Mindaugas Kavaliauskas
Photography

Privacy Policy

1. KEY TERMS
1.1. Company or Data Controller – Public institution Šviesos raštas, a private limited liability company established and operating under the laws of the Republic of Lithuania, with legal entity code 236029130 and registered office at Taikos Ave. 4A-4, 50187 Kaunas.
1.2. Client or Data Subject – a natural person, the Company’s client (including website visitors), whose personal data is collected by the Company.
1.3. Online Store – the Company’s online store at www.Kavaliauskas.eu
1.4. Services – all services provided by the Company.
1.5. Personal Data – any information relating to a natural person – the Data Subject – whose identity is known or can be directly or indirectly identified using such data as a personal identification number or one or more personal, physical, physiological, psychological, economic, cultural, or social identifiers.
1.6. Processing of Personal Data – any operation performed on personal data: collection, recording, accumulation, storage, classification, grouping, linking, alteration (supplementation or correction), provision, publication, use, logical and/or arithmetic operations, retrieval, dissemination, destruction, or other action or set of actions.
1.7. Partner – a legal entity providing services to the Company related to its activities, or selling goods to it, or conducting joint projects with the Company, including but not limited to marketing campaigns, joint sales campaigns, loyalty programs, etc., in media, online, in the Online Store, in retail stores, in shopping networks, etc.
1.8. Cookie – a small piece of text information automatically created while browsing the website and stored on the visitor’s computer or other device.
1.9. Direct Marketing – activities aimed at offering goods or services to individuals by mail, telephone, or other direct means, and/or requesting their opinions about offered goods or services.
1.10. Privacy Policy – this document, establishing the principles and rules of processing Personal Data when using the Online Store’s services.
1.11. Account – the main Client login credentials to the Online Store, consisting of an email address and Password.
1.12. Password – a unique combination of numbers, letters, or other symbols created by the Client, used to log in to the Online Store.

2. GENERAL PROVISIONS
2.1. The Client grants the Company the right to perform all actions related to the processing of Personal Data to the extent and for the purposes specified in this Privacy Policy.
2.2. Personal data is processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other applicable legal acts and this Privacy Policy.
2.3. The Company processes Personal Data based on the following principles:

  • 2.3.1. Data is collected for specified and legitimate purposes.
  • 2.3.2. Data is processed accurately, fairly, and lawfully.
  • 2.3.3. Data is adequate and only to the extent necessary.
  • 2.3.4. Data is kept up to date.
  • 2.3.5. Data is stored in a way that allows identification of the Data Subject no longer than necessary.
  • 2.3.6. All information is confidential.
  • 2.3.7. Data and personal information will not be used for unlawful purposes.

2.4. It is assumed that by purchasing from the Online Store, the Client has read and agreed to the current version of the Privacy Policy. If the Client disagrees with any part of the Policy, they must not place an order or purchase products.
2.5. The Privacy Policy is available in the Online Store and may be printed at any time. It may be amended or updated at the Company’s discretion. The updated version will be published in the Online Store.
2.6. Orders can be placed either with or without registration in the Online Store.
2.7. During initial account registration, the Client must provide their email address, create a secure password, and submit accurate personal data. The Client is responsible for the accuracy of this data. Upon creating an account, the Client is assigned an identification code.
2.8. When using Services or making purchases, the Client must always provide accurate personal data and is responsible for its accuracy.
2.9. Clients may change their data at any time through their Account or request account deletion.
2.10. Clients must not disclose their Password to third parties and are responsible for its security.

3. COLLECTION, USE, CORRECTION, AND STORAGE OF PERSONAL DATA
3.1. The Company respects each Client’s right to privacy. Personal data (e.g., name, surname, email address, phone number, delivery address, age/birth year, payment information, purchase history, and, with consent, gender, birth date, residence) is collected and processed for:

  • 3.1.1. E-commerce purposes. Data collected: name, surname, email, phone, delivery address, age/birth year, IP address, payment information. Retention: 5 years from the last login.
  • 3.1.2. Direct marketing purposes. Data collected: name, surname, phone, email, address, age, gender, birth date, residence. Retention: 5 years from the last login.

3.2. Clients may consent to the processing of their personal data for direct marketing purposes. If consent is withdrawn, the Company will stop processing such data and sending marketing messages (except order-related communication).
3.3. Consent may be withdrawn at any time by emailing photography@kavaliauskas.eu with a clear statement of withdrawal.
3.4. Clients may also unsubscribe via the link provided in every marketing email.
3.5. As a Data Subject, the Client has the right to:

  • 3.5.1. Access their personal data and understand how it is processed.
  • 3.5.2. Receive information on the sources and recipients of data processed over the past year.
  • 3.5.3. Request correction, destruction, or suspension (excluding storage) of personal data processed unlawfully.

3.6. To exercise these rights, the Client must provide identification (passport, ID card, driver’s license). The Company provides such information free of charge once per year. Requests can be made via email to photography@kavaliauskas.eu.
3.7. Personal data is not shared with third parties except:

3.7.3. As required by Lithuanian laws to competent authorities.

3.7.1. With the Client’s consent.

3.7.2. For e-commerce purposes with Partners providing services related to Company operations.