Privacy Policy

Effective from 2 December 2025, Version 3.1

UAB Audimas Brand (“Data Controller”, also referred to as “we”, “our”, “us” or similar) is the data controller of your personal data. We are responsible for processing your personal data in various situations: when you visit our website www.audimas.lt, shop in our physical stores, participate in promotions or contests, are our business partner, or apply for a job position.

Data Controller Details:

UAB Audimas Brand

Registered address: Raudondvario Rd. 80, LT-47182 Kaunas, Lithuania

Email: [email protected]

***

We process personal data in compliance with the applicable requirements of the European Union and the laws of the Republic of Lithuania, as well as this Privacy Policy (“Privacy Policy”). The Privacy Policy provides essential information about how we process the personal data of our visitors, clients, business partners and their representatives, candidates, ambassadors, and other individuals (hereinafter in the Privacy Policy, depending on the context, referred to as “you” or “your”). If you wish to obtain more detailed information, please contact us using the details provided in this Privacy Policy.

If you are over 14 but under 18 years of age, you must ensure that you have permission from a parent or legal guardian before providing us with any personal data. If you provide personal data that is not your own, you must have the other person’s consent. Upon our request, you will be required to prove that such consent has been obtained. Individuals under the age of 14 are prohibited from providing their personal data on this website without prior consent from their parents or other legal guardians and without submitting such consent to us.

The terms used in this Privacy Policy have the meanings assigned to them in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, GDPR).

1. How Do We Process Your Personal Data?

In this Privacy Policy, we explain how we process your personal data when providing services and maintaining our interactions. To make this easier to understand, we describe data processing according to four criteria: the purpose, the type of data, the legal basis under the GDPR, and the retention period. This information is provided in the table in Section 13 of this Privacy Policy.

The data processing activities we describe apply to different categories of data subjects: job applicants, clients, potential clients, business partners, and others. All activities are carried out in accordance with the principles of lawfulness, fairness, transparency, data minimisation, and purpose limitation.

Please note that we do not process any special categories of personal data (for example, data relating to health, political opinions, religious beliefs, or biometric data) at any stage of data processing. Therefore, we kindly ask that you do not provide such data when participating in recruitment processes, entering into contractual relationships, or interacting with us in any other way.

2. On What Legal Bases Do We Process Your Personal Data?

We process your personal data on the following legal bases:

• for the conclusion, performance, amendment, and administration of a contract (Article 6(1)(b) GDPR);
• for compliance with our legal obligations and requirements established by law (Article 6(1)(c) GDPR);
• for the purposes of pursuing our or third parties’ legitimate interests (Article 6(1)(f) GDPR); and
• on the basis of your consent (Article 6(1)(a) GDPR).

In certain cases, the same personal data may be processed on the basis of more than one of the legal grounds listed above. Detailed information about the legal bases for processing your personal data is provided in the table in Section 13 of this Privacy Policy.

3. How Long Do We Retain Your Personal Data?

We process and retain your personal data only for as long as necessary to achieve the purposes for which it is processed, or for as long as required by applicable legislation. Detailed information about the purposes of processing your personal data and the corresponding retention periods is provided in Section 13 of this Privacy Policy.

Once the specified data processing or retention period has ended, we will delete your personal data or safely and irreversibly anonymise it within the shortest reasonable timeframe.

A longer data retention and/or processing period than the one indicated in this Privacy Policy may be applied only in the following cases:

• for the examination of disputes or complaints, in order to protect our or third parties’ legitimate interests;
• to defend against existing or potential claims, demands, or legal proceedings, and to exercise our rights;
• where there are reasonable suspicions of violations or unlawful activities that are or may be under investigation;
• when the data is necessary to ensure the security, integrity, and resilience of information systems;
• when other lawful grounds for data retention exist in accordance with applicable legislation.

4. For What Purposes and What Personal Data Do We Collect?

We collect and process only those personal data about you that are sufficient and necessary to achieve the specified purposes. The purposes of processing your personal data, together with the list of information collected, are described in detail in the table provided in Section 13 of this Privacy Policy.

More detailed information is provided below.

4.1. Creation and Administration of an Account

To use additional features of our online store, customers may create a personal account. During the account registration process, they provide the necessary information required to verify the user’s identity, maintain communication, and ensure the functionality of the account. If the registration is not completed, the submitted data are stored only for a limited period of time and then automatically deleted. It is important to note that you can also make purchases without an account – as a guest, without registering.

Once an account is successfully created, its administration begins - you are given the ability to manage your contact information, password, view order history, choose marketing preferences, or create wish lists. During account administration, login and activity data are also processed, as these are necessary to ensure the security of the account and the proper provision of services. This data is stored as long as the account is active, and once the account is deleted, only the records required by law - such as those needed for accounting -are retained.

4.2. Order Placement, Payment, and Delivery of Goods

To conclude a purchase agreement and buy goods in our online store, you must provide the necessary data such as your first name, last name, email address, phone number, delivery address, and payment information. Without providing this information, the purchase process cannot be completed.

When you select the desired products and confirm your order, the identification and contact details you provide are used to register the order, while the purchase data allow us to record information about the quantity of selected items, their price, and any discounts applied. Before confirming the order, you also have the option to save selected items in your shopping cart or wishlist. In such cases, we process data about the selected products, their prices, and discounts to ensure convenient shopping in the future.

During the payment stage, your financial data are processed - including the selected payment method, payment transaction details, and invoice information. This information is necessary to ensure the proper execution of the payment process and to comply with legally required financial accounting obligations.

Finally, in order to deliver the goods you have purchased, the recipient’s data are used - first name, last name, contact information, and delivery address. Depending on the chosen delivery method, additional details may also be processed, such as notes for the courier. This ensures that your ordered items reach you safely and on time.

Other data (e.g., those used for account creation, newsletters, or wish lists) are not necessary for making a purchase. If you do not provide them, you can still buy products but may not be able to use certain additional features and services on our website.

Additionally, to ensure the reliability of payments and protect against fraud, in some cases we may limit the availability of certain payment methods (e.g., cash on delivery) or, if there is a justified risk, restrict the possibility of placing new orders entirely.

4.3. Additional Website Features and Personalisation

Our website offers additional services designed to make browsing and shopping more convenient. For example, you can use our chatbot, which responds to your inquiries and helps you find the information you need. In such cases, we process the text of your query and your chat history to provide high-quality support and assistance.

To ensure website accessibility, we offer accessibility features that allow you to adjust font size, contrast mode, or other browsing settings according to your needs. These data are processed solely to ensure convenient website use and are stored for as long as the applicable cookie settings remain valid or your account is active.

All these additional features are designed to enhance your shopping experience and ensure that using our website is comfortable, reliable, and tailored to your individual needs.

4.4. Direct Marketing and Profiling

Using your data, we may send you news, promotional offers, discounts, or other relevant information about our products and services. If you are not yet our client, we will send such information only after obtaining your consent, which you may withdraw at any time. By ticking a checkbox (in the product order window, when creating an account on our website, or in the settings section of your account) or by providing your email address in the newsletter subscription form, you choose to receive our offers and agree that we may contact you by email and SMS. You have the right to opt out of receiving our communications - however, in that case, we will not be able to provide you with relevant information.

For existing clients, we may send such messages without separate consent, relying on our legitimate interest to inform you about similar goods or services that you have previously purchased and to maintain an ongoing relationship, unless you objected after your first purchase by emailing [email protected].

To make our offers more relevant to you, we perform profiling. This means that we analyse your actions in our online store - for example, which products you viewed, whether you created but did not complete a shopping cart, or whether you showed interest in a certain category but did not finish the purchase. Based on such data, we may send you personalised emails, such as reminders about an unfinished cart, discounts for a specific product or delivery, or newsletters with more relevant offers. This profiling is automated, but it does not produce legal effects or significantly affect you - its purpose is solely to improve your shopping experience.

In addition to general marketing messages, you may choose to receive back-in-stock reminders. This means that if a specific item is currently unavailable, you can provide your email address and we will inform you when the product becomes available again. Such reminders are sent only with your consent and only regarding the specific product you selected.

In all cases, you have the right to object to receiving direct marketing messages or to profiling, and you can change your preferences at any time in your account settings or by using the unsubscribe link included in our emails. You may also withdraw your consent by contacting us at [email protected].

4.5. Processing of Candidate Data

We process candidates’ personal data during the recruitment process to ensure that hiring decisions are fair, transparent, and well-grounded. When you submit a job application, you provide personal information such as your name, email address, phone number, CV, cover letter, LinkedIn profile link (if provided), answers to application questions, and any other information or documents you choose to include.

At later stages of the selection process, we may collect references about you from representatives of your current or former employers. References may include information about your job position, employment period, responsibilities, work performance, reasons for leaving (if applicable), and professional conduct. References from your current employer are collected only with your explicit consent under Article 6(1)(a) GDPR. The legal basis for collecting references from former employers is our legitimate interest in making informed and responsible hiring decisions, in accordance with Article 6(1)(f) GDPR.

We also process the personal data of the individuals providing references - typically direct managers or HR specialists - such as their name, job position, professional contact details, and the content of the reference. Processing these data is necessary for assessing the candidate’s suitability and is based on our legitimate interest in ensuring a fair and reliable selection process. All information collected through references is used solely for recruitment purposes and is retained for four months after the end of the recruitment process, unless a longer retention period is required due to legal obligations.

Additionally, we may supplement your application with publicly available information from your LinkedIn profile.

All personal data processed during recruitment are used exclusively for evaluating candidates, ensuring a lawful and fair recruitment process, and protecting against potential legal claims related to the selection process.

4.6. Customer Service in Physical Stores

When shopping in our physical stores, your personal data may be processed for various purposes. Our stores are equipped with video surveillance cameras, which are used to ensure the safety of customers, employees, and property. When returning or exchanging goods, only the data necessary to complete the transaction and fulfil legal obligations are processed. When selling and managing gift cards, we use the information required to issue, activate, and properly manage the use of the cards.

In addition, marketing promotions, contests, or lotteries may be organised in our stores. In such cases, we process only the data necessary to ensure your participation and administer the prizes. Finally, when using the Tax Free service, we process only the data required to carry out the VAT refund procedure in accordance with legal requirements.

4.7. Contractual Relationships with Partners and Suppliers

When managing contractual relationships with our partners and suppliers, we process only the personal data necessary for concluding, performing, administering, or terminating a contract. This may involve natural persons - such as self-employed service providers or contractors - as well as representatives of legal entities, including employees and authorised agents of suppliers, service providers, or other partners.

For this purpose, we typically process data such as: name, surname, job position, represented legal entity, contact details (email address, phone number, address), payment information, contract terms, performance details, correspondence, and any other information directly related to contract administration.

When a contract is concluded with a natural person, their data are processed as a direct contracting party - therefore, in addition to contact information, other identification and financial details may be required (e.g., personal identification number, bank account number). When the contract is concluded with a legal entity, we process only the data of its representatives necessary for signing and performing the contract and maintaining communication, while financial and payment-related information pertains to the legal entity itself, not to the representative personally.

4.8. Relationships with Ambassadors

When collaborating with our ambassadors, we process the personal data necessary to establish, maintain, and publicise these relationships. Ambassadors may be natural persons or representatives of legal entities who agree to represent our brand, participate in promotional or communication projects, and promote our products or services.

For this purpose, we may process data such as: name, surname, photograph or video, social media profiles and publicly available related information, as well as contact details (email, phone number), contract and cooperation terms, communication content, and remuneration or compensation details. When cooperation is established with a legal entity, we generally process only the representative’s contact details required for contract conclusion and communication, while financial settlement data relate to the legal entity and not to the individual representative.

Ambassadors’ data may also be used publicly - for example, on our website, social media channels, or other communication platforms - if such use is specified in the contract and the ambassador has given their consent.

4.9. Customer Service and Complaint Handling

We process your information to provide proper customer service, respond to inquiries, and resolve any issues or disputes that may arise. This includes day-to-day communication with customers as well as handling claims when refunds, product exchanges, or other assessments are needed. To ensure high service quality, we may record telephone calls - but only with your consent.

Your data are processed for these purposes to enable us to fulfil our obligations, provide high-quality customer service, comply with consumer protection laws, and ensure efficient dispute resolution.

5. Social Media Platforms

We maintain accounts on social networks such as Facebook and Instagram, where we share information about our products, services, and news, interact with followers, and engage with our community. When you use these accounts, all information you provide (e.g., comments, messages, likes, follows) is primarily collected and processed by the respective social media platform in accordance with its own privacy policy. Therefore, we recommend reviewing the privacy notices of Facebook and Instagram and contacting these platforms directly if you have questions about how your data is used within their systems.

If you agree, we may republish or otherwise share your content (e.g., photos or comments) on our social media accounts for marketing and/or public relations purposes, including on our website. In such cases, the use of your data is based on your consent, which you may withdraw at any time by contacting us at [email protected] or by using the appropriate functions provided by the social networks. Upon receiving your request, we will promptly remove your content from our accounts.

6. Your Rights

Under the General Data Protection Regulation (GDPR), you have several important rights related to your personal data. Below we explain what these rights mean and how they may apply in our activities.

Right of access. You have the right to know whether we process your personal data and to receive information about what data we collect, for what purposes it is used, and to whom it is disclosed. For example, you may request access to your order history or account information. In such cases, we will provide you with a copy of your data; however, if the documents contain other individuals’ data, those details may be redacted to protect their rights.

Right to rectification. If the information we hold about you is inaccurate or outdated, you have the right to have it corrected or updated. For example, if your delivery address or phone number has changed, we can update it. In some cases, we may ask for additional proof to confirm that the requested change is accurate.

Right to erasure (“right to be forgotten”). You may request the deletion of your data when it is no longer needed for the purposes for which it was collected (e.g., when deleting your account), when you withdraw your consent (e.g., for newsletter subscriptions), or when the data is processed solely for marketing purposes. However, we cannot delete data that we are legally required to retain - for example, invoices that must be kept for accounting purposes for 10 years, or data needed for resolving legal disputes.

Right to restriction of processing. In certain cases, you may request that your data be stored but not actively used. This may apply when you contest the accuracy of the data or when we no longer need it, but you do - such as when you need it to support a claim regarding a purchased product. During the restriction period, data will only be processed minimally - for example, only with your consent or when necessary to defend legal claims.

Right to object to processing. You may object to the processing of your data carried out on the basis of our legitimate interests, for example when we use it for website analytics or personalised offers. In such cases, we will stop processing unless we can demonstrate compelling legitimate grounds to continue (e.g., to ensure service security or defend legal claims).

Right to object to direct marketing. You may object at any time to the use of your data for sending newsletters, reminders about abandoned carts, or notifications about restocked items. In such cases, we will immediately stop sending these messages and cease using your contact details for marketing purposes.

Right to data portability. When your data is processed based on consent or a contract (e.g., account information or purchase history), you have the right to receive it in a structured, commonly used, machine-readable format or request that it be transferred to another service provider. This right does not apply if it would disclose another person’s data or otherwise infringe their rights.

Right to withdraw consent. If you have given consent for data processing (e.g., for newsletters, or other additional services), you may withdraw it at any time. This means that from that moment onward, your data will no longer be used for that purpose. However, withdrawing consent does not affect the processing carried out before the withdrawal.

Right to lodge a complaint. If you believe that your personal data is being processed unlawfully or your rights are being violated, you may contact the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, https://vdai.lrv.lt). However, we encourage you to contact us first - most issues can be resolved quickly and amicably.

We will respond to all your requests regarding the exercise of your rights no later than within one month. If a request is complex or we receive multiple requests, this period may be extended by up to two additional months - in such cases, you will be informed of the extension and the reasons for it.

7. Where Do We Obtain Your Personal Data From?

We obtain personal data from the following sources:

• Directly from you - when you provide it to us (e.g., by filling in forms on our website, participating in promotions, contacting customer service, shopping in physical or online stores, returning or exchanging goods, applying for a job, or participating in events).
• From third parties - when we receive data from our partners or service providers, such as: (i) payment service partners (banks, payment institutions); (ii) logistics, delivery, and courier companies; (iii) Tax Free service providers; (iv) current or former employers (when collecting references); (v) marketing service partners who may provide us with your data or anonymised information so that we can offer personalised recommendations.
• From social media platforms - if you log in to our website using a Google or Facebook account, we may receive the necessary authentication data from Google Inc. or Facebook Inc.
• From publicly available sources – we lawfully use data from public registers or professional social networks (e.g., LinkedIn).
• From competent state or law enforcement authorities – when we are legally required to perform certain actions regarding you or your data.

Personal data may be transferred to other parties only in accordance with the General Data Protection Regulation, other applicable legal requirements, and to the extent specified in this Privacy Policy.

8. Transfer of Personal Data Outside the European Economic Area

We process and store your personal data within the European Union (EU) and the European Economic Area (EEA). However, in certain cases, data may be transferred outside the EEA, for example when:

• we use services provided by international companies (e.g., Google, Facebook, LinkedIn) whose servers may be located outside the EEA;
• we engage IT, marketing, or cloud service providers operating outside the EEA;
• such transfer is necessary to perform a contract with you or comply with legal obligations.

In these situations, we ensure that the transfer of your data complies with GDPR requirements. Data are transferred only under the following conditions:

• the recipient is covered by a European Commission adequacy decision recognising that the country ensures an adequate level of data protection; or
• we conclude Standard Contractual Clauses (SCCs) approved by the European Commission with the recipient; or
• the recipient applies other appropriate safeguards as provided by the GDPR.

In this way, we ensure that your personal data is protected at a level equivalent to that applied within the EU/EEA.

9. Who Receives Your Information?

To properly provide our services and ensure the smooth operation of our online store, we may transfer your personal data to carefully selected third parties. These recipients act either as data processors on our behalf or, in certain cases, as independent data controllers. Data are shared only to the extent necessary for the provision of services, the fulfilment of legal obligations, or the pursuit of a legitimate interest.

The main categories of recipients to whom your data may be transferred are:

• Cloud service and IT infrastructure providers – such as Google LLC (Google Cloud, Google Drive), Microsoft Corporation (Microsoft Azure, OneDrive), and other partners who ensure website hosting, data storage, and technical support.
• Customer service and marketing service providers – companies that help us manage newsletters, run marketing campaigns, analyse their effectiveness, and maintain communication with customers.
• Communication and meeting tools – such as Zoom Video Communications, Inc., Microsoft Teams, or Google Meet, used for consultations with customers or business partners.
• Payment and billing service providers – banks, payment institutions, and partners that process your payments, issue invoices, or administer the payment process.
• Delivery service providers – logistics companies and courier services that receive only the data necessary to deliver your order (e.g., name, address, phone number).
• Analytics and diagnostics service providers – such as Google Analytics or similar platforms that help us monitor website performance, analyse user experience, and ensure convenience and efficiency.
• Legal, financial, and compliance consultants – external lawyers, auditors, or accounting service providers who assist in fulfilling legal and statutory obligations.
• Public authorities and supervisory institutions – such as the tax authority, law enforcement agencies, or data protection supervisory authorities, when the provision of such information is required by law.
• Companies within the same corporate group – entities belonging to the Audimas group that may process data for internal administration or service coordination purposes under internal data-sharing agreements.
• Social media platforms – Meta (Facebook, Instagram), Google (YouTube), used for marketing, advertising, or communication purposes. In such cases, part of your data may be processed by these platform operators under their own privacy policies.
• Advertising and remarketing partners – external partners who help display relevant offers, reminders about abandoned carts, or information about restocked items.

All these recipients receive only as much information as is necessary to provide their services and are required to ensure adequate protection of your data.

10. Third-Party Websites, Services, and Products on Our Website

Our website may display third-party advertisements, links to other companies’ websites or services, and integrated additional functionalities such as social media plugins or payment service providers. Please note that we do not control these third-party websites or services and are not responsible for the quality of their services or for ensuring their privacy or security practices.

When you click such a link or use a third-party service, you become a direct customer or visitor of that third party, and your personal data will be processed in accordance with that third party’s privacy policy and terms of use. For example, when using payment partner services (banks or payment institutions), you provide your financial data directly to them; when clicking the Facebook or Instagram buttons on our website, you will be redirected to the respective social media platform, where their privacy policies apply; when using Google Analytics or Google Ads cookies, your browsing data may be transferred to Google; and when clicking on third-party advertisement banners, you may be redirected to external websites that we do not control.

We recommend carefully reviewing the privacy policies of third-party websites or services before using them. If you have any questions about how your data is used, please contact the respective service provider directly.

11. Updating Your Data

Please inform us if the personal information we process about you needs to be corrected and/or updated. You are responsible for ensuring that the data you provide to us is accurate, truthful, and complete. If any of the information you have provided changes, you must notify us immediately by email or phone. We will not be liable for any damage you may incur as a result of providing incorrect or incomplete personal data, or for failing to inform us about changes to your data.

12. Changes to the Privacy Policy

Any changes to this Privacy Policy will be published on our website, and in the case of significant updates, we will inform you by email. The most recent updates were made 02 12 2025.

13. Detailed Information About the Processing of Your Personal Data

The table below is designed to clearly show how we process your personal data. Each row specifies the purpose of data processing, the categories of personal data being processed, the applicable legal basis under the GDPR, and the corresponding data retention period.