1. Data Controller

The controller of your personal data is:

Meso group, UAB
Company code: 303352433
VAT code: LT100008768212
Address: Liepų str.. 83, Klaipėda, LT-92195
Email: info@finansuharmonija.lt
Telephone: +370 610 38343

2. What Personal Data We Collect

Depending on your actions in our Online Store, we may collect the following personal data:

Purchase data: first name, last name, delivery address, email address, telephone number, payment information
(we do not store card details – they are processed by the payment service provider).

Registration data: first name, last name, email address, telephone number, password.

Communication data: information you provide when contacting us (via email, phone, social media, or other channels).

Browsing data: IP address, device information, browser type, page visit history, session duration, cookie information
(for more details, see Section 7 – Cookies).

3. Purposes and Legal Grounds for Data Processing

Purpose Legal Basis

Purchase of goods, delivery, issuance of invoices

Performance of a contract (GDPR Art. 6(1)(b))

Creation and management of an account

Performance of a contract (GDPR Art. 6(1)(b))

Customer service and handling of inquiries

Legitimate interest (GDPR Art. 6(1)(f))

Direct marketing (e.g., newsletters)

Your consent (GDPR Art. 6(1)(a))

Analysis and improvement of the Online Store

Legitimate interest (GDPR Art. 6(1)(f))

Fulfilment of legal obligations (e.g., accounting)

Legal obligation (GDPR Art. 6(1)(c))

4. Transfer of Data to Third Parties

We transfer personal data only to those third parties who are necessary for the provision of our services:

• Delivery service providers (couriers).
• Payment processing service providers (only to the extent necessary to process payments).
• IT service providers (technical support and security).
• Marketing partners (only with your consent).
• State authorities — only when required by law.

All service providers engaged by us are obliged to ensure appropriate protection of personal data in accordance with the GDPR.

5. Data Retention Periods

Personal data are stored no longer than necessary for the purposes for which they are collected:

• Purchase data – 10 years after the completion of the transaction (as required by law).
• Direct marketing data – until consent is withdrawn.
• Registration data – as long as the account remains active.
• Communication data – 2 years from the last contact.

6. Your Rights

Under the GDPR, you have the following rights:

• To receive information about how your data are processed.
• To access your personal data.
• To request rectification of inaccurate data.
• To request deletion of data (“right to be forgotten”) where there is a legal basis.
• To restrict processing.
• To object to data processing.
• To receive data in a portable format.
• To withdraw consent at any time (without affecting prior processing).
• To lodge a complaint with the State Data Protection Inspectorate
  (L. Sapiegos g. 17, Vilnius, email: ada@ada.lt).

To exercise your rights, please contact us using the email or telephone number provided in this Policy.

7. Cookies

Our Online Store uses cookies to:

• Ensure the functionality of the website.
• Analyse user behaviour and improve services.
• Provide personalised advertising.

Types of cookies:

• Essential cookies – required for core website functions.
• Analytical cookies – help us understand how the website is used.
• Marketing cookies – enable personalised advertising.

When you first visit the website, you may choose which cookies you allow.
You can change your preferences at any time in your browser settings.

8. Updates to the Privacy Policy

We reserve the right to amend this Policy.
Significant changes will be announced in the Online Store or by email.
The most recent version is always available on our website.

Last updated: 2025-07-22