English
Privacy policy
Last updated: 11 August 2026
This Privacy Policy explains how your personal data is collected, used, stored and otherwise processed on akmenukumagija.lt when you visit the website, place an order, make a payment, contact us or otherwise use the website.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the laws of the Republic of Lithuania and other applicable data protection requirements.
1. Data Controller
The controller of your personal data is:
Laima Lastauskaitė
Individual Activity Certificate No. 1512589
Address: Ateities g. 101, Ringaudai, 53338 Kauno r. sav.
Email: info@akmenukumagija.lt
Website: akmenukumagija.lt
If you have any questions regarding the processing of your personal data or wish to exercise any of the rights described in this Privacy Policy, you may contact us using the email address provided above.
2. What Personal Data Do We Collect?
Depending on how you use the website, we may process the following personal data:
Order and shipping information:
Your first name, last name, company name (if provided), country or region, street address and house number, city, county, postal code, telephone number, email address and any order notes you voluntarily provide.
Order information:
Products ordered, quantities, prices, order number, order date, selected shipping and payment methods, order and payment status, and other information necessary to process and manage your order.
Payment information:
Information about your selected payment method, payment confirmation, amount, date and other information received from payment service providers.
When paying by payment card or other electronic payment methods, your card details and other information required to process the payment may be processed directly by the relevant payment service provider. We do not receive or store your complete payment card details, such as your full card number or CVC code.
Contact information:
When using the contact form, we may receive your name, telephone number, email address and any information included in your message. We also process information you provide when contacting us directly by email.
Technical information:
When you use the website, certain technical information may be processed automatically, such as your IP address, browser and device information, server log data and cookies necessary for the operation of the website.
3. For What Purposes and on What Legal Bases Do We Process Your Data?
Your personal data may be processed for the following purposes:
Processing and fulfilling orders – to receive and manage your order, process payment, prepare and ship your products and provide you with information about the status of your order.
The legal basis for this processing is entering into and performing a contract with you (Article 6(1)(b) of the GDPR).
Payment administration – to receive and confirm payments, issue refunds where necessary and resolve payment-related matters.
The data is processed for the performance of a contract and, in certain cases, to comply with legal obligations.
Shipping of products – to provide the information required for shipping to the shipping service provider selected by you.
The data is processed on the basis of performing a contract.
Accounting and compliance with legal obligations – we are required to retain and process certain order, payment and other information in accordance with applicable accounting, tax and other legislation.
In such cases, the legal basis for processing is compliance with legal obligations applicable to us (Article 6(1)(c) of the GDPR).
Managing enquiries – when you contact us through the contact form or by email, we use the information provided to respond to your question or resolve your enquiry.
Depending on the nature of the enquiry, the data may be processed for the purpose of entering into or performing a contract or on the basis of our legitimate interest in properly managing customer and website visitor enquiries.
Protection of rights and legitimate interests – where necessary, we may process information to establish, exercise or defend legal claims, prevent fraud or abuse, and ensure the security of the website and our activities.
4. Payment Processing
The following payment methods may be available on the website:
- direct bank transfer to a Swedbank account;
- payment by payment card;
- „Apple Pay“;
- Google Pay;
- other payment methods supported by WooPayments and/or Stripe, where displayed during checkout.
When using electronic payment methods, payment service providers may independently process personal and financial information necessary to complete the payment in accordance with their own privacy policies.
When paying by direct bank transfer, payment-related information is also processed by the payer's and recipient's financial institutions.
5. Shipping of Products
The following service providers may be used to ship ordered products:
- „LP Express“;
- „DPD”;
- „Omniva“.
We provide the selected shipping service provider only with the information necessary to ship your order and contact the recipient regarding its delivery. Depending on the selected shipping method, this may include your first name, last name, telephone number, email address, shipping address and other information necessary for delivery.
6. Contact Form and Correspondence
When you contact us using the website's contact form, the following information may be collected:
- name;
- telephone number;
- email address;
- the contents of your message.
This information is used solely to manage and respond to your enquiry.
Messages submitted through the contact form are sent to info@akmenukumagija.lt.
Please do not provide more personal data in the contact form than is necessary to resolve your enquiry.
7. Order Emails and Direct Marketing
Messages relating to your order and its fulfilment may be sent to the email address you provide, including order confirmations and information regarding the status, payment or shipping of your order.
These messages relate to the fulfilment of your order and are not newsletters.
We currently do not offer newsletter subscriptions on the website and do not use your email address to send direct marketing newsletters.
If we introduce newsletters or other forms of direct marketing in the future, this Privacy Policy and, where necessary, the relevant consent mechanisms will be updated accordingly.
8. Who May We Share Your Data With?
We do not sell your personal data.
To the extent necessary for the purposes described above, personal data may be disclosed to or accessed by service providers that help us operate the website and online store, including:
Hosting and email service provider – Hostinger;
Payment service providers – WooPayments, Stripe, Swedbank and other financial service providers involved in processing a particular payment;
Shipping service providers – LP Express, DPD and Omniva;
Website technical infrastructure and software providers – where access to data is necessary to provide their services or ensure the operation, security or technical maintenance of the website.
Data may also be disclosed to public authorities, law enforcement authorities, courts or other parties where required by law or where necessary to protect our rights and legitimate interests.
Where a service provider acts as our data processor, it must process personal data in accordance with applicable data protection requirements.
9. Transfers of Data Outside the European Economic Area
Some of the technology or payment service providers we use may operate internationally or use service providers located outside the European Economic Area (EEA).
Where this results in personal data being transferred to a country for which the European Commission has not adopted an adequacy decision, the transfer must be subject to a lawful transfer mechanism provided for under the GDPR and, where necessary, additional safeguards.
10. Social Media and External Links
The website may contain links to our Facebook and Instagram social media profiles.
Articles may also contain buttons or links that allow content to be shared on platforms such as Facebook, Pinterest, or LinkedIn.
A standard external link does not in itself mean that we transfer the order information you provide to the relevant platform. However, once you click a link and visit a third-party website, any subsequent processing of your data is subject to that third party's privacy and cookie policies.
We are not responsible for the privacy practices of third-party websites.
11. Analytics
We currently do not use Google Analytics or other similar visitor behaviour analytics tools on the website.
If we introduce analytics or advertising technologies in the future, we will update our privacy and cookie information accordingly and, where required by law, obtain the visitor's consent.
12. Cookies
The website uses cookies and similar technologies that are necessary for the proper operation of the website and online store, as well as for other purposes described in our Cookie Policy.
More detailed information about the cookies we use, their purposes, retention periods and how you can manage your consent can be found in our Cookie Policy.
Where your consent is legally required for a particular cookie or similar technology, that technology will only be used after the relevant consent has been obtained.
13. How Long Do We Retain Personal Data?
We retain personal data for no longer than necessary for the purpose for which it was collected, except where a longer retention period is required by law or where the data is necessary to establish, exercise or defend legal claims.
Order and accounting data is retained for as long as required by applicable accounting and tax legislation. In certain cases, accounting documents and registers relating to individuals carrying out individual activities are subject to a retention period of at least 10 years.
Contact enquiries and correspondence are generally retained for up to 12 months after the enquiry has been resolved, unless the information becomes related to an order, dispute or legal claim, or there is another basis for retaining it for a longer period.
Technical and security data is retained for as long as reasonably necessary for the operation and security of the website, troubleshooting and prevention of abuse, taking into account the retention periods applicable to the particular technical solution.
At the end of the applicable retention period, the data is deleted or anonymised, unless continued retention is required by law.
14. Data Security
We apply reasonable technical and organisational security measures designed to protect the personal data we process against unauthorised access, disclosure, alteration, loss or destruction.
Access to personal data is granted only to the extent necessary for the performance of the relevant functions.
However, no method of transmitting or storing information over the internet can guarantee absolute security.
15. Your Rights
Under the GDPR and other applicable data protection laws, depending on the specific circumstances, you may have the right to:
- receive information about the processing of your personal data;
- obtain access to the personal data we process about you;
- request the correction of inaccurate data or completion of incomplete data;
- request the deletion of your personal data where there is a legal basis for doing so;
- request restriction of the processing of your personal data;
- receive the data you have provided in a structured, commonly used and machine-readable format and, where applicable, transmit that data to another data controller;
- object to the processing of your personal data where the processing is based on legitimate interests;
- where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal of consent.
These rights are not absolute and may be restricted in certain circumstances provided for by law. For example, we cannot delete information that we are legally required to retain for accounting purposes or to comply with other legal obligations.
To exercise your rights, please contact us at:
Before fulfilling your request, we may ask you to provide information necessary to verify your identity if we have reasonable doubts regarding the identity of the person making the request.
16. Right to Lodge a Complaint
If you believe that your personal data is being processed unlawfully or that your rights have been infringed, we encourage you to contact us first at info@akmenukumagija.ltso that we can review and address the matter.
You also have the right to lodge a complaint with the competent data protection supervisory authority. In Lithuania, the supervisory authority responsible for personal data protection is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI)..
State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI).
17. Automated Decision-Making
We currently do not use automated individual decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically, for example, if the functionality of the website, the service providers we use, our data processing activities or applicable legal requirements change.
The current version of the Privacy Policy will always be published on akmenukumagija.ltThe date on which the Policy was last updated is indicated at the top of this page.