Privacy Policy

This Privacy Policy explains how Heat Baltic MB, which operates the online store www.HeatBaltic.eu, collects, uses, stores and processes your personal data when you visit our website, register, place an order, contact us or use our services.

We aim to ensure that your personal data is processed responsibly, transparently and in compliance with the applicable requirements of European Union and Lithuanian legislation, including the General Data Protection Regulation (GDPR).

Data Controller

Heat Baltic MB
Company code: 305561321
Website: www.HeatBaltic.eu
Email: info@heatbaltic.eu
Address: Savanorių pr. 187, Vilnius

If you have any questions about how we process your personal data, you can contact us using the details provided above.

What Data We Collect

We may collect the following personal data:

first name and surname;
telephone number;
email address;
delivery and/or billing address;
order information;
payment information to the extent necessary to process the order;
correspondence or enquiry information;
data related to your use of the website, such as IP address, browser type, device information, time of visit, pages viewed and cookie information.

Some data is provided directly by you, while other data is collected automatically when you use our website.

For What Purposes We Use Your Data

We process your personal data only for clear and lawful purposes, for example:

accepting, administering and fulfilling orders;
delivering goods and administering returns;
issuing invoices and fulfilling accounting obligations;
providing customer service and responding to your enquiries;
administering payments;
improving the operation, security and quality of the website;
for direct marketing purposes when you have given separate consent;
fulfilling legal obligations and protecting our legitimate interests.

Legal Bases for Processing Personal Data

We may process your data when:

it is necessary to enter into or perform a contract;
it is necessary to comply with legal obligations applicable to us;
you have given your consent;
we have a legitimate interest in ensuring the operation and security of the website, defending legal claims or improving the quality of services, provided that such interest does not override your rights and freedoms.

Who We May Share Your Data With

Your personal data may be shared only to the extent necessary with:

payment service providers;
leasing or financing partners if you choose to purchase in instalments;
parcel delivery and courier service providers;
accounting, IT, website maintenance or hosting service providers;
public authorities where required by law.

We do not disclose your data to unrelated third parties without a legal basis.

How Long We Store Data

We store your personal data only for as long as necessary to achieve the specific purpose or as required by law.

For example:

data related to order fulfilment and accounting may be stored for as long as required by legislation governing accounting and taxes;
marketing data is stored until you withdraw your consent or until it is no longer needed;
enquiry or correspondence data is stored for a reasonable period necessary to maintain communication history and resolve potential disputes.

How We Protect Your Data

We take reasonable technical and organisational security measures to protect your personal data against loss, unlawful disclosure, alteration or unauthorised access. The GDPR requires data controllers to apply security measures appropriate to the risks involved.

However, it is important to understand that no website, data transmission system or electronic storage method can guarantee absolute security.

Your Rights

You have the right to:

know how your personal data is processed;
access your data;
request the correction of inaccurate or incomplete data;
request the deletion of data where there is a legal basis for doing so;
request restriction of processing;
receive the data you have provided in a structured format and, where applicable, transfer it to another data controller;
object to processing where it is based on a legitimate interest;
withdraw your consent at any time if the processing is based on consent;
object to the use of your data for direct marketing purposes.

These rights are provided for by the GDPR. Lithuanian supervisory authorities also state that requests relating to the exercise of these rights are normally answered within one month, with an extension possible in exceptional cases.

To exercise your rights, please contact us by email.

Direct Marketing

If you have given your consent, we may send you news, offers, information about promotions or other information related to our goods and services.

You may withdraw your consent at any time by clicking the unsubscribe link in the email or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies

Our website uses cookies and similar technologies that help ensure the operation of the website, improve the browsing experience, analyse traffic and, with your consent, provide personalised content or advertising.

Strictly necessary cookies may be used without separate consent if they are required for the operation of the website or to provide a service requested by you. Functional, statistical, analytical or marketing cookies generally require the visitor’s prior consent, which must be given by an active action.

More information about cookies, their types, retention periods and management options can be found in a separate Cookie Policy or in the cookie settings window.

Data of Minors

Our website and services are not intended for persons who, under applicable law, cannot provide their personal data independently. If a person is under 16 years of age, personal data should only be provided with the consent of parents or other legal representatives. This age threshold is often applied in privacy notices in Lithuania based on the national application of the GDPR.

Links to Third-Party Websites

Our website may contain links to websites, services or social media accounts of other persons or companies. We are not responsible for the content, security or privacy practices of such third-party websites, so we recommend reviewing their privacy policies separately.

Complaints

If you believe that your personal data is being processed improperly, we encourage you to contact us first. You also have the right to submit a complaint to the State Data Protection Inspectorate.

Changes to the Privacy Policy

We may periodically update this Privacy Policy to reflect changes in legislation, our operations or technical solutions. The updated version of the Privacy Policy will always be published on the website.