Privacy policy

We are very concerned about your privacy and the security of your personal data. When implementing the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we ensure you particularly clear and fair processing of your personal data.

In this privacy policy, you can learn about your rights and find out information about the processing of your personal data.
Your personal data manager is MB Thing Stories, Company No. 305687117, VAT No. LT100013729511, address Fiziku str. 14-53 LT08448, Vilnius, contact email help @ thingstories.com.


1. GENERAL PROVISIONS

1.1. This privacy policy governs, inter alia, the collection, processing, and keeping of personal data by our data managers. It is intended for our customers, partners, and all third parties who use the e-shop www.thingstories.com, also with whom we work or cooperate together, or have a business relationship.

1.2. We make home and everyday accessories and sew textile products. In carrying out our activities, we take care of the security of your personal data and the basic principles of processing thereof:

1.2.1. Processing of personal data should be carried out in a lawful, fair, and transparent manner (the principle of legality, integrity, and transparency);

1.2.2. To collect personal data for specified, clearly defined, and legitimate purposes and not to further process them in ways incompatible with those purposes (purpose limitation principle);

1.2.3. To ensure that processed personal data are adequate, appropriate, and only necessary for the purposes for which they are processed (data minimization principle);

1.2.4. To ensure that personal data are accurate and, if necessary, updated; all reasonable steps must be taken to ensure that personal data which are not accurate considering the purposes they are processed for are immediately deleted or corrected (accuracy principle);

1.2.5. To keep personal data in such a way that data subjects can be identified for no longer than it is necessary for the purposes for which personal data are processed (the principle of limitation of the length of the keeping);

1.2.6. To process personal data in such a way as to ensure the proper security of personal data, including protection against processing without a permit or unauthorized data processing, and against accidental loss, destruction, or damage by using appropriate technical or organizational measures (principle of integrity and confidentiality).


2. PERSONAL DATA WHICH WE DO NOT COLLECT AND DO NOT PROCESS

2.1. We do not collect the history from your browsing on third parties’ websites and do not store it;

2.2. We do not transfer any data about your browsing on our website which would allow identifying your identity.


3. OUR OBJECTIVES FOR COLLECTING AND PROCESSING PERSONAL DATA

3.1. We collect your personal data only for specified, clearly defined, and legitimate purposes and do not further process them in ways incompatible with those purposes. We collect and process only adequate and appropriate personal data necessary to achieve the purposes for which they are processed.

3.2. Personal data that we collect and process when you make purchases so that we can sell and deliver your goods chosen in the e-shop:

3.2.1. When you make purchases in our e-shop thingstories.com, without creating an individual account for the purpose of concluding a contract and executing it, we collect the following personal data: your name, telephone, email, and delivery address for delivering your purchased goods. 

3.2.2. We are asking you to provide the address for the delivery of the goods only if you wish the goods to be delivered at the specified address for your convenience. 

3.3. When you set up a personal account at e-shop thingstories.com without making purchases, you will be able to continue shopping without any additional sign-ups at any time. In this way, you are able to continue your shopping at any time. The personal data that we collect and process when you set up your account in our e-shop without making purchases are as follows:

3.3.1. In order shopping in our e-shop thingstories.com is as convenient and fast as possible, please set up your personal account. When you set up your personal account, we collect and process the following data: your name, telephone, email, and IP address.

3.3.2. For this purpose, you can also provide us with additional personal data that we will process only after you enter and save them in your personal account.  

3.3.3. We are asking you to provide the address for the delivery of the goods only if you wish the goods to be delivered at the specified address for your convenience.

3.4. Personal data that we collect and process when you purchase goods by installments are as follow:

3.4.1. When you make purchases in our e-shop thingstories.com and pay for the goods in installments, we collect and process the following personal data: your name, telephone, email, personal identification number, personal identification document number, a copy of your identity document, average monthly income received during the last 4 months, and the delivery address for your purchased goods.

3.4.2. We are sorry but if you do not provide us with the last five personal data, we will not be able to sell you goods as we need to process these data to conclude and execute the contract, as well as we are obliged to process the personal data according to the legal acts of the Republic of Lithuania regulating e-payment and management of bookkeeping. 

3.4.3. We are asking you to provide the address for the delivery of the goods only if you wish the goods to be delivered at the specified address for your convenience.

3.5. We collect and process personal data of third parties or persons that you have provided to us as follows:

3.5.1. When you make purchases at our e-shop and specify the personal data of third parties or persons who will receive the goods(s).

3.5.2. Indicate another person who will collect your purchased goods, if such a person has given his/her consent. By providing us with the information on third parties who will collect the goods, you confirm that you have the consent of such persons for the transfer, use, and processing of their personal data. 

3.6. We collect and process personal data that you have voluntarily provided to us as follows:

3.6.1. By creating an account in our e-shop thingstories.com, you can submit additional personal data that are not mandatory for the purchase of goods and can be used to send you birthday greetings, give you general and personalized offers first, make conditions to participate in our organized campaigns, programs or facilitate the following purchases.

3.6.2. In addition, you can provide us with the following information: your gender, and date of birth, also you can save your payment card details in your personal account.

3.7. Your personal data are processed for the purpose of service improvement and activity analysis:

3.7.1. We want you to use the e-shop thingstories.com as easily and conveniently as possible. Therefore, we are constantly analyzing your activity. When you purchase in the e-shop, for your convenience, we also collect and process the following data: purchase history, history of behavior in the e-shop, IP address, payment history, history of your and our mutual communication, including e-correspondence and telephone conversations.

3.8. Your personal data are processed for the provision of general and personalized offers and profiling: 

3.8.1. In order to provide you with general offers for goods and our lotteries, campaigns, and projects, we process the following personal data: your name, telephone, email, delivery address, delivery method history, and device IDs.

3.8.2. In order to identify your favorite goods and goods relevant to you we can provide you with personalized offers. The processing of your personal data by automated analysis ensures that you will not be offered goods that are not relevant to you but rather the ones that you are interested in. Automated analysis tools are based on your purchase history and other information you provide, such as your name, telephone, email, delivery address, delivery method history, payment method history, history of browsing in our e-shop, purchase history, IP address, and device IDs.

3.8.3. You have the right to refuse at any time that we process your personal data for general and personalized offers for goods and our lotteries, campaigns, and projects. In order to refuse that we process your personal data for the purpose above, you can provide us with your written cancellation at email help @ thingstories.com.

3.9. Your personal data are processed for the purpose of reliability verification:

3.9.1. In order to ensure the quality of our services and reduce the length of time from the receipt of your order to its execution, we process your personal data related to your orders and collection of the goods. Your rating is calculated based on these data. It shows how likely you will collect your order ordered in the way selected by you when purchasing goods. If you often do not collect your order, your rating is decreasing and you can be asked to pay for the ordered goods in advance rather than at the time of their collection. This rating is not publicly available and is used solely for the purposes of the Company activities, security and fraud prevention. If you do not agree with this rating, you can submit your disagreement arguments and we will review your rating. 

3.10. Your personal data are being processed for your requests and questions as follows:

3.10.1. In order to provide you with high-quality services and ensure full service, your personal data which you have provided to us when creating a personal account and making purchases, are also handled by us for the analysis of your questions and requests. 

3.11. For the purpose of providing an after-sale service:

3.11.1. When you make purchases in our electronic or physical shop and purchase particular goods, they come with after-sale service. When contacting our after-sales service for this purpose, we collect and process the following personal data: your name, telephone, email, delivery address, and order information.

3.11.2. If you do not want us to process the specified personal data for the purpose of after-sale service, we recommend you apply directly to the after-sale companies for the after-sale services. 

3.12. For your and our safety:

3.12.1. In order to ensure the safety of you and our employees, as well as prevent theft from physical shops and collection points, we have installed surveillance cameras. You are being filmed at our shops or collection points. We review videos in the event of incidents, thefts, or other criminal acts in order to protect the legitimate interests of our injured parties. 


4. LEGALITY OF PERSONAL DATA COLLECTION AND PROCESSING 

4.1. We assure you that we collect your personal data only for lawful reasons, i.e. your personal data are collected and processed only for the following reasons:

4.1.1. When you purchase goods, we conclude a sales contract between you and us and we process your data on this basis;

4.1.2. When you register in our e-shop and set up a personal account, we process your data in preparation for you to purchase goods in the future;

4.1.3. When you give us your consent to process your personal data;

4.1.4. When complying with the applicable laws;

4.1.5. Upon the order of the state authorities.

4.2. You can always disagree with the processing of your additional personal data which is for analysis and marketing purposes only. However, there is no way to complete the purchase without the data required for the order since we cannot fulfill this order in a quality matter.  


5. SHARING AND RECIPIENTS OF PERSONAL DATA  

5.1. Personal data are only transferred to trusted third parties with whom we have concluded contracts and only to the extent that is necessary for the provision of the service and for the proper fulfillment of the obligations set out in the contract. To provide the proper services for you, we will transfer your personal data to the following partners:

5.1.1. Courier companies that deliver goods to you at the addresses you have provided to us;

5.1.2. Suppliers of goods who deliver goods directly to you;

5.1.3. Financial service companies with whom you make contracts for purchasing in installments;

5.1.4. Companies providing call center services; 

5.1.5. After-sales service companies;

5.1.6. Fixer companies;

5.1.7. Marketing companies.

5.2. We also provide your personal data for the fulfillment of the obligations stipulated in the law, in particular:

5.2.1. To law enforcement institutions according to the procedure provided by the legal acts of the Republic of Lithuania;

5.2.2. Public authorities and courts where such an obligation is provided by applicable law.


6. PERSONAL DATA STORAGE TERMS

6.1. Your personal data are stored for the time necessary to fulfill the contract on the purchase of goods but not longer than we are obliged to do it by the legal acts regulating our activity. Your personal data processed upon your consent with such personal data processing is processed and stored prior to the date of revocation of your consent.


7. PERSONAL DATA SUBJECTS’ RIGHTS

7.1. If you find that your personal data are inaccurate or incomplete and you want to change or clarify them, you can do it in the following ways:

7.1.1. In my profile editing environment at your personal account;

7.1.2. By sending us an email at help @ thingstories.com.

7.2. You have the right to request us that we no longer process your personal data and delete them. Your personal data will be deleted upon receipt of your request.

7.3. We are sorry but your personal data will not be deleted from our database if, upon receiving your request, we will determine that:

7.3.1. Your personal data is needed to achieve the purposes which they were collected or processed for;

7.3.2. You have not revoked the consent for the processing of your personal data;

7.3.3. You did not agree to the processing of your personal data but such processing is necessary for our legitimate interests;

7.3.4. Processing of your personal data is subject to the applicable legal acts of the European Union and the Republic of Lithuania;

7.3.5. We need to process your data for legal claims, enforcement, or defense.

7.4. You can submit a request for deleting your personal data in the following ways:

7.4.1. In your personal account at thingstories.com;

7.4.2. By sending us an email at help @ thingstories.com.

7.5. You have the right to restrict us from processing your personal data. By restricting the processing of your personal data, we will no longer take any action with your personal data other than storing your personal data. You may restrict the processing of personal data in any of the following circumstances:

7.5.1. Your personal data are inaccurate (personal data processing operations, in this case, will be restricted while checking the accuracy of the data);

7.5.2. Your personal data are processed illegally but you do not agree to delete your data;

7.5.3. Your personal data are necessary for the purpose of bringing, executing, or defending legal requirements;

7.5.4. Your personal data are being processed with your objection to such processing of personal data (data processing will be restricted to this basis until we verify whether the reasons for which we process your personal data are superior than yours).

7.6. You can restrict the processing of your personal data in the following ways:

7.6.1. By submitting us a request via your personal account at www.thingstories.com;

7.6.2. By sending us an email at help @ thingstories.com.

7.7. You can revoke your consent to the processing of your personal data at any time. You can revoke your consent in several ways:

7.7.1. In my profile editing environment at your personal account;

7.7.2. By sending us an email at help @ thingstories.com.

7.8. You have the right to review your personal data processed by us by sending us a request at help @ thingstories.com.

7.8.1. We make your identification according to your email in our system. When submitting your request, please always provide your email for which collected information is provided. If you do not provide us with the email or if it is not the same as the person’s who submitted us a request, we will not be able to identify you and submit the information requested by you or fulfill your request. 

7.8.2. If you think that your rights have been violated, you can contact the State Data Protection Inspectorate for the protection of your rights. 


8. COOKIES 

8.1. We use cookies to improve your visiting experience, facilitate your shopping, identify your device and increase functionality in the e-shop thingstories.com by using other technical capabilities. These are small pieces of textual information that are automatically generated when you browse the website and are stored on the website visitor’s computer or any other end device.

8.2. The information collected by the cookies allows us to ensure more convenient browsing in the e-shop and get more information about the behavior of e-shop visitors, analyze trends and improve both the website and the company services or information provided in the e-shop. We process impersonal data by using cookies.

8.3. If you refuse to save cookies to your computer or another end device, you can change your website browser settings, turn off all cookies or turn them on/off one by one. However, please note that in some cases it may slow down the e-shop browsing speed, limit certain e-shop features, or block access to certain websites. For more information about the cookies used in the e-shop, please visit AllAboutCookies.org or www.google.com/privacy_ads.html.


9. CONCLUDING PROVISIONS

9.1. This privacy policy is governed by the law of the Republic of Lithuania and the European Union.

9.2. We reserve the right to amend this privacy policy, and therefore, we kindly ask the e-shop visitors to periodically check whether the privacy policy has not been amended and read amended or new provisions thereof.