This Privacy Policy informs you about the processing of personal data (hereinafter “data”) on our website and related functions and content, as well as other online platforms (hereinafter collectively referred to as the “online platform”). By using this online platform, you agree to the terms of this Privacy Policy.

Data Controller

MB “EBIGUS”
Rusnės g. 31, Šakių k., 47412 Kauno r. sav., Lietuva
info@sweetdropcbd.com
SweetDropCBD.com

Processed Data

• Identification data (e.g., name, surname).
• Contact data (e.g., email, phone numbers).
• Content data (e.g., text inputs, photographs, videos).
• User behavior data (e.g., visited pages, interest in content, access times).
• Technical and communication data (e.g., device information, IP address).

Purpose of Data Processing

• Ensure the operation of the online platform, its functions, and content.
• Respond to contact inquiries and communicate with users.
• Ensure the security of the online platform.
• Measure reach and perform marketing activities.

Legal Basis

When processing data, we comply with all applicable privacy laws, including the European Union General Data Protection Regulation (GDPR). The legal bases for data processing are:

• Data processing consent, under GDPR Article 6(1)(a).
• Data processing necessary to perform a contract and take steps prior to entering into a contract, under GDPR Article 6(1)(b).
• Data processing necessary for our legitimate interests, provided that such interests do not override the data subject’s interests or fundamental rights and freedoms, under GDPR Article 6(1)(f).

Security Measures

We implement technical and organizational security measures to ensure an appropriate level of data protection, taking into account the purpose of data processing and current legal requirements.

Data Sharing with Third Parties

We may share data with third parties only when it is necessary for legitimate purposes, such as payment service providers, law enforcement agencies, and other organizations that meet data transfer requirements.

Data Transfers to Third Countries

We may transfer data to third countries only under conditions that ensure a level of data protection equivalent to European Union standards. This can be achieved by using special data transfer mechanisms, such as standard contractual clauses or other measures in accordance with GDPR Articles 44-50.

Data Subject Rights

You have the right to receive information about whether we process your data and to obtain a copy of the processed data (GDPR Article 15).

You also have the right to request correction of inaccurate data or completion of incomplete data (GDPR Article 16).

Under GDPR Article 17, you have the right to request the erasure of your data if it is no longer necessary for the specified purposes or if you withdraw your consent.

You have the right to request that we restrict the processing of your data if the data is inaccurate, processed unlawfully, or no longer needed, but you do not want it to be deleted (GDPR Article 18).

Under GDPR Article 20, you have the right to receive your data in a structured, commonly used, and machine-readable format that you can transmit to another data controller.

You also have the right to object to our data processing under GDPR Article 21 if data is processed for our legitimate interests or direct marketing purposes.

Data Retention

We will retain your data for as long as necessary to achieve the purposes of data processing or as required by applicable laws.

Changes to Privacy Policy

We may periodically change this Privacy Policy by updating the date when these terms were last revised. We recommend checking this Privacy Policy regularly for any changes.