This Privacy Policy provides information on how IRP, owned by Individual Racing Parts, UAB, registered office address: Virbališkių g. 12, Juragiai,Kauno r., Lithuania, 53286, (hereinafter referred to as ‘we’, ‘our’, ‘us’) collects, processes, and protects any personal data users provide to us and how users can control what personal information we collect from them and what we do with it.
This Policy applies when users visit our website online, purchase our products within irp.lt, contact us or engage via social media, enter competitions, or contact us via email or write to us.
Terms and definitions
The terms used in this Privacy Policy:
- ‘Personal data’ shall mean any information related to the person, who can be identified either directly or indirectly (e.g., first name, surname, contact details, etc.)
- ‘Person’ shall mean the data subject whose data is processed (e.g., the customers who purchased our products online, users of our website, persons who have contacted us via email, etc.).
- ‘Processing’ shall mean any action performed in respect of the personal data (e.g., collecting, recording, storage, granting of access, transfer, etc.).
- ‘Services’ shall mean any goods and services provided by IRP.
What personal data are we processing?
Personal data and information we may collect and process are:
- Identification data: first name, last name, etc.
- Contact information: postal address including billing and delivery addresses, phone number, e-mail address, etc.
- Device data: information about the device user uses to browse our website, including the IP address and device type.
- Data of Cookies: user’s online browsing activities on our website, including which items user stores in their shopping cart, information about the user’s location, the user’s preferences, interests, etc. (for more details, please visit our Cookie Policy)
- Data related to the provision of our services: purchases and orders made by user, user’s communications with us, competition and survey responses, etc.
- User’s communication and marketing preferences.
- Other data processed by us on the legal grounds provided for in legal acts.
Some personal data is collected directly (e.g., when a user sets up an account on our website or contacts us via email), other personal information is collected indirectly (e.g., when using our website or shopping online). We may also collect personal data from third parties which have the user’s consent to pass user’s information to us, or from publicly available sources. Personal data may be anonymized and aggregated for insight and research; however, this data would not identify the user.
Our website and services are not intended for children under 13 years of age, and we do not knowingly collect personal information from children under age 13. If we learn that we have collected personal information from a child under age 13, we will delete it.
Legal basis for the processing of personal data
Personal data and information we may collect and process are:
- when processing of data is necessary in order to execute our contract with customers (for the purposes of the sale of goods or services to a customer);
- the person has given consent to the processing of his data for one or more specific purposes;
- when personal information is necessary in order to pursuit our legitimate interests, including:
- selling and supplying goods and services to our customers;
- promoting, marketing, and advertising our products and services;
- understanding our customers’ behavior, activities, preferences, needs, and interests;
- improving our existing products and services and developing new products and services;
- handling customer communications, queries, complaints, or disputes;
- managing and auditing our operations;
- or when processing of data is necessary for complying with our legal obligations.
Customers have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.
Purposes of the processing of personal data
General
The main purposes sought by IRP in the processing of personal data:
- To provide goods and services for the customers.
- To ensure a functional and optimized website for the best possible user experience.
- For legal accounting requirements.
- For analysis, insight, and research purposes to better understand the needs of customers in order to provide the most relevant content.
- For general statistics in order to manage users’ flows in our online channels and to evaluate effectiveness of our communication.
- To enable smooth customer service interactions and solving submitted enquiries via social media, email, or other digital channels.
- To manage any account(s) customers hold with us.
- To verify customers’ identity
- With customers’ consent, to contact them about promotional offers, products, and services they might be interested in.
- To manage any account(s) customers hold with us.
In all the cases mentioned above, we shall process personal data only with regard to personal data protection requirements.
Marketing and promotional communication
For marketing purposes and to evaluate users’ experience: we may send emails to update customers on the latest offers and events and process information about the sent direct marketing emails interaction. This data is processed and information is sent to the person only if the person has given consent for direct marketing and profiling.
For promotional communications on online media: we may use online media communications through external media channels, such as social media platforms, and/or external digital advertisers (e.g., Google, Meta).
The user has the right to opt out of receiving promotional communications at any time, by:
- informing us that the user wants to change their marketing preferences by contacting us at info@irp.lt;
- by clicking an ‘unsubscribe’ button in any email that user has received from us.
This may not stop service messages such as order updates.
Profiling and Automated decision making
We do not manage personal data by means of automated individual decision-making, we only carry out profiling (i.e., automated processing of personal data, where personal data is used to evaluate certain aspects related to a user), which does not create legal consequences or similar significant effects for the users. Profiling is performed in order to control the sending and displaying of unwanted and irrelevant marketing offers based on the types of services used by customers, the method of payment, etc.
Some of the cookies and similar technologies we use are operated by third party companies. We use third-party services, such as Meta Pixel, Meta Conversions API, Google Analytics, and we may use its advertising products, such as Meta and Google Ads, that may collect usage data (using cookies, pixel tags and similar tools) about our website to provide us with reports and metrics that help us to evaluate usage of our website, improve performance and user experience, and serve relevant advertising to the users.
Users may see our ads on other websites, because we use third-party ad services. Any advertisements users see will relate to their browsing activity on our website from their computer or other devices, purchasing behavior online, and responses to marketing communications. Through these ad services, we can show ads to the users that would be relevant and tailored to the individual interests of the users. These ad services may also track your online activities over time and across multiple websites by collecting information through automated means. This data collection takes place both on our website and on third-party websites and apps that participate in these ad services.
User has the right to object to our use of profiling described above at any time by:
- informing us that the user wants to opt out of automated processing by contacting us at info@irp.lt;
Cookies
Our website uses cookies to ensure that we give users the best experience on our website to personalize content and adverts and to analyze our website’s traffic. That includes capturing information about browsing and purchasing behavior by people who visit our website.
Detailed information is set out in our Cookie Policy and is provided to ensure users are fully aware of the cookies we use, allowing them to make an informed choice about their acceptance of cookies.
Sharing data with Third parties
We may share users’ data with third parties who provide services on our behalf in order to make certain services available to users and to better understand their needs to optimize and improve our services, products, and user experience. All our third-party service providers are required to take appropriate security measures to protect your data in line with our policies. These third-party service providers can only use users’ data to provide services to us and to the users, and for no other purposes. We may provide outside companies with aggregated and anonymized information and analytics about our customers, however, the data provided cannot identify the users.
We may also share user’s personal data with third parties if we are under a duty to disclose or share that personal data in order to comply with any legal obligation, or to protect the rights, property or safety of our site, our users, and others.
Where users’ data is shared with third parties, we will seek to share the minimum amount necessary.
International transfers of your data
When it is necessary to share a user’s personal information outside of the European Economic Area (the EEA), which typically occurs when service providers are located outside the EEA or if the user is based outside the EEA, these transfers are subject to special rules under data protection laws.
That can be done only if at least one of the following conditions is met:
- the European Commission has recognized that the country to which the data is transferred ensures a sufficient level of personal data protection;
- a data processing contract has been concluded in accordance with standard conditions approved by the European Commission;
- codes of conduct are followed and other safeguards in accordance with the Regulation are applied.
Storage of data
We retain user’s personal information for as long as it is reasonably necessary to fulfill the purposes described in this Privacy Policy. For example, we keep a user’s account profile information for as long as the user keeps their account, but we may keep the user’s purchase history longer to comply with our legal, accounting, and recordkeeping obligations, administer applicable returns and warranty programs, and for research, development, and safety purposes. In relation to users’ personal data, we will hold this only for so long as we require that personal data for legal or regulatory reasons or for legitimate organizational purposes. We will not keep user’s data for longer than is necessary for the purposes for which we collect them.
How do we protect your data?
We ensure the confidentiality of personal data in accordance with the requirements of effective legal acts and appropriate technical and organizational measures intended to protect personal data from unauthorized access, disclosure, accidental loss, change or destruction, or other unlawful processing.
We are committed to keeping users’ personal data safe and secure, and our security measures include:
- encryption of data;
- regular cyber security assessments of all service providers who may handle the personal data;
- security controls which protect our IT systems infrastructure from external and unauthorized access;
- internal policies setting out our data security rules.
Rights of the users
Users have the following rights:
- the right to be informed about their personal data being processed by us;
- the right to request access to personal data we hold about them at any time;
- the right to require the rectification of their incorrect, incomplete, or inaccurate personal data;
- the right to object to the processing of their personal data and/or to withdraw any consent they have given us and to opt out of any marketing communications that we may send;
- the right to request to erase their personal data if it is made in violation of the requirements of applicable legal acts or if the person’s data are no longer necessary for the purposes for which they were collected and/or processed;
- the right to restrict the processing of their personal data in accordance with applicable legal acts, i.e., for the period within which it would be assessed whether the user has the right to request that his personal data should be erased;
- the right to data portability: the right to have their personal data provided in a structured, commonly used and machine-readable format in order to transmit their data to a different data controller;
- the right to object to the processing of their personal data and/or in case personal data are processed on the grounds of consent, to withdraw the consent to the processing of their personal data at any time.
If you wish to exercise any of the above rights, you can always contact us via email at info@irp.lt.
Obligations of users
When providing their personal data to us, users confirm that they have properly familiarized themselves with the terms of the processing of personal data presented in this Privacy Policy, do not object that we shall process the personal data provided by the users, and that their provided data and information are accurate and correct.
Privacy statement validity and changes
This Privacy Policy sets out the main provisions of the processing of personal data. We reserve the right to unilaterally amend and/or supplement the Privacy Policy. We shall inform users of amendments to the Privacy Policy by making respective publications on our website.