- 1. Business Information
- 1.1. Our company or company legal name: UAB Dianos linija
- Our physical address: J. Basanavičiaus st. 11-2, Šilalė
- 1.3. Contact information:
- 2. Data Controller
- 2.1. The controller of your personal data is UAB "Dianos linija" (company code 301594530), registered address J. Basanavičiaus st. 11-2, Šilalė, email info@dishop.lt, phone +37065284533. The controller determines the purposes and means of processing the personal data collected in the online store www.dishop.lt.
- 2.2. A data protection officer has not been appointed, as this is not required by the General Data Protection Regulation (GDPR). For any matter relating to the processing of personal data, you may contact us using the details in section 1.3.
- 3. Collection of Personal Information
- 3.1. Types of personal information collected:
- Name: we collect the user's first and last name.
- Email: we collect the user's email address.
- Address: We collect the user's address to facilitate product delivery.
- Phone number: collected for parcel delivery and order status notifications.
- Order data: the items purchased, amounts, payment method, delivery method, order history and correspondence relating to the order.
- Technical data: IP address, browser type and cookie data, used to keep the website working and secure.
Please note that our website uses Paysera as a payment gateway, which may collect and process payment information. However, "Di Shop" does not directly store or process this information. For more information on how they handle payment data, we recommend reviewing Paysera's privacy policy.
- 3.2. How we collect personal information:
- User accounts: Personal information is collected when users create accounts on our website to facilitate order processing and customer service.
- Cookies: strictly necessary cookies remember your sign-in, your basket and your language choice. Only with your consent do we additionally use marketing cookies to measure how well our advertising performs. See section 11 for details.
- 3.3. Why we collect personal information:
We collect personal information to process orders and provide customers with a smooth shopping experience. We do not sell order data or pass it to third parties except where necessary to fulfil the order (see section 9). The website also uses the Meta Pixel advertising measurement tool, described in section 11.
- 3.4. Providing your name, email, phone number and delivery address is required in order to conclude and perform the purchase contract. If you do not provide this data, we cannot accept the order or deliver the goods. The newsletter and non-essential cookies are optional — the website works as usual without them.
- 4. Sharing Personal Information
We do not sell, trade, or otherwise transfer your personal information to outside parties. However, your information may be shared with trusted third parties involved in order processing and shipping, such as "Omniva parcel shipping", if necessary to fulfill your orders. These parties are obligated to keep your information confidential and secure.
- 5. Personal Information Security
We take the security of your personal information seriously. We have implemented reasonable measures to protect your data from unauthorized access, disclosure, alteration, and destruction. However, please note that no method of data transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
- 6. Your Rights
As a user of our website, you have certain rights related to your personal information. You may:
- Access your personal information;
- Correct inaccuracies in your personal information;
- Delete your personal information (subject to legal and contractual obligations).
- Object to the processing of your personal information.
- Withdraw your consent, if necessary.
- Restrict the processing of your personal data in the cases set out in Article 18 of the GDPR.
- Receive the data you have provided in a structured, commonly used and machine-readable format and transmit it to another controller (right to data portability).
To exercise these rights or inquire about your personal information, please contact us using the information provided in section 1.3 above. We will respond to your request no later than within 30 calendar days. These rights are not absolute — in some cases their exercise is limited by law (for example, the obligation to retain accounting records).
- 7. Legal bases for processing
7.1. We process personal data only where at least one of the legal bases set out in Article 6 of the GDPR applies:
- Performance of a contract (Art. 6(1)(b) GDPR) — first name, surname, email, phone number, delivery address and order data are processed so that we can accept, process and deliver your order and provide customer service.
- Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax data, including VAT invoices, are processed to comply with the requirements of the laws of the Republic of Lithuania.
- Consent (Art. 6(1)(a) GDPR) — sending the newsletter and non-essential cookies. You may withdraw consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.
- Legitimate interest (Art. 6(1)(f) GDPR) — keeping the website and accounts secure, preventing fraud, and establishing or defending legal claims.
- 8. Data retention periods
- 8.1. Account data is kept for as long as the account is active. After the account is deleted, the data is erased or anonymised within 30 calendar days, except for data we are required to retain by law.
- 8.2. Order and accounting data (VAT invoices) is kept for 10 years from the transaction, as required by the accounting and tax legislation of the Republic of Lithuania.
- 8.3. A newsletter subscriber's email address is kept until you unsubscribe.
- 8.4. Once the retention period expires, the data is securely erased or irreversibly anonymised.
- 9. Recipients and processors
9.1. Your data is shared only to the extent necessary to provide the service, with the following categories of recipients:
- Parcel and courier services (AS Omniva, AB Lietuvos paštas) — name, surname, delivery address, phone number and email, in order to deliver the parcel.
- The payment service provider Paysera LT, UAB — payment initiation data. We do not see, collect or store payment card details; they are processed solely by the payment service provider.
- IT, hosting and authentication providers (Google Ireland Limited / Firebase, Vercel Inc.) — to run the website, host the database and enable account sign-in.
- Social sign-in providers (Google, Meta Platforms), if you choose to sign in that way — we receive your name and email address from them.
- Meta Platforms Ireland Limited — data about visits to the website, collected via the Meta Pixel to measure advertising effectiveness (see section 11).
- Accounting service providers, auditors, bailiffs or public authorities — where required by law.
9.2. Data processing agreements are in place with our processors, requiring them to apply appropriate organisational and technical security measures. 9.3. We do not sell your personal data and do not transfer it to third parties for marketing purposes.
- 10. Transfers outside the European Economic Area
- 10.1. Some of the providers we use (for example Google/Firebase, Vercel) may process data outside the European Economic Area (EEA), including in the United States.
- 10.2. Such transfers take place only with appropriate safeguards — on the basis of the Standard Contractual Clauses approved by the European Commission or an adequacy decision of the European Commission (the EU–US Data Privacy Framework).
- 11. Cookies
- 11.1. The website uses strictly necessary cookies without which it would not work: they remember your sign-in, the contents of your basket and your language choice.
- 11.2. Strictly necessary cookies are used on the basis of legitimate interest and do not require separate consent.
- 11.3. The website also uses the Meta Pixel, a tool operated by Meta Platforms Ireland Limited, which uses cookies and sends Meta data about visits to the website and the products viewed. This data is used to measure the effectiveness of our advertising and to tailor it. Further information is available in Meta's privacy policy.
- 11.4. You can delete or block cookies at any time in your browser settings, and you can manage ad personalisation in the advertising settings of your Facebook account. If strictly necessary cookies are disabled, some website functions (such as signing in or the basket) will not work.
- 11.5. We do not carry out automated decision-making or profiling that produces legal effects concerning you.
- 11.6. We ask for your consent before setting non-essential cookies (including the Meta Pixel) on your first visit. You can change that choice at any time by clicking "Cookie settings" in the website footer. You can unsubscribe from the newsletter using the link in every email or by writing to us.
- 12. Right to lodge a complaint
- 12.1. If you believe your personal data is being processed improperly, please contact us first using the details in section 1.3 — we will respond no later than within 30 calendar days.
- 12.2. You also have the right to lodge a complaint with the supervisory authority — the State Data Protection Inspectorate of Lithuania (L. Sapiegos st. 17, 10312 Vilnius, email ada@ada.lt, www.vdai.lrv.lt).
- 13. Changes to This Privacy Policy
We reserve the right to update or change this Privacy Policy at any time. All changes will be displayed on this page with a new effective date. We recommend that you periodically review this policy for any updates.
13.2. The website may contain links to other websites (for example payment, parcel or social network sites). This privacy policy applies only to www.dishop.lt. If you follow a link to another website, please read that website's privacy policy.
- 14. Contact Us
Thank you for choosing Di Shop. Your privacy and satisfaction are important to us.
