PRIVACY POLICY
Your visit to our Privacy Policy section shows that you care about protecting your privacy, that you are committed to the highest values of respect for human beings, and that we are committed to providing you with the best and safest experience when you visit our Online Shop, and that we have a detailed description of how we protect your privacy below.
GENERAL PROVISIONS
1. The Privacy Policy aims to:
1.1. to protect your personal data from unauthorised use;
1.2. to outline our obligations as a data controller when managing your personal data;
1.3. specify what personal data are processed, the purposes of the processing, the period for which the personal data are retained, as well as the legal basis for the processing and any other information that we are required to provide in accordance with the applicable legislation;
1.4. to inform you, as the data subject, of the rights you have in relation to the processing of your data.
2. Terms used in the Privacy Policy:
2.1. ‘Personal data’ means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a personal identification number, location data and an online identifier, or to one or more factors specific to the natural person’s physical, physiological, genetic, mental, economic, cultural or social identity;
2.2 Data Subject – a natural person whose personal data is processed;
2.3 ‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union or Member State law, the controller, or the specific criteria for its designation, may be determined by Union or Member State law.
3. When processing your personal data, we comply with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the General Data Protection Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as other laws and legal acts regulating the processing and protection of personal data, and the compliance and proper implementation of such laws and regulations.
DATA CONTROLLER AND CONTACT DETAILS
4. The personal data controller is UAB “1 mm”, registered office address Titnago g. 7-407, Vilnius, legal entity code 121933274, VAT LT100011172118.
5. By using these contact details or by contacting shoebox24.com business address, it is possible to ask questions about the processing of personal data. A request to exercise your rights can be made in accordance with Clause 18.1.
6. shoebox24.com contact details for notification of possible data protection violations: info@shoebox24.com
THE PURPOSES, GROUNDS AND TIME LIMITS FOR PROCESSING PERSONAL DATA
7. You can familiarize yourself with the categories, purposes and legal grounds for processing personal data processed by shoebox24.com by reading the information below.
7.1. Your account (registration and administration)
| Data categories | Name, surname, email, phone, password (encrypted), list of items (item, price, date), account activity, including technical data (login information such as when you last logged in), email data, for example, when you ask for a reminder for a forgotten password. |
| Legal basis for processing | Your consent, which is deemed to have been obtained when you activate your account. |
| Time limit for data processing | For as long as you use your account. We may retain your consent and proof of consent for a longer period of time if we need to do so in order to defend ourselves against claims, demands or actions. |
You have the right to create an account on our website. In this case, we will process your data in order to provide you with the opportunity to create an account for the purpose of enabling you to use the services provided to registered users, for the purpose of administering and maintaining the account, for the purpose of recognising you when you make enquiries, for the purpose of informing you of changes to the terms and conditions of your account (changes to the privacy policy, changes to the terms and conditions of your account, etc.)) or to contact you in other cases, such as if you have forgotten to collect your purchases or if we have detected problems with completed transactions, etc.
To create an account, you must agree to the terms and conditions and provide your personal data. If you do not agree to the terms and conditions and do not provide personal data, you will not be able to create an account.
By registering an account, you confirm that you are at least 18 years of age and that the personal data you have provided is accurate and true. It is very important that the data you provide is accurate and correct. If you provide incorrect (false) data, forget it or do not update the changed data, it may make it difficult for us to provide our services and it may cause problems in the exercise of your rights. If you notice any inaccuracies, please correct them immediately.
7.2. Direct marketing
| Data categories | If you have created an account: name, surname, email address, email interactions (information about whether the newsletter was read, when it was read (opened), how many times it was read (opened), whether it was forwarded, which operating system and email server (location) were used), list of favourite products.If you have not created an account: name, surname, email address, email interactions (information about whether the newsletter was read, when it was read (opened), how many times it was read (opened), whether it was forwarded, which operating system and email server (location) were used). |
| Legal basis for processing | With your consent, we process personal data for direct marketing purposes and we carry out profiling based on our legitimate interest in selecting and offering goods and services that are tailored to your needs. |
| Time limit for data processing | As long as your consent to receive offers and news is valid. We may keep your consent and proof of consent for a longer period of time if necessary to defend ourselves against claims, demands or actions. |
We can only send you news about goods and services, offers and promotional material if you agree to receive this information. If you have consented to receive offers and newsletters by completing the registration form, we will process your personal data when we provide you with offers and information, such as general newsletters, information about offers, discounts or sales, or when we ask for your opinion about services and products, etc. We do this because it is important for us to tailor offers to your needs.
If you have consented to receive direct marketing communications by email, we collect statistical information about the newsletters we send to you (we track whether you read the newsletter, when you read it, how many times you read it or opened it, whether you forwarded it to others, what operating system and email server (location) you used) in order to understand whether the information we send is relevant to you.
In addition, if you have created an account and provided additional data of your choice, we will send you tailored offers of goods and services based on profiling. You can opt-out of direct marketing communications from your account by clicking on the unsubscribe link in the email or by contacting us at the contact details below.
By registering for direct marketing offers, you confirm that the personal data you provide is accurate and correct and that you are at least 18 years old.
7.3. Handling enquiries, complaints, requests and feedback
| Data categories | Name, address, email, telephone, description of the complaint or other enquiry, the circumstances of the complaint or other enquiry, as well as documents supporting the complaint, claim or feedback, etc., loyalty card number, purchase history. |
| Legal basis for processing | The obligation to investigate and respond to consumer complaints or enquiries, as well as the legitimate interest in evaluating your feedback in order to improve the quality of our operations and services. |
| Time limit for data processing | Up to 12 months. |
We receive your personal data when you submit complaints, requests, enquiries, suggestions, comments, requirements, feedback by post, email or other means of contacting us. We only use your data to enable us to deal with your complaint or other enquiry in an appropriate and objective manner, to provide you with the information you need, to answer your questions, and to resolve your requests or claims.
Personal data may be retained for a longer period of time if the complaint or request, enquiry, suggestion, observation, comment, claim, feedback has not been dealt with or is still pending, or if the personal data is necessary to protect our legitimate interests or the legitimate interests of third parties.
COOKIES
8. Cookies are small text files that are stored in the browser of your device (e.g. computer, mobile phone, tablet) when you browse websites. Other technologies, including data we store in your browser or device, identifiers associated with your device and other software, may be used for similar purposes. Cookies are used extensively to make websites work or work better and more efficiently. For the purposes of this Policy, all such technologies are referred to as “cookies”.
| Name of Cookie | Purpose of Cookie | Cookie expires in |
| PAGECACHE_ENV | Required to display the correct version of the website to the visitor. | 1 day |
| frontend | Saves the identifier of the Visitor’s session in the Online Shop for one day. | 1 day |
| snowmessage | This cookie is required to display messages in the Store.The cookie records the date on which the system displayed the message to the user. When the cookie is set, the user’s browser requests the content of the Shop messages and displays it to the user.The cookie is deleted when the notifications are opened. | Until the browser is closed |
| snow_cache_timestamp_[id-sklepu] | Its purpose is to check whether the data in the Visitor’s browser should be updated. This cookie saves the date of generation of the page information stored in the Visitor’s viewer (for example, in the Shopping Cart, links related to account servicing). | Until the browser is closed |
| store | Allows you to use the appropriate version of the Online Shop. | Until the browser is closed |
| cookies_accepted | This cookie is created when accessing the message, as well as when the website uses cookies. It is required to hide the message to the visitor from those Visitors who have already read the message. | 365 days |
| userCountry | It stores information about the country in which the Visitor is located based on the location of the IP address. | 365 days |
| geo_store_switch_popup[kod-kraju] | [country-code] contains the country code, which is determined by the IP address of the User. The cookie determines whether a pop-up message has been displayed suggesting the correct store page based on the user’s IP address. It is linked to the userCountry cookie. | 365 days |
| ygc | The cookie stores a code identifying the visitor for marketing purposes. | 365 days |
9. Unless otherwise specified in this Privacy Policy, cookies used are necessary for the functionality and operation of shoebox24.com. This includes cookies that allow you to register on our website, purchase an item or use our electronic payment system. Most cookies are deleted from your device after the end of your browsing session (session cookies). The information stored in mandatory cookies will only be used to provide the services and functions you have requested.
10. When you post a comment on this website, you can choose whether you want your name, email address and website to be stored in cookies. This is for your convenience, so that you do not have to re-enter these details each time you comment. These cookies are stored for one year.
11. If you have an account and log in to our website, we create a temporary cookie to record whether your browser accepts cookies. This cookie does not store any personal information and is deleted when you close your browser.
12. When you log in, we also create a number of cookies that store your login information and your screen display preferences. Login cookies are valid for 2 days and display preferences cookies are valid for one year. If you tick the “Remember me” option, your login cookie will be valid for 2 weeks. When you log out of your account, your login cookies are deleted.
13. If you edit or publish a post, an additional cookie is stored in your browser. This cookie does not store personal data, but it does store the ID of the post you have just edited or published. This cookie expires after 1 day.
14. shoebox24.com website may contain content uploaded from other websites (e.g. videos, images, text, etc.). Viewing and interacting with such uploaded content on this website is equivalent to visiting the websites from which the content is uploaded.
15. These websites from Clause 14 may collect data about you, use cookies, third-party tracking services and monitor your interactions with uploaded content, including if you have an account and are logged in to these websites. shoebox24.com is not responsible for the use of cookies by third parties.
INSTANCES AND THIRD PARTIES TO WHOM WE DISCLOSE YOUR DATA
16. We do not transfer your personal data to any third parties without your prior consent, except as described below. We may disclose your personal data:
16.1 We may transfer your data to third parties who assist us in the performance and administration of our services and provide us with services related to the administration of complaints and other enquiries. The processors we use may only process your personal data on our instructions and may not use it for other purposes or transfer it to other persons without our consent. They must also ensure the security of your data in accordance with applicable law and written agreements with us.
16.2 We will transfer your personal data to state and municipal authorities and other persons performing functions entrusted to them by law upon their request, as well as when we are obliged to provide the data by law or for the purpose of asserting, exercising or defending our legitimate interest in bringing, exercising or defending legal claims.
PERSONAL DATA PROTECTION
17. We process data using the capabilities of modern technologies, taking into account the existing privacy risks and the available organisational, financial and technical resources. The data is kept secure and is accessible to a limited number of persons.
THE RIGHTS YOU HAVE UNDER APPLICABLE LAW
18. The General Data Protection Regulation and other legislation give you rights, the cases in which you can exercise them, the procedures you must follow and the exceptions where you cannot. Where permitted by law, you may:
18.1. to request confirmation from us as to whether we are processing data relating to you and, if we are, to request access to the data processed and the information relating to it;
18.2. to request us to correct inaccurate or incorrect information used or to supplement information where it is incomplete;
18.3. ask us to delete the information we hold about you if we are using it unlawfully;
18.4.Request us to restrict the processing of information we hold about you – where you contest the accuracy of the data or object to the processing of the data, you object to the erasure of your unlawfully processed data, or you need the data to assert, exercise or defend legal claims;
18.5 To object to the use of data – where we do so on the basis of our legitimate interests and/or the interests of third parties;
18.6. request us to transfer/receive the data that you have provided to us under a contract or with your consent/consent and that we process by automated means, in a commonly used electronic format;
18.7. to withdraw the consents given to us to use information about you – where we use data on the basis of your consent;
18.8. lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or the place of the alleged infringement of the Regulation, and seek judicial remedies.
To exercise these rights, please contact us in writing or contact the Data Protection Officer at the contact details below.
If you believe that the way we process your personal data does not comply with applicable law, you have the right to contact the State Data Protection Inspectorate (www.ada.lt).
FINAL PROVISIONS
19. We have the right to amend and supplement this Privacy Policy, to make it available to you, and to post it on our website.
20. We regularly review our privacy policy. This version is effective from 1 April, 2025.