Privacy policy

In this Privacy Policy (the Privacy Policy) we will provide information on how UAB SKINIJA, registration number 133618635, VAT number LT336186314, registered domicile at Šilalės street 14, LT-48313 Kaunas, Lithuania (the Seller or we/us), processes your personal data in https://www.skinija.lt/ online store (the Store).

You can contact the Seller using the following details:

Phone: +37037260353
Email address: info@skinija.lt
Address: Šilalės street 14, LT-48313 Kaunas, Lithuania

What kind of your personal data do we process?

We process personal data for the following purposes in the Store:

  • Purpose: Order fulfilment and delivery
    • Personal data processed: First name, last name, address, phone number, e-mail address.
    • Legal basis: Contract (where the buyer is a natural person) or legitimate interest of the Seller to carry out our activities (where the buyer is a legal person).
    • Storage period: Ten years after the execution of the order.
    • We may transfer the data required for the delivery of the order (name, address, telephone number, email address) to the delivery service provider (courier).
  • Purpose: Refunds
    • Personal data processed: First name, last name, bank account number, other details.
    • Legal basis: Contract, legal obligation.
    • Storage period: Ten years after the refund.
    • Personal data may be transferred to payment service providers.
  • Purpose: Creation and administration of a Store account
    • Personal data processed: First name, last name, account username and password, phone number, email address, address, picture, order history, favorite items (wish list).
    • Legal basis: Contract.
    • Storage period: As long as the account is active and for 24 (twenty-four) months after the date of the last login to the account.
  • Purpose: Communication with Store visitors and other persons
    • Personal data processed: First name, last name, phone number, email address.
    • Legal basis: Taking steps at the request of the data subject prior to entering into a contract / legitimate interest of the Seller to pursue our activities and/or ensure quality.
    • Storage period: One year after the enquiry is solved.
  • Purpose: Direct marketing (newsletters, offers)
    • Personal data processed: First name, last name, email address, phone number.
    • Legal basis: Consent, or the Seller’s legitimate interest in offering similar goods or services to customers (natural persons), or the Seller’s legitimate interest in offering its goods or services to legal entities.
    • Storage period: Two years after the consent or two years after the goods have been purchased. The legal entity’s email address or phone number is retained for this purpose until the legal entity objects to receiving direct marketing.
    • Personal data may be transferred to newsletter sending solutions.
  • Purpose: Conclusion and performance of other contracts with suppliers, service providers, partners, customers
    • Personal data processed: First name, last name, address, email address, phone number, other data contained in a contract.
    • Legal basis: Contract (in the case of a contract with a natural person) or legitimate interest of the Seller to carry out our activities (in the case of the processing of personal data of a representative of a counterparty - a legal person).
    • Storage period: Ten years after the end of the contract.
  • Purpose: Organization of and participation in contests
    • The Seller may occasionally announce various contests on the Store website. In such cases, the specific purposes of data processing, the personal data being processed, the legal basis, and the data retention periods are specified in the contest rules or other contest documents.
  • Purpose: Administration of social network accounts

Please read the third-party privacy policy and contact the service provider directly if you have questions on how they use your personal data.

Cookies

A cookie is information that a web server sends to your web browser and that is stored in your browser. This information is sent to the web server each time your browser requests to open the Store website from the server and it distinguishes your computer or other device from other devices. Cookies therefore make the Store website more user-friendly and allow us to improve it.

There are several types of cookies, depending on their purpose:

  • Essential (technical) – ensure that the Store website functions properly. For example, without them, the shopping cart or account login would not work.
  • Functional – help the Store website remember your choices, such as language or currency, and thus ensure a more convenient browsing experience.
  • Statistical/analytical – provide anonymous information about how visitors use the Store website (e.g., how many people visit it, which pages are most popular). This data helps us improve the website's performance.
  • Marketing – allows us to show you more relevant ads tailored to your interests. This helps to ensure that you see information that is useful to you, rather than just any information.

It is also important to know the difference between different sources of cookies:

  • First-party cookies are created and used on our Store website.
  • Third-party cookies are installed by external partners (e.g., advertising or analytics tools) and may therefore also function on other websites you visit.

When are cookies used?

Essential cookies are used automatically because they are necessary for the proper functioning of the Store website (e.g., to maintain the selected language or ensure the functionality of the shopping cart). In this case, the data is processed in accordance with our legitimate interest in ensuring the reliable and secure operation of the Store website.

Other cookies (e.g., analytical or advertising cookies) are only enabled with your consent. The data collected by these cookies is only processed with your consent, which you can revoke at any time.

What data is processed using cookies?

Cookies may be used to process certain technical information, such as your IP address, the browser you are using, the pages you have visited, the time spent on the Store website, etc.

When can data be transferred outside the EU?

When using certain cookies on the website (e.g., Google Analytics, Meta Pixel, or other third-party tools), your data may be transferred outside the European Union/European Economic Area, including to the United States (US).

Currently, the US is subject to the European Commission’s adequacy decision, which allows US companies to participate in the EU-US Data Privacy Framework and commit to complying with EU personal data protection standards. This means that companies such as Google, Meta, or Amazon (the full list can be found here) can be used with confidence that your data is adequately protected. If data is transferred to a recipient who is not certified under this mechanism, the data transfer is based on Standard Contractual Clauses (SCCs). If you would like more information about this, please contact us.

How can you manage cookies?

If you do not want your personal data to be processed by cookies, you can do so in the cookie management tool installed on the Store website, or you can change the settings of your web browser so that cookies are not accepted, or delete the saved cookies. If you delete the necessary cookies and prevent them from being used in your web browser, some of the functions of the Store website will not function properly.

You can change the cookie settings in your browser at any time. All browsers have the option to delete cookies, please refer to your browser settings for details.

Whom can we transfer your personal data to?

We may transfer information about you to our employees, agents and such service providers as debt administration/collection companies or companies providing archiving services, also to legal/marketing/IT service providers or subcontractors if it is reasonably required for the purposes stated in this Privacy Policy.

In addition, we may disclose your personal information in cases when required to do so by law or seeking to protect our rights or interests (including the case when your personal data is transferred to others for debt recovery purposes), also when intending to sell the Store, a part of the company’s business or assets, or to reorganize the company (and during such processes) we are asked to disclose your personal data to any (potential) buyer of such business or assets, or to other participants in the reorganization.

How is your personal data processed?

Your personal data will be processed in accordance with the General Data Protection Regulation (the GDPR), the Law of the Republic of Lithuania on Legal Protection of Personal Data, and other legal requirements. When identifying personal data processing measures and during such processing, the Seller should implement appropriate technical and organizational measures envisaged in the laws for the protection of personal data against accidental or unlawful destruction, damage, modification, loss, disclosure, or any other kind of illegal handling and will adopt proper measures considering the risks involved in such personal data processing.

What are your rights?

Below, please find information about your rights associated with the processing of your personal data by the Seller and about how such rights may be exercised. If you want more information about your rights or want to exercise them, please contact us at the email address given in this Privacy Policy.

  • You may contact us at any time to ask whether any of your personal data is being processed by us. If your personal data is stored or used by us in whatever way, you have the right of access to such data. In order for you to exercise such right, please send us a written request at the email address given in this Privacy Policy. We may ask you to confirm your identity so that your request could be granted. Please observe the principles of reasonableness and good faith when submitting such request.
  • If you have given us consent to process your personal data, you may withdraw such consent at any time by sending us an email letter to the email address given in this Privacy Policy.
  • You have the right to request us to correct any inaccuracies in your personal data. In that case, we may ask you to confirm the information corrected.
  • You have the right to request us to erase your personal data. This right may be implemented in the cases described in Article 17 of the GDPR.
  • You have the right to request us to restrict/refrain from processing your personal data.
  • You have the right to data portability if processing of such data is carried out by automated means and we have obtained such data from you based on your consent or for the purpose of concluding an agreement. If you opt to exercise this right, we will transmit at your request a copy of the data submitted by you.
  • You have the right to object to processing of your personal data pursuant to Article 21 of the GDPR, provided that the personal data is processed on the basis of legitimate interest of the Seller.

How can you exercise your rights?

To enforce your rights, you may submit requests, complaints or claims to us in writing by using the contact information given in this Privacy Policy.

We will respond to your request, complaint or claim in writing in accordance with the applicable laws and will do our best to provide you with the necessary information within the shortest time possible but in no event later than within 30 (thirty) days after receiving your request.

If having received your request, complaint or claim we have doubts about your identity, we may ask the applicant to produce an identity document.

Complaints

If you believe that your rights as the data subject have been and/or may be violated, please immediately contact us at the email address given in this Privacy Policy. We assure you that having received your complaint, we will inform you within a reasonable time about the progress of the complaint investigation, and later about its outcome. If you are not satisfied with such investigation outcome, you may file a complaint with the supervisory authority: in Lithuania, the State Data Protection Inspectorate (https://vdai.lrv.lt/), and a list of supervisory authorities in other EU countries can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

Responsibility

You are responsible for ensuring that the information provided by you is accurate, correct, and complete. You should immediately notify us by email if changes are made to the data you have submitted. Therefore, we will not be held liable for any damage resulting from your failure to provide correct or complete personal data or to give us notice of changes made to such data.

This Privacy Policy was last updated on 11 June 2026