- What does this Privacy Policy mean?
This privacy policy (hereinafter referred to as the ‘Privacy Policy’) explains what UAB Spinta (hereinafter referred to as the ‘Company’, ‘We‘), as data controller, does with your personal data, e.g. when you create an account, buy goods, fill in your personal data at the website www.capsule.love (hereinafter referred to as the ‘Website’), visit the Webiste.
All persons whose data is processed by the Company shall be referred to as ‘Customers’.
The Privacy Policy also sets out certain Customer responsibilities which must be complied with when visiting the Website.
- About the Company
UAB Spinta, legal entity number 302306116, establishment address at Burbiškių g. 56-2, Vilnius, data on the company are collected and stored in the Vilnius branch of the Register of Legal Entities of the Republic of Lithuania. Contact details for personal data matters: [email protected], +370 684 88201.
- What information about you do we process?
Personal data is any information the Company collects about the Customer that allows for the identification of a specific Customer. Such information can be, for example, the Customer's full name, address, purchase history.
Below we provide information on WHY we collect and use your data.
- For what purposes do we process your personal data?
We process your personal data:
- for creating, logging in and maintaining your account;
- for compiling your wish list;
- to store your shopping basket;
- for the purchase and sale of goods, including payment;
- for the delivery of goods;
- for the return and exchange of goods;
- for selling gift cards and administering their use;
- for personalised direct marketing (e.g. sending newsletters and promotional mailings, reminders about an "abandoned" basket (incomplete purchases) and improving user experience;
- in order to enable you to communicate with us online (Livechat);
- for notifications of the availability of the desired size of the goods and/or an upcoming new collection;
- for promoting the acquisition of goods (publicity for reviews);
- for the authentication of reviews.
For more detailed information on what personal data is processed for the purposes stated, what allows us to process it, how long we keep the data, who we disclose it to and other information you have the right to receive, click here.
- Contact Us
There are several ways you can contact Us: by phone, e-mail, or social media accounts. We personally accept, review and reply to all messages. If you contact us, we can process the following data belonging to you: name, surname, e-mail address, phone number, date, your nickname used in social media networks, and the text of the correspondence.
Such data will be processed in order to answer your queries. If you do not provide your contact details, we will not be able to contact you.
Correspondence will be stored for 1 (one) year as of the receipt of the message for the purpose of defending the legal claims of the Company on the grounds of legitimate interest.
Please note that we may have to contact you by post, e-mail or phone. Please notify us of any changes of your personal data.
- Transfers of personal data to third countries
Data controller for the social media network Facebook, on which we have an account facebook.com/capsule.by.agne.gilyte/, is established in a third country in regards to which the European Commission has not taken a decision on adequacy.
Data on the population of the European Union published on Facebook are processed by the data controller Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland). Information on how you can exercise your rights as a data subject can be found at https://en-en.facebook.com/privacy/explanation/ and help.instagram.com/519522125107875/?helpref=uf_share. In the event of a complaint about Meta Platforms Ireland Limited's processing of your personal data or the exercise (non-exercise) of your rights as a data subject, you have the right to complain to Meta Platforms Ireland Limited's supervisory authority, the Irish Data Protection Commission or the State Data Protection Inspectorate.
- Data disclosure
Except in cases provided in this Privacy Policy, we do not transfer your personal data to any third parties.
Please note that the list of recipients and categories of recipients provided in the Privacy Policy may change; other recipients of your personal data may appear during the processing of your personal data, including other data processors, such as intermediaries, marketing service and (or) IT service providers or subcontractors. If you wish to be notified of any changes to the recipients of your personal data, please inform us via e-mail provided in this Privacy Policy, indicating in the message as follows: “I wish to receive information on the changes to the recipients of my personal data, name, surname”.
- Your rights
This section contains information about your rights related to the processing of your personal data carried out by us and cases where you can exercise these rights. If you would like to receive more information on your rights or to exercise them, please contact us via e-mail indicated in this Privacy Policy.
The Company will provide information on actions taken on a request with regard to implementation of your rights without undue delay and within 1 (one) month of receipt of the request. In consideration of the request complexity and the number of received requests, the aforementioned term may be extended for 2 (two) further months.
- Right to consent withdrawal
If you have given us your explicit consent to the processing of your data, you can withdraw it at any time. Withdrawal of consent shall not affect the lawfulness of the processing of data carried out prior to the withdrawal of consent.
- Right to access your personal data
We try to provide information as explicitly and comprehensively as possible and undertake to update this Privacy Policy if there are any changes to the personal data use process. Nevertheless, if you have any questions about the use of your personal data or did not understand the provided information, please contact us.
- Additional rights
Below, you will find information about your additional righsts:
- You have the right to request us to rectify any inaccuracies of data held by us. In this case, we may ask you to confirm the rectified information.
- You can request that your personal data is erased when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
- You have the right to request the restriction of the processing of your data, in which case we will only keep them for the exercise or defence of legal claims.
- You have the right to receive personal data in a structured, commonly used and machine readable format, and to transmit them to another controller when the data processing is based on consent or a contract, and is transmitted electronically.
- You have the right to object to use of your personal data by us:
- in cases where we use such data in order to implement our legitimate interests, but we do not have an overriding legal basis to continue using your personal data; or
- at any time when we use your personal data for direct marketing purposes. In such case, the data will not be used for these purposes anymore; however, they may be used for other legitimate purposes.
- Right to consent withdrawal
- Complaints
If you believe that your rights of the data subject have been and/or may be violated, please promptly contact us via e-mail indicated in this Privacy Policy. We ensure that as soon as the complaint is received, you will be contacted within a reasonable period and informed about the complaint handling process, and then about its result.
If the handling results are unsatisfactory to you, you will be able to submit a claim to the supervisory authority – the State Data Protection Inspectorate (L. Sapiegos str. 17, Vilnius, www.vdai.lrv.lt, phones (8 5) 271 28 04, 279 1445).
- Liability
You are responsible for the confidentiality of your password and submitted data and for any actions (transfer of data, submitted orders, etc.) performed on our Website after logging in with your login data. You may not disclose your password to third parties. If a third party who has logged in to the Website using your login data uses services provided on our Website, we consider that you are the logged in person. If you lose your login data, you must promptly notify us by post, phone, fax or e-mail.
You are responsible for the accuracy, correctness and completeness of your data submitted to us. In case there are any changes to the data submitted by you, you must promptly notify us via e-mail. We will in no way be responsible for the damage incurred due to the provision of inaccurate or incomplete personal data or failure to notify us about changes to them.
- Amendments to the Privacy Policy
We may update or amend this Privacy Policy at any time. Such updated or amended Privacy Policy will come into effect as of its publication on our Website.
After making an update to the Privacy Policy, we will notify you about any changes that we consider crucial by publishing them on the Website. Date of update indicated below shows the date of the latest update to the Privacy Policy.
The latest update to the Privacy Policy was made on 2023.05.11.
Name of the cookie
Purpose of data processing
Moment of creation
Expiry term
Cookie nature (strictly necessary, Statistical, marketing)
Data used
Link to third party privacy policy
cookielawinfo-checkbox-non-necessary
Cookie that stores your consent to cookies
When you enter the page
7 days
Strictly necessary
Unique identifier
cookielawinfo-checkbox-necessary
Cookie that stores your consent to cookies
When you enter the page
Until the end of the session
Strictly necessary
Unique identifier
_ga
to store and count pageviews
For each new visit to the website
7 days
Statistical
Randomly generated identification number
_gid
Cookie used to distinguish users
For each new visit to the website
24 hours
Statistical
User's browsing habits/path
_gat
Cookie for filtering
real requests from
computer-generated
When you enter the page
Until the end of the session
Statistical
Value 0 or 1
_fbp
Used by Facebook (Meta Platform Inc.) to deliver a series of advertisement products such as real time bidding from third party advertisers
When you enter the page
3 months
Marketing
Browsing device information
omnisendAnonymousID
Records the actions of an unrecognised website visitor
When you enter the page
1 year
marketing
Unique identifier
omnisendAttributionID
This cookie is used to identify a message of any channel which was clicked by a contact
When you enter the page
30 days
marketing
Unique identifier
omnisendContactID
This cookie is used to identify a contact
by filling in the Omnisend subscription form and/or entering the website by clicking on the link in the email sent by Omnisend and arriving on the page
1 year
marketing
Unique identifier
omnisendEmailID
This cookie is used to identify the specific email that the subscriber clicked on to access the website
By clicking on the link in the email sent by Omnisend
30 days
marketing
Unique identifier
omnisendSessionID
This cookie is used to enable the services provided on the website and to ensure their proper functioning
When you enter the page
Stored during the session
marketing
Unique identifier
soundest-views
This cookie is used to count number of pageview in a session (used for pop-up, signup box subscription forms)
When you enter the page
Stored during the session
marketing
Unique identifier
omnisendCartProducts
This cookie is used to monitor content of a cart in a session
When you enter the page
Stored during the session
marketing
Unique identifier
- Personal data table
Purpose of
processing
Processed data
Legal basis
Storage period
Data recipients
Transfers to
third countries
Notes
Creating, accessing and
maintaining an
account
Name, surname
Login name
Email address
Password
Date of last visit
Date of last login
Contract
Article 6(1)(b)
GDPR
5 years
No provision of
data
No transfer of data
You have the right
to data
portability
Creating a wish list
Your selected favourite products and their price
Consent
Article 6(1)(a)
GDPR
30 calendar days from the creation of the wish list until withdrawal of consent
No provision of
data
No transfer of data
You have the right
to withdraw
consent and the
right to data
portability
Preserving your
shopping basket
Selected goods
Consent
Article 6(1)(a)
GDPR
Until you empty the
basket yourself
No provision of
data
No transfer of data
You have the right
to withdraw
consent and the
right to data
portability
Purchase and
sale of goods,
including
payment
The buyer is a
natural person:
Name, surname
Telephone No.
Email address
Information on the ordered item
(type, size, quantity, price)
Payment
information
(amount paid,
date of payment,
method of payment)
The buyer is a legal
representative:
Name, surname
Responsibilities Name of company
represented
Contract
formation and
enforcement
Article 6(1)(b)
GDPR
10 years
No provision of
data
No transfer of data
Data on
the payment
made is also
obtained from the
payment institutions: name,
surname, amount
paid
Delivery of goods
First name, Last
name Delivery
address
Additional information
required for the
delivery, submitted in free form
Shipment number
Contract
formation and
enforcement
Article 6(1)(b)
GDPR
10 years
Couriers
No transfer of data
You have the right
to data portability
Returning,
exchanging
goods
If you purchased after creating an account:
Name, surname,
address, bank
details and
account number
(if you are
requesting a
refund for
returned goods),
details of your
request, proof of
purchase, details
of the replacement goods
Contract
formation and
enforcement
Article 6(1)(b)
GDPR
10 years
Cleaning facilities
No transfer of data
You have the right
to data portability
If you purchased as a guest (without creating an account):
Name, surname
Order number
The last three digits of the phone number you provided at the time of purchase
Free return code provided
Bank details and account number (if you are requesting a refund for a returned item), details of your request, proof of purchase, details of the item for which you wish to exchange
Selling and administering the use of gift cards
Name
Surname
Gift card unique code
Date of purchase
Expiry date
Whether the gift card has been used
Email address
Contract
formation and
enforcement
Article 6(1)(b)
GDPR
6 months from the date of purchase of the gift card
Couriers (when purchasing a paper gift card)
No transfer of data
You have the right
to data portability
Direct marketing (e.g. to send newsletters and promotions, reminders about an "abandoned" basket (incomplete purchase) and improving user experience
Name, surname
Telephone No.
Email address
Information on an incomplete purchase
Purchase history
(if you consent to
personalised
direct marketing)
Date of birth (we'll send special birthday offers)
Information you have provided about what you will do for yourself today (we aim to personalise our communication with you)
Consent
Article 6(1)(a)
GDPR
5 years from the
date of consent or
until withdrawal
of consent
UAB “Omnisend”
The data is transferred to a third country, the United States of America, which has not been recognised by a decision of the Commission of the European Union as providing an adequate level of protection.
The transfer is made in accordance with the European Commission's Standard Data Protection Clauses, which form part of the Agreement on Processing of Personal Data. You can access it here: https://www.omnisend.com/data-processing-agreement/.
You have the right
to withdraw
consent
Name, surname
Telephone No.
Email address
Purchase history (in order to offer only similar products)
Legitimate interest
Article 6(1)(f) GDPR (where you are our customer and have not objected to receiving our direct marketing communications)
1 year after the last purchase
You have the right to object to the processing of personal data
Live online chat
Name
Email address
Consent
Article 6(1)(a)
GDPR
Until the question
is answered
No provision of
data
No transfer of data
You have the right
to withdraw
consent
Notification of
the desired size becoming available and/or upcoming new collections
Name
Email address
Information on the desired
size of the goods
Consent
Article 6(1)(a)
GDPR
Until the
notification that the desired size of the goods has become available or until
the withdrawal of
consent
No provision of
data
No transfer of data
You have the right
to withdraw
consent
Sales promotion
(publicising
reviews - sending
via email)
Name
Reviews
Consent
Article 6(1)(a)
GDPR
Until the consent
is withdrawn
E-shop visitors
No transfer of data
You have the right
to withdraw
consent
Authenticating
feedback
Name, surname, purchased product, e-mail mail address
Legitimate interest
Article 6(1)(f)
GDPR
As long as the feedback is published
No provision of
data
No transfer of data
You have the right
to object