Privacy Policy

UAB Mulate values your privacy and are committed to protecting your personal data in accordance with applicable privacy laws.
 
This privacy notice explains how we collect and use your personal data. Personal data means any information relating to an identified or identifiable natural person; one who can be identified, directly or indirectly, by reference to an identifier such as name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
 
This privacy notice applies to all our (current, former) customers, suppliers, to all visitors of the website, and to all other persons who contact us. This privacy notice applies to the processing of your personal data following the use of this website and the services that we provide.
 
We may amend this privacy notice ad any time for example if circumstances change (amendments to our services, legislation, etc.). You are advised to regularly consult this privacy notice.

UAB Mulate offers to sell the Customer products online through Chocolate Naive.

The Customer declares s/he has the capacity to possess rights and be bound by obligations.

Your relationship with us will determine which of our companies has access to and processes your personal data and should therefore be considered as the data controller of your personal data. Data controller means the company which, along or jointly with others, determines the purposes and means of the processing of personal data. In general, this will be the company which you have a (contractual, commercial or other) relationship with.
 
Chocolate Naive is to be considered as the data controller regarding our website.
 
UAB Mulate
Bebru 47, Vilnius distr., Lithuania

We collect personal data in a variety of ways through our normal business activities both online and offline. This includes, for example when you place orders or purchase products, enter into agreements or communicate with us, or visit and use websites.
The categories of personal data we may collect and process includes:

• contact Information that allows us to communicate with you, such as your name, date of birth and prefix, mailing address, telephone numbers, email address or other addresses that allow us to send you messages, company information and registration information you provide on our website;
• relationship information that helps us do business with you, such as the types of products that may interest you, contact and product preferences, languages, marketing preferences;
• transactional information about how you interact with us, including purchases, inquiries, customer account information, order and contract information, delivery details, billing and financial data, details for taxes, transaction and correspondence history, and information about how you use and interact with our websites; and
• security and compliance Information that helps us to secure our interests, fraud prevention and internal verification, as well as information necessary for the security of our premises, such as video surveillance.

We may use your personal data for the following purposes:

• website improvement: maintaining, customizing and improving the Website; 
• managing our relationship: managing our ongoing relationship with you, including interacting with you, fulfilling your orders and requests, including complaints and disputes and providing other services related to your requests;
• (direct) marketing: (tailored) promotional offers and information regarding our products and services;
• business needs: managing our business needs, such as payment processing and account management, product development, contract management, corporate governance, audit, and legal compliance;
• Compliance with legal and/or regulatory obligations;
• Protecting our rights, property and safety and security;

This paragraph has been included to inform you as best as possible regarding the purposes of the processing of your personal data. The purposes for the processing of personal data listed above may not be exhaustive.

We may collect and process your personal data based on the following legal grounds:

• your consent: e.g., cookie usage (see our cookie policy) , our newsletter
• the performance of a contract with you: e.g., when you place an order on our website
• A legitimate interest: e.g., for the improvement or further development of our business operations in general
• based on a legal obligation: e.g., tax obligations

This paragraph has been included to inform you as best as possible regarding the legal grounds for the processing of your personal data. The list of legal grounds above may not be exhaustive.

In connection with the purposes described above in Section 5, we may need to share your personal data with third parties, so-called ‘recipients’ such as:

• third parties: we may use third parties to provide or perform services and functions on our behalf. We may make personal data available to these third parties, to perform these services and functions. Any processing of that personal data will be on our instructions and compatible with the original purposes;
• legal obligations: we may also make personal data concerning individuals available to public or judicial authorities, law enforcement personnel and agencies as required by law, including to meet national security or law enforcement requirements, and including to agencies and courts in the countries where we operate. Where permitted by law, we may also disclose such information to third parties (including legal counsel) when necessary for the establishment, exercise or defense of legal claims or to otherwise enforce our rights, protect our property or the rights, property or safety of others, or as needed to support external audit, compliance and corporate governance functions;
• mergers & acquisitions: personal data may be transferred to a party acquiring all or part of the equity or assets or our business operations in the event of a sale, merger, liquidation, dissolution, or other;
• affiliates and/or subsidiaries: we may also transfer and share personal data to our affiliates/ and/or subsidiaries in compliance with applicable law.

Your personal data will not be retained for any period longer than is necessary for us to achieve the purposes for which it was collected. The retention period may therefore differ depending on the objective.

We may transfer your personal data to entities (recipients) located in countries outside of the EEA, which do not offer adequate protection of personal data. In such cases, we take appropriate measures to ensure that your personal information receives an adequate level of protection such as foreseeing the Standard contractual clauses issued by the European Commission, to protect your personal data.

We apply appropriate technical, physical and organizational measures that are reasonably designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and against other unlawful forms of processing. Access to personal data is restricted to authorized recipients on a need-to know basis.

The rights described here below may be exercised in accordance with the regulations and restrictions provided for in law.
You may have the right to (i) obtain information about whether or not personal data is being processed and, if so, obtain access to their personal data and information regarding the processing; (ii) to correct incorrect personal data, complete personal data and have recipients to whom personal data were provided informed of the rectification; (iii) to object to the processing of personal data based on certain grounds and the right to at all times object to the use of personal data for direct marketing purposes; (iv) in case of automated individual decision-making, obtain human intervention, give a point of view, receive explanation for the automated decision, and challenge that decision; and (v) in case of the provision of consent to the processing of personal data, the right to withdraw consent at any time, without such withdrawal affecting the lawfulness of processing based on consent before its withdrawal.
Subject to certain conditions, you also have the right to (i) have personal data erased; (ii) the right to obtain restriction of the processing of personal data, and in case of restriction; have the processing limited to mere storage; (iii) the right to be provided with personal data.

If you have any questions about the use of your personal data related this privacy notice or want to exercise one of your rights, you can contact us at web at chocolatenaive.com
You also have the right to submit a complaint to the supervisory authority.