PRIVACY POLICY

By registering on the website https://sertamattress.lt/, you trust UAB "SLEEPSHOP" (single registration number: 306389127, VAT payer code LT100016257118, contact information: Girulių g. 10-201 street, LT-12112 Vilnius, Lithuania, email: info@sertamattress.lt, https://sertamattress.lt/ ) as a manager for the processing of personal data (hereinafter - the Company or we or the Manager) your personal data, and you give us the right to process it in accordance with the types, types and purposes of this Policies (hereinafter referred to as the Policy) and the online store sertamattress.lt - Conditions for the purchase and sale of goods (hereinafter referred to as the Rules). Please note that we process your personal data only if you choose to provide it to us.

Implementing Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 - on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), we We will provide you with the most transparent and fair processing of your personal data, and also take care of your confidentiality and security of your personal data. In this Policy you will find all the information about what personal data we collect and process, what we use it for, how long we store it, etc. This information is very important for you, so we suggest you read this policy carefully before providing us with your personal data. We also draw your attention to the fact that both the

 Policy and the Rules may be changed, supplemented or updated. If you do not accept these Terms and/or Policy

 or any of the conditions, we will not be able to provide you with any or all of the services we provide (hereinafter referred to as the Services).

1. What is personal data and what personal data do we process and why?

Personal data is any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified directly or indirectly by reference, in particular, to an identifier such as a first name, last name, identification number, location data of a person, an online identifier or one or more factors specific to a physical, physiological, genetic, mental, economic, cultural or social identity of that person.

1.1. Registration, verification, administration and cooperation

Before registering in the online store https://sertamattress.lt/, you first need to read the Terms and Conditions of the online store (distance agreement) and this Policy. You can then register and we need to receive confirmation that you want to enter into an agreement. If you register with us on the website https://sertamattress.lt/, the Agreement is considered concluded and you can purchase goods or services from us. Providing your personal data to conclude a contract is mandatory, because - if you do not provide them, you will not be able to enter into an Agreement and purchase goods from us or use our Services on https://sertamattress.lt/. By registering, you enter into an Agreement and confirm that the personal data you provide is accurate and correct and that you are able to enter into an Agreement and are at least 18 years of age. We are not responsible for inaccurate, incomplete or erroneous personal data you provide to us.

Data required to conclude a contract:
Data categories	Your first name, last name, delivery address (city, street or house number or name, apartment number), email address and telephone number.
Legal basis for data processing	For the conclusion and execution of an agreement to which you are a party, and for the protection of our legitimate interests.
Data processing period	For the entire period of validity of the Agreement, while you purchase goods from us or use our Services. We may retain the contract concluded with you and the confirmation of its conclusion for a longer period, as long as claims for liability that may arise in connection with the Contract are overdue, and if we need to protect our legitimate interests from claims or demands, brought against us.

According to the personal data you provided, when you register on https://sertamattress.lt/, after signing the Agreement, your unique user profile (account) is created, after which we will identify you as a registered user of the online store https://sertamattress.lt /, which will give you the opportunity to use purchases of goods and/or services for registered users in accordance with the terms of the Agreement and the terms of this Policy. Based on the personal data you provide, we recognize you when, for example, you want to update or change your data, contact us with the provision of relevant personal information, exercise rights related to the processing of personal data, etc.

We may use the contact information you provide (email, phone number) to contact you when fulfilling obligations under the Agreement, including to respond to your requests, complaints, provide important information about the delivery of goods or Services, or notify about changes in the Policy. Also, if you forgot your purchases in the basket - to clarify the exact time of delivery of the goods, or we encounter difficulties in fulfilling obligations under the Agreement related to completed purchase or service transactions, etc.

It is very important that the personal data you provide is accurate and correct. If you provide incorrect (false) personal data, forget it, or do not update it if your personal data changes, we may have difficulty ensuring compliance with our obligations under the Agreement and providing you with the Services. Other difficulties may also arise when exercising your rights. We will not be liable under any circumstances for any damage you may suffer as a result of providing inaccurate or incorrect personal data.

If your data changes, you must immediately notify us or you can make changes by changing the personal data of your registered user on the website https://sertamattress.lt/. For information on how to update your personal information that has changed, please refer to Section 6.2 of this Policy.

The public has no way of verifying the accuracy and reliability of the personal information you provide unless you provide it to us. By accepting your registration and entering into an Agreement with us, we believe that the personal data you provide is accurate and correct.

1.2. Administration of your account

We process your personal data in order to monitor and administer your account.

Account details
Data categories	Data provided during registration (on the website https://sertamattress.lt/), data about account access, account activity, including technical viewing data (IP address, connection and technical information about viewing).
Legal basis for data processing	The agreement that you have entered into and the account you have created to fulfill your obligations under the Agreement and to protect our legitimate interests.
Data processing period	For the entire period that you are an account user. We may also retain evidence of the Agreement for a longer period of time if necessary to defend against claims or demands made against us.

We consider your registration to use https://sertamattress.lt/ to be received after you complete the necessary steps to create an account specified in the Terms.

1.3. Processing your purchase data

By providing you with Services and various benefits - concluding and fulfilling the Obligations under the Agreement, making a cash payment for the product, we will reimburse you (if you return the product purchased to us), providing discounts on purchases, etc. - We process data about your purchase or Service transactions (hereinafter referred to as Purchase Data) together with your registration data and issue you documents to justify accounting (invoices, invoices, invoices, etc.), in accordance with the requirements of regulations of the Republic of Latvia (for example, tax law on added value, “On accounting” in Article 7 indicates personal data that must be indicated in documents confirming accounting, etc.).

Data about your purchase for the purposes of administering the service:
Data categories	Your name, surname, personal code, email address, phone number, delivery address, signature (if you accept the goods yourself), date and time of purchase and delivery, name of goods, quantity, purchase prices and discounts, method of payment for the purchase, payments made and payment information.
Legal processing of data	The agreement that you have entered into and your created account to fulfill your obligations under the Agreement, as well as our legitimate interests and legal obligations arising and applicable to the Company.
Data processing period	Documents to justify accounting - 5 years after the date of the purchase and sale transaction and the date of signing the invoice. The agreement concluded with you and the accounting evidence of purchase transactions, we may store for a longer period, as long as claims for liability that may arise in connection with the Contract are overdue, and if we need to protect our legitimate interests against claims or demands, presented to us.

We store purchase data and accounting documents for 5 years from the date of purchase and the date of signature of the invoice at the end of the calendar year in question, and if at the end of the period no claims have been made against us, we delete them from the database and / or securely and irrevocably separated from your data and other personalized information.

1.4. Data profiling administrating Service provision

In operating the Services and seeking to achieve the purposes set out in the Terms, we may use automated analysis of personal data (including data about your purchases) and automated decision-making, including profiling of you. We may group and analyze your data according to the products you purchased and/or other features related to you (for example, name, address, etc.). In your best interests, we can analyze your purchase data and perform profiling, correcting errors. Having noticed that due to an error, our customers were given the wrong price for an item or an incorrect discount, we can use the purchase data to identify the customers who purchased those items and correct our error (make up the difference in price, etc.).

It is important to emphasize that our activities in analyzing and profiling your data do not affect you legally or otherwise.

However, if you do not agree to the automatic analysis and profiling of your data for the purposes of this section of the policy, we accept and take into account your objections.

However, given the requirements for the Services, your objection may mean that we will not be able to provide you with the opportunity to use our services.

1.5. Providing suggestions and information

If, after registering in the online store https://sertamattress.lt/, you agreed to receive offers and / or current offers to your email address or SMS news on your phone, then we process your personal data, providing you with the following offers and information: general newsletters, information about our offers and those of our partners, discounts, promotions, sales, we invite you to take part in promotions, lotteries and receive prizes, we are interested in your opinion about the services and products provided.

We provide offers and information to your account, as well as in any other way of your choice - by email, by SMS to the phone number you specified.

Personal data for processing for the purpose of offers and information provision
Data categories	Your name, email address and/or telephone number.
Legal basis for data processing	Your consent to receive offers and information about current news, as well as to protect our legitimate interests.
Data processing period	While your consent to receive offers and information about current news is valid. We may retain your consent and acknowledgment thereof for a longer period of time if necessary to enable us to defend ourselves against claims or demands made against us.

You can select your preferred communication channels in the privacy settings of the online store https://sertamattress.lt/ in your account. You can change these settings at any time without restrictions.

If you do not want us to send you offers and/or news, you do not have to give us your consent, but if you have given your consent to receive offers and/or news, you can refuse them at any time or change the chosen method receiving. Your refusal to receive offers and news will not interfere with the use of the Services and the fulfillment of contractual obligations.

1.6. Data profiling for customized offers

If, when registering in the online store https://sertamattress.lt/, you also decided to receive individual (personalized) offers in accordance with the history of your orders and agreed to profiling for this purpose, to get to know you as best as possible, we will process not only those provided by you data, but we will also analyze and use your purchase history.

Personal data for processing for the purpose of individual offers and information provision
Data categories	Your name, email address and/or telephone number, purchase information (including date and time of purchase, product name, quantity, total purchase price) History of individual offers for you and information about their use.
Legal basis for data processing	Your consent to the profiling of your data, providing you with individual offers, as well as protecting our legitimate interests.
Data processing period	While your consent to receive offers and information about current news is valid. We may retain your consent and acknowledgment thereof for a longer period of time if necessary to enable us to defend ourselves against claims or demands made against us.

If you agree to your data being profiled in order to provide you with personalized offers, you will be able to receive personalized offers based on your needs and other special benefits.

To achieve the above goal, we use automated data analysis and decision-making, including profiling. We group and analyze your data and/or purchases and, taking into account your purchasing habits and/or other characteristics (e.g. address, specific purchases, etc.), we provide you with relevant, interesting and useful offers, as well as other information about individual offers.

For example, taking into account your purchase history and shopping habits, we can provide discounts on your favorite product categories, inform you about new products in your individual assortment, etc.

If you do not want us to send you individual offers and/or news, you do not have to give us your consent, but if you have given your consent to receive individual offers and/or news, you can refuse them at any time or change them chosen method of receipt. In this case, your refusal to receive individual offers will not prevent you from using the Services and fulfilling contractual obligations in the future, but you will no longer be able to receive individual offers and information relevant to you.

1.7. Statistics, market and research of our customers' actions

We are constantly working to ensure that our product range, promotions and discounts are as suitable as possible for our customers, incl. for your needs.

Statistics, Market, data for processing, research into the actions of our customers
Data categories	Address, purchase information (including date and time of purchase, product name, quantity, total purchase price, amount of discounts provided).
Legal basis for data processing	Our legitimate interest is to analyze region-specific procurement data at customer addresses and prepare reports for our business activities in order to evaluate our business activities and provide benefits to both you and the Public Business.
Data processing period	5 calendar years from the date of order

Researching statistics, markets and customers and preparing the necessary reports for our business activities, we use automatic data analysis. During the analysis, we use non-personalized data and do not process your name, contact information or other personal information. Data analysis for statistics, markets and our customer research (address and purchase data) helps us make important business decisions regarding our customers' needs, product ranges, prices and much more. These data analysis activities do not affect your legal or characteristic interests, nor does it affect the performance of further obligations under the Services and the Agreement you have entered into.

1.8. Handling customer inquiries, complaints, inquiries and feedback

We will use your personal data to respond to your consumer complaints, inquiries, complaints, requests and administer your feedback (hereinafter referred to as the request).

Customer inquiry, complaint, request, processed data for service purposes
Data categories	Identification and contact information you provided: first name, last name, telephone number, email address, address, date of birth, etc. Contents of your request: the case for which you are applying, circumstances, date, place, your request, claim or review, product, other information specified in the request; Citi ar Requested submitted documents for example: delivery note / invoice /, photographs of the goods.
Legal basis for data processing	To comply with our legal obligations to review and respond to your requests, and our legitimate interest in evaluating your feedback and telephone conversations to improve the quality of our operations and services to you, and to protect our legitimate interests.
Data processing period	Up to 12 months. We may also store the goods you have requested for a longer period of time, pending the expiration of liability claims that may arise from fulfilling obligations under the Agreement to purchase the goods. Also if this is necessary so that we can defend ourselves against claims or demands made against us.

We use your data in order to correctly and objectively consider your request, provide you with the necessary information, resolve your requests, resolve your requests or claims (complaints). We may analyze your provided feedback data in order to improve the quality of our activities and services provided to you, taking into account the opinions and suggestions that you provide. We process and store your request and your data related to it until we consider the request, until we provide you with an answer and implement the decisions made, as well as for 6 (six) months after the request is resolved, but not shorter if:

- requests in electronic form - 2 years;
- complaints - 2 years;
- Individual letters on Facebook - 6 months

If a legal dispute is initiated in connection with a Request or there is a likelihood of such a dispute, we may retain your data for a longer period until the statutory claim deadline or statute of limitations has expired and/or a final decision has taken effect.

Upon expiration of the period for processing and storing your data specified in this Policy, we will independently destroy documents containing your personal data, or your personal data existing in electronic form will be securely and irreversibly deleted for such actions within a reasonable time.

2. What is the legal basis for the processing and from what sources do we receive and collect your personal data?

We collect and process your personal data in accordance with the following legal bases:

- Your consent;

- conclusion and execution of a contract for the sale of goods to which you are a party;

- our legitimate interests;

- fulfillment of legal obligations arising and applicable to the Company.

One or more of the above legal bases may apply to your processing of data.

We acquire almost all of your personal data only from you. By registering in the online store https://sertamattress.lt/, you send data directly to us, and purchase data when purchasing goods or services. We also acquire your data directly from you when you submit a request in any way you choose: by sending us an email, sending us a written paper request, or calling us by telephone at the number we provide.

Upon qualitative and objective consideration of your request, we need to obtain additional information or investigate significant circumstances, we can link your request data with our existing ones collected during the consideration of your request, for example, we can view transaction transaction data, your account usage history, interview our employees, etc.

3. How do we store and destroy data?

At the end of the period of processing and storage of your data, as specified in this Policy (except for the cases specified below), we will destroy your data in a secure manner, but in the cases specified in the Policy, we will anonymize it as soon as possible. For longer than specified in this Policy, your personal data can only be stored if one of the following circumstances exists:

- we need to be able to defend ourselves from claims, demands and be able to exercise our rights;

- the period for storing personal data is determined or follows from the regulations of the Republic of Latvia and / or the European Union;

- there are reasonable grounds to suspect an illegal act and an investigation is underway;

- Your data is necessary for the correct resolution of a dispute or complaint;

- it is necessary to provide a backup copy for other similar purposes;

- in the existence of other legislative grounds

In the event of such circumstances, information containing personal data will be stored until the relevant process (criminal case, administrative offenses, completion of administrative process) is transferred to law enforcement agencies or their final decision.

4. In what cases and to which recipients of personal data do we disclose your data?

We may transfer your data for processing to recipients of personal data, as this helps us perform and administer the provision of services, and provides us with services for administering customer requests. These entities may include IT database software providers, database administration service providers, data centers, maintenance and cloud service providers, direct marketing service providers, market research or business intelligence service providers, etc. In any case, we provide as much data as is necessary for a specific task or specific service. Our contracted data controllers may only process your personal data on our instructions and may not use it for other purposes or transfer it to others without our consent. In addition, they must ensure the protection of your data in accordance with applicable law and in accordance with the written agreement entered into with us.

If the case described in your request is determined to be an insured event, your request and data will be forwarded to the insurance company(s) with which we insure our liability, property, or that provides us with other insurance coverage related to your case. Insurance companies act as independent/separate data controllers and process your data in accordance with the terms and conditions of the insurance company.

Data may also be transferred to competent/supervisory public authorities, local authorities or law enforcement agencies such as the police, prosecutor's office, court or regulatory authorities, but only upon reasonable request or only if required by applicable law or in cases and in a manner required by law, to ensure the security of the state, local governments or law enforcement agencies and/or the rights of our customers, employees and IT resources, to file, defend in the event of legal claims, etc.

If we use a website analytics service (such as Google Analytics) that is used to determine how you view the information presented on https://sertamattress.lt/, we may share your anonymous data with persons based on this information and evaluate how the site is viewed, preparing reports on site activity for site processors and providing other services related to the use of the site. You can read more about this in the Cookie Policy of your browser.

4. In what territory do we process your personal data?

We process your personal data only within the European Union. We currently do not collect or transfer your personal data to third countries.

In the event that we use facebook.com or Google Analytics to provide Services or communications regarding data transfers to 3 countries, the respective service providers are considered a third party and we recommend that you read the privacy policies of these providers.

5. What are your rights and how can you use them?

Data Protection Law gives you many rights that you can freely exercise, and we give you the opportunity to exercise them. We provide information about your specific rights and how to exercise them in this Policy, please read it carefully:

5.1. The right to access your personal data that we manage

You have the right to our confirmation that we are processing your personal data, as well as the right to familiarize yourself with our processed personal data and the purposes of data processing, categories of data processed, categories of data recipients, data processing periods, data collection sources, automated decision-making, including profiling, as well as their meaning and consequences for you.

We provide much of this information in this Policy and believe that you will find it useful.

If you are a registered user of the online store https://sertamattress.lt/, you can view your personal data processed at any time in your account. If the information provided in this Policy is not enough for you or you want to receive purchase history for a period of more than 12 months, you can always contact us using the methods specified in paragraph 8 of this Policy.

5.2. Right to rectification of personal data

If the information provided during your registration has changed or you see that our processing of your information is inaccurate or incorrect, you have the right to request that this information be changed, clarified or corrected by contacting us in the manner specified in paragraph 8 of this Policies, or you can correct (update) your data yourself in the online store https://sertamattress.lt/.

5.3. Right to withdraw consent

In cases where we process your data with your consent, you have the right to withdraw your consent at any time, which will serve as grounds for termination of data processing. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

For example, you can revoke your consent to receive offers and news at any time, as well as your consent to data profiling, providing you with personalized offers. Withdrawing this consent will not prevent you from continuing to use the services and fulfilling your contractual obligations, but it will mean that we will not be able to provide you with, and you will not be able to receive, any current offers or news. You may correct (withdraw or reissue) your consent by providing an appropriately updated consent registration information, changing the terms of consent in your account, or by contacting us in the ways specified in paragraph 8 of this Policy.

When your consent is revoked, we will stop processing your data on the basis of consent, and in the cases specified in the Policy, we will securely and anonymously erase or anonymize the data. In any case, we may also retain your consent and evidence of your consent for a longer period of time if this is necessary to protect our legitimate interests against claims or demands made against us.

5.4. Right to lodge a complaint

If you believe that we are processing your data in violation of data processing/protection laws, we ask that you first contact us. We believe that we can clear all your doubts, satisfy your requests and eliminate our mistakes, if any.

If you are not satisfied with the methods we propose to solve the problem or, in your opinion, we will not carry out the actions required at your request, you have the right to file a complaint with the supervisory institution, which in the Republic of Latvia is the State Data Inspectorate.

5.5. The right to object to data processing when processing is based on legitimate interests

You have the right to object to the processing of personal data if the personal data is processed in accordance with our legitimate interests. However, taking into account the purposes of providing the Services and the balance between the legitimate interests of both parties, your objections may mean that, by interrupting the processing of your data to protect our legitimate interests, we will not be able to provide you with the opportunity to use the services and the concluded Agreement will be terminated and terminated.

If you wish to exercise the rights set out in this section, please provide us with a written request to the contact address specified in paragraph 8 of this Policy.

5.6. Right to erasure (right to be forgotten)

There are certain circumstances in data processing legislation (for example, if personal data is processed unlawfully, the legal basis for the processing of the data is lost, the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, etc.), you You have the right to ask us to delete your personal data. If you wish to exercise this right, please send us a written request to the contact address we provide in clause 8 of this Policy.

It is important to note that the data registered in your online store account https://sertamattress.lt/ will be deleted without your request, and other data will be deleted or securely anonymized if you stop using the Services in the online store https:// sertamattress.lt/ and 2 (two) years have passed since your last activity as a registered user on https://sertamattress.lt/.

5.7. Right to restrict data processing

Under certain circumstances specified in data processing legislation (if personal data is processed unlawfully, you dispute the accuracy of the data, you object to the processing of data in order to protect our legitimate interests, etc.), you also have the right to restrict the processing of your data. However, we must note that due to data processing restrictions and during the restriction period, we will not be able to provide the Services to you and fulfill our obligations under the Agreement.

If you wish to exercise the rights set out in this section, please provide us with a written request to the contact address specified in paragraph 8 of this Policy.

5.8. Right to data portability

The data that we process with your consent and its processing is done by automated means, you have the right to transfer to another data manager. We will provide the data you wish to transfer, we will provide you with a simple and machine-readable format for our systems, but if you wish and have the technical ability, we will transfer the data directly to another data controller you designate. If you wish to exercise the right of data portability, we ask you to provide us with a written request to the contact address specified in paragraph 8 of this Policy.

7. How do we review and process your requests?

To protect our customers' data from unlawful discovery, upon receipt of your request to provide your data or exercise your other rights, we need to verify your identity. For this purpose, we may ask you to provide us with the current data registered in your account on the website https://sertamattress.lt/. (for example, name, address, email address or telephone number). We will then compare whether the data you provide matches the corresponding data of the registered user. Having done this, we may also send a control notification to the contact details provided in the contact registration form (SMS or email), requesting authorization. If the verification procedure is unsuccessful (for example, the data you provided does not match the data in the user profile registered in the online store https://sertamattress.lt/, or you do not log in after receiving a sent SMS message or email notification) , we will be forced to determine that you are not a data subject and we will be forced to refuse your request.

Upon receipt of your request to exercise any of your rights and successful completion of the above verification procedure, we undertake immediately, but in any case no later than one month from the date of receipt of your request and completion of the verification procedure, to provide you with information according to your request.

Considering the complexity and number of requests, we have the right to extend the monthly period for another two months, I inform you about this before the end of the first month and indicating the reason for such an extension.

If your request was submitted electronically, we will also provide an electronic response unless this is not possible (for example, due to the volume of information) or if you request a response in another form.

We will reject your request with a reasoned response if circumstances specified by law are discovered when we cannot provide you with information by informing you in writing.

8. How can you contact us?

For all questions regarding the processing and protection of personal data, you can contact us - UAB "SLEEPSHOP" in the following ways:

- by email info@sertamattress.lt

- Postal address: Girulių g. 10-201, LT-12112 Vilnius, Lithuania.

9. How secure is your data?

We respect your privacy, so the security of your personal data is our priority. We use appropriate organizational and technical means to ensure that your personal data is always secure and that data processing complies with the requirements of personal data protection legislation and our internal policies.

We consistently adhere to the principle of minimizing personal data and do not process data that we do not need to achieve the purposes specified in this Policy. We use a variety of technologies and procedures to protect and secure personal data, to protect your personal information from unauthorized access, use or disclosure. Our cooperation partners are carefully selected and are required to use appropriate means to protect the confidentiality of personal data and ensure the security of your personal information.

However, when transmitting your information to us via the Internet or mobile communications, complete security cannot be guaranteed. Any transmission of your information to us via the above methods is at your own risk.

11. Policy duration and changes

The privacy policy of this online store sertamattress.lt may be changed or updated. At https://sertamattress.lt/ you will always find the latest version of the privacy policy.