PRIVACY POLICY

Last Updated: September 9, 2023

I. Introduction and Basic Concepts

1.1 Definitions

1.1.1. "Star Stone" ("The Company" or "Personal Data Controller") is a legally registered entity operating under individual Activity No. 1283589, abiding by the laws of the Republic of Lithuania.

1.1.2. "Customer" or "Data Subject" signifies any individual who is associated with or uses the Company's services, including those who visit our website.

1.1.3. "Services" include all goods, products, and services offered or provided by the Company.

1.1.4. "Personal Data" is information pertaining to an identifiable individual, either directly or indirectly.

1.1.5. "Processing" involves a range of operations carried out with Personal Data, such as collection, recording, organization, storage, alteration, analysis, use, transmission, dissemination, or otherwise making available, erasure, or destruction.

1.1.6. "Partner" refers to third-party entities that have a business relationship with the Company, including subcontractors, vendors, and other associates.

1.1.7. "Cookies" are small text files that are stored on a user's device when visiting websites.

1.1.8. "Direct Marketing" encompasses all activities aimed at promoting goods or services directly to individuals.

1.2 Scope and Consent

1.2.1. This Privacy Policy governs how Personal Data is processed when one engages with the Services offered by the Company.

1.2.2. Utilizing the Services of the Company implies that you have read and consented to the practices described in this Privacy Policy.

1.2.3. The Company may update or modify this Privacy Policy periodically, and it is the Customer's responsibility to review it regularly.

II. General Provisions

2.1 Legal Foundations

2.1.1. The Company processes Personal Data in compliance with the Legal Protection of Personal Data Law of the Republic of Lithuania, EU General Data Protection Regulation (GDPR), and other relevant laws.

2.1.2. By providing Personal Data to the Company, the Data Subject gives explicit consent for such data to be processed in accordance with this Privacy Policy.

2.2 Processing Principles

2.2.1. The Company adheres to the principles of lawful, fair, and transparent processing of Personal Data.

2.2.2. Personal Data is collected for specific, explicit, and legitimate purposes, and it will not be further processed in a manner incompatible with those purposes.

2.2.3. Personal Data shall be accurate and, where necessary, kept up to date.

2.2.4. Personal Data shall be stored in a manner that allows identification of the Data Subject for no longer than necessary for the purposes for which it is being processed.

2.2.5. The Company shall take appropriate security measures to protect against unauthorized access, alteration, disclosure, or destruction of Personal Data.

2.3 Policy Modifications

2.3.1. The Company reserves the right to change, update, or modify this Privacy Policy at any time.

2.3.2. Changes will be posted on the Company’s website, and it is the Customer's responsibility to check for updates.

III. Data Collection, Use, and Storage

3.1 Purposes and Types of Data

3.1.1. The Company collects Personal Data such as name, address, telephone number, email address, payment details, and other relevant information primarily for e-commerce and Direct Marketing purposes.

3.1.2. The Company may also collect and process data for the improvement of its Services, customer service, and for internal analytical purposes.

3.1.3. The Company may use cookies or similar technologies to enhance user experience and for targeted advertising.

3.2 Consent and Withdrawal

3.2.1. Customers have the right to opt-in for Direct Marketing communications from the Company.

3.2.2. Consent can be withdrawn at any time by contacting the Company at info@starstone.lt.

3.3 Data Subject Rights

3.3.1. Data Subjects have the right to request access to, correction, or deletion of their Personal Data.

3.3.2. Data Subjects can also object to the Processing of their Personal Data and have the right to data portability.

3.3.3. These rights can be exercised by contacting the Company at info@starstone.lt.

3.4 Data Sharing and Third Parties

3.4.1. The Company may share Personal Data with Partners for the purposes mentioned in this Privacy Policy.

3.4.2. The Company may also disclose Personal Data to comply with legal obligations or to protect the rights and safety of its Customers and the general public.

3.4.3. The Company does not sell or trade Personal Data to third parties.

3.5 Data Security and Retention

3.5.1. The Company employs rigorous physical, electronic, and procedural security measures to protect Personal Data.

3.5.2. Personal Data is retained for a period in line with legal and operational obligations or requirements and is securely deleted thereafter.

IV. Legal Disclosure and Compliance

4.1 Compliance with Law

4.1.1. The Company may disclose Personal Data when required by law or when such action is necessary to conform to legal requirements or comply with legal processes served on the Company.

4.1.2. The Company may also disclose Personal Data to protect and defend its rights or property and to act under exigent circumstances to protect the personal safety of its users or the public.

V. Contact and Further Information

5.1 Inquiries

5.1.1. For inquiries or concerns related to this Privacy Policy, Customers may contact us at info@starstone.lt