Privacy policy

This policy explains how Kosmelita, UAB processes personal data when you visit kosmelita.lt or contact us. Each of our retail brands has its own website and its own privacy policy for shopping, loyalty programmes and customer service.

Who is responsible for your data

The data controller is Kosmelita, UAB, company code 134519743, Partizanų 75, Kaunas, Lithuania. For any question about your data, write to info@kosmelita.lt.

What data we collect

• When you visit the site: your IP address, browser type, the pages you open and the time of your visit, recorded in our web server’s logs.
• When you email us: your name, email address and whatever you choose to tell us.
• When you apply for a job: your CV, contact details and anything else you send with your application.

The site has no forms or user accounts and does not use cookies.

Why we use it and on what legal basis

Purpose	Legal basis (GDPR)
Keeping the site running and secure	Our legitimate interest, Article 6(1)(f)
Answering your emails	Our legitimate interest, Article 6(1)(f)
Recruitment	Steps before an employment contract at your request, Article 6(1)(b); your consent for keeping your CV for future roles, Article 6(1)(a)

Who we share it with

We share data only with service providers that work for us: our website host, our email provider and our recruitment system. The store finder map loads map tiles from OpenFreeMap, which receives your IP address to deliver them. We do not sell personal data.

Transfers outside the EEA

We keep your data in the European Economic Area. If a provider processes it elsewhere, we use the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses.

How long we keep it

• Server logs: up to 90 days.
• Emails: as long as needed to answer and follow up, and no longer than 2 years.
• Job applications: until the recruitment ends, or up to 12 months if you agree that we keep your CV for future roles.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time where we rely on it. Write to info@kosmelita.lt and we will reply within one month.

Complaints

You can complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt.

Cookies

See our cookie policy.

Changes to this policy

We update this policy when the site or the law changes. The date of the latest change is shown at the top of this page.