I. GENERAL PROVISIONS

This Privacy Policy (hereinafter – the Privacy Policy) defines the main personal data processing rules and conditions applicable to all visitors of the website www.grasole.com (hereinafter – the Website), individuals who have agreed to receive "GraSole" marketing materials, candidates participating in "GraSole" job selections, individuals participating in "GraSole" organised promotions (hereinafter – Customers).

It is considered that the Customer gets acquainted with and expresses his consent to comply with the Privacy Policy when he visits the Website, agrees to receive "GraSole" direct marketing messages, applies for a job at "GraSole", attends events, or expresses his will to participate in "GraSole" promotions.

A Customer who does not agree with any provision of the Privacy Policy may not visit the Website, participate in the selection for a job at "GraSole", or participate in "GraSole" promotions.

Customer's personal data will be processed in accordance with the requirements of the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts. When processing Customer's personal data, "GraSole" implements organisational and technical measures that ensure the protection of personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.

Order information – this is the information provided during the ordering of goods: name, surname, billing and delivery addresses, payment information (including credit card numbers), email address, and phone number. 

Personal information – this is information about the device and order information.

Cookies. A cookie is a small file consisting of letters and numbers that, with the Customer's consent, "GraSole" saves on the Customer's browser or hard drive of the Customer's computer. Different cookies are used for different purposes.

 

II. „GraSole“ DATA

MB "Mp gamyba", legal entity code: 305224521, VAT code: LT100015763512, registered office address: Latvių g. 19A-7, LT-08113 Vilnius, www.grasole.com, trademark "GraSole", tel. +370 638 88999, email: studija@grasole.com. 

III. PERSONAL DATA

Personal data is any information collected by "GraSole" about the Customer that can be used to identify the Customer and is stored electronically or otherwise.

Personal data includes any information, including Customer's name, surname, gender, date of birth, email address, phone number, address, IP address, login to "GraSole" Website www.grasole.com device identification data, browsing history on "GraSole" Website www.grasole.com, payment data (bank account number, etc.), purchase history, VAT invoice details, information about rejected or failed payments, which "GraSole" collects about Customers for the purposes specified in this Privacy Policy or in a separate "GraSole" consent or agreement with "GraSole".

IV. DATA PROCESSING. STORAGE PERIOD 

When you visit the Website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. In addition, as you browse the Website, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Website, and information about how you interact with the Website. We refer to this automatically collected information as "Device Information".

We collect Device Information using the following technologies:

- "Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

Cookies help "GraSole" distinguish the Customer from other Website users and allow "GraSole" to improve the Website. Most browsers allow you to reject all cookies, and some browsers have the option to reject only third-party cookies. In this way, the Customer will be able to use these options. However, it should be noted that blocking all cookies will have a negative impact on the use of the Website, and without cookies, the Customer will not be able to use all the services provided on the Website. Cookies are intended to transmit information over an electronic communication network.

- "Log files" track actions occurring on the Website, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- "Web beacons," "tags," and "pixels" are electronic files used to record information about how you browse the Website.

V. HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the Website (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

- Communicate with you;

- Screen our orders for potential risk or fraud; and

- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Website (for example, by generating analytics about how our customers browse and interact with the Website, and to assess the success of our marketing and advertising campaigns).

• monitor/identify potential fraud risk (especially your IP address);

• improve and optimize our Website (e.g., by analyzing how our customers browse and interact with the site, and to assess the success of our marketing and advertising campaigns).

For individuals who have provided their contact details and expressed a desire to receive information about "GraSole" products and/or services, "GraSole" will send offers for "GraSole" product sales, newsletters, and other promotional materials, inquire about opinions on purchased goods, announce "GraSole" news, and product sales procedures via electronic communication (email, SMS messages, etc.).

For direct marketing purposes, "GraSole" processes the following personal data of the Customer: name, surname, gender, phone number, email address (mandatory data, without which "GraSole" will not be able to send direct marketing messages to the Customer); date of birth, data confirming the right to participate in promotional campaigns.

Customer data for direct marketing purposes will be used for 5 years after obtaining consent. 

If the Customer actively purchases in "GraSole" physical stores or online and has not objected to receiving "GraSole" direct marketing messages, "GraSole" will send messages about products similar to those purchased by the Customer. In this case, the Customer's data for direct marketing purposes will be used for 3 years after the purchase of the product.

The Customer has the right to refuse to receive direct marketing messages at any time by contacting "GraSole" by email at studija@grasole.com.

"GraSole" uses cookies:

Absolutely essential cookies: These cookies are essential for the Website to function. The basis for processing data with such cookies is the proper performance of the contract when the Customer visits the Website, and "GraSole" ensures the quality and security of the visit. 

Analytical and/or performance cookies: These cookies allow "GraSole" to recognise and count Website visitors and to see how visitors move around the Website when they are using it. This helps "GraSole" to improve the way the Website works, e.g., by ensuring that users find what they are looking for easily. The basis for processing data collected by these cookies is the Customers' consent.

Functional cookies: These cookies are used to recognise Customers when they return to the Website. This enables "GraSole" to personalise content for Customers and remember information relevant to Customers. The basis for processing data collected by these cookies is the Customers' consent.

If necessary, "GraSole" may also use cookies to collect information to calculate traffic (collect statistical information), provide content relevant to Customer interests, and save browsing history.

VI. DISCLOSURE OF DATA, TRANSFER TO THIRD PARTIES

"GraSole" may disclose information about the Customer to its employees, intermediaries, service providers, or subcontractors if reasonably necessary for the purposes set out in this Privacy Policy.

Payments in the online store are processed using the makecommerce.lt platform, operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475), or the paysera.lt platform, operated by Paysera LT, UAB (Pilaitės pr. 16, LT-04352 Vilnius, Lithuania, reg. no.: 300060819), therefore your personal information necessary for payment execution and confirmation will be transferred to Maksekeskus AS or Paysera LT, UAB.

In addition, "GraSole" may disclose information about the Client if: 

(i) it is required to do so by law; 

(ii) in order to protect its rights or interests (including "GraSole" submitting personal data to third parties in order to recover Customer's debts to "GraSole"); 

(iii) intending to sell "GraSole's" business or part of its assets, by disclosing Customer's personal data to the potential buyer of the business or part of it; 

(iv) "GraSole's" business or a substantial part of its assets has been sold to third parties.

Customer's personal data will not be transferred to a third country and/or international organization.

The list of personal data recipients or recipient categories specified in the Privacy Policy may change, so if the Customer wishes to be informed about changes in the recipients of the Customer's personal data, they must notify "GraSole" by email at info@grasole.com, stating "I wish to receive information about changes in the recipients of my personal data, name, surname".

"GraSole" promotional information can also be received/seen in certain phone applications (Viber, etc.), as well as "GraSole" advertisements can be seen on the Google network and other platforms that the Customer himself links to his phone number or email.

Each time the Customer visits the Website, "GraSole" collects information about how Customers use the Website with the help of third-party software "Google Analytics". For example, Customer's actions on the Website are recorded and his behavioral patterns are determined. This service is used to determine how many people visit the Website and its various parts. The collected information helps to find out how the Website works and how "GraSole" could improve it. "GraSole" does not identify Customers and does not allow the "Google Analytics" program to do so. This information about the Customer's browsing may also be provided to other third parties who work with "GraSole" on Website optimisation. More information on how Google uses your personal information can be found here: https://www.google.com/intl/lt/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. 

"GraSole" online store is implemented on the "Shopify" platform. The service provider "Shopify" controls all information collected from individuals visiting the Website. More information on how "Shopify" uses your personal information can be found here: https://www.shopify.com/legal/privacy. 

VII. EMPLOYEE RECRUITMENT

"GraSole" collects and processes candidates' resumes and/or cover letters and/or other information provided by the Customer during the selection process for the purpose of employee selection based on the Customer's consent, which the Customer expressed to "GraSole" or to the recruitment service provider by submitting their resume.

If the Customer (candidate for employment) does not submit their resume and/or cover letter, "GraSole" will not be able to evaluate the candidate's suitability for the offered position. 

In the event that the Customer has not expressed separate consent to process their personal data after the employee selection process is completed, "GraSole" undertakes to delete and/or destroy that Customer's personal data within 5 working days after the employment contract is signed with the selected candidate.

VIII. CUSTOMER RIGHTS

Right to withdraw consent. The Customer may withdraw consent to the processing of their data at any time by notifying studija@grasole.com. "GraSole" shall provide information on the actions taken upon receipt of the Customer's request regarding the exercise of the Customer's rights without undue delay, but no later than within one month of receiving the request. That period may be extended by another two months if necessary, taking into account the complexity and number of the requests. "GraSole" shall inform the Customer of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the Customer makes the request by electronic means, the information shall be provided by electronic means where possible, unless otherwise requested by the Customer.

Right to access your personal data. The Customer may contact "GraSole" at any time to inquire whether "GraSole" processes any of the Customer's personal data. If "GraSole" stores or uses the Customer's personal data in any way, the Customer has the right to access it. To do this, the Customer must submit a written request to "GraSole" at this email address: studija@grasole.com, confirming their identity.

Right to request more information. If the Customer has any questions about the use of their personal data, they can contact "GraSole" at this email address: studija@grasole.com.

Right to be forgotten. In certain circumstances specified in data processing legislation (when personal data is processed unlawfully, the basis for data processing has ceased to exist, etc.), the Customer has the right to request "GraSole" to delete the Customer's personal data. To do this, the Customer must submit a written request to "GraSole" at this email address: studija@grasole.com, confirming their identity.

Other rights. (i) The Customer has the right to request "GraSole" to correct any inaccuracies in the data held. In such a case, "GraSole" may ask the Customer to confirm the corrected information; (ii) The Customer has the right to request "GraSole" to restrict the processing of the Customer's personal data or not to process it; (iii) The Customer has the right to data portability of the data that "GraSole" received from the Customer with the Customer's consent or for contractual purposes; (iv) The Customer has the right to object to "GraSole" using the Customer's personal data.

IX. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If the Customer believes that the Customer's rights as a data subject are and/or may be violated, the Customer should immediately contact "GraSole" with a complaint at studija@grasole.com. Only upon receipt of the Customer's complaint, "GraSole" undertakes to contact the Customer within a reasonable period and inform about the progress of the complaint investigation, and later about the result.

If the results of the investigation do not satisfy the Customer, the Customer will be able to submit a complaint to the supervisory authority – the State Data Protection Inspectorate.

X. EXCEPTIONS

The Website may contain advertisements provided by third parties. Such third parties are solely responsible for the content of such advertisements and must ensure that it complies with all applicable laws and regulations.

The Client visits third-party websites at their own risk. "GraSole" assumes no direct or indirect responsibility for the content published therein, the accuracy of the information, the opinions presented therein, or the quality of goods and services offered by third parties.

"GraSole" informational materials may contain information sourced from third-party websites. Material taken from a third-party website will be appropriately marked, and a link to the original website may also be provided. "GraSole" assumes no responsibility for either the material published on a third-party website to which the Client is directed for further information, or for the personal data used by such third party.

The Client is responsible for the confidentiality of the data they provide and for any actions (data transfer, orders placed, etc.) performed on the "GraSole" Website.

The Client is responsible for ensuring that the data provided to "GraSole" is accurate, correct, and complete. If the Client's provided data changes, the Client must immediately inform "GraSole" about it. "GraSole" will in no event be liable for damages incurred by the Client due to the Client providing incorrect or incomplete personal data or failing to inform "GraSole" of changes to such data.

XI. FINAL PROVISIONS

"GraSole" may update or change this Privacy Policy at any time. Such updated or changed Privacy Policy will become effective upon its publication on the "GraSole" Website. The Client should check it periodically to ensure that the current version of the Privacy Policy is satisfactory to them.

Upon updating the Privacy Policy, "GraSole" will inform the Client by email of what "GraSole" considers to be essential changes. The "Update Date" at the bottom of the Privacy Policy indicates when the Privacy Policy was last updated.

2026 06 29