Privacy Policy

This privacy policy (hereinafter – the Privacy Policy) determines the basic information about the processing of your personal data by Not a Boring Gift, legal name UAB Hodleris, address Vokieciu str. 20, Vilnius, Republic of Lithuania, 304159704 (hereinafter – Company or we, us), when visitors use and navigate the website of Company https://notaboringgift.com (hereinafter – the Website), as well as means and sources wherefrom such data is obtained, legal basis for processing of personal data and measures, which have been taken by Company to protect the collected data.

The controller of the data provided on or through the Website is the Company. If any questions regarding this Privacy Policy or your data protection arise, you may contact us by email: [email protected].

Please note that we shall have the right to unilaterally amend the present Privacy Policy at any time. In such cases the amended Privacy Policy will be published on our Website.

THE PROCESSING OF PERSONAL DATA UPON PROVISION OF SERVICES
1. Company processes your data for the purposes of provision of its services when entering into and (or) performing the agreement entered into with you.
2. We process your account data which may include your and the digital asset gift receiver's name, surname and email address. We obtain such data directly from you. We process account data for the purposes of operating our website, providing our services, ensuring the security of our website and services and communicating with you. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract as well as our legitimate interest, namely monitoring and improving our website and services.
3. When you make a purchase through our Website, your credit card information, billing information, and any other financial information necessary to complete your purchase is processed by our third-party payment processor and we do not collect, store, or process your payment information.
4. If you or a digital gift receiver wishes to transfer digital assets to a crypto wallet, we collect data of wallet address but do not process or store it.
5. We may retain your Personal Data as long as you continue to use the Service, have an account with us, or for as long as is necessary to fulfill the purposes outlined in this Privacy Policy. We may continue to retain your Personal Data even after you deactivate your account and/or cease to use the Service if such retention is reasonably necessary to comply with our legal obligations, to resolve disputes, prevent fraud and abuse, enforce our Terms of Service or other agreements, and/or protect our legitimate interests. Where your Personal Data is no longer required for these purposes, we will delete it.
THE PROCESSING OF PERSONAL DATA FOR DIRECT MARKETING PURPOSES
1. We may process information that you provide to us for the purpose of subscribing to our email messages and newsletters. The messaging data is processed to send you the relevant messages and newsletters. The legal basis for this processing is your consent. Also, if we have already sold goods or provided services for you via our website and/or apps, and you do not object, we may also process messaging data on the basis of our legitimate interest, namely seeking to maintain and improve customer relations.
2. Personal data collected for direct marketing purposes will be stored for 3 years after the consent is obtained, unless you withdraw your consent or otherwise express your objection before the expiry of this term. After this term or after you withdraw your consent, your personal data processed by us will be immediately destroyed.
3. We may also process our clients' personal data for direct marketing purposes in order to inform the clients about other services provided by us. Before becoming a client of the Company, also current clients of the Company may at any time disagree or revoke such processing of their personal data for the purpose of sending newsletters. The clients may express their objection by contacting us at [email protected].
THE PROCESSING OF PERSONAL DATA UPON VISITORS REQUESTS
1. We process your personal data when you contact us by email, mail, social networks or by any other means of communication.
2. The correspondence data is processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and implementation of legal requirements.
3. Personal data collected for the above mentioned purposes will be stored for up to 3 years depending on the data and other circumstances. Longer periods of personal data retention may be applied where:
  1. there is a reasonable suspicion of an unlawful act which is subject to investigation;
  2. your data is necessary for the proper resolution of the dispute, complaint or claim or the defence of Company's rights and interests;
  3. We have received complaints related to you or if we have noticed any violations committed by you;
  4. it is necessary for back-up copies or related purposes of functioning of information systems of the Company;
  5. it is mandatorily required by applicable laws.
THE PROCESSING OF PERSONAL DATA ON THE WEBSITE
1. Each time you access or visit the Website, the following technical personal data may be automatically collected: IP address, access date and time, webpage name and URL, device operating system data, information about the internet provider, language settings and other relevant data. Such data is collected by cookies and / or similar technology solutions on the basis of users' consent.
2. A cookie is a file containing an identifier that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. We use cookies to ensure the efficient and safe operation of the Website and to analyse your habits so that the Website could be comfortable, efficient and tailored to meet your needs and expectations.
3. In the website we use cookies of three main types, for the following purposes:
  1. Required cookies – used to ensure proper performance of the website, security of customers and their data, provision of high-quality services;
  2. Functional cookies – used to enhance the website user experience, analyse the use of the system and in accordance to such improve the provision of services;
  3. Advertising cookies – used to observer user online behaviour and optimize marketing campaigns according to such information.
4. Our service providers use cookies and those cookies may be stored on your computer when you visit our website. We use:
  1. Google Analytics cookies to observe our website traffic. Cookies used for this purpose help us detect website errors as well as measure website bandwidth. You can view the privacy policy of Google Analytics here;
  2. Hotjar cookies to observe how users use our website. Cookies used for this purpose help us observe the performance of the website and analyse how we can improve our website. You can view the privacy policy of Hotjar here;
5. Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via information provided in the relevant browser website, for example Chrome; Firefox; Internet Explorer; Safari.
6. Please note, that required cookies are the condition of the Website use. If you opt out of these cookies, we cannot be sure how the Website will work.
DATA TRANSMISSION TO THIRD PARTIES
1. We may use the services provided by third parties, i. e. data processors (such as third-party data centres, servers, online traffic and website analysis, direct marketing services, etc.) that may receive access to your personal data. In any such case, we ensure that your personal data is transmitted only to the extent it is necessary to provide certain services of third party providers.
2. Moreover, in the light of investigations or other cases provided by law, your personal data may be submitted to the law enforcement, judicial or pre-trial institutions.You personal data may also be submitted to payment services providers, attorneys, auditors, other professional consultants, other third parties, related to the provision of our services and / or having legal basis to obtain such data. Additionally, particular technical data pertaining to your visits on the Website (such as IP address, data collected or placed on the devices by the cookies, technical information of the browser, other information related to your browsing activities, etc.) may be transferred or made available to the entities in the EEA as well as outside the EEA for the purposes related to statistics, analysis and other related purposes. Please note that the personal data in non-EU countries may be subject to less protection than the EU. The Company will carefully assess the conditions under which such data will be processed and stored after transfer to the above entities.
YOUR RIGHTS AS THE DATA SUBJECT
1. In this Section, we have summarised the rights that you have under data protection laws. Some of the rights are complex thus we only provide the main aspects of such rights. Accordingly, you should read the relevant laws (first and foremost the General Data Protection Regulation (EU) 2016/679) and guidance from the regulatory authorities for a full explanation of these rights.
2. As the data subject, you have the following rights:
  1. The right of access to personal data. You have the right to receive our confirmation that we are processing your personal data as well as the right to access your personal data processed and information about the purposes of processing, the categories of data being processed, the categories of data recipients, the period of data processing and the sources of data.
  2. The right to rectification. If you think that data processed by us is inaccurate or incorrect, you have the right to request this data to be modified, clarified or corrected.
  3. The right to erasure (right to be forgotten).When there are circumstances specified in certain legal acts (when the processing of personal data is illegal, the basis of processing of data has disappeared, etc.), you have the right to request the Company to erase your personal data.
  4. The right to restriction of processing. When there are circumstances specified in certain legal acts (when the processing of personal data is illegal, you contest the accuracy of the data, etc.), you also have the right to request the Company to restrict the processing of your data.
  5. The right to data portability. You have the right to transfer your data processed by Company with your consent and by automated means to another controller.
  6. The right to disagree with the processing of your personal data if it is processed on a legitimate interest basis, unless there are legitimate reasons for such processing or for the purpose of claiming, enforcing or defending legal requirements.
  7. The right to revoke your consent to process your personal data. If we have no other legal basis for the processing of personal data, we will cease processing of personal data immediately after the cancellation / revocation of the consent provided by you.
3. If you wish to exercise any of the abovementioned rights, please contact us by email [email protected].
4. The above mentioned request shall at least comply with the following requirements:
  1. The request shall be in writing, readable and understandable;
  2. The request shall include your full name and (or) other contact information which may help us to identify you properly;
  3. The request shall include clear and precise information on which of the rights mentioned in clause 6.2 you would like to exercise;
  4. If you are exercising your rights through a representative, your request shall include the representative's first name, last name, contact information for the communication and include a document certifying the representation.
5. We will reply to your written request within a period of note more than 30 calendar days since the day of receipt of such request. In exceptional circumstances, which may require additional time, this deadline for our reply may be extended by a further two months depending on the complexity of the situation. We may refuse to satisfy your request by giving you a written substantiated notice in case any circumstances set out in the applicable legislation are determined.
6. If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. Our data processing is supervised by State Data Protection Inspectorate of the Republic of Lithuania, registered office at L. Sapiegos St. 17, LT-10312 Vilnius, vdai.lrv.lt
FINAL PROVISIONS
1. By using our services and/or browsing the Website, you agree to the terms of this Privacy Policy.
2. This Privacy Policy may be updated from time to time by the Company. We will inform you about the updates by submitting a new version of the Privacy Policy.