🍁AUTUMN SALE All offers Discounts up to -70%!!!🍁

Privacy Policy

1. General provisions

1.1. UAB “Aivaro sportas” (hereinafter – the “Company”), respecting the privacy of its customers, visitors and buyers of the website https://fitsport.lt/ (hereinafter – the “Website”) (hereinafter collectively – the “Customers”), is committed to protecting their personal data and ensuring the exercise of data subject rights.

1.2. This Privacy Policy sets out the main principles governing the collection, use, storage, disclosure and protection of personal data processed by the Company and informs you about your rights as a data subject.

1.3. Use of the Website does not in itself constitute consent to all personal data processing activities. Where your consent is required under applicable law, it will be requested separately. This Privacy Policy is available at any time at https://fitsport.lt/en/privacy-policy.

1.4. When processing your personal data, the Company complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter – the “GDPR”), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania and other applicable legislation.

2. Terms used in this Privacy Policy

2.1. Personal data means any information relating to an identified or identifiable natural person.

2.2. Data subject means a natural person whose personal data are processed by the Company, including Website visitors and buyers.

2.3. Consent means a freely given, specific, informed and unambiguous indication of the data subject's wishes by which they agree to the processing of personal data relating to them.

2.4. Processing means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, use, disclosure, restriction, erasure or destruction.

2.5. Processor means a natural or legal person that processes personal data on behalf of the Controller.

2.6. Controller means UAB “Aivaro sportas”, company code 303190860, registered office at Aitvarų g. 14, Ginduliai, LT-91276 Klaipėdos r., Lithuania. General contact email: [email protected]. For personal data protection matters, you may contact us at [email protected].

2.7. Cookie means a small text file or similar technology stored on your device or used to access information from it.

2.8. Direct marketing means activities intended to offer goods or services directly to individuals and/or to request their opinion regarding offered goods or services.

3. What personal data do we collect?

3.1. When you register on the Website, place an order, purchase goods, contact the Company or otherwise use our services, we may process the following data provided by you: name, surname, delivery and/or billing address, email address, telephone number, order information, selected delivery and payment method, payment confirmation or transaction information, data required for invoicing, correspondence with the Company, account login identifiers, information about direct marketing consents and opt-outs, and other data you provide on your own initiative.

3.2. When you use the Website, technical data may be collected automatically, including IP address, login date and time, browser type and version, device information, referring page, information about use of the Website, cookie or similar technology identifiers and other technical data necessary for the operation, security, analytics or marketing of the Website where an appropriate legal basis exists.

4. For what purposes and on what legal bases do we process your personal data?

4.1. We process personal data for the following main purposes:

  • accepting and fulfilling orders, administering payments and delivering goods – in order to enter into and perform a contract with you;
  • creating and administering your account – in order to provide the services you request and perform our contractual relationship;
  • accounting, tax and other legal compliance – in order to comply with legal obligations applicable to the Company;
  • customer service and handling enquiries, complaints and claims – for contract performance, compliance with legal obligations and/or the Company's legitimate interest in properly managing customer relationships and protecting its rights;
  • Website and information system security, fraud and abuse prevention – based on the Company's legitimate interest in protecting its systems and services;
  • direct marketing – where we have your consent or another legal basis permitted by applicable law;
  • analytics and marketing cookies and similar technologies – only with your consent where such consent is required.

5. How do we process and how long do we retain your personal data?

5.1. The Company processes personal data lawfully, fairly and transparently, only for clearly defined purposes and only to the extent necessary for those purposes. Data must be accurate, kept up to date where necessary, and protected by appropriate technical and organisational security measures.

5.2. Personal data are retained no longer than necessary for the purposes for which they were collected, except where longer retention is required or permitted by law.

  • data contained in accounting documents and relating to business transactions are retained for the period required by law; where a 10-year retention period applies to accounting documents, such data are retained for 10 years;
  • account data are retained while the account remains active and, after deletion of the account, only for as long as necessary to comply with legal obligations or protect legitimate interests;
  • direct marketing data processed on the basis of consent are retained until consent is withdrawn or until the consent is no longer relevant under the Company's applicable retention rules;
  • the retention period for enquiries, claims, technical logs and security data is determined by the purpose of processing, the need to resolve a specific matter, ensure security and applicable limitation periods or other statutory requirements.

5.3. Once the applicable retention period expires, data are deleted, destroyed or anonymised unless the law requires longer retention.

6. Your rights as a data subject

6.1. Subject to the conditions set out in the GDPR, you have the right to:

  • receive information about the processing of your personal data and access the data being processed;
  • request correction of inaccurate or completion of incomplete personal data;
  • request erasure of personal data where a ground provided by the GDPR applies;
  • request restriction of processing;
  • object to processing where data are processed on the basis of legitimate interests;
  • object at any time to processing for direct marketing purposes;
  • withdraw consent at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing carried out before withdrawal;
  • where provided by the GDPR, receive personal data you have provided in a structured, commonly used and machine-readable format and transmit those data to another controller.

6.2. To exercise your rights, you may contact us at [email protected] or in writing at Aitvarų g. 14, Ginduliai, LT-91276 Klaipėdos r., Lithuania. Where necessary, the Company may request information required to verify your identity.

6.3. We will respond within the time limits established by the GDPR, normally no later than one month after receipt of your request. In complex cases, this period may be extended in accordance with the GDPR.

6.4. If you believe that your personal data are processed in breach of applicable law, you have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania. Current information and contact details are available at https://vdai.lrv.lt/.

7. Processing for direct marketing purposes

7.1. We send direct marketing communications only where we have an appropriate legal basis and, where required by law, your prior consent.

7.2. For direct marketing purposes, we may process your name, surname, email address, telephone number, consent information and data necessary to administer marketing communications.

7.3. You may opt out of direct marketing communications at any time by using the unsubscribe link provided in the communication or by contacting the Company at [email protected].

8. Who may receive your personal data?

8.1. Access to personal data is granted to Company employees and other authorised persons only to the extent necessary to perform their functions and subject to confidentiality and data protection requirements.

8.2. Depending on the services provided, your personal data may be disclosed to the following categories of recipients or processors:

  • payment service providers and financial institutions;
  • courier, parcel locker and other delivery service providers;
  • IT, hosting, server, software, maintenance and cybersecurity service providers;
  • accounting, audit, legal and other professional service providers;
  • analytics, advertising and marketing technology providers where an appropriate legal basis exists and, where required, you have given consent;
  • public authorities, law enforcement bodies, courts or other entities where disclosure is required by law or necessary to protect the Company's rights and legitimate interests.

8.3. When engaging processors, the Company seeks to ensure that they apply appropriate technical and organisational measures and process personal data only in accordance with the Company's instructions and applicable law.

8.4. Where personal data are transferred outside the European Economic Area, the Company ensures that such transfer complies with Chapter V of the GDPR, for example on the basis of a European Commission adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism provided by law.

9. Cookies and other tracking technologies

9.1. The Website uses cookies and similar technologies required for operation, security and functionality of the Website and, with your consent, for statistics and marketing.

9.2. Strictly necessary cookies that are required for the operation of the Website or to provide a service explicitly requested by you may be used without separate consent.

9.3. Analytics, marketing and other non-essential cookies or tracking technologies are used only with your consent where such consent is required. These may include, for example, Google Analytics and Meta technologies used to analyse Website traffic and evaluate advertising effectiveness.

9.4. When you first visit the Website, you can choose which categories of non-essential cookies you accept. You can change or withdraw your consent at any time using the cookie settings available on the Website. Withdrawing consent must be as easy as giving it.

9.5. The current list of cookies and other tracking technologies used, their providers, purposes and retention periods is available in the Website's cookie settings / consent management interface. The list may change as the Website or third-party services are updated.

10. Third-party links and changes to this Privacy Policy

10.1. The Website may contain links to third-party websites, services and social networks. Those third-party websites and services are governed by their own privacy policies, which we recommend reviewing separately.

10.2. The Company may update this Privacy Policy from time to time to reflect changes in legislation, technologies used or the Company's activities. The current version is always published at https://fitsport.lt/en/privacy-policy.