Letters and newsletters
Registered visitors will receive letters about #cc points earned and used. The conversion ratio is shown in the /buy section once at least one item has been added.
Also newsletters with news about the latest video talks, tips and offers.
Comments
When visitors leave comments on the website, we collect the data shown in the comment submission form, as well as the visitor’s IP address and browser user agent string, to help protect against spam.
An anonymised data record (a hash) may be generated from your email address and provided to the Gravatar service provider in order to check whether you use this service. After your comment is approved, your profile picture is visible to the public alongside your comment.
Files
Suggested text: If you upload images to the website, you should avoid uploading them with embedded location data (EXIF GPS). Visitors to the website can download images from the website and extract location data from them.
Cookies
When you leave a comment on this website, you may choose whether you want your name, email and website to be saved in cookies. This is done for your convenience, so that you do not have to re-enter these details each time you comment. These cookies are kept for one year.
If you have an account and you log in to our website, we set a temporary cookie that records whether your browser accepts cookies. This cookie stores no personal information and is deleted when you close your browser.
When you log in, we also set several cookies that store your login information and your screen display choices. Login cookies are valid for 2 days, and screen-settings cookies for one year. If you select the “Remember me” option, your login cookie will be valid for 2 weeks. When you log out of your account, the login cookies are deleted.
If you edit or publish a post, an additional cookie is saved in your browser. This cookie stores no personal data, but it does save the ID of the post you just edited or published. This cookie expires after 1 day.
Embedded content from other websites
This website may contain content embedded from other websites (for example, videos, images, text and so on). Viewing such embedded content and interacting with it on this website is equivalent to visiting the websites from which the content is embedded.
These websites may collect data about you, use cookies, third-party tracking services and monitor your interactions with the embedded content, including in cases where you have an account and are logged in to those websites.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, its text and metadata are retained for an indefinite period. This is done so that we can recognise and approve future comments automatically, instead of requiring administrator approval.
When you register on our website and become a user, we store all the personal data that you provide in your account. Each user can view, edit and delete their personal data at any time (except the username). Website administrators can also view and edit this data.
Your rights
If you have an account on this website, or have ever left a comment here, you can request to receive a data export file containing all the personal data we hold about you, including any that you have provided to us yourself. You can also request that we erase all the personal data we hold about you. Both of these requests do not apply to data that we are required to keep by law for administrative, legal or security purposes.
Use of data
Visitors’ comments may be checked using an automated spam-detection service.
PRIVACY POLICY OF THE WEBSITE pagalves.lt
General information
Čiužinių centras, MB (Mattress Centre) (hereinafter – “we” or “Data Controller“) is the controller of the pagalves.lt website (hereinafter – the “Website“). In this privacy policy (hereinafter – the “Privacy Policy“) we establish and explain how we collect and further process the personal data of Website visitors. The Privacy Policy also provides information about the processing of the data of all other data subjects (for example, counterparties or their representatives / employees) carried out by us in the course of our activities.
The Privacy Policy applies to all persons who visit the Website, and the conditions set out in it apply each time you wish to access the content and/or service we provide, regardless of which device (computer, mobile phone, tablet or other) you use.
We process the data of all data subjects lawfully, transparently and fairly, for predetermined purposes and only to the extent necessary to achieve them. When processing your personal data, we comply with the General Data Protection Regulation No. 2016/679 (hereinafter – “GDPR“), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as the personal data processing requirements established in other legal acts and in the recommendations and/or instructions of supervisory authorities.
Persons under 14 years of age may not provide any personal data through the websites and/or social network accounts we manage. If you are a person under 14 years of age, before providing personal information you must obtain the consent of your legal representatives (parents, adoptive parents, guardians, carers).
The terms used in the Privacy Policy are understood as they are defined in the GDPR and in other legal acts regulating the protection of personal data.
Click the “Find out more” box in each section to find detailed information about how we process your personal data and the specifics of our activities.
How do we collect information about you?
Your personal data, that is, any information about you that allows us to identify you, is obtained in various ways:
– you may provide the information (personal data) yourself;
– information about you may be collected automatically;
– in certain cases we obtain information about you from third parties and may collect information about you from publicly available sources.
You can provide us with your personal data directly yourself. This most often happens in cases where you:
– use the services we provide (for example, leave comments on forums, under articles / publications);
– subscribe to our newsletters or otherwise seek to receive personalised content;
– use our mobile applications and/or social network accounts;
submit an enquiry, request and/or complaint to us by telephone, email or ordinary post.
Information about you may be collected automatically. This most often happens in cases where you:
– submit a query through our Website, mobile application or social network accounts (for example, “Facebook”, “LinkedIn”, “Instagram”, “Youtube”);
– make public posts on social network platforms (for example, “Facebook”, “LinkedIn”, “Instagram”, “Youtube”) that we administer;
– use the websites we manage (data collected with the help of cookies and similar technologies. You will find more information about the cookies we use below).
To the extent permitted by the applicable legal acts, we may obtain information about you from third parties. This may be information provided by our partners, counterparties, service providers, your publicly available profiles or database information (for example, if you connect to the Website through your “Facebook” or “Google” account, you grant “Facebook” or “Google” permission to share your account information with us – thus, the source of the data obtained is “Facebook” or “Google” respectively).
We may link the information about you obtained from you yourself and from public and commercial sources with other information that we receive from you or about you.
We may also collect information about you in other cases that are not discussed in the Privacy Policy, but if this happens – we will inform you additionally.
What information (personal data) about you do we process?
Although we try to collect as little information about you as possible, in order to carry out our activities we collect the following information:
– your contact details;
– information necessary for the conclusion, performance and administration of registration forms and any other agreements;
– information that you provide when calling us, writing to us or submitting queries;
– public information held in your social network profile accounts, if you use our Website by connecting through them;
– information necessary for the defence of our company’s interests in court or another institution;
– information about the device you use;
– information necessary for carrying out direct marketing (if in the particular case we are entitled to provide it to you).
The information that we collect directly from you is most often the following:
– First name, surname, city, email.
The information that we collect automatically is most often the following:
– information about how you use this Website and/or our other websites (device information: IP address, operating system version and parameters of the device you use to access the content; login information: the time and duration of use of your session and any information stored in the cookies that we have set on your device (the cookie policy is provided below); location information: the GPS signal of the device or information about the nearest “WiFi” access points and mobile network towers, which may be transmitted to us while you use the content of our website).
The information that we obtain from third parties or publicly available sources is most often the following:
– First name, surname, city, email.
You may choose not to provide us with certain information, but in that case it may be that we will not be able to provide you with our service (for example, if you do not provide the necessary information requested in order to respond to your query, we will not be able to reply to you).
Important: We do not ask you to provide and do not process your special category personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as health data or data about your sex life and sexual orientation. Our personnel will not, in writing, by telephone or by any other means, ask you for your login details, bank card numbers, passwords or any other information the use of which could cause you financial or any other kind of harm.
For what purposes and on what grounds do we process your data?
The information provided above is processed for the following purposes:
– the conclusion, performance and administration of registration and any other agreements;
– the provision of services – we provide the possibility to use the Website’s functions (for example, to leave comments, report information, take part in forum discussions);
– the implementation of the rights and interests of us or our group of companies;
– the establishment, maintenance and development of business, professional and/or other lawful relationships;
– the fulfilment of our obligations under applicable legal acts;
– the determination of the quality of the online services provided by our company and ensuring the functionality of mobile applications;
– carrying out direct marketing.
In all other cases, we will process your personal data for the purpose of direct marketing only after obtaining your explicit consent to data processing for such a purpose (for example, when you subscribe to our newsletters or similar). You will be able to withdraw this consent at any time later by notifying us of your decision in any convenient way: by email at info@pagalves.lt, or by using the unsubscribe link in the email, in the ways indicated above.
Your personal data is processed on the basis of one or more of the following grounds for lawful processing:
– compliance with the requirements of legal acts;
– the conclusion and performance of registration, transactions, contracts or other similar agreements with you;
– our legitimate interests (unless your private interests prevail);
– in certain cases – your consent.
The purposes, grounds and personal data that we process are provided in the following table:
| Purpose | Legal basis (-es) | Personal data |
| The conclusion, performance and administration of registration and any other agreements | The conclusion or performance of a contract with youCompliance with the requirements of legal actsThe legitimate interests of our company | First name, surname, gender, place of residence data, telephone number, email address, bank account number, occupation / business, position, education. Also other information that may be necessary for the performance of the obligations we have assumed |
| The provision of services – we provide the possibility to use the Website’s functions (for example, to leave comments, report information, take part in forum discussions) | The conclusion or performance of a contract with youThe legitimate interests of our company | First name, surname, gender, place of residence data, email address, occupation / business, position, education, any public data held in social network profiles and information provided by you yourself (for example, on forums). Also other information that may be necessary for the acquisition / provision of services |
| The implementation of the rights and interests of us or our group of companies | Compliance with the requirements of legal actsThe legitimate interests of our company | For this purpose, all of your personal data that we hold and that is listed in this Privacy Policy may be processed |
| The establishment, maintenance and development of business, professional and/or other lawful relationships | The legitimate interests of our companyCompliance with the requirements of legal acts | First name, surname, telephone number, email address or other contact detail, occupation / business, position |
| The fulfilment of our obligations under applicable legal acts | Compliance with the requirements of legal acts | Depends on the requirements of the applicable legal acts, the content of a request received from authorities or other objective circumstances |
| The determination of the quality of the online services provided by our company and ensuring the functionality of mobile applications | The legitimate interests of our company | IP address, operating system version and parameters of the device you use to access the content, the time and duration of use of your session and any information stored in the cookies that we have set on your device, the GPS signal of the device or information about the nearest “WiFi” access points and mobile network towers, which may be transmitted to us while you use the content of our website |
| Carrying out direct marketing (only if we have obtained your consent or, accordingly, have not received your objection) | ConsentThe legitimate interests of our company | First name, surname, email address, telephone number, place of residence address, age |
In cases where we cannot rely on one of the legal bases provided in this table, before we begin processing your personal data, we will ask for your consent (such cases will be clear from the circumstances and context).
In cases where we process your personal data for purposes other than those indicated in this Privacy Policy, we will inform you about this by providing a separate notice.
To whom do we transfer your personal data?
Without your prior written consent, we may transfer your personal data only in the following cases:
– to responsibly selected business partners of ours or companies that provide services at our request;
– to the companies of our group of companies;
– to law enforcement and state institutions;
– to other entities, when required by law or when necessary in order to protect our legitimate interests.
The ability of the recipients of your personal data (separate data controllers) to use your data is limited; they may not use this information for purposes other than those of the contract with us or those provided in other legal acts. In order to receive their direct marketing offers, you will be asked for separate consent.
We may also provide your data to data processors who provide us with services (carry out work). Data processors have the right to process your personal data only on the basis of a written contract concluded between us and them, according to our instructions and only to the extent necessary to properly fulfil the obligations established in the contract. When engaging processors, we take all the necessary measures to ensure that our data processors have implemented appropriate organisational and technical security measures and maintain the confidentiality of your personal data.
We provide a list of the categories of data recipients:
banks; companies that develop, implement and maintain software; companies providing communication services; the security service; companies providing postal services and courier services; companies providing legal services; companies providing archiving services; bloggers and representatives of various other media; companies engaged in accommodation, catering, leisure entertainment, event organisation or similar activities.
Other parties to whom the information we hold about you may be provided, when this is necessary in order to protect our legitimate interests or in fulfilling the requirements of legal acts that are mandatory for us, are state and law enforcement institutions and similar bodies.
You can obtain more detailed information about the specific companies indicated in this section to whom your personal data may be provided by contacting us using the contacts indicated in this Privacy Policy.
To which countries is your personal data transferred?
Čiužinių centras, MB currently does not transfer any of your personal data to third countries (that is, countries located outside the European Economic Area (hereinafter – “EEA“)). If, in an exceptional case, such a transfer were required, we will do everything within our power to ensure the security of the transferred personal data.
In exceptional and necessary cases of data transfer outside the EEA, we ensure that one of the following security measures is applied:
– the contract signed with the data recipient is based on the Standard Contractual Clauses approved by the European Commission;
– Binding Corporate Rules are applied;
– the data recipient is established in a country that has been recognised by the European Commission as applying adequate data protection standards
– codes of conduct, certification mechanisms;
– authorisation obtained from the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).
In the absence of any of the appropriate protection measures mentioned above, we may make use of the exceptions provided in Article 49 of the GDPR (for example, transfer your data on the basis of your consent), but they may be applied only in the cases strictly formulated by the GDPR.
What do we do to protect your personal data?
We have implemented reasonable and appropriate physical and technical measures to protect the information that we collect for the purposes of providing services. However, please do not forget that, although we take appropriate steps to protect your personal data, no website, online transaction, computer system or wireless connection is completely secure.
How long will we retain your personal data?
We set the retention periods for personal data in accordance with the requirements of laws and regulatory legal acts and with the instructions of a supervisory and/or other competent authority. If these requirements or instructions are not established, we set the data retention period taking into account our legitimate interests.
We draw your attention to the fact that, taking into account the scope of the personal data we process, we detail certain retention periods for the personal data of specific categories of data subjects in the relevant other privacy policies of the websites we manage or in the informational notices provided to you at the time of data collection.
Upon expiry of the data retention periods, your data will be deleted in such a way that it cannot be reproduced, or anonymised in such a way that there is no possibility of identifying you.
Personal data is usually retained for the following periods:
| Personal data | Retention period |
| Data related to registration forms for our Website | For as long as you remain registered in the competitions or games held on the website, in accordance with the conditions provided in their rules. |
| Data contained in the enquiries, requests and/or complaints submitted to us by telephone, email or ordinary post | Up to 2 years from the day the enquiry / request / complaint is received or fulfilled |
| Your data related to the potential or already existing implementation of our interests in court or another institution | Until the limitation periods provided in legal acts for submitting a complaint / claim or for bringing an action expire and/or a final court judgment comes into force |
| Personal data processed on the basis of your consent | Up to 3 years from the moment the consent is received, if the consent was not withdrawn earlier |
| IT system records (logs) | Up to 7 working days. |
Even in the case where users stop visiting the portal, due to claims that may potentially arise in the future, we will continue to retain certain of your personal data until the retention periods of certain data expire. The information will also be retained so that, if necessary, we can provide you with the required information, so that we have a properly recorded history of relations with you and so that we can answer all questions related to the cooperation between you and us.
What rights do you have?
Depending on the situation and the additional conditions established in the GDPR, you have the following rights:
– to know (to be informed) about the processing of your data (the right to know);
– to access your data that we process and how it is processed (the right of access);
– to request the rectification or, taking into account the purposes of personal data processing, the completion of your incomplete personal data (the right to rectification);
– to request the erasure of personal data related to you (the right to be “forgotten”);
– to request that we restrict the processing of personal data related to you (the right to restriction);
– to request the porting of the data provided to us (the right to data portability);
– to object at any time to the processing of your personal data, where such processing is carried out for the public interest, for the pursuit of the legitimate interests of us or a third party, and where personal data is processed for the purposes of direct marketing, including profiling (the right to object);
– to withdraw your consent to process personal data, if the data is processed on the basis of consent.
We always seek to properly ensure your rights and to respond promptly to any possible violation of their implementation; therefore, if any question arises regarding your personal data that we process, please contact us first. We also note that in all cases you have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) at any time.
We provide you with the possibility to exercise these rights of yours in a convenient way. You can do this by calling this telephone number +370 648 44555, writing to us at this email address info@pagalves.lt or by using certain links provided at the bottom of the advertising content material we provide, if we provide you with such advertising content.
Your rights will be implemented after first confirming your identity in person (by presenting an identity document: an identity card or passport) or by means of electronic communications (for example: an electronic signature).
| Your right | Certain limitations |
| The right to know | You have the right, before the processing of your personal data begins, to receive information about the data processing in concise, simple and understandable language. |
| The right of access | This right means that you can ask us to provide you with:– Confirmation of whether we process your personal data;– A list of your personal data that we process;– A list of the purposes and the legal basis for the processing of your data;– Confirmation of whether we send data to third countries, and if so, what security measures have been taken;– The source from which your personal data was obtained;– Information on whether profiling is applied;– An indication of the data retention period.– We will provide the information listed above on the condition that this does not infringe the rights and freedoms of other persons. |
| The right to rectification | Applies if the information we hold related to your personal data is incomplete or inaccurate. |
| The right to be “forgotten” | Applies if:– The information we hold is no longer necessary to achieve the established purposes;– We process the data on the basis of your consent and you withdraw your consent;– We process the data on the basis of legitimate interests and, following your submitted request, it is determined that your private interests prevail;– The information was obtained unlawfully. |
| The right to restriction | This right may be implemented for the period while we analyse the situation, that is: – If you dispute the accuracy of the information; – If you object to the processing of personal data, when it is carried out on the basis of legitimate interests; – We use the information unlawfully, but you object to it being erased; – The information is no longer necessary to us, but you require it to be retained because of a legal dispute. |
| The right to data portability | This right may be implemented if you provided your data and we process it by automated means, on the basis of your consent or a contract concluded with you. |
| The right to object | This right may be implemented when such data processing is carried out for the public interest or when processing the data is necessary in order to pursue the legitimate interests of the Data Controller or a third party. When processing your personal data on such a basis, we bear the obligation to prove that the data is processed for compelling legitimate reasons that prevail over your interests.You may also object at any time to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that it is related to such direct marketing. |
| The right to withdraw consent | To withdraw your consent to process personal data at any time, if the data is processed on the basis of consent. |
| The right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) | The data subject has the right to apply to the institution responsible for the supervision and control of the legal acts regulating the protection of personal data – the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) (A. Juozapavičiaus g. 6, 09310 Vilnius, email ada@ada.lt, tel. (8 5) 271 2804).More information: www.ada.lt |
We may not allow you to exercise the rights listed above when, in the cases provided by law, it is necessary to ensure the prevention, investigation and detection of crimes and breaches of official or professional ethics, as well as the protection of the rights and freedoms of the data subject or other persons.
Cookies, signals and similar technologies
In the Privacy Policy we use the term “cookies” to describe cookies and other similar technologies, for example, pixel tags (Pixel Tags), web beacons (Web Beacon), clear GIFs (clear GIF).
Cookies are small elements of information that are saved in your internet browser. They help us to:
– recognise you as a previous visitor of a certain website;
– save your history of visiting the website and adapt the content accordingly;
– ensure the smooth operation of the Website;
– monitor the duration and frequency of visits and collect statistical information about the number of Website visitors.
By analysing this data, we can improve our Website and make it more convenient to use.
When you use a browser to access the content we provide, you can configure your browser so that all cookies are accepted, all cookies are rejected or you are notified when a cookie is sent. Each browser is different, so if you do not know how to change the cookie settings, look at its help menu. Your device’s operating system may have additional cookie controls. If you do not want information to be collected with the help of cookies, use the simple procedure available in most browsers that allows you to refuse the use of cookies. To find out more about how to manage cookies, visit: http://www.allaboutcookies.org/manage-cookies/.
We remind you that some services may be designed to work only with cookies, and if you disable them or some of them, you will no longer be able to use those services.
We also draw your attention to the fact that, in addition to the cookies we use, certain third parties (for example, social network operators) are permitted on the Website to set and access cookies on the device you use. Third parties that have installed such cookies apply their own privacy policies, and we cannot be responsible for them (our Website does not have access to the information transmitted by them); therefore, we strongly recommend that you additionally familiarise yourself with the said policies, placed on the websites of those third parties. Our social network accounts are subject to the privacy policies of their operators.
External websites
The Website may contain links to external websites, for example, the websites of the providers of the goods and/or services we advertise. When following such links, please note that these websites and the services accessible through them must have their own separate privacy policies (rules) for which we cannot assume responsibility; therefore, we recommend that you review them in detail before providing any of your personal data.
Contact us
If you notice a non-compliance with the Privacy Policy, a security gap on any Website we manage or have other questions related to the processing of your personal data, contact us in one of the ways convenient for you:
Čiužinių centras, MB
Legal entity code: 153276178
VAT code: LT100013361419
Registered office address: Didlaukio g. 80-96, LT-08326 Vilnius
Tel.: +370 648 44555
Email: info@pagalves.lt
Final provisions
The Privacy Policy is reviewed and updated according to our needs, but no less frequently than once every two years, or upon a change in the legal acts regulating the processing of personal data. After updating the Privacy Policy, we will inform you about what, in our assessment, are material changes, by publishing a notice on the Website or in another similar way. If you use the content and/or services we provide after such a notice is published, we will consider that you agree to the new requirements set out in the updated Privacy Policy.
By continuing to browse the Website, you confirm that you have familiarised yourself with this Privacy Policy and understand its provisions.
The Privacy Policy was last reviewed 2024-12-30