Privacy Policy

 Last updated: 2025-03-13

This privacy policy sets out and explains how ALAUSHU collects, uses, shares and protects personal data, and the privacy rights and choices it offers, concerning ALAUSHU online shop activities, services and products (collectively the "Services"). 

DEFINITION OF TERMS

Company - UAB "Innovation Strategy" (developing the brand "Alaushu"), legal entity code: 306146417, Kudirkos Naumiesčio g. 2, Kybartai, LT-70414, e-mail: hello@alaushu.com.

Personal Data shall mean any information relating to a natural person, i.e. a data subject, whose identity is known or can be established, directly or indirectly, by reference to data such as a personal identification number, one or more physical, physiological, psychological, economic, cultural or social characteristics specific to the person.

Recipient of the data refers to legal or natural person to whom the personal data are provided.

Processing of Personal Data – any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, classification, grouping, combination, alteration (including supplementation or correction), disclosure, publication, use, retrieval, dissemination, erasure, destruction, or any other processing operation.

Data Processor – a natural or legal person (other than an employee of the Data Controller) that processes personal data on behalf of the Data Controller. The Data Processor and/or the procedure for its designation may be established by applicable laws or other legal acts.

Data Controller – a natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of processing are determined by applicable laws or other legal acts, the Data Controller and/or the procedure for its designation may be established by those laws or other legal acts.

Consent refers to the voluntary indication of the data subject's will to have his or her personal data processed for a purpose known to him or her. Consent to the processing of sensitive personal data must be given clearly, in writing, in equivalent form or in any other form which unambiguously demonstrates the data subject's wishes.

Direct Marketing refers to any activity intended to offer goods or services to persons by post, email, telephone or any other direct means and/or to seek their opinion on the goods or services offered.

Automatic Data Collection is data collection activities carried out wholly or partly by automatic means.

Third-party refers to a legal or natural person other than the data subject, the controller, the processor and persons directly authorized by the controller or the processor to process data.

Other terms used in this document shall have the same meanings as defined in the Law on Personal Data Protection of the Republic of Lithuania and other legal acts regulating the processing of personal data. 

PERSONAL DATA COLLECTED

Innovation strategy UAB, our service providers and business partners may collect information about you, your computer or mobile device and your interaction with our e-shop and services. This may include:

  • Device data: information about your device's operating system, IP address, browser type and geographic location.
  • Online activity data: pages viewed, time spent on the site, browsing paths, and engagement with email campaigns.

The information collected by the company is information that you provide to us and may include the following personal data:

  • Contact information: your name, email address, postal address and telephone number.
  • Account details: the username and password used to create your account.
  • Communication: your interaction with us, including any questions or feedback you provide.
  • Order and Purchase History: information about your orders and payment for goods.
  • Payment Details: Payment information required to process your payment. Payments are processed through payment service providers such as Stripe, Paysera and PayPal. The Company does not store payment card details.
  • Marketing Data: your choices to receive marketing communications and your engagement with them.

We collect this information using cookies and other similar technologies. For more information, please see our Cookie Policy.

 PRINCIPLES FOR PROCESSING OUR CUSTOMERS' PERSONAL DATA

We follow these principles when processing customer personal data:

  • We process customer personal data for the purposes set out in these Terms and Conditions, accurately, fairly, and lawfully, in accordance with the requirements of the law.
  • Customer personal data is processed in such a way that it remains accurate at all times and is kept up-to-date as and when it changes.
  • We process the personal data of our customers only to the extent necessary to achieve the purposes for which the personal data is processed.
  • Customer personal data shall be kept in a form that permits the identification of data subjects for no longer than is necessary for the purposes for which the data was collected and processed.

HOW WE USE PERSONAL DATA

We only use personal data to provide our services and to improve user experience:

  • To analyze and improve our Services and our business, including the creation of anonymized data. Anonymized data refers to information that has been processed to remove any personally identifiable details, ensuring that individuals cannot be identified or linked to the data. This type of data is used for statistical and analytical purposes without compromising privacy.
  • To understand your needs to improve your experience using our Services.
  • To solve problems, test new services and equipment, conduct research (surveys, feedback gathering, etc.), and to protect our Services from fraudulent or malicious activity.
  • Communicating with you about our Services, service updates, security notices, and information related to our e-shop and products.
  • Processing payments and completing the purchase of goods.

For marketing purposes:

  • To send you marketing communications about our products, activities and promotions. You have the right to opt out of these communications.

For interest-based advertising:

  • By displaying advertisements and promotions tailored to your interests to provide you with relevant information. 

To meet legal obligations:

  • Responding to lawful requests or inquiries from public and governmental authorities.
    Purpose of Processing Personal Data Processed Legal Basis
    Order fulfilment Name, surname, address, telephone number, email address, order details Article 6(1)(b) GDPR – performance of a contract
    Payment administration Payment information Article 6(1)(b) GDPR – performance of a contract
    Accounting Invoice and accounting data Article 6(1)(c) GDPR – compliance with a legal obligation
    Customer service Correspondence Article 6(1)(f) GDPR – legitimate interest
    Direct marketing Email address, telephone number Article 6(1)(a) GDPR – consent
    Website analytics IP address, cookies Article 6(1)(a) GDPR – consent, or Article 6(1)(f) GDPR – legitimate interest (for strictly necessary cookies)
    Establishment, exercise or defence of legal claims Data necessary for the specific legal claim Article 6(1)(f) GDPR – legitimate interest

WITH WHOM WE SHARE PERSONAL DATA

We share personal data with:

  • Affiliated companies: within the Innovation Strategy UAB group, but only to the extent necessary for the provision of the Services and in accordance with this Privacy Policy.
  • Service providers: companies that help us administer and provide the Services, such as e-commerce platform providers, postal and courier service providers, banks, and payment service providers (e.g., Stripe, Paysera, and PayPal).
  • Third Parties: for marketing, advertising and other lawful purposes (Facebook, Instagram, TikTok)
  • Professional advisors: lawyers, auditors, financial experts and other consultants related to the business whose services can be provided according to the Company's needs.
  • Authorities: law enforcement and government authorities, if required.
  • In the case of business transactions: in the case of mergers, acquisitions or similar business transactions.

Whenever you voluntarily provide personal data before or during the use of our services, this data may be accessed, collected, and used by our service providers and third parties to deliver services. The third parties that process your data are required to comply with the GDPR. You can find more information about their data processing practices in their privacy policies, which are available on their websites, or by contacting them directly.

PRIVACY RIGHTS AND CHOICES

You have various rights concerning your personal data, including:

  • The right to review, correct and update your account information.
  • The right to obtain information about how your personal data is processed.
  • The right to opt out of receiving marketing communications, as described in this Privacy Policy.
  • The right to access your personal data.
  • The right to request the correction of inaccurate or the completion of incomplete personal data.
  • The right to request access to, rectification, erasure or restriction of the processing of your personal data.
  • The right to restrict the disclosure of your personal data to third parties, including the sharing of personal data for targeted advertising purposes.
  • The right to withdraw your consent at any time where the processing of your personal data is based on your consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
  • The right to object to the processing of certain non-mandatory personal data. You may exercise this right by choosing not to provide certain optional information.

If you wish to exercise these rights or have any questions about the processing of your personal data, please contact us at hello@alaushu.com. We may ask you to confirm your identity to protect the security of your data.

If you believe that your personal data is being processed in violation of the General Data Protection Regulation (GDPR) or other applicable legal requirements, you have the right to lodge a complaint with the State Data Protection Inspectorate:

State Data Protection Inspectorate
L. Sapiegos St. 17, LT-10312 Vilnius, Lithuania
Tel.: +370 5 271 2804, +370 5 279 1445
E-mail: ada@ada.lt
Website: https://vdai.lrv.lt


DATA SECURITY

  • We have implemented various technical, organizational and physical security measures to protect your personal data against unauthorized access, use, disclosure, alteration or destruction. 
  • Access to personal data is granted only to employees and authorized persons who require such access to perform their job responsibilities.
  • The Company takes measures to prevent accidental or unlawful destruction, alteration, disclosure and other unauthorized processing of personal data by ensuring the security of documents and data entrusted to it.
  • The Company shall take immediate measures to prevent the unlawful processing of personal data in the event of a personal data breach.
  • Despite the company's efforts to ensure a high level of data security, we cannot guarantee absolute protection against all possible threats, as no security measures are completely immune from breaches.

INTERNATIONAL DATA TRANSFER

Your personal data may be transferred to other countries, including countries outside the European Economic Area (EEA). We ensure that such international transfers are subject to appropriate safeguards, including standard contractual clauses or other lawful bases, as provided for in applicable data protection legislation, to ensure that your data is protected in accordance with the GDPR.

STORAGE OF PERSONAL DATA

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and in accordance with applicable legal requirements. Once personal data is no longer required for the purposes for which it was processed, it is securely deleted or irreversibly anonymised, unless applicable law requires it to be retained for a longer period. Upon expiry of the applicable retention period, personal data is permanently deleted or irreversibly anonymised.

Personal data is retained for the following periods:

  • Order and accounting data – for 10 years from the end of the financial year in which the transaction took place, in accordance with the legal requirements of the Republic of Lithuania.
  • Customer support and correspondence data – for up to 3 years from the date of the last communication, unless a longer retention period is required for the establishment, exercise or defence of legal claims.
  • Personal data processed for direct marketing purposes – until you withdraw your consent or object to such processing of your personal data.
  • Account data – until the account is deleted or for 30 days after its deletion.
  • Contact form enquiries – for 1 year from the date the enquiry is submitted.
  • Cookie data – for the duration of the validity period of the respective cookie.

USE OF COOKIES

The website www.alaushu.com uses strictly necessary cookies to ensure the proper functioning of the website. Non-essential cookies are used only with your consent, which you may provide through the cookie settings banner. Cookies are small text files that are stored in your browser and allow us to recognize you as a previous visitor to the website, to remember your browsing history and to tailor content to your needs. Cookies also help to ensure the smooth running of the website, collect statistics on the number of visitors, frequency and duration of browsing, which allows us to improve the functionality of the website.

Cookie Type Purpose Retention Period
Essential Cookies Ensure the proper functioning of the website Session or up to 12 months
Functional Cookies Save the user's preferences and settings Up to 12 months
Analytics Cookies Analyze website usage Up to 24 months
Marketing Cookies Deliver personalized advertisements and measure the effectiveness of marketing campaigns Up to 24 months


Cookies do not identify specific individuals, but are more related to the use of your computer. You can refuse the use of cookies by selecting the appropriate settings in your browser, but in this case, some of the functions of the website may no longer function fully. Cookies are also used to improve your browsing experience by remembering your settings (such as your login details) and providing personalized content and advertisements.

Deleting or disabling cookies

You can disable cookies in your browser settings. Please note that disabling some cookies may impair the performance of the website or restrict services. We collect cookies (with your permission) when you use the following browsers:

  • Safari
  • Firefox
  • Chrome
  • Internet Explorer

CHANGES TO THE PRIVACY POLICY

We reserve the right to change this privacy policy at any time. If changes are made, we will notify you by updating the date of this policy and, if necessary, by other means.

HOW TO CONTACT US

If you have any questions or requests regarding this Privacy Policy, please contact us at the following address:

Innovation Strategy UAB - ALAUSHU 

Kudirkos Naumiesčio g. 2, Kybartai, Lithuania

E-mail: hello@alaushu.com