Privacy Policy
What personal data the shop collects, why, how long we keep it and what rights you have.
Who Is Responsible
The data controller is MB “Renginio genas”, company code 304662851, address Kuršių g. 2, Vilnius, Lithuania. For anything about your data, write to shop@ccbaltics.com.
What We Collect and Why
- To take and deliver your order: name, email, phone number, the parcel locker or address you chose, what you ordered and what you paid. If you buy for a company: its name, code, VAT code and address, for the invoice. Legal basis: the contract with you (GDPR Article 6(1)(b)).
- To keep our accounts: order and invoice data. Legal basis: a legal obligation (Article 6(1)(c)).
- To answer you and handle returns and complaints: your contact details and what you write to us. Legal basis: the contract and our legitimate interest in looking after customers (Article 6(1)(b) and (f)).
- To send shop news, only if you subscribe: your email address. Legal basis: your consent (Article 6(1)(a)). You can unsubscribe at any time with the link in every email.
- To measure visits and our advertising, only if you allow it in the cookie banner: the pages you view, what you put in your bag and buy, the ad you came from, and technical details of your browser and device. Tools: Google Analytics and the Meta (Facebook, Instagram), TikTok, Reddit and X pixels, loaded through Google Tag Manager. Legal basis: your consent (Article 6(1)(a)). You can withdraw it at any time on the Cookie Policy page; nothing of this runs until you agree.
- To keep the site working and secure: technical data such as your IP address and browser type, in server logs. Our forms also use Cloudflare Turnstile, a check that tells people from automated scripts. It runs when you start filling in a form and sends Cloudflare, Inc. (USA, certified under the EU-US Data Privacy Framework) technical details of your browser and your IP address; it sets no cookies on our site. Legal basis: our legitimate interest in a secure site (Article 6(1)(f)).
If you create an account at checkout, we also keep your login name and a protected (hashed) password. We cannot deliver an order without the data marked as required at checkout.
If you allow marketing cookies, the advertising platforms named above may use what they record to show you our ads and to find people like our customers. Without that consent they get nothing from the shop. We make no automated decisions about you.
Who Receives Your Data
Only those who need it to do their part: the parcel carrier that delivers your order, the payment provider Paysera and your bank, the newsletter service MailerLite if you subscribe, Google, Meta, TikTok, Reddit and X if you allow statistics or marketing cookies, the companies that provide our hosting, email and accounting services, and public authorities when the law requires it. We do not sell your data.
If one of these companies processes data outside the European Economic Area, it does so under the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
How Long We Keep It
- Order and invoice data: 10 years, as the accounting rules require.
- Messages and requests: as long as it takes to deal with them and with any claim that may follow.
- Newsletter address: until you unsubscribe.
- Account data: until you ask us to delete the account.
Your Rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict its use or to hand it over in a common format. You can object to processing based on legitimate interest and withdraw a consent at any time.
Write to shop@ccbaltics.com. We answer within one month.
If you think we handle your data unlawfully, you can complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, vdai.lrv.lt.
Cookies
The shop uses the cookies it needs to work, listed below. Analytics and advertising cookies are set only if you allow them in the cookie banner. The full list is in the Cookie Policy.
- wp_woocommerce_session_… keeps your bag between pages. Kept for 2 days.
- woocommerce_cart_hash and woocommerce_items_in_cart let the shop show the right bag. Removed when you close the browser.
- wordpress_logged_in_… keeps you signed in, only if you have an account.
Changes to This Policy
When we change how we handle data, we update this page. The date at the top shows the latest version.