Privacy Policy and Cookies

We strive to protect and respect your privacy. We implement organizational and technical measures to ensure that our processing of personal data complies with the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), and that your personal data is protected from accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing.

Please read this Privacy Policy carefully to understand the purposes for which we collect your data and how we use it.

Data Controller

The data controller responsible for your personal data is UAB “Sanleda”, company code: 303204751, address: Ąžuolyno g. 7, Vilnius, email: eshop@pandacoat.lt.

Purposes of Data Processing

We collect and use personal data only for specified, explicit, and legitimate purposes. When you use the services of UAB “Sanleda” and the online store www.pandacoat.lt, we process your personal data for the following purposes:

• For creating and managing the buyer’s electronic account, we process the following data: first name, last name, address, phone number, email address, account login name, password. This personal data is processed on the legal basis of contract performance and stored for 2 (two) years from the date of the last login to your account;

• For the provision of goods and services, preparing offers upon request, and fulfilling sales contracts, we process the following data: first name, last name, individual activity number, VAT payer code, address, phone number, email address, account login name, password, names of ordered goods or services, quantity, price, payment data, pickup location / delivery address. We will not be able to properly prepare your order, resolve any issues related to the order, or send ordered goods if you do not provide your name, surname, address, and other contact details. If necessary, we will contact you by phone or email to clarify the information needed for these purposes. This personal data is processed on the legal basis of contract performance and stored for 10 (ten) years after the end of the contract;

• For payment, invoicing, and submission purposes. For payment of goods, acceptance and refund of payments (if necessary), and invoicing, we process the following personal data: first name, last name, individual activity number, VAT payer code, address, email address, bank account number. This personal data is processed on the legal basis of contract performance and legal obligation and stored for 10 (ten) years after the end of the contract;

• For handling inquiries, requests, and complaints. When responding to your questions, issues, complaints, or requests, we process the personal data provided in your inquiry such as name, surname, email address, and other data in order to ensure the quality of our services and respond or resolve the issues. Such data will be stored for 3 (three) years from the resolution of the inquiry;

• For sending marketing communications. If you consented by purchasing products from the online store www.pandacoat.lt, subscribing to newsletters, sending inquiries, or registering for promotions or games, we may send you marketing messages and offers. For this purpose, we process your personal data: first name, last name, and email address. This data is processed and stored for 2 (two) years from the date of your consent or the last purchase in the online store.

Website Browsing Data

To make the online store www.pandacoat.lt more user-friendly, we continuously improve and update it. To achieve this, with the help of Google Analytics and _____ systems, we monitor, analyze, and evaluate:

• Internet Protocol (IP) address and device identifier;

• Website page visits;

• Time spent on the website;

• Browser usage;

• Devices used to browse the website;

• Number of clicks;

• Mouse movements;

• Etc.

All such data is provided to us completely anonymized. The legal basis for processing this information is our legitimate interest in improving the website and the accessibility and usage of our commercial information.

More about Google Analytics and the information it collects can be found here:
https://support.google.com/analytics/answer/1012034?hl=lt&ref_topic=6157800#zippy=%2C%C5%A1iame-straipsnyje

To prevent Google Analytics from collecting browsing information, you can use the Google Analytics opt-out browser add-on:
https://tools.google.com/dlpage/gaoptout/

Cookies

Our website uses cookies, which are small text files stored on your device when you visit the site. Many online stores use them for proper site functioning. When visiting or using our website or services, we or our authorized service providers may use cookies to help us serve you better, faster, and more reliably, as well as for advertising purposes.

Upon your first visit to our website, we will ask you to confirm your consent to the use of cookies under the terms set forth in this Privacy Policy.

Cookies are divided into:

• Long-term – remain valid and are not deleted after you leave the site;

• Short-term – automatically deleted when the website is closed;

• Necessary – without these, the website or page will not function properly (e.g., your browser may not display site content);

• Optional – these cookies are only stored after visitor consent by clicking “Accept” in the cookie consent banner.

Types of cookies used:

• Functional – remember buyer’s chosen settings (language, currency, time zone, etc.);

• Registration – recognize if the visitor is new or returning (to facilitate login, show viewed products, etc.);

• Statistical – record site visits and collect other statistical data;

• Marketing – display ads based on previous visits;

• Third-party – cookies used by our partners to analyze and evaluate site visitors (e.g., Google Analytics, social networks).

The legal basis for cookies is Article 6(1)(b) of the GDPR, under which cookies process data for contract conclusion or performance. If data processing is not related to contract performance, our legitimate interest is to improve site functionality (e.g., shopping cart operation), based on Article 6(1)(f). When cookies are used to remember visitor preferences, statistical, and targeted advertising, visitor consent applies (Article 6(1)(a)).

Cookies generally do not store any information that can directly identify a user, but your personal information we process may be linked to your computer or device usage, including website browsing and other information collected and stored via cookies.

Cookie Refusal

Most browsers automatically accept cookies. Visitors can block or delete cookies and similar identifiers at their discretion if allowed by their browser or device settings.

If cookies or similar technologies are refused or blocked, some of our online store functions may be unavailable or less effective.

More information on how to delete cookies and other relevant details about cookie usage can be found at:
https://www.allaboutcookies.org/

Marketing Messages

If you consented by purchasing from www.pandacoat.lt, subscribing to newsletters, sending inquiries, or registering for promotions or games, we may send marketing messages via the provided email or phone number about our news and products, including surveys to evaluate service quality.

You can unsubscribe from our messages at any time by:

• Clicking the “unsubscribe” link in any newsletter;

• Informing us via email at eshop@pandacoat.lt or by letter sent to the company address in this Privacy Policy.

Upon your refusal, we will update your data processing settings to stop sending marketing messages. Please note that updating personal data in our systems may take several days, so you may still receive messages during that period.

After opting out of marketing messages, information about your ordered services (e.g., order updates) will still be provided.

Who Can Access the Data

We do not sell your data and keep it secure according to Lithuanian law. We require the same from all partners who may access the data.

Those who may access data include:

• Employees of UAB “Sanleda” responsible for website content and operation;

• Employees processing orders and responding to inquiries;

• Suppliers providing website content management and hosting services;

• Google LLC – website analytics provider;

• Suppliers providing advertising, marketing, and accounting services;

• Third parties cooperating with us for effective online advertising; with our permission, third parties may place cookies on our site under their own cookie policies; we are not responsible for their privacy policies.

We share your personal data with third parties only when necessary, such as:

• Insurers, professional consultants, or lawyers for risk management, consulting, or legal claims;

• Payment service providers for handling financial transactions related to your purchase. We disclose only the necessary payment data for transactions, refunds, and complaints;

• Other service providers such as hosting, courier services, server maintenance, email services, newsletter distribution, survey conduction, social media account management, customer support, marketing, data protection officers;

We only use service providers who implement or commit to implementing appropriate technical and organizational measures to ensure an adequate level of data security and GDPR compliance.

We may share your data for other legal reasons as well.