Privacy Policy
Last updated: 7 August 2026
This online shop, www.christmas1.lt, is operated by, and the controller of your personal data is, MB „Kamden“, legal entity code 307013462, registered office at Perkūnkiemio g. 19, Vilnius, LT-12120, Lithuania, email info@kaledos1.lt. We respect your privacy and are committed to ensuring that your personal data is processed responsibly.
This Privacy Policy explains what data we collect, why we collect it, how we store it and what rights you have. Please read it carefully – we process data only where we have a legal basis, as set out in Section 2.
1. What data we collect
When you use our services, we may collect:
- Contact details – first name, surname, email address, telephone number, delivery address.
- Payment data – the fact, amount and method of payment. We do not see or store your payment card number or bank login details – these are processed by payment intermediaries in their own environment.
- Order data – purchased goods, delivery method, returns.
- Technical information – IP address, browser type, device data.
- Communication data – information you provide when contacting our customer service or the help window.
- Greeting order data – when you order a “Santa Claus video greeting”, the child’s name and age you specify and the facts you provide, which we use for the greeting text. This data is provided by you, the adult customer.
- Newsletter data – your email address, chosen website and language, the time of consent and IP address (as proof of consent) and, if you arrived from an advert, the campaign tags (UTM and click identifier) – so that we know how you found us.
- Back-in-stock notification data – the email address you enter after clicking “Notify me when available” next to a sold-out product.
- Wish list – the products you have marked. They are stored in a cookie in your own browser, not on our server, so no login is required.
2. How we use your data, legal bases and retention periods
For each purpose of data processing we apply a specific legal basis and store the data for no longer than necessary:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Order acceptance, processing and delivery | Performance of a contract (Article 6(1)(b) GDPR) | Until the contract has been performed and warranty obligations have ended |
| Keeping accounting records | Legal obligation (Article 6(1)(c) GDPR) | 10 years from the business transaction, as required by accounting legislation |
| Customer service and handling enquiries | Legitimate interest (Article 6(1)(f) GDPR) | 2 years from the last correspondence |
| Newsletters and personalised offers | Consent (Article 6(1)(a) GDPR) | Until consent is withdrawn |
| Analytics and marketing cookies | Consent (Article 6(1)(a) GDPR) | Up to 24 months or until consent is withdrawn |
| Shop security, fraud prevention | Legitimate interest (Article 6(1)(f) GDPR) | 12 months |
| Handling returns and complaints | Legal obligation and legitimate interest | 3 years from the resolution of the complaint |
| Replies in the help window (we use an artificial intelligence service) | Legitimate interest (Article 6(1)(f) GDPR) | Chat history – 30 days |
| Preparation of the “Santa Claus video greeting” text based on the data you provide | Performance of a contract (Article 6(1)(b) GDPR) | Until the greeting is delivered and 6 months for complaints |
Once the retention period expires, the data is deleted or anonymised.
2.1. Back-in-stock notifications and the wish list
| What for | Basis | How long we keep it |
|---|---|---|
| To notify you when a sold-out product is back in stock | Your consent (Article 6(1)(a) GDPR) | Until the notification is sent or until the end of the season – after that we delete the address |
| Wish list in your browser | Legitimate interest – a feature you requested yourself | 90 days in a cookie; it disappears immediately if you clear your browser cookies |
You can opt out of the back-in-stock notification at any time by writing to info@kaledos1.lt – we will delete the address without delay.
3. Data sharing
We may transfer your personal data only to those partners that are necessary for the provision of our services:
- logistics and courier companies – for the delivery of goods,
- payment intermediaries – Stripe Payments Europe, Ltd. (Ireland) for card, Apple Pay and Google Pay payments, and Maksekeskus AS (MakeCommerce.lt, reg. no. 12268475, Estonia) for payments via the online banking of Lithuanian banks. They process the payment in their own environment; we do not see or store your payment card or bank login details,
- the website hosting provider on whose servers the shop runs,
- artificial intelligence service providers – when you write in the help window or order a “Santa Claus video greeting”, the data of your question or greeting is transferred for processing to Anthropic PBC (USA) and/or OpenRouter, Inc. (USA). We transfer only what is necessary to prepare the reply or the greeting; this data is not used to train models,
- the analytics service provider – PostHog, Inc., when you consent to analytics cookies. The data is processed on PostHog servers in the European Union (Germany). Collected: pages visited, clicks, mouse movements and browser type. What you type into form fields – email, address, payment data – is masked, and we do not store your IP address. If you subscribe to the newsletter, we link the browsing recording to your email address so that we can see where subscribers came from. Without analytics consent there is no recording and no linking,
- the email marketing service provider – to send newsletters when you subscribe. You can unsubscribe with one click in every email,
- social network and advertising platforms (e.g. Meta) – only if you consent to marketing cookies, so that we can measure advertising results and target ads more accurately. Technical browsing data is transferred, and contact data only in encoded form. You can object at any time by changing your cookie settings or writing to us,
- internal team tools – so that we learn about a new order or enquiry in time,
- the error monitoring service provider – Functional Software, Inc. (Sentry), so that we know when something on the website breaks. Only the error message, the page address and the browser version are transferred – without your name, email or IP. The data is processed in Germany,
- when you sign in with a Google account – Google Ireland Limited, to confirm your identity,
- law enforcement authorities – where required by law.
We do not sell your data or transfer it to third parties for marketing purposes without your explicit consent.
If you do not want your question to be passed to an artificial intelligence service provider, write to us directly at info@kaledos1.lt – we answer such emails ourselves.
4. Data security
We use technical and organisational measures to ensure the security of your data. Nevertheless, we must stress that no system is completely secure – we therefore recommend keeping your login details safe and not disclosing them to anyone else.
5. Data transfers outside the European Economic Area
We process order, accounting and delivery data within the European Economic Area (EEA). Analytics (PostHog) and error monitoring (Sentry) data also remain in the EU – on servers in Germany.
Some of the service providers listed in section 3 (AI, email marketing, advertising platforms and internal team tools) may process data outside the EEA, mainly in the United States. Such transfers are carried out on the basis of standard contractual clauses approved by the European Commission or an adequacy decision (the EU–US Data Privacy Framework).
You may also choose not to use these services: you can shop in our store and contact us by email without using the help window.
6. Automated decision-making
We do not take decisions based solely on automated processing which produce legal effects concerning you or similarly significantly affect you, and we do not carry out profiling for the purpose of taking such decisions.
7. Your rights
You have the right to:
- access your personal data,
- request its rectification or erasure,
- restrict or object to its processing,
- opt out of receiving marketing communications,
- receive a copy of your data (data portability).
To exercise your rights, contact us by email: info@kaledos1.lt. We reply within 30 calendar days at the latest.
If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority – the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, 10312 Vilnius, tel. 8 5 271 2804, email ada@ada.lt, vdai.lrv.lt).
8. Cookies
Cookies are small text files stored on your device. We divide them into three groups:
| Group | What they are used for | Basis |
|---|---|---|
| Essential | Basket contents, session, checkout, login, security, wish list. The shop would not work without them. | Legitimate interest – no consent required |
| Analytics | Visit statistics and browsing recordings (which pages you opened, where you clicked, how you moved the mouse), helping us see where obstacles arise. The contents of form fields are masked. | Your consent |
| Marketing | More relevant advertising on social networks and measurement of its results (advertising platform cookies and tags). | Your consent |
About browsing recordings. If you consent to analytics cookies, we record how you browse the website – this helps us see where shoppers get stuck. The recording does not show what you type into form fields: your email, address and payment data are masked in your browser before they ever reach us. We keep the recordings for up to 30 days. If you do not consent – no recording is made.
We do not enable analytics or marketing cookies without your consent. You can change your choice at any time by clicking “Cookie settings” at the bottom of the website or by clearing the cookies in your browser.
9. Changes to this Privacy Policy
We may update this policy when legislation or our business practices change. The latest version is always published on our website.
10. Contact information
If you have any questions about this Privacy Policy or the processing of your data, please contact us:
MB „Kamden“
Company code 307013462
Perkūnkiemio g. 19, Vilnius, LT-12120
info@kaledos1.lt
In the event of a dispute, the Lithuanian text of this policy, available at kaledos1.lt, shall prevail.
