Home/Delivery and return of goods/ Privacy Policy

Privacy Policy

  • Privacy Policy

    We respect your privacy and are committed to ensuring the secure and transparent processing of your personal data. This Privacy Policy explains what data we collect, why we process it, how long we store it, and what rights you have as a data subject.

    1. General Provisions

    1.1. This Privacy Policy applies to the online store www.finntrail.lt and regulates the principles of collecting, using, storing and protecting personal data.

    1.2. The controller of your personal data is:

    KAMANE MB
    Company code: 306686655
    VAT code: LT100016745913
    Address: Alyvų g. 6, Klevinės village, Avižieniai eldership, Vilnius district municipality, LT-14302, Lithuania
    Email: info@kamanemb.eu
    Phone: +370 614 98366

    1.3. When processing personal data, we comply with:

    • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
    • Applicable laws of the Republic of Lithuania
    • Electronic communications regulations

    1.4. By using the website or placing an order, you confirm that you have read this Privacy Policy.

    2. What Personal Data We Collect

    We collect only the data necessary for order fulfilment, customer service, secure website operation and a personalised shopping experience.

    Data category Data collected
    Identification data First name, last name
    Contact data Phone number, email address, delivery address
    Order data Order number, products, amount, delivery method, payment status
    Account data Login information, saved addresses, order history
    Technical data IP address, browser, operating system, device type
    Browsing data Visited pages, viewed products, session data, clickstream
    Communication data Emails, enquiries, chatbot conversations, customer service history
    Warranty and returns data Return reasons, warranty case history

    Note: We do not collect special categories of personal data, such as health, biometric, religious or political data, unless required by law.

    3. Where We Receive Your Data From

    Data provided by you

    Data you provide when registering, purchasing, completing forms or contacting us.

    Automatically collected data

    Technical and analytical data collected through cookies and tracking tools.

    Third-party systems

    Payment, logistics, marketing and advertising platforms.

    4. Why We Process Data and on What Legal Basis

    Purpose Legal basis
    Order fulfilment, delivery, returns Performance of a contract (GDPR Art. 6(1)(b))
    Invoices and accounting Legal obligation (GDPR Art. 6(1)(c))
    Fraud prevention and security monitoring Legitimate interest (GDPR Art. 6(1)(f))
    Customer service Contract / legitimate interest
    Newsletters and promotions Consent (GDPR Art. 6(1)(a))
    Remarketing and advertising Consent
    Analytics and UX improvement Consent / legitimate interest for essential cookies

    4.1. We do not use your data for purposes incompatible with those described in this document.

    4.2. Data is processed only to the extent necessary to achieve the specified purposes.

    ```html

    5. Cookies and Similar Technologies

    We use cookies and similar technologies to ensure proper and secure website operation, analyse traffic, improve user experience and show relevant offers.

    Cookie category Purpose Legal basis
    Essential cookies Website operation, shopping cart, login, security Legitimate interest
    Analytics cookies Traffic analysis, website improvement, user behaviour evaluation Consent
    Marketing cookies Advertising, remarketing, personalised offers Consent
    Functional cookies More convenient browsing and remembering selected preferences Consent or legitimate interest

    5.1. When you first visit the website, you can choose which cookies you allow: Accept / Reject / Customize.

    5.2. Essential cookies are used without separate consent because they are necessary for the website to function.

    5.3. Analytics, marketing and non-essential functional cookies are used only with your consent.

    5.4. You can change your cookie preferences at any time in the cookie settings.

    6. Analytics, Advertising and Behaviour Tracking Tools

    Google Analytics 4

    Used to analyse website traffic, user behaviour, conversions and technical website performance.

    Microsoft Clarity

    Used for user behaviour analysis, click maps and website UX improvement.

    Hotjar

    Used for session recordings, heatmap analysis and customer experience improvement.

    Meta Pixel

    Used to evaluate advertising effectiveness, create audiences and run remarketing on Meta platforms.

    Google Ads

    Used to measure advertising campaign performance, track conversions and run remarketing.

    Omnisend

    Used to send newsletters, automated emails, abandoned cart messages, browse abandonment messages and personalised offers.

    6.1. Some providers of these tools may process data outside the European Economic Area. In such cases, safeguards required by law are applied, including standard contractual clauses or other lawful transfer mechanisms.

    7. Automated Profiling and Personalised Marketing

    Finntrail.lt uses automated marketing and personalisation tools to provide more relevant offers, remind users about unfinished purchases and display products that may match their interests.

    Action What it means
    Abandoned cart If you add products to the cart but do not complete the purchase, we may send you a reminder.
    Browse abandonment If you view products but do not purchase them, we may send you a related offer.
    Personalised recommendations We may recommend products based on previous purchases, browsing behaviour or interests.
    Segmentation Customers may be segmented based on purchase history and interests, such as fishing or ATV.
    Dynamic remarketing Meta and Google platforms may display ads based on products you viewed.

    7.1. Such profiling is not used to make decisions that would produce legal or similarly significant effects for you.

    7.2. You may unsubscribe from direct marketing messages or change your cookie consents at any time.

    8. AI Chatbot and Customer Service

    8.1. The website may use an AI chatbot for customer service, faster responses and assistance in choosing products.

    8.2. The technology provider of the AI chatbot is OpenAI.

    8.3. Chatbot conversation history may be stored to ensure service quality, resolve customer queries and improve support.

    8.4. Conversations may be reviewed by authorised Finntrail.lt operators or administrative staff.

    8.5. Please do not provide sensitive data via the chatbot, such as personal identification numbers, bank card numbers, health data or other excessive personal information.

    9. To Whom We May Disclose Your Personal Data

    Recipient category Recipients / examples Data disclosed
    Payment services Swedbank Payment initiation, authorisation and payment status data
    Delivery partners Omniva, DPD, Venipak, LP Express, Lithuanian Post Name, surname, phone number, email address, delivery address, shipment data
    Marketing platforms Omnisend, Meta, Google Email address, phone number, purchase / browsing data, consent data
    Analytics and UX tools Google Analytics 4, Microsoft Clarity, Hotjar Technical, browsing, session and behavioural data
    AI chatbot provider OpenAI Chat conversation content, technical session data
    IT and hosting providers Website hosting, server, email and technical maintenance providers Technical data, IP address, system logs
    Public authorities State Tax Inspectorate, courts, law enforcement, consumer rights authorities and other institutions Data disclosed only where required by law

    9.1. Data is disclosed only to the extent necessary for the specific purpose.

    9.2. Data processing agreements or other lawful safeguards are applied with data processors.

    10. How Long We Store Your Data

    We store personal data no longer than necessary to achieve the purposes for which it was collected, unless a longer retention period is required by law.

    Data category Retention period
    Orders, invoices, accounting documents 10 years
    Customer account 3 years after the last activity
    Customer service correspondence 3 years
    Abandoned cart data 180 days
    Analytics and cookies Up to 24 months
    Direct marketing consents Until consent withdrawal + 2 years
    Warranty and returns data 5 years
    Server technical logs Up to 12 months
    Chatbot conversations Up to 24 months

    10.1. After the retention period expires, data is deleted, anonymised or irreversibly destroyed, unless its storage is required for legal claims, dispute resolution or compliance with legal obligations.

    11. How We Protect Your Data

    Technical measures

    SSL encryption, access control, backups, firewalls and server protection.

    Organisational measures

    Access to personal data is granted only to employees who need it to perform their work functions.

    Incident management

    Data security incidents are handled in accordance with internal procedures and legal requirements.

    11.1. Although we apply reasonable technical and organisational security measures, no data transmission system over the internet can guarantee absolute security.

    12. Your Rights

    Under the GDPR, you have the right to control how your personal data is used.

    Right What it means
    Right of access You may receive information about what personal data we process about you.
    Right to rectification You may request correction of inaccurate data.
    Right to erasure You may request deletion of data where there is no legal basis to continue storing it.
    Right to restriction You may request temporary restriction of processing.
    Right to data portability You may receive your data in a structured format.
    Right to object You may object to processing based on legitimate interest.
    Right to withdraw consent You may withdraw your marketing or cookie consent at any time.

    12.1. To exercise your rights, please contact us by email.

    12.2. We usually respond to requests within 30 calendar days.

    13. Children’s Data

    13.1. Finntrail.lt services and products are not intended for children under the age of 14.

    13.2. We do not knowingly collect children’s personal data without the consent of a parent or legal guardian.

    14. Links to Third-Party Websites

    14.1. The website may contain links to third-party websites, social networks or partner platforms.

    14.2. We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies separately.

    15. Complaints and Dispute Resolution

    15.1. If you believe that your data is being processed in violation of applicable laws, we invite you to contact us first.

    15.2. You also have the right to lodge a complaint with the supervisory authority:

    State Data Protection Inspectorate of Lithuania (VDAI)
    L. Sapiegos g. 17, Vilnius, Lithuania
    Phone: +370 5 279 1445

    16. Updates to This Privacy Policy

    16.1. We reserve the right to update this Privacy Policy periodically to reflect changes in legislation, technology or our business operations.

    16.2. The latest version of this Privacy Policy is always published on www.finntrail.lt.

    16.3. Material changes may, where necessary, be additionally communicated by email or website notice.

    Contact for Privacy Questions

    Email: info@kamanemb.eu
    Phone: +370 614 98366