Privacy policy
This Privacy Policy explains how “The Note” UAB collects, uses, stores and protects personal data when you visit our website, contact us, place an order or otherwise interact with us.
This Privacy Policy is intended to be read together with our Terms and Conditions.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Company: “The Note” UAB
Company location: LT-00185 Palanga, Lithuania
Company registration number: 305883297
Email: info@the-note.eu
In this Privacy Policy, the words “we”, “us” and “our” refer to “The Note” UAB. The words “you” and “your” refer to the person using our website, contacting us or purchasing products from us.
2. Personal Data We Collect
We may collect and process the following personal data:
- your name and surname;
- your email address;
- your phone number, if you provide it;
- your billing and shipping address;
- order details and payment-related information;
- messages and correspondence you send to us;
- technical and usage data, such as IP address, browser type, device type, pages visited, visit time and similar information collected through cookies or analytics tools.
We do not intentionally collect special categories of personal data, such as health information, religious beliefs, political opinions or similar sensitive data.
3. How We Collect Personal Data
We collect personal data when you:
- visit our website;
- contact us by email or through the contact page;
- place an order or request information about a product;
- communicate with us about support, warranty, repairs, returns or product compatibility;
- use our website, where technical and analytics data may be collected through cookies or similar technologies.
Some technical data may be collected automatically through cookies, server logs or analytics tools.
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- to respond to your enquiries;
- to prepare, confirm and fulfil orders;
- to arrange payment, invoicing, shipping and delivery;
- to provide customer support, warranty service, repairs or returns;
- to manage our business records and accounting obligations;
- to improve our website, products and services;
- to protect the security and proper functioning of our website;
- to comply with applicable legal obligations.
We do not sell your personal data.
5. Legal Basis for Processing
We process personal data only when we have a lawful basis to do so under applicable data protection law, including the General Data Protection Regulation (GDPR).
The legal bases we rely on may include:
- Contract: when processing is necessary to process your order, deliver products or provide requested services.
- Legal obligation: when processing is necessary for accounting, tax, consumer protection or other legal requirements.
- Legitimate interest: when processing is necessary to operate and protect our website, respond to enquiries, manage business records or improve our services, provided that your rights and interests do not override our interests.
- Consent: when you give consent for processing activities that require consent, such as optional marketing communications or certain optional cookies.
If processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Cookies and Analytics
Our website may use cookies and similar technologies. Cookies are small text files stored on your device when you visit a website.
We may use the following types of cookies:
- Necessary cookies: required for the website to function properly and securely.
- Analytics cookies: used to understand how visitors use the website and to improve its content, structure and performance.
Our website uses Google Analytics through Google tag / gtag.js with the measurement ID G-PH790VFDF3.
Google Analytics may collect information such as visited pages, visit time, approximate location, device type, browser type and other usage data. This information helps us understand website traffic and improve the website.
Google Analytics may use cookies such as:
- _ga — used to distinguish users; default expiration period is up to 2 years.
- _ga_PH790VFDF3 or similar Google Analytics property cookies — used to persist session state; default expiration period is up to 2 years.
Analytics cookies may be set when you visit our website, unless they are blocked by your browser settings or other privacy tools.
You can also control or delete cookies through your browser settings.
You can find more information about how Google uses cookies and Google Analytics data in Google’s own privacy and cookie documentation.
7. Sharing of Personal Data
We may share personal data only where necessary and only with appropriate recipients, such as:
- website hosting, IT and technical service providers;
- payment service providers, where applicable;
- delivery, courier and postal service providers;
- accounting, tax or legal advisers;
- Google Analytics and related analytics service providers;
- public authorities, courts or regulators where required by law.
We do not allow service providers to use your personal data for their own independent purposes, except where they act as separate controllers under applicable law.
8. International Transfers
Some of our service providers, including Google Analytics, may process data outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards where required by law, such as European Commission standard contractual clauses, adequacy decisions or other lawful transfer mechanisms.
9. Retention of Personal Data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
In general:
- order, invoice and accounting data may be kept for the period required by applicable accounting and tax laws;
- customer correspondence may be kept for as long as necessary to handle the enquiry, order, warranty, return or possible dispute;
- technical and security logs may be kept for a limited period necessary to protect the website;
- analytics data is retained according to the settings of Google Analytics and applicable law.
When personal data is no longer needed, we will delete it or anonymise it where reasonably possible.
10. Your Data Protection Rights
Under applicable data protection law, you may have the following rights:
- Right to be informed about how your personal data is processed.
- Right of access to your personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure of your personal data in certain circumstances.
- Right to restriction of processing in certain circumstances.
- Right to data portability, where applicable.
- Right to object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent where processing is based on consent.
- Right not to be subject to a decision based solely on automated processing where such decision produces legal or similarly significant effects.
These rights are not absolute and may apply only in certain circumstances under applicable law.
To exercise your rights, please contact us by email:
We may need to verify your identity before responding to your request. We will respond to your request within the time limits required by applicable law.
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection authority. In Lithuania, this is the State Data Protection Inspectorate / Valstybinė duomenų apsaugos inspekcija.
11. Direct Marketing
We do not send marketing newsletters unless you have requested them or consented to receive them.
If we send marketing communications in the future, you will be able to unsubscribe or object to such communications at any time.
12. Automated Decision-Making
We do not use your personal data for automated decision-making that produces legal effects or similarly significant effects concerning you.
13. Security of Personal Data
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmission over the Internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security.
14. Children’s Privacy
Our website and products are not intended for persons under the age of 18, in line with our Terms and Conditions.
We do not knowingly collect personal data from persons under 18. If you believe that a person under 18 has provided us with personal data, please contact us and we will take appropriate steps to delete such data where required.
15. Links to Other Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you read the privacy policy of any third-party website you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
17. Contact Us
If you have any questions about this Privacy Policy or how we process personal data, please contact us:
By email: info@the-note.eu
By visiting this page on our website
