Privacy Policy (GDPR 2026)
This privacy policy applies to all online stores operated by Salonera MB:
- www.kirpyklosiranga.lt
- www.salonera.lv
- www.salonera.ee
- www.salonera.lt (redirects to www.kirpyklosiranga.lt)
Current version: 2026.
1. Data Controller
Salonera MB
Address: Vasaros g. 9-35, Palanga, Lithuania
Phone: +370 665 26000
E-mail: info@kirpyklosiranga.lt
A Data Protection Officer (DPO) is not appointed as the activities do not meet the criteria of Article 37 of the GDPR.
2. Principles of personal data processing
- The processing of data shall be lawful, fair and transparent.
- Data shall be collected only for specific and explicit purposes.
- Only necessary data shall be processed.
- Data is accurate and updated as necessary.
- Data is kept no longer than necessary.
- Appropriate technical and organisational security measures are in place.
3. Personal data processed
3.1 For the purposes of purchase and delivery
- Name
- Telephone number
- Email address
- Delivery address
- Ordering information
- Payment method
- IP address
3.2. For account creation
- First name, last name
- Email address
- Password (encrypted)
3.3. For direct marketing (only with consent)
- Email address
- Telephone number
4. Data not processed by Salonera MB
- Personal identification number
- Personal document number
- Amount of personal income
- Credit rating
When purchasing by leasing, the customer is directed to the leasing company's system. The leasing company acts as a separate data controller.
5. Purposes and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Conclusion and performance of the purchase contract | Article 6(1)(b) GDPR |
| Accounting and tax compliance | Article 6(1)(c) GDPR |
| Customer service | GDPR Art. 6(1)(b) and (f) |
| Website security | GDPR Article 6(1) f |
| Direct marketing | GDPR Art. 6(1a) (consent) |
6. Data retention periods
- Order and accounting data - 10 years
- Account data - until deletion of the account
- Marketing data - until withdrawal of consent
- Cookie data - in accordance with the cookie policy
7. Transfer of data to third parties
Data is only transferred to the extent necessary:
- courier services
- Payment service providers
- IT and server service providers
- Email service providers
8. Cookies
The website uses essential, statistical and marketing cookies. Statistical and marketing cookies are only used with the user's consent. You can change your preferences at any time by clicking on "Cookie settings".
9. User rights
- Right of access to data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to transfer the data
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the State Data Protection Inspectorate
10. Children's personal data
The Services are intended for persons aged 16 and over. Data about younger persons is intentionally not collected.
11. Changes to the Privacy Policy
This Privacy Policy may be updated. The latest version is always posted on the website.