Privacy Policy
Updated: February 04, 2026
MB „VITABELI“ (hereinafter – the Company) is the controller of the personal data you provide, ensuring that personal data within the Company is processed in compliance with the personal data protection requirements applicable to data controllers. This Privacy Policy applies when you provide us with your personal data via the website www.shizuri.lt (hereinafter – the Website).
In this Privacy Policy, we describe how we process your data when you use our website. By using the website, you agree to the collection and use of information in accordance with the rules set out in this Privacy Policy.
Please note that this Privacy Policy applies only to this website. This website may contain links to other websites that we do not operate or control. Such links do not imply that we endorse or have reviewed such third-party websites.
This Privacy Policy has been prepared in accordance with the following legal acts:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – GDPR);
- Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter – LLPPD);
- Law on Electronic Communications of the Republic of Lithuania (hereinafter – LEC);
- Other applicable legal acts, insofar as they relate to the processing of your personal data for the purposes defined in this Policy.
When processing personal data, the Company is guided by the requirements stipulated in the GDPR, LLPPD, LEC, as well as other legal acts regulating personal data processing and protection.
I. Information about the Company:
UAB „VITABELI“; Legal entity code: 307450152; Registered office address: Bajorų Sodų 2-oji g. 12-1, LT-08426 Vilnius; Email: info@shizuri.com.
II. Information about the Company's Data Protection Officer
No Data Protection Officer has been appointed in the Company. Please send all requests related to your data protection to the general Company email address info@shizuri.com.
III. What information about you do we collect?
We collect and use the following information:
- Personal Data
When you use our website, we may collect certain personal information about you (hereinafter – Personal Data), i.e., when you voluntarily provide such information, for example, when you use certain of our services, contact us, etc. When we collect Personal Data, we provide a link to this Privacy Policy.
- Usage Data
We may also collect information that your browser sends when you visit the website (hereinafter – Usage Data). This may include information related to your IP (internet protocol) address, browser and device type, information about the websites you visited before, and other identifiers related to your device.
When you use the website with a mobile device, Usage Data may include information such as the type of mobile device used, the unique ID of the mobile device, the IP address of the mobile device, the operating system, the type of internet browser used, a unique device identifier, and other diagnostic data.
Please note that such information, which is collected passively using various technologies, cannot be used to specifically identify you. The website may use such information and link it with other information to monitor, for example, the total number of website visitors, the number of visitors on each page of the website, etc.
- Cookies Data
The website uses cookies to monitor activity on the website and store certain information. You can find more information about this in our Cookie Policy.
IV. Collected and processed Personal Data, their processing purposes and lawful bases, as well as Personal Data retention periods:
|
Purposes of Personal Data processing |
Collected and processed Personal Data |
Lawful bases for Personal Data processing |
Personal Data retention periods |
|
For the purposes of creating and managing an account on the Website |
|
Personal data is processed for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract to which the data subject is party (Article 6(1)(b) of the GDPR). |
Personal data is stored until the account is deleted or for 6 (six) months after the account has been inactive for at least 1 (one) year. |
|
For the purposes of purchasing goods via the Website |
|
Personal data is processed for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract to which the data subject is party (Article 6(1)(b) of the GDPR). |
Personal data is stored for 10 years after the purchase of the good or service. |
|
For accounting and payment administration purposes |
|
Personal data is processed for compliance with a legal obligation to which the Company is subject (Article 6(1)(c) of the GDPR), i.e., for retaining accounting documents, etc. |
Accounting documents confirming a business operation or event (invoices, payment orders, etc.) are stored for 10 years. |
|
For the purposes of responding to individual inquiries |
|
Personal data is processed for the purposes of the legitimate interests pursued by the Company (Article 6(1)(f) of the GDPR), i.e., to respond to inquiries, requests, etc., submitted by individuals. |
Personal data is stored for 2 years from the date of the last correspondence with the individual. |
|
For the purposes of participating in the loyalty program (see Section V for more details) |
|
Personal data is processed based on your given consent (Article 6(1)(a) of the GDPR), i.e., with your voluntary consent to participate in the loyalty program (by filling out a form to obtain a card). |
Personal data is stored as long as the participant uses the loyalty card and for 1 year after the end of card use (card blocking). Participant purchase data is stored for 2 years. |
|
For the purposes of newsletter subscription (sending) (see Section VI of this Policy for more details) |
|
Personal data is processed based on your given consent (Article 6(1)(a) of the GDPR), i.e., with your voluntary submission of an email address and consent for the Company to send newsletters. |
Personal data is stored for 5 years from the date of consent or until such consent is revoked |
|
For direct marketing purposes (see Section VII of this Policy for more details). |
|
Personal data is processed based on your given consent (Article 6(1)(a) of the GDPR), i.e., with your consent for the Company to send direct marketing messages and/or other news about offered services. |
Personal data is stored for 5 years from the date of consent or until such consent is revoked. |
|
Personal data is processed for the purposes of the legitimate interests pursued by the Company (Article 6(1)(f) of the GDPR), i.e., for marketing similar services of the Company, when customers are provided with a clear, free and easily implementable opportunity to object or refuse the use of an email address for direct marketing purposes of similar services (when the email is collected) and, if the customer initially did not object to such use of the data, with each message sent (Article 69(2) of the LEC) |
Personal data is stored until an objection to the processing of personal data for direct marketing purposes is received. |
We use personal data for the purposes specified in this Privacy Policy. If you provide Personal Data for a specific purpose, we may use this data based on the purpose for which such data was provided. For example, if you contact us by email, we use the Personal Data you provide to answer your question or solve a problem. If you provide Personal Data to use certain Website services, we will use your Personal Data to grant you access to such services and monitor your use of such services.
V. How do we process your Personal Data for loyalty program participation purposes?
Your personal data may be processed for the purposes of participating in the loyalty program, i.e., when you fill out a form on the Website to receive a discount card and/or participate in our loyalty program. In such a case, we mandatorily collect such of your personal data as your name and surname, date of birth, mobile phone number, email address, address (this data is used for card/loyalty program administration, communication with the participant, and also for sending you direct marketing messages).
With your consent, the personal data provided in your form, as well as personal data related to your purchases in our stores, will be used for automated assessment of your needs and interests, in order to tailor discounts and marketing information sent to you accordingly, i.e., to provide you with personalized offers. For example, if you purchase certain goods, the Company may inform you about promotions for those goods, etc. The Company does not in any case carry out profiling that may lead to legal consequences for you or have a significant impact on you, but when providing personalized marketing offers, you may be assigned to a specific customer category.
The lawful basis for processing your personal data is your given consent, therefore you are not obliged to participate in the Company's loyalty program.
Your personal data may be transferred to companies (service providers) that help us conduct direct marketing related to the loyalty program (sending messages by email or SMS, calling by phone). Your personal data may also be transferred to other Company data processors (e.g., companies providing server rental, data storage, website administration, IT infrastructure maintenance services, etc.). Your personal data will not be transferred to a third country or international organization.
You have the right to withdraw your consent to the processing of your personal data at any time by submitting a written request to info@shizuri.com.
VI. How do we process your Personal Data for newsletter subscription (sending) purposes?
Your Personal Data for the purpose of newsletter subscription (sending) is processed based on your given consent, therefore you are not obliged to subscribe to the newsletter. However, if you wish for us to send you news and other messages, you must subscribe, otherwise we will not be able to send you such newsletters.
Your personal data may be transferred to companies (service providers) that help us carry out the newsletter sending process.
You can withdraw your consent for newsletter subscription (sending) by:
- clicking the dedicated link in the email message received, or
- contacting the Company by email and informing them about the refusal of newsletter subscription (sending).
VII. How do we process your Personal Data for direct marketing purposes?
Direct marketing is an activity the purpose of which is to offer goods or services to individuals by mail, telephone or other direct means and/or to inquire about their opinion regarding the offered goods or services (Article 2(1) of the LLPPD).
Please be informed that, with your consent to the processing of Personal Data for direct marketing purposes, the Company's processing of such Personal Data includes offering promotions, news about provided services, information about ongoing events, campaigns or other information, as well as inquiring about your opinion on the services provided, both by email and by phone (call and/or SMS message).
Please be informed that, in accordance with Article 69(2) of the LEC, the Company, by obtaining your email contact details (e.g., when you purchase goods from our Website), may use these contact details for marketing its own similar services, if you are provided with a clear, free and easily implementable opportunity to object to or refuse such use of contact details for the aforementioned purposes, when these data are collected and, if you did not initially object to such data use, with each message sent. Therefore, please be informed that you have the opportunity to object to the use of your provided email for the Company's marketing of similar goods by writing to the Company by email info@shizuri.com.
Also, in order for the Company to provide you with direct marketing offers that meet your needs and are tailored to you, in addition to the Personal Data collected for direct marketing purposes specified in this Privacy Policy, the Company may also (with your consent) collect and use information about your use of services, transaction history, purchased services (e.g., date, time, name, quantity of ordered goods, etc.) and other information that you have provided to the Company through electronic channels.
The Company does not in any case carry out profiling of such Personal Data for direct marketing purposes that may lead to legal consequences for you or have a significant impact on you, but when providing personalized marketing offers, you may be assigned to a specific customer category.
You can object at any time to the processing of Personal Data for direct marketing purposes, including profiling. You can opt out of our direct marketing messages by:
- when you receive an email message - by clicking the dedicated link at the bottom of our messages;
- when you receive an SMS message or call - by refusing direct marketing during the call;
- in all other cases, you can opt out of direct marketing by writing to us by email: info@shizuri.com.
VIII. Are you obliged to provide us with Personal Data?
Please be informed that in order for us to provide you with the services specified in this Policy (as provided in Section IV of this Policy), you must provide us with the specified Personal Data.
You can choose whether to consent to the processing of Personal Data for loyalty program, newsletter sending (subscription) or direct marketing purposes, but if you wish to receive such direct marketing messages, you must agree to provide the specified Personal Data.
IX. Where do we obtain your data (what is the origin of the data)?
We obtain Personal Data directly from you, i.e., when you provide your Personal Data on the Website.
X. To whom do we provide your personal data?
The information you provide to us, including Personal Data, may be transferred to computers located outside your country's jurisdiction, where data protection laws may differ from the laws of your jurisdiction. In any case, the Company does not transfer your personal data to third countries or international organizations, i.e., outside the European Union or the European Economic Area, unless required to do so by law.
Please be informed that we will not share your Personal Data with third parties without your permission, except in the following cases:
- Service Providers
For the processing of Personal Data, the Company has the right to engage various data processors who process data on behalf of the Company, e.g., courier services, companies providing electronic payment collection services, companies providing cloud, server rental and related services that would store your Personal Data, as well as companies performing IT infrastructure maintenance, marketing service providers who may have access to your personal data, as well as lawyers, bailiffs, debt collection companies. Such data processors act only according to the Company's instructions and legal requirements.
- Business Transfer
As we develop our business, we may sell or acquire a business or assets. In the event of a Company sale, merger, reorganization, liquidation or similar event, Personal Data may be part of the assets sold.
- Legal Requirements
We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to (a) comply with the law; (b) prevent fraud or abuse; or (d) protect our property rights.
XI. Your Rights as Data Subjects
By submitting your Personal Data through our Website and in accordance with the GDPR, you have the following rights:
- The right to receive information about data processing (Articles 13 and 14 of the GDPR).
- The right to access your personal data, including the right to a copy of your personal data (Article 15 of the GDPR).
- The right to request the rectification of your personal data if it is inaccurate (Article 16 of the GDPR).
- The right to request the erasure of your personal data ("right to be forgotten") (Article 17 of the GDPR). This right is exercised only if at least one of the conditions specified in Article 17(1) of the GDPR is met.
- The right to request the restriction of the processing of your personal data (Article 18 of the GDPR). This right is exercised only if at least one of the conditions specified in Article 18(1) of the GDPR is met.
- The right to data portability (Article 20 of the GDPR). This right is exercised only if the Personal Data is processed on the basis of consent and by automated means (Article 20(1)(a) and (b) of the GDPR).
- The right to object to the processing of Personal Data (Article 21 of the GDPR).
Please be informed that if you disagree with the Company's decision made in response to your request regarding the exercise of your rights as a data subject, you have the right to file a complaint with the State Data Protection Inspectorate (for more information vdai.lrv.lt).
You also have the right to withdraw your consent at any time (if you have given it) for the processing of your personal data for direct marketing and newsletter subscription (sending) purposes. You can withdraw your consent at any time by sending a free-form request by email to info@shizuri.com. The withdrawal of consent does not affect the lawfulness of the Company's Personal Data processing based on consent before its withdrawal, i.e., the processing of Personal Data for the stated purposes will be considered lawful until the moment of the statement of withdrawal of consent.
XII. How to contact us regarding the exercise of your rights?
In order to exercise the aforementioned rights, you must submit a written request to us in a manner that allows us to identify you, i.e., by confirming your identity. Requests for the exercise of rights will not be considered by the Company if the identity of the person making the request cannot be established.
All communications related to the processing of personal data are submitted:
- by email info@shizuri.com;
Your requests related to the exercise of data subject rights will be processed within no more than 1 (one) month. Depending on the complexity of the request and the number of requests received, this period may be extended by the Company for 2 (two) months. The Company will inform you in all cases of any extension of the deadline.
Requirements for a request when submitted in writing:
- the request must be legible;
- the request must be signed;
- the request must include your name, surname, place of residence, and contact information for communication;
- the request must state which right you wish to exercise and, where applicable, the arguments or documents supporting such a request;
- if the request is submitted on your behalf by a representative, the request must include not only the above-mentioned data, but also the name, surname, place of residence, and contact information of your representative for communication.
Methods of identity verification:
- When submitting a request directly at the Company's office: by presenting an identity document to a Company employee;
- When submitting a request by post: a copy of an identity document, certified by a notary, or a copy of this document certified in another manner prescribed by law, must be attached to the request;
- When submitting a request by email. Requests submitted in this manner must be signed with a qualified electronic signature or generated by electronic means that ensure the integrity and immutability of the text (except when you withdraw your consent to process personal data in accordance with the procedure established in this Policy).
Scanned copies of signed requests or complaints submitted via email without being signed with a qualified electronic signature do not meet the requirements established by law. Such a submission of a request may be an obstacle to considering your request, therefore, if you do not have a qualified electronic signature, you should submit the request by post or directly at the Company's office.
When submitting a request through a representative, a document confirming representation or a copy thereof, certified in accordance with the procedure established by legal acts, must be additionally submitted with the request.
XIII. Changes to the Policy
The Company has the right to change or supplement the terms of this Privacy Policy. The Company will notify of changes on the Website by indicating the updated date of the Policy.
We advise you to periodically review this Privacy Policy for any changes. This Privacy Policy was last updated on the date indicated above.
