Privatumo politika – Militra elektroninė parduotuvė

In this privacy policy, we explain what personal data we process about you in the online store militra.com, to whom we transfer it, how long we keep it, and what rights you have.

General provisions

Your personal data controller is MB "Minebot", legal entity code 306413101, VAT payer code LT100016733314, registered office address Viršupio Sodų 4-oji g. 27, Vilnius, LT-10230. Correspondence and goods collection address – S. Žukausko g. 35, Vilnius. The online store militra.com is managed and the goods are sold by MB "Minebot".

You can contact us:

by phone +370 610 00141 (Mon–Thu 9:00–17:00, Fri 9:00–16:00);
by email at info@militra.lt.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts.

What personal data we process

Formation and execution of the goods purchase or rental agreement

Data: name, surname, delivery address, email address, phone number, order and payment details; when ordering on behalf of a company – company name, code, VAT code and address.
Legal basis: contract (GDPR Article 6(1)(b)).
Retention period: data in contracts and invoices – 10 years after order completion.

Order delivery

Data: name, surname, phone number, email address, delivery address, or selected parcel terminal.
Legal basis: contract.
Retention period: 10 years after the order.
Who we share it with: AB Lietuvos paštas (LP Express, Unisend) – for parcels; for other courier and delivery service providers when the item is transported by courier.

Checkout

Data: payment amount, payment purpose, payer's name and surname, payment execution details. We do not see or store your bank login or payment card details – they are processed by the payment service provider in their environment.
Legal basis: contract, legal obligation.
Who we share it with: “Montonio” – payment initiation service provider through which bank payments are processed.

Creating and managing an account in the store

Data: name, surname, username and password, email address, phone number, order history.
Legal basis: contract.
Retention period: account usage time and 60 months after the last login.

Inquiries, consultations and complaints

Data: name, surname or company name, email address, phone number, information provided in the inquiry or complaint.
Legal basis: the aim to take action at your request before concluding the contract, and in other cases – a legitimate interest in conducting activities and ensuring quality.
Retention period: 1 year from the resolution of the inquiry.

Accounting

Data: data specified in invoices and accounting documents.
Legal basis: legal obligation.
Retention period: 10 years, as determined by accounting and archiving requirements.
Who we share it with: to the accounting service company and the invoice issuing system provider.

Newsletters and offers

Data: email address, name, email open and click information.
Legal basis: Your consent, which you can withdraw at any time at the bottom of the letter or by writing to info@militra.lt.
Who we share it with: “Omnisend” – to the email marketing platform provider.

Website performance, statistics and security

Data: IP address, browsing information (visited pages, visit duration, device and browser type), technical error logs.
Legal basis: legitimate interest in ensuring the operation and security of the site; for statistics and marketing cookies – your consent.
Who we share it with: Google Ireland Limited – for Google Analytics statistics service; GTranslate – for translating the website into other languages; service providers for website hosting and technical maintenance.

Cookies

A cookie is a small piece of information that the website records in your browser. Cookies allow the website to function, remember your cart and selected language, and allow us to see how the website is used and improve it.

We use the following types of cookies:

necessary – without them the store would not function: account login, shopping cart, checkout process, security. No consent is required for them;
preferences – remembers the selected language and your other choices;
statistics – ‘Google Analytics’ cookies, which allow us to see aggregated website usage statistics. These cookies are used only with your consent.

You can refuse or delete cookies in your browser settings. Refusing essential cookies may cause some store functions to not work.

Who can we share your personal data with

We may share data with our employees, service providers, and subcontractors – delivery, payment, accounting, information technology, archiving, legal, and marketing service providers – only to the extent reasonably necessary for the purposes specified in this privacy policy.

We may also disclose data if required by law, or to protect our rights and interests, as well as in the event of transferring the company's operations or part of it – to a (potential) acquirer.

We do not transfer your data outside the European Economic Area, except in cases where the above-mentioned service providers do so under the standard contractual clauses approved by the European Commission or another GDPR-compliant protective measure.

How we protect your data

Both when establishing data processing measures and during the processing itself, we implement appropriate technical and organizational data protection measures to protect personal data from accidental or unlawful destruction, damage, alteration, loss, disclosure, and any other unlawful processing. Measures are established based on the emerging risks.

What your rights are

Access your data. You can ask at any time whether we are processing your personal data and to access it.
Rectify data. You can request to correct inaccurate or incomplete data.
Erase data. This right is exercised in cases specified in Article 17 of the GDPR.
Restrict data processing or ask us not to process them.
Transfer data, which are processed by automated means and which we received with your consent or for the purpose of concluding a contract.
Object to data processing Procedure established by Article 21 of the GDPR.
Withdraw consent. If we process data with your consent, you can withdraw it at any time – this does not make the processing carried out before the withdrawal unlawful.

How to exercise your rights

Please submit requests, complaints, or claims in writing via email to info@militra.lt. We will respond in accordance with the law and within the specified timeframes, but no later than 30 days from the receipt of the request. If there are reasonable suspicions about the identity of the person making the request, we have the right to ask for identification.

Complaints

If you believe that your rights as a data subject are or may be violated, please first contact us at info@militra.lt. Upon receiving the complaint, we will contact you within a reasonable period and inform you about the progress and outcome of the investigation. If the outcome is unsatisfactory, you can submit a complaint to the supervisory authority – the State Data Protection Inspectorate (https://vdai.lrv.lt/).

Liability

You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If your data changes, please inform us immediately via email. We will not be liable for any damage arising from incorrect or incomplete data being provided or if we were not informed of changes.