Privacy Policy

Data controller

The controller of your personal data is MB Kalm. Company details are shown at the top of this page.

What data we collect

When you place an order you provide your name, email address, country, (optionally) phone number and quantity; we also record the selected language and the time of submission. When confirming the order we additionally receive your delivery address and payment information.

We briefly process your IP address to protect the website against abuse and to choose a suitable language.

Purposes and legal bases

Receiving, confirming and fulfilling your order and communicating with you (Art. 6(1)(b) GDPR — performance of a contract and pre-contractual steps).

Meeting accounting and tax obligations (Art. 6(1)(c) GDPR).

Keeping the website secure (Art. 6(1)(f) GDPR — legitimate interest).

Retention

Data of completed orders is kept as long as needed to fulfil the order and guarantee obligations; accounting documents are kept for the period required by law (up to 10 years). Requests that did not lead to a purchase are deleted after 365 days.

Recipients

Data may be processed by our service providers — website hosting (Vercel), email (Google — Gmail) and courier services — only as far as necessary to provide their service. Some providers may process data outside the EEA (USA); in that case the European Commission's Standard Contractual Clauses apply.

Cookies

We only use strictly necessary storage — a cookie and a local storage entry that remember your language and bag. We do not use analytics or advertising cookies.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing. To exercise these rights, email us.

You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (www.vdai.lrv.lt) or the data protection authority of your country.