Privacy Policy

This Privacy Policy, together with the WatchMe website terms of use, governs your use of the WatchMe website (hereinafter – the Website), which is managed by UAB "Sponge".

With this Privacy Policy, we inform you about the main purposes of personal data collection and processing, explain how long personal data is stored, to whom it may be provided, what rights data subjects have, and where to apply for the exercise of these rights or other matters related to personal data processing.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter – the Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts regulating personal data protection.

UAB "Sponge" adheres to the following main data processing principles:

  • personal data is collected only for clearly defined and legitimate purposes;
  • personal data is processed lawfully, fairly, and transparently;
  • personal data must be accurate and, where necessary, kept up to date;
  • personal data is stored securely and no longer than necessary to achieve the stated data processing purposes or as required by law;
  • personal data is processed only by those Company employees who are authorized to do so according to their job functions, or by duly authorized data processors.

1. Definitions

1.1. Data Controller – UAB "Sponge" (hereinafter – the Company), legal entity code 302494020, registered office address Molėtų pl. 47F, Vilnius, LT-08409, email info@watchme.lt.

1.2. Data Subject – any natural person whose personal data is processed by the Company. The Company collects only those personal data of the data subject that are necessary for the Company's activities, provision of services, sale of goods, and/or when the data subject visits, uses, or browses the Website, the Company's "Facebook", "Instagram" accounts, or other channels managed by the Company. The Company ensures that the collected and processed personal data is secure and used only for the stated purposes.

1.3. Personal Data – any information directly or indirectly related to a natural person whose identity is known or can be directly or indirectly identified using relevant data. Personal data processing – any operation performed with personal data, including collection, recording, storage, editing, modification, use, granting access, transfer, archiving, or deletion.

1.4. Consent – a freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her for a specific purpose.

2. Sources of Personal Data

2.1. Personal data may be provided by the data subject himself when contacting the Company, using the Company's services, purchasing goods and/or services, participating in loyalty programs, lotteries, competitions, surveys or research, leaving feedback or comments, asking questions, subscribing to newsletters or requesting information.

2.2. Personal data may be obtained when the data subject visits the Website, fills out forms on it, places an order, creates an account, or otherwise leaves their contact or other data.

2.3. Personal data may be obtained from other legitimate sources, including the Company's service providers, partners, state institutions, establishments, companies, or publicly available registers, when such data acquisition is permitted by applicable legal acts.

3. Personal Data Processing

3.1. By providing his or her personal data to the Company, the data subject confirms that the data provided is correct and that the Company may process it for the purposes and on the legal bases specified in this Privacy Policy.

3.2. The Company processes personal data for the following purposes.

3.2.1. Administration of Purchases and Orders

Purchase data is processed to conclude and execute purchase and sale agreements, administer orders, accept payments, deliver goods, process returns, warranty claims, and fulfill legal accounting obligations.

When purchasing goods on the WatchMe Website, you may provide the following personal data:

  • first name and last name;
  • phone number and email address;
  • billing and/or delivery address;
  • order and selected product details;
  • payment information required to initiate, execute, and confirm payment;
  • IP address;
  • purchase and order history;
  • other data that you voluntarily provide when placing an order.

3.2.1.1. Payment Processing

Payments in the online store may be processed using the "MakeCommerce" payment platform, managed by "Maksekeskus AS" (Liivalaia 45, Tallinn 10145, Estonia, registration No. 12268475). Therefore, your personal data required to execute and confirm payment may be transferred to "Maksekeskus AS".

3.2.2. Registration and Account Data

Registration and account data are processed to enable you to create and use a WatchMe customer account, administer account information, and use the Website's features.

Mandatory registration data may include:

  • email address;
  • password or other account authentication information.

Additional data you may provide at your discretion:

  • first name and last name;
  • phone number;
  • delivery and/or billing address.

When creating an account on the Website, you may provide other personal data that is not necessary to use the main functions of the Website.

3.2.3. Cookies and Browsing Data

When you visit the Website, information about your device, IP address, browser, visit time, viewed pages, actions taken, selected settings, and other browsing data may be collected.

Cookies and similar technologies are used to ensure the proper functioning of the Website, save your choices, analyze Website usage, improve user experience, and, with your consent, provide personalized marketing.

3.2.4. Communication Preferences

Communication preference data is processed to administer your chosen methods of communication with the Company, marketing consents, and other communication settings.

For this purpose, the following data may be processed:

  • first name and last name;
  • phone number and email address;
  • preferences regarding marketing message reception;
  • publicly expressed opinions and feedback about WatchMe products or services;
  • wish list;
  • history of mutual communication between the Company and you;
  • IP address;
  • shopping cart data;
  • survey responses;
  • purchase, order, and payment history.

3.2.5. Administration of Inquiries, Comments, and Complaints

To respond to your questions, comments, requests, or complaints, the following data may be processed:

  • first name and last name or only first name;
  • phone number and email address;
  • order number and other order-related information;
  • text of the question, comment, request, or complaint;
  • history of correspondence and communication with the Company.

3.2.6. Direct Marketing

Direct marketing data is processed based on your consent, to provide information about WatchMe products, services, news, offers, discounts, promotions, lotteries, contests, or other projects.

For this purpose, the following personal data may be processed:

  • first name and last name;
  • phone number;
  • email address;
  • marketing message reception preferences.

You can withdraw your consent for direct marketing at any time by using the unsubscribe link provided in the marketing message or by writing an email to info@watchme.lt.

3.2.7. Content You Share

On the Website or other channels managed by WatchMe, you may be given the opportunity to share feedback, comments, photos, or other content. The Company may collect, store, and publish your submitted content if permitted by applicable laws and your chosen settings.

Before publishing content, make sure you have the right to share it and that it does not contain personal data of other persons that you are not entitled to disclose.

4. Provision of Personal Data

4.1. The Company undertakes to maintain confidentiality with respect to data subjects. Personal data may be disclosed to third parties only when it is necessary to conclude or execute a contract, fulfill obligations established by legal acts, or based on another legitimate ground.

4.2. The Company may transfer personal data to service providers and data processors who provide information technology, Website hosting, payment, goods delivery, accounting, customer service, marketing, analytics, or other services on behalf of the Company.

Data processors may process personal data only according to the Company's instructions and only to the extent necessary to provide their services and fulfill contractual obligations.

The Company may transfer personal data necessary for payment execution and confirmation to the payment processing service provider "Maksekeskus AS", operating through the "MakeCommerce" platform.

4.3. The Company may also provide personal data to courts, law enforcement institutions, tax administrators, or other state institutions when it is necessary to comply with the requirements of applicable legal acts or legitimate instructions of institutions.

4.4. The Company does not sell or rent personal data to third parties.

5. Processing of Minor's Personal Data

Persons under 14 years of age should not provide their personal data through the Website without the consent of parents, guardians, or other legal representatives. If a person is under 14 years of age and wishes to use the Company's services, consent from one of their parents, guardians, or other legal representatives must be obtained before providing personal data, when such consent is required by applicable legal acts.

6. Personal Data Storage Periods

6.1. Personal data collected by the Company is stored in paper documents and/or the Company's information systems. Personal data is processed no longer than necessary to achieve the stated data processing purposes, or for as long as required by applicable legal acts.

6.2. Specific personal data storage periods may depend on the purpose of data processing, the duration of contractual relationships, legal obligations, limitation periods, and the need to assert, exercise, or defend legal claims.

6.3. You have the right to request that the Company delete your personal data when there is a ground for doing so under the Regulation.

Your personal data may not be deleted if it is determined that:

  • personal data is still necessary for the purposes for which it was collected or processed;
  • data processing is necessary for the performance of a contract with you;
  • data processing is necessary to comply with a legal obligation applicable to the Company;
  • data is processed based on the legitimate interest of the Company or a third party, which overrides your interests, rights, and freedoms;
  • data is required for the establishment, exercise, or defense of legal claims;
  • there is another ground for storing data provided for in the Regulation or applicable legal acts.

You can submit a request for the processing or deletion of your personal data:

7. Data Subject Rights

  • 7.1. The right to receive information about personal data processing.
  • 7.2. The right to access your personal data processed by the Company.
  • 7.3. The right to request the rectification of inaccurate or incomplete personal data.
  • 7.4. The right to request the erasure of personal data ("right to be forgotten") when there is a ground for doing so under the Regulation. This right does not apply when data processing is necessary for the performance of a contract, to comply with a legal obligation, for the establishment, exercise, or defense of legal claims, or in other cases provided by law.
  • 7.5. The right to request restriction of personal data processing.
  • 7.6. The right to object to the processing of personal data when data is processed based on a legitimate interest or for direct marketing purposes.
  • 7.7. The right to data portability, when data is processed by automated means based on your consent or a contract.
  • 7.8. The right to request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in cases provided by law.
  • 7.9. The right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • 7.10. The right to lodge a complaint with the State Data Protection Inspectorate if you believe that your personal data is being processed in violation of applicable laws.

8. Exercise of Data Subject Rights

To exercise your rights, please submit a written request to the Company via email at info@watchme.lt. To protect your personal data, the Company may ask for additional information necessary to verify your identity.

The Company will respond to the request within the period specified in the Regulation. Depending on the complexity and number of requests, the response period may be extended in accordance with the procedures established by legal acts, with prior notification to you.

9. Data Security

The Company implements appropriate organizational and technical security measures designed to protect personal data from unauthorized or accidental disclosure, alteration, loss, destruction, or other unlawful processing.

Although the Company makes reasonable efforts to ensure the security of personal data, no method of data transmission or storage can guarantee absolute security.

10. Changes to the Privacy Policy

The Company has the right to periodically update or change this Privacy Policy, taking into account changes in legal acts, the Company's activities, Website functionality, or personal data processing procedures.

The current version of the Privacy Policy is published on the WatchMe Website. We recommend reviewing it periodically.