consent to such processing of their data.

6.4 The Visitor may consent to receiving the Company’s offers and information:

  • by ticking the relevant option when ordering goods or services;
  • by subscribing to the Company’s newsletter.

6.5 The Company may also use the contact details of Visitors and buyers for market research purposes in order to assess customer satisfaction with the Company’s activities. Answers to such messages are anonymous. If a person does not wish to receive such messages, he or she may inform the Company by e-mail or by clicking the relevant link in any message already received.

7. Disclosure of information

7.1 The Company has the right to disclose personal data to any company of its group, including but not limited to subsidiaries, the ultimate controlling company and its subsidiaries, as defined in Article 5 of the Law on Companies of the Republic of Lithuania.

7.2 Personal data may be disclosed to third parties:

  • when intending to sell the Company’s business or part of its assets, by disclosing personal data to a potential buyer of the business or part thereof;
  • if the Company’s business or a substantial part of its assets is sold to third parties; in that case personal data are considered one of the assets being sold;
  • if such transfer or sharing of personal data is necessary to comply with legal requirements, to apply or enforce contracts and agreements, or to protect the rights, property and safety of the Company, its customers and other persons.

7.3 Personal data may be viewed by:

  • Company employees who maintain the operation and content of the Online Shop, as well as providers of the content management system and website hosting services;
  • the analytics service provider Google LLC (United States of America), to the extent necessary for the analytics of the Online Shop. Data transfers for analytics are subject to contractual data protection commitments, which you can read by following this link.

7.4 Cookies for personalised online advertising may be set and accessed by the following service providers:

7.5 The Person should read the privacy policies of third parties and contact the service providers directly with any questions about how they use personal data.

8. Rights of persons

8.1 The Person has the right:

  • to be informed about the processing of his or her data;
  • upon a request to the Company, to receive by e-mail information on the sources from which and what personal data have been collected, the purpose of processing, and the recipients to whom the data are or have been provided during the last 1 (one) year. The information is provided to the e-mail address indicated no later than within 30 (thirty) calendar days from the date of the request. The Company provides such data free of charge once per calendar year;
  • upon a request by e-mail, to demand that incorrect, incomplete or inaccurate data be corrected and/or that the processing of such personal data, except storage, be suspended if the Visitor finds that his or her data are incorrect, incomplete, inaccurate or processed unlawfully or unfairly. The Company shall promptly inform the Visitor whether the requested correction, destruction or suspension of processing has been carried out;
  • to demand that the Company erase his or her personal data (“right to be forgotten”). This right is not absolute and applies where at least one of the following grounds exists: (i) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; (ii) the Person withdraws consent where the data are processed solely on the basis of consent and there is no other legal ground for processing; (iii) the personal data have been processed unlawfully; (iv) the personal data must be erased to comply with a legal obligation of the Company;
  • to request that the processed personal data be transferred to another data controller, where technically feasible for the Company;
  • to lodge a complaint with the Company if he or she believes that his or her rights as a data subject are or may be infringed.

8.2 Registered Visitors, i.e. those with access to their Online Shop account, can themselves handle all personal-data-related requests, including managing and deleting their data, as provided for in the General Data Protection Regulation (EU) 2016/679 (hereinafter – the “GDPR”):

  • in the account menu “Addresses” – the address(es), phone number(s), name(s) and surname(s) required for delivery and invoicing;
  • in the account menu “Account details” – the account holder’s name, surname, e-mail and password;
  • in the account menu “Privacy” – exercise the main rights provided by the GDPR, including the right of access, the right to rectification and the right to be forgotten.

8.3 When a Visitor exercises the “right to be forgotten”, all personal information stored in the customer account of the Online Shop is erased (the account is anonymised); however, information referred to in points 4.1.b and 4.1.c may be retained outside the Online Shop platform as described in point 4.2.

8.4 The Person has the right to contact the Company and object to the processing of his or her personal data for direct marketing and market research purposes.

8.5 To exercise this right, the Visitor must untick the previously ticked boxes in the relevant forms or click the relevant link in direct marketing offers or market research messages. The Visitor may also contact the Company by e-mail and notify it of the objection.

8.6 The Online Shop may contain links to and from the websites of its partners, advertisers and other persons. Please note that such websites have their own privacy policies and the Company accepts no responsibility for them. Visitors should read the privacy policies of those websites before submitting any personal data to them.

8.7 Complaints regarding improper or unlawful processing of personal data are examined by the State Data Protection Inspectorate, registered address L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt.

9. Use of cookies

9.1 A cookie is a small piece of information (a text file) that a website’s server sends to the hard drive of the Visitor’s computer or mobile device. Thanks to it, the website “remembers” the Visitor’s computer, certain actions and preferences for a period of time, so the Visitor does not need to re-enter information each time he or she visits the site or browses its pages. This information may include:

  • the IP address of the Visitor’s computer and browser type;
  • data on how the Visitor uses this website (e.g. pages and products viewed, login name, language, font size and other display preferences);
  • aggregated demographic data;
  • if the Visitor came to this website from a third-party website, the URL of that page;
  • other technical anonymised information.

9.2 Cookie-related information cannot be used to identify the Visitor.

9.3 Cookies make this website easier to use and allow us to provide the Visitor with more specific and relevant information. Possible cookie types are strictly necessary, performance, functional and marketing cookies.

9.4 Most browsers automatically accept cookies, but the Visitor can delete cookies from his or her device at any time. The Visitor may also block cookies by setting the browser not to store them. This may reduce the functionality of the website and limit access to certain services, i.e. some content and/or services may become unavailable.

9.5 Statistical data on browsing are collected using Google Analytics tools, which record and analyse how visitors use the website. You can learn more about Google Analytics and the information it collects on the Google Analytics website. If you do not want these tools to record information about your browsing, you can use the Google Analytics opt-out browser add-on. The legal basis for processing this information is the Company’s legitimate interest in improving the Online Shop and the availability of commercial information.

9.6 You can control and/or delete cookies if you wish. More information is available at www.allaboutcookies.org, including detailed instructions on how to disable and remove cookies through browser settings. To remove cookies from a mobile phone, please refer to the phone’s user manual. You can delete all cookies already on your computer and set most browsers to prevent cookies from being stored on your device. In that case, however, you may have to adjust some preferences manually every time you visit the Online Shop, and some services and functions may not work.

9.7 Below are links where you can opt out of cookies of individual advertising providers:

10. Changes to the Policy

10.1 This Policy may be changed at any time. The updated version of the Policy will be published in this Online Shop.