Privacy policy

We seek to inform you in detail about the processing of your personal data regardless of how you communicate with us: by using the website or by meeting us in person. This UAB Aristina Personal Data Protection Policy (“Policy”) also applies to the online platform www.cheerylittlesheep.com (“Website”), which is managed by UAB Aristina, address: Eitminu 16-112, VILNIUS, LT-12111, Lithuania (“we” or “Aristina”).

We care about your personal data protection and privacy and consider your privacy a very serious matter. We will collect, store, and process all data in accordance with the General Data Protection Regulation (EU) 2016/679 (“Regulation”), the Law on the Protection of Personal Data (“Law”), as well as other legal acts.

This Policy is intended to inform you about how we collect, use and share the personal data that you submit or other personal data we may collect from you by other means. We strive to ensure fair and transparent collection and use of your data.

The services provided on our Website may only be available upon collecting, storing, transferring, erasing and/or otherwise using (“to process” or processing) the specific data associated with you. Personal data is any information about you that you provide or which we obtain from other sources and which allows you to be identified (“Data”), such as your name, surname, address or email, information about the agreements concluded with us and the history of their execution, etc.

Take your time to review this Policy because it describes which of your Data we collect and for what purposes we process them when you are using the services on our Website. It also provides important information about your Data Protection, in particular about the rights that you may exercise according to the law. We may change this Policy in the future, so we encourage you to review this Policy periodically. If you have any questions, do not hesitate to contact us in one of the ways indicated below.

Some services on our Website are provided by third parties. When you use these services, this Policy also applies to third-party data protection policies.

WHAT PERSONAL DATA WE COLLECT

When you log in to the Website, we collect and process your identification data, such as IP address of your device, information about the browser used by your device, and other browsing information, including data on when and from where the Website was visited, or specific pages you have visited within Website;

We will not use the personal data listed in this section, especially your IP address, without your explicit permission unless such use is necessary (i) to provide our services and/or (ii) for security purposes, in particular for prevention of cyber-attacks, such as data collection or service interference attacks, and prevention of non-authorized programs.

If you add items to the shopping cart but have not yet paid for them, we collect and process your key personal data, such as name, surname, phone number, email, shipping address (information about the person or company to whom the items should be delivered, street name, house number, city, country).

If you purchase the selected items, we collect and process your key personal data, such as name, surname, phone number, email, shipping address (information about the person or company to whom the items should be delivered, street name, house number, city, country), item information, price, transaction time, payment method.

Important: If you provide us with details of other people related to you (especially in cases where you indicate that the items must be delivered to another person), you should obtain the consent of these individuals and get them familiarised with this Policy.

WHY WE COLLECT PERSONAL DATA?

We process your data for these purposes:

So that you could easily purchase and pay for items, and we could provide you services, identify you and contact you as well as fulfil the assumed contractual obligations, we process your name, surname, email, phone number, and other contact information, and we use the data on transactions concluded with us and the information we receive from you when you are using our services.

In order to ensure the provision of services remotely, we store the IP address and other data identifying you, communications content and time, and other technical data.

In order to communicate with you, for example, to answer your questions and requests for the provision of services, also to receive your feedback, to send important notices (regarding the General Terms and Conditions of Service Provision, the change of this Policy or other documents) or to send technical notices, updates, warnings about security, support and administrative messages, we process your contact information and the content of the messages you receive and send.

In order to improve the quality of our products, services, and marketing we automatically use your personal data, including information about your ordered items, your purchase history, i.e. what items you purchased. We collect and use your data for internal purposes, for example, to monitor and forecast trends in our products and services, in order to understand which parts of our products and/or offers are most interesting to our customers. It helps us understand what you need, which makes our activities more efficient and beneficial and helps us to better manage, improve and develop our products, services, and communication.

In order to send general direct marketing offers, we collect and use your email and phone number (in certain countries).

In order to protect Aristina and the legitimate interests of any third parties, we will process the data in order to protect ourselves against unauthorized acts, especially fraud, in order to carry out prevention against cyber-attacks and other threats to the integrity of our Website, as well as to defend our interests for the purpose of resolving disputes, in case of improper performance of the Rules and to defend and enforce any other rights.

WHAT GIVES US THE RIGHT TO COLLECT PERSONAL DATA?

We obtain and use your personal data under at least one of the following conditions:

  • you intend to conclude or have entered into an agreement for the purchase of goods;
  • you provided your consent;
  • processing of personal data is possible on the basis of legal acts;
  • seeking to fulfil our legitimate interests, such as:
  • to improve the quality of our services, to ensure the consistency and sustainability of our activity, to ensure that the services provided by us meet your expectations, to ensure maximum satisfaction with our services;
  • in order to bring and defend lawsuits and other legal actions so as to avoid losses or reduce them.

Important: we will not be able to deliver you the services if you do not provide us with any personal information that is necessary for us to conclude or execute the agreement.

USE OF COOKIES

Necessary cookies

Cookies are small text files that are hosted on your computer or other devices connected to the Internet (such as tablets or smartphones) in cases where your browser settings accept cookies. Our cookies are essential for the functionality and operation of our Website, and we use cookies only for this purpose. Most cookies from your device are deleted after the end of your browser session (session cookies).

Other cookies and consent for their use

When you log in to the Site, we ask you to agree to add additional cookies to your device. By continuing to use the Website after we show the cookie notification, you agree that we will use the cookies for the above purposes (“Consent to Cookie Use”). These cookies help us:

  • identify how many visitors visit the Website and how they behave on it. This helps us improve our Platform functionality, for example, ensure that users can find what they are looking for (analytical/operational cookies);
  • identify when you are revisiting our Platform. It helps us personalize our content, greet you with your name, and note your options (functional cookies);
  • record visits on our platform, the pages you visit, the links you click, and the products you add to the cart. We use this information to better adapt our Platform and the ads are shown to you, and direct marketing (targeted cookies).

Use of third-party cookies

When you use the Website services, cookies or network data collectors of other providers may be used with respect to you. This can be done to measure a group, to activate contextual advertising or targeted campaigns. After you give your consent to use cookies, we will also evaluate user profiles with a pseudonym. Identification of a person will not be possible. We do not control third-party tracking technology and its use. You can stop storing and tracking these third-party cookies by changing your browser settings.

WHERE WE GET PERSONAL DATA FROM?

We use the personal data that you provide when you apply to us due to our services and when you use them, we also use the data we record on the Website.

WHO IS PROVIDED WITH PERSONAL DATA?

In order to provide specific services, Aristina may employ external service providers who take data processing procedures on our behalf and according to our instructions. We select these external service providers carefully and in accordance with the law. We strive for service providers to comply with regulations, laws, policies, and other binding legal requirements. The relationship between us as a data controller and a particular processor is governed by a written agreement or written terms unless such a relationship is governed by laws or regulations.

We provide your personal data in accordance with legal requirements. Your personal data may be transferred to payment and other service providers participating in our transaction with you (for example, in order to refund your money in case of return of the goods, etc.), to courts or other dispute resolution authorities, other third parties as far as relevant with our business sale, mergers, purchases, or reorganization of the entire business or part thereof, or similar business changes (including potential or existing business buyers and their advisers).

We may use a variety of service providers as processors for personal data in this Policy, such as data centres, cloud services, companies providing website administration and related services, advertising, marketing companies, companies that create, provide, support, and develop software; companies providing technology infrastructure services, communications service companies, companies providing message forwarding, direct marketing, and related services, professional advisers and auditors and other consulting companies, companies providing online browsing or online business analysis and services.

Some of these service providers may be located in countries outside the EU/EEA, whose data protection level according to the EU/EEA standards may be considered insufficient. Nevertheless, we have entered into appropriate arrangements with such service providers (or there are other existing warranties) that will ensure that all necessary steps are taken to protect your data in accordance with the applicable requirements. If you have any questions regarding our service providers, please contact us by e-mail at info@cheerylittlesheep.com. If requested, we will always provide additional information about our data security warranties (provide a copy of this information via e-mail).

Important: providers of payment and other services involved in our transaction with you may be located or operate in a country that does not ensure an adequate level of data protection. In this case, we will take every measure to ensure that your personal data is used safely, but there may be cases where we cannot ensure that the recipient of the data complies with the same requirements as the EU.

HOW LONG WE STORE PERSONAL DATA?

We store your personal data for no longer than it is necessary for the purposes for which it was collected or for a period that is provided for by law, for example:

  • we store customer data who ordered goods for another 10 years, but not longer than necessary for accounting purposes in accordance with statutory deadlines.
  • customer data obtained by means of cookies is stored until the end of the session or another period of up to 2 years.
  • customer data who subscribed to the newsletter will be stored 1 month after the cancelation of the subscription of newsletters.

HOW SECURE IS PERSONAL DATA?

We are currently using and will take various security technologies and procedures to protect your personal data from unauthorized access, use or disclosure. Our providers are carefully selected, we require them to use appropriate means to protect your confidentiality and to ensure the security of your personal data. Access to data is granted only to those people who require it for the purposes described in this Policy.

WHAT ARE YOUR RIGHTS?

You have the following rights:

  • the right to request us to allow you to access your personal data by providing you with copies of this data (the right to be informed);
  • the right to request correction of incorrect, inaccurate or incomplete data (the right to correction);
  • the right to restrict the processing of your personal data until the lawfulness of their processing is verified upon your request (the right to restrict processing);
  • the right to request the deletion of personal data (the right to deletion);
  • the right to disagree with the processing of personal data for direct marketing purposes and when personal data is processed for the purpose of our legitimate interests;
  • the right to request the transfer of your personal data to another controller or to provide the data in a form that is directly accessible to you. Tthis is applicable to personal data that you have provided yourself and which is processed on the basis of the conclusion and execution of the agreement (the right to data transfer)
  • the right to withdraw your consent, without prejudice to the use of your personal data prior to the withdrawal of your consent (the right to withdraw consent);
  • the right to file a complaint with the State Data Protection Inspectorate (the right to a complaint) (more information – ada.lt).

You can cancel your subscription to newsletters at any time by unchecking the option that you want to receive newsletters.

HOW TO EXERCISE YOUR RIGHTS?

We make every effort to enforce your rights and to answer any questions you may have about the information contained in this Policy. You can submit an inquiry about exercising of the above mentioned rights, complaints, notices, or requests (“Inquiry”) to Aristina by the contact details listed below.

We will respond to your inquiry no later than within 30 days after its receipt. In exceptional cases requiring additional time, we, upon notifying you, will have the right to extend the time limit for processing the requested data or other claims specified in your inquiry up to 60 days from the date of your inquiry.

We will refuse to satisfy your inquiry with a reasoned response by giving you notice in writing when the circumstances specified in the Regulation and other legal acts are determined.

OUR CONTACT DETAILS

If you have any questions regarding the processing of your data or questions regarding your rights, please contact us at info@cheerylittlesheep.com or UAB Aristina, Eitminu 16-112, LT-12111, Vilnius, Lithuania.

What are the principles of personal data protection that we follow?

By collecting and using the personal data that you have entrusted us as well as your personal data obtained from other sources, we follow the following principles:

  • Your personal data is processed in a lawful, fair, and transparent manner (the principle of lawfulness, integrity, and transparency).
  • Your personal data is collected for specified, clearly defined, and legitimate purposes and will not continue to be processed in an incompatible way (the principle of purpose limitation).
  • Your personal data is adequate, appropriate, and only necessary for the purposes for which it is processed (the principle of data minimization).
  • Processed personal data is accurate and, if necessary, updated (the principle of accuracy).
  • Your personal data is stored in such a form that the identity could be set for no longer than it is necessary for the purposes for which your personal data is processed (the principle of limiting the length of storage).
  • Your personal data is managed in such a way as to ensure adequate security of personal data, including protection from unauthorized or illegal processing of data, and against accidental loss, destruction, or damage by appropriate technical or organizational measures (the principle of integrity and confidentiality).

Our obligations

By collecting and using personal data, we undertake:

  • To process your personal data only for clearly defined and legitimate purposes.
  • Not to handle your personal data for purposes other than those specified in this Policy, except in the cases provided by law.
  • To process your personal data in a lawful, accurate, transparent, and fair manner and in such a way to ensure the accuracy, authenticity, and security of the personal data processed.
  • To ensure that no excessive personal data is processed.
  • To manage your personal data for no longer than it is necessary for the purposes for which personal data is processed.
  • To be responsible for complying with the principles established in this Policy and be able to prove that they are respected.
  • To perform other duties established in law.

Validity of the Policy and its changes

This Policy enters into force on 8 August 2020 and it may be changed with regard to the changes in legislation and our activity. We will notify you of changes on the Website www.cheerylittlesheep.com