Privacy Policy
Last updated: 12 August 2026
This Privacy Policy governs the processing of personal data on the website deimantes.com (hereinafter – the “Website”).
We respect your privacy and are committed to processing your personal data transparently and responsibly in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, hereinafter – the “GDPR”), applicable Lithuanian legislation and other applicable data protection requirements.
1. Data Controller
The controller of your personal data is:
Deimantė Čėsnaitė
Individual activity under an individual activity certificate No. 917139
Business address: Riešutyno g. 9-2, 56130 Kaišiadorys, Lithuania
Email: d.cesnaite@gmail.com
If you have any questions regarding the processing of your personal data or wish to exercise your rights as a data subject, you may contact us using the email address above.
2. What Personal Data Do We Collect?
Depending on how you use the Website, we may process the following personal data:
2.1. When You Contact Us via the Contact Form
If you contact us using the contact form available on the Website, we may process:
your name;
email address;
the content of your message;
any other information you voluntarily provide in your message.
This data is used to respond to your enquiry and maintain communication with you where necessary.
2.2. When You Purchase Products on the Website
When you order and purchase products, we may process data necessary to process and fulfil your order, including:
first and last name;
email address;
telephone number, if provided;
delivery address, where applicable;
order information;
payment-related information to the extent necessary to identify and account for the payment;
other information you provide while placing an order.
3. Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
to respond to your enquiries;
to accept and administer orders;
to enter into and perform purchase and sale contracts;
to arrange product delivery;
to administer payments;
to issue accounting documents and comply with accounting, tax and other legal obligations;
to handle your requests, complaints and other matters relating to your orders;
to ensure the security of the Website and the services provided through it;
to protect our legitimate interests, including the establishment, exercise or defence of legal claims.
4. Legal Bases for Processing Personal Data
Personal data is processed on the basis of one or more of the following legal grounds established by the GDPR:
performance of a contract, where your data is necessary to accept and fulfil your order;
compliance with a legal obligation, where we are required to process data under accounting, tax or other applicable laws;
legitimate interests, where processing is necessary for Website security, business administration or the establishment, exercise or defence of legal claims;
consent, where your consent is required by applicable law for a particular type of processing.
5. Payments
Products purchased through the Website may be paid for using third-party payment service providers, including Paysera, PayPal and Stripe.
When you make a payment, certain payment-related information necessary to process and administer the payment may be transferred to the relevant payment service provider.
Payment service providers also process personal data in accordance with their own privacy policies and applicable laws.
The Website operator does not seek to collect or store your payment card details where such information is processed directly within the systems of the selected payment service provider.
For more information about how individual payment service providers process personal data, please refer to their respective privacy policies:
PayPal Privacy Policy – available on the PayPal website.
6. Who May Receive Your Personal Data?
Your personal data may be disclosed or made accessible only to the extent necessary for the relevant purpose, including to:
payment service providers;
product delivery and courier service providers;
Website hosting, technical maintenance and IT service providers;
accounting service providers, where applicable;
public authorities and other entities where disclosure is required by law;
lawyers, consultants or other service providers where necessary to exercise or protect our legitimate interests.
Where applicable, agreements meeting GDPR requirements are entered into with service providers that process personal data on our behalf.
7. Retention of Personal Data
Personal data is retained for no longer than necessary to fulfil the purposes for which it was collected or for as long as required by applicable law.
In particular:
personal data received through contact forms is retained for as long as necessary to handle the enquiry and any related communication;
order and purchase data is retained for as long as necessary to perform the contract, resolve potential disputes and comply with accounting and tax obligations established by law;
when personal data is no longer required, it is securely deleted or destroyed, or anonymised where applicable, unless we are legally required to retain it for a longer period.
8. Your Rights
Under the GDPR, you have the right to:
obtain information about the processing of your personal data;
access your personal data being processed;
request the rectification of inaccurate or incomplete personal data;
in certain circumstances, request the erasure of your personal data;
in certain circumstances, request restriction of the processing of your personal data;
in certain circumstances, exercise your right to data portability;
object to certain processing of your personal data where applicable;
where processing is based on consent, withdraw your consent at any time;
lodge a complaint with a supervisory authority if you believe that your personal data is being processed in violation of applicable data protection laws.
To exercise your rights, you may contact us at:
Your request should be sufficiently clear to allow us to determine which right you wish to exercise.
9. Complaints
If you believe that your personal data is being processed improperly or that your rights have been violated, you may first contact:
Deimantė Čėsnaitė
Email: d.cesnaite@gmail.com
You also have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI), which is the data protection supervisory authority in Lithuania.
State Data Protection Inspectorate
10. Cookies
The Website may use cookies – small text files stored on your device when you visit the Website.
Cookies may be used to ensure that the Website functions properly, remember certain preferences, facilitate the purchasing process and improve the usability of the Website.
At present, we do not use Google Analytics, Google Tag Manager or Meta Pixel.
If non-essential cookies or other tracking technologies are introduced on the Website in the future, where required by applicable law, visitors will be given the opportunity to choose whether to consent to their use before such technologies are activated.
Important: The actual list of cookies used on the Website should correspond to the Website’s actual technical configuration.
11. Social Media
The Website contains a link to an Instagram profile.
The mere presence of a link to a social media profile does not, by itself, mean that the Website automatically transfers visitors’ personal data to the social media platform. However, when you click the link and visit Instagram, the processing of your personal data is governed by the applicable policies and terms of Instagram / Meta.
12. Data Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
Access to personal data is granted only to the extent necessary to perform specific functions or provide relevant services.
13. Transfers of Personal Data Outside the European Economic Area
If, through the use of certain service providers, personal data is transferred outside the European Economic Area, such transfers will only be carried out in accordance with the requirements of the GDPR and with appropriate safeguards for the protection of personal data.
14. Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes to the functionality of the Website, services provided, technologies used or applicable legal requirements.
The updated version of the Privacy Policy will be published on the Website and will take effect from the date of publication unless otherwise stated.
We recommend that you review this Privacy Policy periodically.
15. Contact Information
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Deimantė Čėsnaitė
Individual activity under an individual activity certificate No. 917139
Riešutyno g. 9-2, 56130 Kaišiadorys, Lithuania
Email: d.cesnaite@gmail.com
Privacy Policy last updated: 12 August 2026
Illustration
Dark, funny, and full of character.
© 2026. All rights reserved.