Privacy policy

  1. KEY DEFINITIONS

1.1. Company – 4Cars, UAB, a private limited liability company established and operating under the laws of the Republic of Lithuania, legal entity code 305915670, registered office address Laisvės Ave. 3, LT-04215 Vilnius, Lithuania, email address info@hocus.lt.

1.2. Customer or Data Subject – a natural person who is a customer of the Company, a visitor to the Online Store, or another person whose Personal Data is processed by the Company.

1.3. Online Store – the Company’s online store available at shop.hocus.lt.

1.4. Services – all services provided by the Company, including the sale of goods through the Online Store.

1.5. Personal Data – any information relating to an identified natural person or a natural person who can be identified directly or indirectly.

1.6. Processing of Personal Data – any operation or set of operations performed on Personal Data, including the collection, recording, organisation, storage, alteration, use, transmission, consultation, deletion, or destruction of data.

1.7. Partner – a natural or legal person providing the Company with services necessary for the Company’s activities and the operation of the Online Store, including providers of e-commerce platforms, payment, delivery, IT, accounting, marketing, analytics, and other services.

1.8. Cookie – a small text file or piece of information stored on the device used by the Customer when visiting the Online Store.

1.9. Direct Marketing – activities intended to offer Customers goods, services, promotions, news, or other marketing information by email or other means of electronic communication.

1.10. Privacy Policy – this document, which sets out the principles and rules governing the collection, use, storage, and other processing of Personal Data when using the Online Store.

  1. GENERAL PROVISIONS

2.1. The Company is the controller of the Customers’ Personal Data processed through the Online Store and is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently.

2.2. Personal Data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, GDPR), as well as other applicable legal acts of the Republic of Lithuania and the European Union.

2.3. The Company processes Personal Data in accordance with the following principles:

2.3.1. Personal Data is collected for clearly defined and lawful purposes;

2.3.2. Personal Data is processed lawfully, fairly, and transparently;

2.3.3. only the Personal Data necessary for the specific purposes of its processing is collected;

2.3.4. Personal Data must be accurate and, where necessary, kept up to date;

2.3.5. Personal Data is retained no longer than necessary to fulfil the purposes for which it was collected or for as long as required by law;

2.3.6. Personal Data is processed in a manner that ensures its appropriate security and confidentiality;

2.3.7. the Customer’s Personal Data is not used for purposes that are incompatible with the purpose for which it was collected or for unlawful purposes.

2.4. When using the Online Store or placing an order, the Customer is given the opportunity to review the current version of the Privacy Policy. Where the Customer’s consent is required by law for specific Personal Data processing activities, such consent shall be obtained separately.

2.5. The Privacy Policy is available in the Online Store. The Company has the right to amend, supplement, or update the Privacy Policy. The latest version of the Privacy Policy shall be published in the Online Store.

2.6. The Customer may place an order in the Online Store without registering an account unless the functionality of the Online Store provides otherwise at the relevant time.

2.7. When using the services of the Online Store and placing an order, the Customer must provide accurate and correct Personal Data and update any information relevant to fulfilling the order if it changes.

  1. COLLECTION, USE, CORRECTION, AND RETENTION OF PERSONAL DATA

3.1. The Company respects every Customer’s right to privacy. Depending on how the Customer uses the Online Store, the Company may process the Customer’s name, surname, email address, telephone number, delivery or collection information, payment and billing information, order and purchase history, correspondence data, IP address, information about the device used, and other data necessary for the purposes set out below.

3.1.1. For e-commerce and order fulfilment purposes. Personal Data necessary to accept an order, confirm payment, deliver goods or prepare them for collection, inform the Customer about the status of the order, administer returns, and perform other actions relating to the purchase and sale agreement is processed. Personal Data is processed for this purpose on the basis of entering into and performing a contract and, where applicable, to comply with the Company’s legal obligations.

3.1.2. For accounting purposes and compliance with legal obligations. Information relating to orders, payments, invoices, and other information required by law shall be retained for the period specified by applicable accounting, tax, and other legislation.

3.1.3. For customer service and the administration of enquiries and complaints. The Company may process the Customer’s name, surname, contact details, order information, the content of correspondence, submitted photographs, and other information provided by the Customer when contacting the Company. This data is processed in order to fulfil contractual or statutory obligations and, where applicable, on the basis of the Company’s legitimate interest in properly administering Customer enquiries and protecting its rights.

3.1.4. For Direct Marketing purposes. With the Customer’s consent, the Company may process the Customer’s name and email address in order to send newsletters and information about goods, promotions, offers, and other marketing communications.

3.1.5. Personal Data used for Direct Marketing purposes shall be processed until the Customer withdraws their consent or until the end of the retention period established by the Company, but no longer than necessary to fulfil the Direct Marketing purpose.

3.1.6. For the operation, analytics, and marketing of the Online Store. Cookies and similar technologies may be used to process the Customer’s IP address, information about the device and browser used, and data concerning visits to and use of the Online Store. Non-essential analytics and marketing cookies shall only be used with the Customer’s consent.

3.2. The Customer has the right to withdraw their consent to the processing of Personal Data for Direct Marketing purposes at any time. This can be done by clicking the unsubscribe link in the email received or by contacting the Company at info@hocus.lt.

3.3. The withdrawal of consent shall not affect the lawfulness of Personal Data processing carried out before the consent was withdrawn. Following the withdrawal of consent, the Company shall no longer send Direct Marketing communications to the Customer, except for information necessary to administer the Customer’s order, contract, or other enquiry.

3.4. As a Data Subject, the Customer has the following rights:

3.4.1. the right to receive information about the processing of their Personal Data;

3.4.2. the right to access their Personal Data processed by the Company;

3.4.3. the right to request the correction of inaccurate Personal Data or the completion of incomplete Personal Data;

3.4.4. the right, in the cases provided for by law, to request the deletion of their Personal Data (the “right to be forgotten”);

3.4.5. the right, in the cases provided for by law, to request the restriction of Personal Data processing;

3.4.6. the right, in the cases provided for by law, to Personal Data portability;

3.4.7. the right to object to the processing of Personal Data where the data is processed on the basis of the legitimate interests of the Company or a third party;

3.4.8. the right to withdraw consent at any time where Personal Data processing is based on the Customer’s consent;

3.4.9. the right to lodge a complaint with the competent data protection supervisory authority.

3.5. To exercise their rights, the Customer may contact the Company by email at info@hocus.lt. The Company may request additional information necessary to verify the Customer’s identity if it has reasonable doubts regarding the identity of the person submitting the request.

3.6. The Company shall respond to the Customer’s request concerning the exercise of Data Subject rights without undue delay and no later than one month after receiving the request. Depending on the complexity of the request and the number of requests received, this period may be extended by an additional two months in accordance with the procedure established by law.

3.7. The Customer’s Personal Data may be transferred to third parties only to the extent necessary to fulfil the purposes specified in this Privacy Policy or where such transfer is required by law.

3.7.1. Personal Data may be transferred to e-commerce platform and IT service providers, including Shopify, where necessary for the operation of the Online Store and the administration of orders.

3.7.2. Personal Data may be transferred to payment service providers, banks, and other payment partners to the extent necessary to process and confirm the Customer’s selected payment method.

3.7.3. Personal Data may be transferred to courier, parcel locker, goods collection, and other delivery service providers to the extent necessary to deliver the Customer’s order or prepare it for collection.

3.7.4. Personal Data may be transferred to IT, website maintenance, email, marketing, analytics, accounting, legal, or other professional service providers providing services to the Company.

3.7.5. Personal Data may be transferred to public authorities, law enforcement authorities, courts, or other persons where the Company is legally required to do so or where necessary to protect the Company’s rights and legitimate interests.

3.8. When paying for goods, information necessary to process the payment may be transferred to the payment service provider selected by the Customer. Payment card details and information concerning other payment instruments shall be processed by the relevant payment service providers in accordance with their applicable terms and conditions.

3.9. Where service providers engaged by the Company process Personal Data outside the European Economic Area, the Company shall seek to ensure that such data transfers are carried out in accordance with GDPR requirements and using appropriate data protection safeguards provided for by law.

3.10. The Company implements appropriate organisational and technical measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access, or other unlawful processing.

3.11. Personal Data shall be retained only for as long as necessary to fulfil the purposes for which it was collected and processed and for as long as the Company is required to retain it by law. At the end of the applicable retention period, Personal Data shall be deleted or anonymised, except where it must be retained for a longer period on grounds established by law.

3.12. Where necessary to establish, exercise, or defend legal claims, comply with the instructions of competent authorities, prevent fraud or other unlawful activity, or for other legitimate reasons, the relevant Personal Data may be retained for longer than the ordinarily applicable retention period.

  1. COOKIES AND OTHER PROVISIONS

4.1. The Online Store may use essential, functional, analytics, and marketing cookies, as well as other similar technologies.

4.2. Essential cookies are used to ensure the proper operation and security of the Online Store and to enable the use of the shopping cart, checkout functions, and other essential services of the Online Store.

4.3. Functional cookies may be used to remember the Customer’s choices and settings and to improve their experience when using the Online Store.

4.4. Analytics cookies may be used to understand how visitors use the Online Store, assess its traffic, and improve its operation.

4.5. Marketing cookies may be used to evaluate the effectiveness of advertising and provide the Customer with more relevant advertising on the Company’s or third-party platforms.

4.6. Non-essential cookies and similar technologies shall only be used after obtaining the Customer’s consent where such consent is required under applicable law. The Customer may choose which categories of cookies they consent to and may subsequently change their preferences through the cookie settings available in the Online Store.

4.7. The Customer may also manage or delete cookies through their web browser settings. Disabling cookies may affect the operation of certain Online Store functions.

4.8. The Company has the right to amend, supplement, or update the Privacy Policy. Unless otherwise specified, amendments shall take effect from the date on which the updated Privacy Policy is published in the Online Store.

4.9. If you have any questions regarding this Privacy Policy or the processing of Personal Data, or if you wish to exercise your rights as a Data Subject, please contact us by email at info@hocus.lt.

5. Payments in the Online Store are processed using the makecommerce.lt platform, which is operated by the Lithuanian branch of Maksekeskus AS (Konstitucijos Ave. 21A, LT-08105 Vilnius, Lithuania, registration number 307639352). Therefore, your personal information required to process and confirm the payment will be transferred to Maksekeskus AS.