Privacy policy

1. Definitions

1.1. Data Controller – OGI Workshops (individual activity) established and operating under the laws of the Republic of Lithuania.

1.2. Client or Data Subject – a natural person who is a client of OGI Workshops (including website visitors) whose personal data are collected by OGI Workshops.

1.3. Online Store – the e-commerce store operated by OGI Workshops (the “Store”).

1.4. Services – all services provided by OGI Workshops.

1.5. Personal Data – any information relating to an identified or identifiable natural person (the Data Subject); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as a personal identification number) or to one or more factors specific to that person’s physical, physiological, psychological, economic, cultural or social identity.

1.6. Processing of Personal Data – any operation or set of operations performed on Personal Data, such as collection, recording, accumulation, storage, classification, grouping, combination, alteration (supplementation or correction), provision, disclosure, use, logical and/or arithmetic operations, retrieval, dissemination, erasure, or any other operation.

1.7. Partner – a legal person that provides services related to OGI Workshops’ activities, supplies goods to OGI Workshops, or engages in joint projects with OGI Workshops, including but not limited to marketing campaigns, joint sales campaigns, loyalty programmes, etc., in media channels, websites, the Online Store, retail outlets, marketplaces, etc.

1.8. Cookie – a small piece of text information automatically created when browsing the website and stored on the visitor’s computer or other device.

1.9. Direct Marketing – activities aimed at offering goods or services to individuals by post, telephone or other direct means and/or requesting their opinion regarding offered goods or services.

1.10. Privacy Policy – this document establishing the principles and rules for the Processing of Personal Data when using the Online Store and Services.

1.11. Account – the Client’s primary login credentials for the Online Store, consisting of one email address and a password.

1.12. Password – a unique combination of numbers, letters and/or other symbols created by the Client to access the Online Store.

2. General Provisions

2.1. By using the Online Store and Services, the Client authorises OGI Workshops to perform all Personal Data Processing activities to the extent and for the purposes set out in this Privacy Policy.

2.2. Personal Data are processed in accordance with Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, other applicable legal acts, and this Privacy Policy.

2.3. OGI Workshops processes Personal Data according to the following principles:

• 2.3.1. Personal Data are collected for specified and legitimate purposes;
• 2.3.2. Personal Data are processed accurately, fairly and lawfully;
• 2.3.3. Personal Data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
• 2.3.4. Personal Data are kept up to date;
• 2.3.5. Personal Data are kept in a form which permits identification of the Data Subject for no longer than is necessary for the purposes for which the Personal Data are processed;
• 2.3.6. All information about Personal Data is confidential;
• 2.3.7. The Client’s Personal Data and personal information will not be used for unlawful purposes.

2.4. It is deemed that, by purchasing in the Online Store, the Client has read the then-current version of the Privacy Policy and agrees to it. If the Client does not agree with any part of the Privacy Policy, the Client must refrain from placing an order and purchasing in the Online Store.

2.5. The Privacy Policy is available in the Online Store and can be printed at any time. OGI Workshops may amend, supplement or update the Privacy Policy at its discretion. The new version will be published in the Online Store.

2.6. The Client may place orders in the Online Store without registration or through a registered Account.

2.7. When creating an Account, the Client must provide an email address, create a secure Password, and provide accurate Personal Data to the Online Store. The Client is responsible for the accuracy of the data provided. After creating an Account, the Client is assigned an identification code.

2.8. When using the Services and purchasing in the Online Store, the Client must always provide accurate Personal Data to the Online Store and is responsible for their accuracy.

2.9. The Client has the right at any time to change and supplement Personal Data in the Account or to contact the Online Store with a request to delete the Account.

2.10. The Client must not disclose the Password to third parties and must keep it secure; otherwise, the Client bears all related responsibility.

3. Collection, Use, Correction and Storage of Personal Data

3.1. OGI Workshops respects every Client’s right to privacy. The Client’s Personal Data (i.e., name, surname, email address, phone number, delivery address, age/date of birth, payment data (bank account number, method of payment, etc.), purchase history, and—with the Client’s consent—age, gender, date of birth, place of residence) are collected and processed for the following purposes:

3.1.1. E-commerce purpose. Processed data: name, surname, email address, phone number, delivery address, age/date of birth, IP address, and payment data. Retention: up to 5 (five) years from the Client’s last login to the Online Store, unless longer retention is required by law or necessary to defend legal claims.

3.1.2. Direct Marketing purpose. Processed data: name, surname, phone number, email address, address, age, gender, date of birth, place of residence. Retention: up to 5 (five) years from the Client’s last login to the Online Store or until consent is withdrawn (whichever occurs sooner).

3.2. The Client may consent to the Processing of Personal Data (name, surname, phone number, email address, address, age, gender, date of birth, place of residence) for Direct Marketing. If the Client later withdraws consent or opts out of Direct Marketing messages, OGI Workshops will cease Processing for this purpose and will not send marketing communications, except information related to the Client’s orders.

3.3. The Client may withdraw consent referred to in clause 3.2 at any time by notifying OGI Workshops by email at ogi.workshops@gmail.com and clearly indicating the withdrawal of consent to use Personal Data for Direct Marketing and the wish to stop receiving Direct Marketing messages.

3.4. The Client can also exercise the right to object to Processing for Direct Marketing by clicking the unsubscribe link provided in each email.

3.5. As a Data Subject, the Client has the following rights regarding the Processing of Personal Data:

• 3.5.1. to obtain information from OGI Workshops about the Processing of Personal Data, to access their Personal Data and information on how it is processed;
• 3.5.2. to obtain information from OGI Workshops about the sources of Personal Data, the purposes of Processing, and the recipients to whom data have been disclosed during the last 1 (one) year;
• 3.5.3. to request rectification or erasure of Personal Data, or restriction of Processing (except storage) where Processing is not in compliance with GDPR and applicable laws.

3.6. To exercise rights, the Client may be required to provide an identity document (passport, identity card, or driver’s licence). OGI Workshops provides information on processed Personal Data free of charge once per calendar year. Requests under clause 3.5 may be submitted by email to ogi.workshops@gmail.com. OGI Workshops may rectify, alter, erase or restrict Processing only after verifying the identity of the requesting Client.

3.7. Personal Data are not provided to third parties, except:

• 3.7.1. where the Client’s consent has been obtained as provided in this Privacy Policy;
• 3.7.2. to Partners for e-commerce purposes (e.g., IT, hosting, payment processing, delivery/courier services) in connection with OGI Workshops’ activities;
• 3.7.3. to competent authorities as required by the laws and regulations of the Republic of Lithuania.

3.8. The Client is informed of the right to object to Processing for Direct Marketing at any time.

3.9. The Client agrees that Personal Data may be transferred to Partners for the fulfilment of orders placed in the Online Store and for the provision of Services to the Client, as well as to Partners specified in clause 3.7.

3.10. If the Client does not agree with this Privacy Policy, the Client will not be able to use the Online Store Services.

3.11. OGI Workshops implements organisational and technical measures to protect Personal Data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful Processing.

3.12. The Client agrees that, where required by competent authorities and/or where Personal Data are suspected to have been used in unlawful activities, or there are reasonable suspicions of identity theft under investigation by law enforcement, or other lawful grounds exist, Personal Data may be stored on OGI Workshops’ servers for longer than the retention terms specified in this Privacy Policy.

3.13. Upon receiving a Data Subject’s instruction or enquiry related to Personal Data Processing, OGI Workshops will respond by granting the request or providing a reasoned refusal no later than within 14 calendar days from the date of the request. If the Data Subject so requests, the response will be provided in writing.

3.14. To provide full functionality in the Online Store, with the Client’s consent OGI Workshops may place cookies on the Client’s device. Cookies are used to recognise the Client as a returning user, to compile Store traffic statistics, and to remember the shopping cart. The Client can review which cookies are set and may delete some or all cookies at any time.

3.15. For more information about cookies and how to manage or delete them, visit www.allaboutcookies.org

4. Final Provisions

4.1. OGI Workshops may amend or supplement this Privacy Policy in whole or in part. Amendments take effect from the date of publication.

4.2. For questions, please contact: ogi.workshops@gmail.com.