1.1. Data Controller - MB Studija numeris trys, legal entity code: 307112962, registered address: T. Kosciuškos g. 24-20, LT-01100 Vilnius, email address: hello@nr3studio.com, phone number: +370 657 477 59, whose goods are sold through the online store at https://www.nr3studio.com/.

1.2. Online Store - the online store managed by the Data Controller, available at https://www.nr3studio.com/.

1.3. Goods - any products and/or items offered by the Data Controller in the Online Store.

1.4. Customer - a natural person (including website visitors) whose personal data is collected by the Data Controller.

1.5. Personal Data - any information directly or indirectly relating to a Customer whose identity is known or can be directly or indirectly determined using relevant data.

1.6. Processing of Personal Data - any operation performed with Personal Data (including collection, recording, storage, editing, alteration, granting of access, submission of inquiries, transfer, archiving, etc.).

1.7. Partner - a person providing goods/services to the Data Controller that are related to the Controller's business activities.

1.8. Direct Marketing - activities aimed at offering goods/services to individuals by mail, phone, or other direct means, including (but not limited to) sending newsletters, special offers, invitations to participate in promotions/games, and/or activities aimed at requesting individuals' opinions on the offered goods/services by mail, phone, or other direct means.

1.9. Cookie - a small piece of text-based information that is automatically created while browsing the website and stored on the visitor’s computer or other device.

1.10. Privacy Policy - this document, which sets out the principles and rules for the processing of Personal Data when using the Online Store.

2.1. The Customer grants the Data Controller the right to perform all actions of Personal Data processing to the extent and for the purposes specified in this Privacy Policy.

2.2. Personal Data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts governing the processing and protection of Personal Data, as well as this Privacy Policy.

2.3. Personal Data is processed in accordance with the following principles:

• 2.3.1. Personal Data is collected for specified and legitimate purposes;

• 2.3.2. Personal Data is processed accurately, fairly, and lawfully;

• 2.3.3. Personal Data is adequate and limited to what is necessary in relation to the purposes for which it is collected and further processed;

• 2.3.4. Personal Data is kept up to date;

• 2.3.5. Personal Data is stored in a form that permits identification of the Customer for no longer than is necessary for the purposes for which the data was collected and processed;

• 2.3.6. All Personal Data information is confidential;

• 2.3.7. The Customer’s Personal Data and other information shall not be used for unlawful purposes.

2.4. The Data Controller implements organizational and technical measures to protect Personal Data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.

2.5. The Customer is responsible for the accuracy, correctness, completeness, and timely updating of the Personal Data submitted when using the Online Store, especially in cases where such data changes.

2.6. Prior to purchasing Goods in the Online Store, the Customer must familiarize themselves with and agree to this Privacy Policy.

2.7. The Customer is not entitled to order Goods in the Online Store if they have not read and agreed to this Privacy Policy. In cases where the Customer disagrees with the Privacy Policy or any part thereof, they are not permitted to order Goods in the Online Store.

2.8. The Data Controller has the right to amend and/or supplement the Privacy Policy. The amended Privacy Policy shall be published in the Online Store. All amendments and/or supplements to the Privacy Policy come into force from the moment of their publication in the Online Store.

3.1. The Customer’s Personal Data is processed, collected, and stored for the following purposes:

• 3.1.1. For the purpose of electronic commerce. The following Personal Data is processed: first name, last name, email address, phone number, delivery address of the Goods, payment details for the Goods.

• 3.1.2. For the purpose of Direct Marketing. The following Personal Data is processed: first name, last name, phone number, email address.

• 3.1.3. For other purposes for which the Data Controller is entitled to process the Customer’s Personal Data when the Customer has given their consent, where the processing is necessary due to the legitimate interests of the Data Controller, or when the processing is required by applicable legal acts.

3.2. The Personal Data collected by the Data Controller is stored in the Controller’s information systems in electronic format. Personal Data is processed no longer than necessary to achieve the purposes of data processing or no longer than required by the Customer and/or as provided by applicable legal acts.

3.3. The Customer may give consent for their Personal Data (first name, last name, phone number, email address) to be processed for the purpose of Direct Marketing. If, after giving consent to the processing of their Personal Data for Direct Marketing and receiving Direct Marketing communications, the Customer later decides to withdraw this consent, they must notify the Data Controller accordingly.

3.4. The Customer has the right at any time to withdraw their consent referred to in Clause 3.3 for the processing of their Personal Data for Direct Marketing purposes by submitting an appropriate notice to the Data Controller via email at hello@nr3studio.com, clearly stating that they are withdrawing their consent to the use of their Personal Data for Direct Marketing and no longer wish to receive any Direct Marketing messages.

3.5. The Customer also has the right to withdraw the consent referred to in Clause 3.3 for the processing of their Personal Data for Direct Marketing purposes by clicking the relevant link included in each Direct Marketing email sent by the Data Controller to the Customer.

3.6. The Customer agrees that, in cases where it is necessary in accordance with the instructions of competent authorities and/or where the Customer’s Personal Data has potentially been used in the commission of unlawful activities, or where there are reasonable suspicions of identity theft under investigation by competent law enforcement authorities, or where other lawful grounds or purposes exist, their Personal Data may be stored on the servers of the Data Controller for a longer period than specified in this Privacy Policy.

4.1. The Customer, as a data subject, has the following rights related to the processing of their Personal Data:

• 4.1.1. To obtain information from the Data Controller about the processing of their Personal Data, to access their Personal Data, and to understand how it is being processed;

• 4.1.2. To receive information from the Data Controller about the sources from which their Personal Data was collected, the purpose for which it is processed, and the recipients to whom it has been or may be disclosed within at least for the past year;

• 4.1.3. To request the rectification of incorrect, incomplete, or inaccurate Personal Data;

• 4.1.4. To request the erasure of their Personal Data when the Personal Data is being processed unlawfully;

• 4.1.5. To request the suspension, except for storage, of processing actions when the Personal Data is being processed unlawfully;

• 4.1.6. To request the transfer of their Personal Data;

• 4.1.7. To withdraw at any time any consents given to the Data Controller regarding the processing of their Personal Data, including (but not limited to) for Direct Marketing purposes.

4.2. When exercising their rights, the Customer must present a passport or personal identification card. The Data Controller provides the Customer with information about the processed Personal Data free of charge once every year. To exercise the rights set out in Clause 4.1, the Customer may contact the Data Controller by email at hello@nr3studio.com. The Data Controller has the right to amend, alter, erase, or suspend the processing of Personal Data only after identifying the identity of the Customer making the request.

5.1. The Customer’s Personal Data is not disclosed to third parties, except in the following cases:

• 5.1.1. When the Customer’s consent has been obtained, as specified in this Privacy Policy;

• 5.1.2. Personal Data is disclosed for electronic commerce purposes to Partners providing services to the Data Controller in connection with the Controller’s business activities;

• 5.1.3. Personal Data is disclosed to competent authorities in cases provided for by the laws and legal acts of the Republic of Lithuania.

5.2. The Customer agrees that their Personal Data may be transferred to Partners in the course of fulfilling the Customer’s order placed in the Online Store.

5.3. In the Online Store, Customer payments are processed:

• 5.3.1. Using the platform https://makecommerce.lt/, operated by Maksekeskus AS, address: Liivalaia 45, Tallinn 10145, Estonia, registration number: 12268475. Therefore, the Customer’s personal information required for executing and confirming the payment is transferred to Maksekeskus AS.

6.1. In order to provide the Customer with full and effective services, the Data Controller, with the Customer’s consent, stores information - Cookies - on the Customer’s computer (device). This information is used to recognize the Customer as a previous user of the Online Store, to collect website traffic statistics, and to store information about the shopping cart.

6.2. The Customer can review at any time what information (Cookies) the Data Controller stores and may delete some or all stored Cookies.

6.3. The Customer has the right to object to the storage and use of information (Cookies) on their computer (device); however, in such cases, some functions of the Online Store may become unavailable. By using the Online Store, the Customer agrees to the storage of information on their computer (device). The Customer may withdraw their consent at any time by changing the settings of their internet browser or by contacting the Data Controller via email at hello@nr3studio.com.

6.4. The Online Store is hosted on the Wix platform; therefore, Wix may set cookies for the following purposes:

• 6.4.1. Wix Analytics: to collect data about website visits, such as traffic sources, number of visitors, and their interaction with the site;

• 6.4.2. Wix User Authentication: to help identify and authenticate users who log in to the site or interact with forms.

For more details on Wix’s cookie use, please refer to Wix’s own Cookie Policy: Wix Cookie Policy.

7.1. If the Customer wishes to submit an inquiry, complaint, or other request related to the processing of Personal Data, they may do so by contacting the Data Controller via email at hello@nr3studio.com or by phone at +370 657 477 59 on business days from 10:00 to 18:00. An email notification is considered received 24 hours after it has been sent.

7.2. Upon receiving a Customer inquiry related to the processing of Personal Data, the Data Controller shall provide the Customer with a reasoned response - either satisfying the inquiry or refusing to do so - no later than within 30 (thirty) calendar days from the date of the Customer’s inquiry.

7.3. If the Customer disagrees with the reasoned response provided by the Data Controller, the Customer has the right to lodge a complaint with the State Data Protection Inspectorate (address: L. Sapiegos g. 17, 10312 Vilnius, email: ada@ada.lt, phone: +370 527 128 04, +370 527 914 45, website: https://vdai.lrv.lt/en/).