top of page

privacy policy

 

1. General provisions

  • This store privacy policy (hereinafter - the Policy) governs Deco by Wicked Game, UAB, operating at Tuskulėnų st. 40-4, LT-09210 Vilnius, and whose company code is 305612068 (hereinafter - the Data Controller), the principles and procedure of personal data processing and the websites managed by the Data Controller www.wickedgame.lt  (hereinafter - the Website) operating conditions.

  • Any natural person whose personal data is processed by the Data Controller is considered a data subject in this Policy.

  • The Data Controller ensures that by adopting and implementing this Policy, it aims to implement the following fundamental principles related to the processing of personal data:

  • It is intended that personal data in relation to the Data Subject be processed in a legal, fair and transparent manner (principle of legality, fairness and transparency);

  • It is aimed that personal data is collected for established, clearly defined and legal purposes and not further processed in a manner incompatible with those purposes; further processing of personal data for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered incompatible with the original purposes (principle of purpose limitation);

  • The aim is for personal data to be adequate, appropriate and only necessary to achieve the purposes for which they are processed (principle of reducing the amount of data);

  • Efforts are made to ensure that personal data are accurate and, if necessary, updated within a reasonable period of time from the fact of change; aims to take all reasonable measures to ensure that personal data that are not accurate, taking into account the purposes of their processing, are immediately deleted or corrected within a reasonable period of time (principle of accuracy);

  • It is intended that personal data be kept in such a form that the identity of the Data Subjects can be determined no longer than is necessary for the purposes for which the personal data is processed; personal data can be stored for a longer period if personal data will be processed only for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, after implementing the relevant technical and organizational measures necessary to protect the rights and freedoms of the Data Subject (principle of limitation of storage duration);

  • Taking into account the general nature of the personal data processed by the Data Controller, it is aimed that the personal data is processed in a way that, with the help of appropriate technical or organizational measures, ensures adequate security of personal data, including protection against the processing of personal data without permission or illegal processing of personal data and against accidental loss, destruction or damage (principle of integrity and confidentiality);

  • The data controller is responsible for ensuring that the above principles are followed and must be able to demonstrate that they are followed (principle of accountability).

  • When using third-party services, such as visiting the Data Controller's account on the Facebook social network, third-party terms and conditions may apply. For example, Facebook applies a Data Policy to all its users and visitors. Therefore, when using the services of such third parties, it is recommended to familiarize yourself with their applicable terms and conditions.

  • This Policy is drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data and which repeals Directive 95/46/EC (hereinafter - GDPR), the Law on the Legal Protection of Personal Data of the Republic of Lithuania (hereinafter - ADTAĮ), other legal acts of the European Union and the Republic of Lithuania. The terms used in the policy are understood as they are defined in GDPR and GDPR.

2. Collection, processing and storage of personal data

  • By submitting their personal data, the Data Subject agrees and does not object to the Data Controller managing and processing them for the purposes, means and procedure provided for in this Policy and legal acts.

  • If the Data Subject does not agree with this Policy and the processing of personal data described in it, he should not visit the Website and/or use the Data Controller's services.

  • By submitting personal data, the Data Subject grants the Data Controller the right to collect, accumulate, systematize, use and process for the purposes provided for in this Policy all personal data that he directly or indirectly submits while visiting the Website and using its services.

  • The data subject is responsible for ensuring that the data it provides is accurate, correct and complete. Entering information that is known to be incorrect is considered a violation of the Policy. If the provided data changes, the Data Subject must correct it immediately, and if it is not possible to do so, inform the Data Controller about it. In no case shall the Data Controller be liable for damage caused to the Data Subject and/or third parties due to the Data Subject providing incorrect and/or incomplete personal data or not requesting the addition and/or change of data in the event of a change.

3. Processing of personal data for the purpose of registration of data subjects to provide services

For the purpose of providing services for the registration of Data Subjects, the Data Controller automatically processes the personal data of Data Subjects who have given the following consent:

  • Name surname;

  • Telephone number;

  • Mail adress.

 

  • Data is received directly from the Data Subject and is not transferred to third parties.

  • The legal basis for processing personal data is Article 6 GDPR. Paragraph 1, point a) (processing with the Data Subject's consent).

  • When the Data Subject is a child under the age of 16, his/her personal data may be processed only with the consent of one of the parents or guardians. Taking this into account, the Data Subject under the age of 16 is registered on the Website by the Data Subject's parents or guardians.

  • The Data Controller ensures that in the event that the Data Subject is a child, profiling will not be performed with respect to his/her personal data.

  • When processing the personal data of the Data Subject, when the Data Subject is a child, on the basis of the legitimate interest of the Data Controller or a third party, the Data Controller must assess the primacy of the interests of the child, his fundamental rights and freedoms, and process personal data on this basis only in exceptional cases, when the corresponding interest of the Data Controller is obviously takes precedence over the interests of the child, his basic rights and freedoms.

4. Personal data storage procedure and terms

  • When processing and storing personal data of Data Subjects, the Data Controller implements organizational and technical measures that will ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any other illegal processing.

  • The Data Controller applies the following personal data storage terms: 3 years from the date of the last contact with the Data Subject or until the Data Subject withdraws consent to data processing.

  • Exceptions to the storage terms specified above may be established to the extent that such deviations do not violate the rights of Data Subjects, meet legal requirements, are properly documented, and are justified by the legitimate interest of the Data Controller or a third party.

  • Data required to assert, exercise or defend legal claims are stored to the extent that they are necessary to achieve such purposes in accordance with a judicial, administrative or extrajudicial procedure.

 

5. Information about the cookies used

  • The data manager uses cookies on the website in order to be able to distinguish some users of the website from others. With the help of cookies, the Data Controller aims to ensure a more pleasant experience for people browsing the website and to improve the website itself.

  • Cookies are small text files that are stored in a Person's browser or device (PC, mobile phone or tablet).

  • The website uses the following Google Analytics cookies: _ga; _guide; _gat. Cookies are used to distinguish between website cookies and to increase the number of requests. Domain - www.wickedgame.lt, validity period - up to 2 years.

​​​

  • The cookies used on the website do not allow the identification of the user of the website. Visits to the website are registered anonymously, identifying the personal computer, mobile phone or tablet and the IP address, and such collected information is not provided to third parties, except in cases provided for by law.

  • By opening the website and clicking the "I agree" button in the pop-up box, the user consents to cookies being stored on his computer, mobile phone or tablet.

  • In order to withdraw the given consent, the browsing person can delete or block cookies by selecting the appropriate settings in his browser that allow him to refuse all or part of the cookies. It should be noted that using browser settings that block cookies (including essential cookies) may result in problems with using all or part of the website's functions.

  • Personal data collected by cookies are processed in accordance with the Law on the Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/ 46/EC, as well as the provisions of other legal acts regulating the protection of personal data.

  • In accordance with the requirements of legal acts, security measures are applied on the website to prevent illegal disclosure of Personal Data and their illegal use.

6. Rights of data subjects

  • The data subject has the right at any time, after submitting a request to the Data Controller, to familiarize himself with his personal data processed by the Data Controller and to find out how they are processed, to demand the correction of incorrect, incomplete, inaccurate personal data, to demand the suspension, except for storage, of the processing of his personal data , when data is processed in violation of the law and the terms of this Policy.

  • To the extent that the processing of personal data is based on consent, the Data Subject has the right to withdraw consent at any time, without affecting the legality of data processing based on consent until the withdrawal of consent.

  • The data subject can exercise their rights by submitting a written request by e-mail. by mail www.wickedgame.lt, by post at Tuskulėnai st. 40-4, LT-09210 Vilnius, or directly at the office of the Data Controller.

  • Not being satisfied with the Data Controller's answer or believing that the Data Controller is processing his personal data without complying with legal requirements, the Data Subject may submit a complaint to the State Data Protection Inspectorate of the Republic of Lithuania.

7. Final Provisions

  • Legal relations related to this Policy are governed by the law of the Republic of Lithuania.

  • The data manager is not responsible for damage, including damage caused by interruptions in the use of the website, for loss or damage of data caused by the actions or omissions of the person himself or third parties acting with the knowledge of the person, mistakes, deliberate damage and other inappropriate use of the website. The Data Controller is also not responsible for disturbances in connection and/or use of the Internet site and/or the resulting damage caused by the actions or inaction of third parties unrelated to the Data Controller or a person, including disruptions in the supply of electricity, Internet access, etc.

  • The Data Controller has the right to partially or completely change the Policy. Additions or changes to the policy take effect from the date of their publication on the website.

​

If the person continues to use the website and/or the services provided by the Data Controller after the addition or change of the Policy, it is considered that the person does not object to such additions and/or changes.

bottom of page