Who is responsible for your data?
The controller is MB EP TRADE, company number 307445529, address Ukmergės g. 369, LT-06327 Vilnius, Lietuva. For privacy enquiries, contact info@labus-shop.eu or +370 644 11744.
What we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Accepting, delivering and supporting orders | Name, contact details, delivery and billing addresses, items ordered, order and payment status | Entering into and performing a contract (GDPR Article 6(1)(b)) |
| Customer account, if you create one | Account contact and login information, linked orders | Providing the account service you request (point b) |
| Accounting and legal duties | Invoice, payment, refund and transaction records | Legal obligation (point c) |
| Enquiries, complaints and legal claims | Correspondence and information related to the order and issue | Contract, legal obligations or legitimate interests in answering enquiries and protecting legal rights (points b, c or f, as applicable) |
| Website and order security | IP address, technical logs, login and order security events | Legitimate interests in protecting systems and preventing fraud (point f) |
| Newsletters where you separately consent | Email, consent and withdrawal records | Consent (point a); every newsletter offers an unsubscribe option |
| Optional analytics and advertising tracking, if used | Cookie or other identifiers and usage information | Prior consent (point a); see the cookie notice |
We obtain data from you and, when fulfilling orders, payment or delivery status information from service providers. Fields necessary for an order are marked in the order form. Without them we may be unable to fulfil the order. Marketing consent is not required to purchase.
Who receives the data?
As necessary for the relevant purpose, recipients include payment providers, carriers, suppliers fulfilling orders, hosting and IT support, email and accounting providers, and authorities where legally required. Processors must act on our instructions and apply safeguards. Where a provider acts as an independent controller, its own privacy information also applies.
Direct and express delivery require the supplier and carrier to receive the recipient’s name, delivery address and contact details necessary for delivery. Fulfilment may involve a transfer to a supplier in China, outside the European Economic Area. For ECONOMY, the supplier receives MB EP TRADE’s order details and the final customer’s delivery details are provided to the local carrier.
We transfer personal data outside the European Economic Area only where an applicable lawful transfer mechanism and the necessary safeguards under GDPR Chapter V are in place. Until these conditions are implemented for a route, we do not send customer data to that supplier or begin direct fulfilment. You may request information about the recipients and safeguards for a particular transfer at info@labus-shop.eu.
How long do we retain it?
Order information is kept for fulfilment and as necessary for guarantee obligations and other lawful claims; accounting records are retained for legally required periods. Correspondence is retained to resolve the enquiry and as reasonably necessary for related claims. When the purpose and mandatory retention periods end, data is deleted or anonymised.
Account information is retained while the account service is provided; after closure, records required or lawfully retained on another basis remain separately. Marketing data is used until consent is withdrawn. Evidence of consent and a minimal suppression record are retained as necessary to demonstrate compliance and respect your opt-out. Security log retention depends on incident prevention and investigation needs and is periodically reviewed. Cookie lifetimes appear in the cookie inventory.
Your rights
Subject to the applicable conditions, you may request access, rectification, erasure, restriction or portability. You may object to processing based on legitimate interests and object to direct marketing at any time. You may withdraw consent as easily as you gave it; withdrawal does not affect earlier lawful processing.
Send requests to info@labus-shop.eu. Where we have reasonable doubts about identity, we may request only the additional information necessary to verify it. We normally respond within one month. Complex cases may require up to two additional months, with reasons provided within the first month.
You may complain to Lithuania’s State Data Protection Inspectorate at vdai.lrv.lt or another competent supervisory authority. If solely automated decisions with legal or similarly significant effects are used, separate information on their logic, significance and your rights must be provided before that processing.