Integritetspolicy

Matsato Privacy Policy (Global) · prokoksknivar.com · Effective as of 19 August 2026

1. Why Should You Read This Privacy Policy?

In Short: This Policy explains how we handle your Personal data. It helps you understand what we do with your information and what your privacy rights are.

Welcome! This Privacy Policy ("Policy") explains how UAB Convenity, trading under the Matsato brand and other Household brands ("Company", "we", "us", or "our") handles your Personal Data ("Personal data" or "Data") when you:

• Visit our sales website prokoksknivar.com ("Website");
• Purchase our products or services ("Goods" or "Service");
• Otherwise interact with us (support, social media, contests, affiliate programs, etc.).

This Policy outlines what Data we collect, the purposes for which it is collected, how we use and share it, how long we retain it, your rights, and how we protect your Data. We are committed to processing your Data lawfully, fairly, and transparently in accordance with:

• The General Data Protection Regulation (GDPR);
• The ePrivacy Directive 2002/58/EC;
• UK General Data Protection Regulation (UK GDPR);
• Australia's Privacy Act 1988 and Australian Privacy Principles (APPs);
• and any other applicable data protection laws.

This Policy applies globally and is founded on the principles of the GDPR. Specific national or regional requirements are addressed in the Regional Addenda (for the United Kingdom, Australia, the United States, Canada, and other jurisdictions) located at the end of this Policy.

If you do not agree with our practices, please refrain from using the Website, purchasing our Goods or Services or submitting your Data in any other way. This Policy is effective as of 20th of August 2026. We may update this Policy occasionally, and all updates take effect upon publication, so we encourage you to review it regularly to stay informed.

2. Who Is Responsible for Protecting Your Personal Data?

We are: UAB Domestica, your Personal data Controller

• Our company number is: 307174704
• Our registered address: Gedimino g. 45-7, LT-44239 Kaunas
• Our support e-mail address: support@prokoksknivar.com
• Data Protection Officer (DPO): dpo@prokoksknivar.com

We have appointed a Data Protection Officer (DPO) to oversee our data protection obligations. You can contact the DPO directly at the address above.

3. For What Purposes and What Data Do We Collect?

In Short: We mainly collect only the Data needed to provide our Goods or Services and operate our Website. This section explains why we collect it and how we use it.

We only collect the Data we truly need – and only use it for clear, lawful reasons (e.g., to process your purchase, provide services, respond to your inquiries, ensure Website functionality, etc.). You can find a full list of purposes, the Data we collect, how we use it, and more detailed information in these subsections below:

1. To Process and Fulfill Your Order

• Purpose of collection / use: When you purchase Goods via our Website or subscribe to a recurring Goods subscription service (if applicable), we process your Personal Data to manage and fulfil your order or subscription. This includes arranging delivery, processing payments, issuing invoices, sending order or billing confirmations, and handling updates, renewals, returns, refunds, or cancellations.
  Note: Goods and Goods subscriptions are sold without creating a customer account.
• Category examples: Identification and contact details: full name, delivery address, email address, phone number. Payment details: price, currency, credit card brand, type, Bank identification number (BIN) number, and issuing country. Technical information: IP address, language, device type.
• Legal basis: GDPR Art. 6(1)(b) – Contract: to complete and deliver your purchase.
• Data retention period: Order and payment records are retained for 10 years in line with legal, tax and accounting obligations.
• Data recipients: Shipping and logistic providers (Worldwide); Payment service providers and banks (EEA and non-EEA); Intra-group companies (EEA).

2. To Process Payments and Comply with Legal Obligations

• Purpose of collection / use: We process your Personal Data when handling payments related to your orders, subscriptions, discounts, returns, or refunds. This processing also includes the performance of tax obligations, such as issuing invoices, maintaining accounting records, and fulfilling other legal statutory requirements.
• Category examples: Payment Information: payment method (card type, last few card digits), payment token, transaction amount, transaction date and time, refund reasons. Billing & Legal Data: name, email, phone, billing address, IBAN/account number, payment records, invoices, VAT and other required accounting or legal documentation. Customs or Import/Export Information (where applicable): personal identification codes or customs data required by law in certain countries.
• Legal basis: GDPR Art. 6(1)(b) – Contract: to receive and manage payments. GDPR Art. 6(1)(c) – Legal obligation: to fulfil statutory accounting requirements.
• Data retention period: We retain accounting-related data for 10 years, as required by financial and tax regulations.
• Data recipients: Payment processors (EU and Non-EEA); Accounting processors (EEA); Intra-group companies (EEA); Auditors (EEA).

3. To Provide Customer Support Services

• Purpose of collection / use: If you contact us by phone and/or in writing (via Live Chat, customer support, email, social media or otherwise), we will keep a record of the fact of your contact and the information you have provided to us to properly process your request and respond to your question, request or complaint.
  We use artificial intelligence (AI)-based tools (fully or semi-automated) to assist our customer support team. These tools are used for suggesting draft responses, guiding or answering calls before transfer to a human agent, transcribing and summarising conversations, and providing automated replies to frequently asked or trained questions.
  Note! All AI-generated outputs are reviewed and validated by human staff where decisions could affect your rights. We do not rely solely on automated decision-making that produces legal or similarly significant effects. We do not use your data for training AI models unless fully anonymized.
• Category examples: When contacted by call: name, surname, mobile phone number, email address, residential address, purchase details and other information required to verify your identity (if needed). Date and time of the call, duration of the call and a recording of the call. Contact by email / or via Livechat, Customer Support: name, surname, mobile phone number, email address, residential address. Purchase details and other information required to verify your identity (if needed). Other information related to the written request, attached documents or other visual content, all correspondence history.
• Legal basis: GDPR Art. 6(1)(b) – Contract: provide Customer support service. GDPR Art. 6(1)(f) – Legitimate interest: respond, advise, provide and administer inquiries when any person initiates the first conversation.
• Data retention period: Recordings of conversations – 6 months from the moment of creation. Written communication – 3 years after your inquiry was closed. We may retain some information longer if we are required to do so to comply with applicable laws or based on justified interests.
• Data recipients: Customer support platform providers (Non-EEA); AI support tools and chatbots (Non-EEA); Customer support agents (some outside EEA); Intra-group companies (EEA).

4. To Provide Transactional Communication

• Purpose of collection / use: We have the right, in performing our rights and obligations under the Terms ("ToS"), to contact you at any time (e.g., provide transactional communication). We may send you important notifications and information by e-mail, SMS or phone call.
  Note! This important communication is not considered marketing, and you cannot opt out of it.
• Category examples: Identification and contact details: name, surname, mobile phone number, e-mail address, residential address. Call details: date and time, duration, the call recording. Technical data: copies of electronic messages/SMS, delivery status and date, message opening (reading) status and date, links opened from the message content.
• Legal basis: GDPR Art. 6(1)(b) – Contract: administration of the ToS and provision of important notifications.
• Data retention period: Recordings of conversations are kept for 6 months from the moment of creation. Electronic communications history logs are kept for 1 month, unless longer retention is required for legal purposes.
• Data recipients: Communication service providers – e-mail/SMS/telephony platforms (EEA and Non-EEA); Intra-group companies (EEA).

5. To Perform Direct Marketing Activities

• Purpose of collection / use: We process your Personal Data to inform you about our Goods and Services, promotions, new features, or to request your feedback. This includes sending general or personalized marketing content e.g., newsletters, promotional messages, surveys via email, SMS, or phone calls.
  When you agree to receive marketing communications from the Company, this may include marketing information and offers about this specific brand and other brands operated within the Company. Marketing content may be customised based on the Data we already hold about you (e.g., previous purchases, browsing history, selected preferences).
  If you are an existing customer, we may contact you with marketing content about the same or similar products or services, even if you haven't given explicit consent, provided that you were given the opportunity to object when your contact details were collected, that an opt-out option is included in each message, and that such contact is permitted by applicable law.
  Remember! You have the right to object to or withdraw your consent for direct marketing at any time, free of charge, by: using the unsubscribe link in any email; using the unsubscribe link on the "Thank You" page; replying "STOP" or the specified keyword to an SMS; informing our representative during a call to be added to our Do Not Call list; or emailing us with your request.
• Category examples: Contact details: full name, e-mail address, telephone number, country. Logs: consent collection logs (date, method, preferences, unsubscribe information, opt-out requests). Marketing interaction data: message delivery and opening status, link clicks, campaign participation, communication preferences, unsubscribe or opt-out actions, and interaction timestamps. Purchase and engagement history (if applicable): products purchased, referral sources, links used, or responses to promotional campaigns. Technical information (for email or SMS delivery): device type, IP address, country.
• Legal basis: GDPR Art. 6(1)(a) – Consent: to process consent via preferred communication method. GDPR Art. 6(1)(f) – Legitimate interest: if you are an existing customer and have not objected, we may send limited marketing about similar products or services to maintain our customer relationship (soft opt-in).
• Data retention period: 3 years from consent given date, unless you unsubscribe earlier. Recordings of conversations – 6 months from the moment of creation.
• Data recipients: Social media service providers (Non-EEA); Marketing service providers (Non-EEA); Intra-group companies (EEA).

6. To Interact with You via Social Media

• Purpose of collection / use: We manage our business profiles and accounts on various social networks. If you are interested in our Services and follow our profiles on social networks, participate in our games, promotions, share your photos with us or tag us in your photos, public posts, etc., we collect and use your Data, which we receive directly from you, when you are active in our accounts.
  Please note that our accounts are integrated into social networking platforms (e.g. Facebook, Instagram, LinkedIn, etc.) and therefore all social platform providers as independent data controllers have full access to collect your Personal Data. You can find detailed information on the data processing, purposes and scope of data use by each social networking platform in the privacy policy of the respective social network.
• Category examples: Identifiers: name, surname, and profile photo. Public interactions: likes, follows, comments, shares. Participation: messages you send (content, time, attachments, history), active participation in games/events, any photos you send us or tag us in.
• Legal basis: GDPR Art. 6(1)(a) – Consent: to process Personal Data when you voluntarily take active steps on our social media accounts.
• Data retention period: The provider of the social network concerned shall set the time limits for the retention of data. We recommend that you check the privacy policy of the social network concerned. We normally retain and don't delete them unless you withdraw consent, request deletion, or the platform enforces earlier deletion.
• Data recipients: Social media service providers e.g. Facebook, LinkedIn, Instagram, TikTok (Normally these providers are Independent Controllers, however in certain cases, we and the provider may act as joint controllers) (Non-EEA); Intra-group companies (EEA); Affiliates (some outside EEA).

7. To Defend and Protect Our Legal Rights or Interests

• Purpose of collection / use: We may process your Personal Data in case we become a party or concerned party in legal proceedings to which you are subject to, or we are statutorily required to collect and/or provide information about you in order to comply with the applicable law.
  Also, in all cases where we suspect fraud, theft, unlawful reselling, misuse of marketing activities with our brand names, or other unlawful activities involving our Website, Company, brands and or services, we report such cases to the appropriate pre-trial investigation authorities (such as the police or prosecutor's office).
• Category examples: All information that we uphold about you and that is a part of the legal process e.g. accounting and legal case files, legal documents, other information you provide us with, other information that we are statutorily required to collect and/or provide. Also, pleadings, claims, court decisions. If the case arises – information about criminal offenses and convictions, Special category data e.g. health information.
• Legal basis: GDPR Art. 6(1)(f) – Legitimate interest: establishment, exercise, or defence of legal claims; to protect our rights and interests.
• Data retention period: As long as the legal proceedings are going and 10 years from the date of entry into force of the court or authority's decision, or the date on which the legally binding decision is fully implemented.
• Data recipients: Legal parties e.g. Attorneys, Notaries, Bailiffs, Auditors, Consultants (EEA and Non-EEA); Courts (EEA); Consumer protection authorities and other institutions (EEA and Non-EEA).

8. To Monitor Website Performance and Marketing Effectiveness

• Purpose of collection / use: When you visit and browse our Website, we process certain Personal Data for statistical, analytical, marketing, and performance monitoring purposes. This helps us improve the functionality, stability, security, and overall user experience of our Website.
  Depending on your cookie preferences and consent choices, we may collect various information through cookies and similar tracking technologies, using trusted tools such as Google Analytics 4 or other authorized analytics and marketing platforms. Detailed information is provided in our Cookie Policy.
• Category examples: Identifiers: IP address or other device identifiers. Technical information: device type, browser type, language settings, hardware/software settings and configurations, referring URLs (websites visited before/after). Usage information: pages visited on our Website, interactions, clicks, or session behavior, visit timestamps, session duration, selected interface or account preferences (if applicable).
• Legal basis: GDPR Art. 6(1)(a) – Consent: We process this data only if you have actively consented to the use of performance and analytics cookies (via our Cookie Banner).
• Data retention period: For more information on the retention periods of cookies, please refer to our Cookie Policy.
• Data recipients: Google Ireland Limited (as provider of Google Analytics services). For more information, please visit: Google Analytics Data Retention.

9. To Organise Contests and Giveaways

• Purpose of collection / use: We process your Personal Data when you participate in our contests, competitions, games, or events. This is done to manage your participation, communicate with you, and (where applicable) publish or promote the outcomes of the activity.
• Category examples: Identifiers: full name, email address, phone number. Participation: social media engagement (comments, shares, "likes", "follows", reactions) contest entries, responses, evaluation/ratings, event attendance. Media content: submitted or captured photos/videos, image/voice in recording.
• Legal basis: GDPR Art. 6(1)(a) – Consent: for contest participation, contacting winners.
• Data retention period: Contest participant data – retained for 1 year after the announcement of winners or as described in specific contest terms, unless a shorter or longer period is specified.
• Data recipients: Social media platform providers (Non-EEA); Contest partners and co-organizers (EEA and Non-EEA).

10. To Create and Use Promotional Content

• Purpose of collection / use: We process your Personal Data when you submit, create, or allow us to use content that features you for promotional purposes. This includes: User-generated content (UGC), such as testimonials, reviews, photos, or videos that you share with us directly or tag us in on social media; Participation in photo or video shoots organized by us, where your image, voice, or personal identifiers may be used for marketing or advertising campaigns.
  Where applicable, a separate image-use or content-use agreement will be signed before publication or distribution, or consent will be collected via a dedicated form.
• Category examples: Identifiers: full name, username or profile name. Media content: photo, video, or audio recordings. Participation: testimonials, reviews, or other content you provide or permit us to use, social media identifiers (tags, mentions, handles), image-use or promotional content agreement (if applicable), consent logs.
• Legal basis: GDPR Art. 6(1)(a) – Consent: when you voluntarily provide content or participate in promotional activities. GDPR Art. 6(1)(b) – Contract: where the content is used under an affiliate, influencer, or advertising agreement.
• Data retention period: UGC and campaign content: retained for up to 2 years from the date of collection or consent, unless a shorter or longer period is specified or consent is withdrawn. Advertising campaign content: archived for up to 10 years for legal, contractual, or compliance purposes.
• Data recipients: Social media platforms (EEA and Non-EEA); Marketing and advertising agencies; Affiliate partners and campaign organisers; Intra-group companies (EEA).

11. To Administer Affiliate Services

• Purpose of collection / use: When you participate in our Affiliate Program (e.g., promoting our Goods or Services via links, campaigns, or other agreed methods), we process your Personal Data to manage your participation, track referrals, calculate commissions, and make payments. We may also use your Data to communicate with you about affiliate program updates, compliance checks, complaints or performance reporting.
• Category examples: Identifiers: name, surname, and contact details (e-mail address, phone number), Affiliate account/login details. Payment and billing details: bank account, or other payment identifiers, invoices. Performance and tracking data: referral codes, campaign statistics, generated leads/sales, IP address, cookies where applicable.
• Legal basis: GDPR Art. 6(1)(b) – Contract: necessary for managing participation in the Affiliate Program, tracking referrals, and making payments. GDPR Art. 6(1)(f) – Legitimate interest: fraud prevention, program integrity, and communication with affiliates.
• Data retention period: Affiliate program data – retained for the duration of your participation in the program and up to 5 years after termination (for accounting, legal, and fraud-prevention purposes). Payment records – retained for 10 years to comply with financial/accounting laws.
• Data recipients: Affiliate platform providers and tracking technology providers (some may be outside the EEA); Intra-group companies (EEA); Tax authorities, auditors, or regulators (where required by law).

12. To Review and Manage Feedbacks

• Purpose of collection / use: We process your Personal Data when you submit a review or feedback through our website, post-purchase surveys, user account, or other communication channels. This processing includes verifying the origin and authenticity of the feedback, moderating its content to prevent misuse (e.g., offensive, false, or misleading statements), and publishing verified reviews to ensure transparency, improve our services, and maintain customer trust.
• Category examples: Identifiers: name, surname, and contact details (e-mail address, phone number). Feedback content: review text, rating, comments, photos, or other media voluntarily submitted by you.
• Legal basis: GDPR Art. 6(1)(a) – Consent: to review and publish feedback.
• Data retention period: Feedback and reviews retained and published for up to 3 years or until withdrawn.
• Data recipients: Third party review management platforms (EEA and some may be outside the EEA); Intra-group companies (EEA).

13. To Maintain Website Service and Security

• Purpose of collection / use: We process your Personal Data automatically and through technical logs whenever you access, browse, or interact with our website or online services. This includes processing necessary to maintain service functionality, detect and prevent unauthorized activities, ensure information system security, and comply with applicable cybersecurity or legal obligations.
• Category examples: Technical and usage data: IP address, device type, operating system, browser type and version, session identifiers, access time, and pages visited, cookie data. Log and diagnostic data: server and application logs, error reports, authentication events, and security alerts.
• Legal basis: GDPR Art. 6(1)(f) – Legitimate interest: to ensure the security, integrity, and continuous operation of our website and IT systems.
• Data retention period: Technical and log data are typically retained for up to 12 months from collection unless a longer period is required for security investigations, legal obligations, or incident resolution.
• Data recipients: Intra-group companies (EEA); IT infrastructure and hosting service providers (EEA and some may be outside the EEA); Security and monitoring service providers (EEA and some may be outside the EEA).

Here are also a few important things for you to know:

• Lawful basis: We will only process your Data if we have a lawful basis under applicable data protection laws. The lawful bases that we might rely on are normally contract, consent, legal obligation or legitimate interest.
• Sensitive Data: We do not intentionally collect or process sensitive Data (like your health, religious beliefs, or biometric data).
• Marketing: We only use your Data for marketing if you've clearly consented or if we have other legal bases.
• Automated tools and AI: We may use AI or other fully or semi-automated technologies to support service delivery (e.g., chatbots, ChatGPT, Gemini etc.), but we do not use automated decision-making that produces legal or similarly significant effects on you within the meaning of Art. 22 of the GDPR.
• No sale of Data: We never sell your Data to anyone for monetary value.
• Children's data: This Website is not intended for minors. We do not knowingly collect Personal Data from minors without appropriate consent. If we become aware that we have inadvertently received Personal Data from a child, we will delete such information promptly.

4. From What Sources Do We Get Your Data?

In Short: We get your Data directly from you, through your use of our Website, or from trusted third parties and public sources. This helps us operate our Services and stay in touch with you.

We might collect Data from the following sources:

• Directly from you: When you place an order, contact us for support or inquiries, fill out forms, surveys, participate in contests or promotional campaigns.
• Automatically via technology: When you visit or interact with our Website or other online platforms, we automatically collect certain Data, including identifiers and information regarding your activity. We utilize cookies and similar technologies to enhance your experience, analyse usage patterns, and secure our platforms.
• From third parties, vendors, and service providers: When we receive services from third party providers – such as hosting platforms, software providers, or professional consultants – we normally receive Data about you directly from them.
• From our affiliate and referral partners: If you follow a referral link or use a partner discount code, we may receive information that might contain your Personal Data.
• From other Intra-group companies (if applicable): Where necessary for internal administrative, service provision, or business development purposes, we may receive your Data from other entities within our corporate group.
• From publicly available sources (if applicable): Where appropriate and permitted by law, we may collect Personal data from public registers (e.g. company registries, professional association websites), official government databases, or social media profiles (e.g. LinkedIn), particularly in the context of business-to-business (B2B) communication, professional outreach or due diligence.

5. Do We Share Your Data with Others?

In Short: Yes, but only when necessary and with strong safeguards — always ensuring your privacy is protected.

Yes - but only when necessary, and with your privacy in mind.

We may share limited Data with trusted third parties to provide our services, meet legal obligations, or support daily business operations. Whenever we do, we ensure that your Data is protected and handled responsibly. For this reason, parties who process Data on our behalf act as Data Processors and are contractually bound by Data Processing Agreements (DPAs). These agreements ensure that they follow our instructions, apply appropriate safeguards, and do not use your Data for their own purposes. We may share your Data with:

• Service Providers (Data Processors): We engage with various service providers to support our business functions (e.g. IT support, hosting, payments, analytics, customer service, marketing, auditing, legal services, etc.). Service providers process Data strictly on our behalf and under our documented instructions.
• Intra-group Companies (Data Processors or Joint Controllers): We may share your Data with other entities within our corporate group for internal administrative purposes, centralised services, or to provide integrated services.
• Public authorities and other Data Controllers: In certain circumstances, your Data may be shared with third parties who act as independent Data Controllers, such as public authorities, law enforcement agencies, courts, insurers, fraud prevention services agencies, independent service providers etc.
• Other corporate entities or auditors: In the context of a potential or actual merger, acquisition, asset sale, or restructuring, we may disclose limited Data to potential investors, buyers, or their auditors, and advisors.
• Other third parties with your consent: Where legally required, we will only share your Data with third parties if you have explicitly given us your informed, freely given consent.

6. How Long Do We Keep Your Data?

In Short: We keep your Data only as long as necessary for legal, contractual, or service-related purposes — then we delete or anonymize it securely.

We keep your Data only for as long as necessary to:

• Fulfil the purposes for which it was collected,
• Provide you with our Goods or Services,
• Comply with legal, regulatory, or contractual obligations, or
• Resolve disputes or enforce our agreements.

Detailed retention periods for each Data processing purpose are set out in Section 3 of this Policy. Once the applicable retention period has expired, we will either securely delete your Data or irreversibly anonymize it within a reasonable timeframe, in line with best industry practices and legal requirements.

7. How Do We Ensure the Security of Your Data?

In Short: We use strong technical and organizational measures to keep your Data safe and work continuously to prevent unauthorized access and protect your privacy.

We apply a combination of technical and organisational measures to prevent unauthorised access, accidental loss, misuse, alteration, or disclosure of Personal Data. Our security safeguard practices include, but are not limited to:

• Collecting Data only for specified and lawful purposes,
• Processing Data fairly and transparently,
• Retaining Data only as long as necessary,
• Limiting access to Data strictly to authorised employees,
• Sharing Data with third parties only when legally justified,
• Providing regular data protection training to our employees,
• Conducting internal and/or external IT security audits,
• Using encryption for sensitive data,
• Performing regular Data backups and activity logging,
• Continuously improving processes to ensure Data security,
• Regularly monitoring our systems for potential threats or breaches.

While we apply strong security measures, no system is entirely risk-free — especially during internet transmissions. To help protect your Data, please stay vigilant online and always use a strong, unique password, keep it confidential, secure your devices, and be cautious when sharing information, especially via suspicious links.

8. Do We Transfer Your Data Internationally?

In Short: Yes, sometimes — but only when necessary and always with strong legal safeguards to keep your Data protected.

We mainly store and process your Data within the European Economic Area (EEA), and there may be times when some of your Data is transferred to trusted partners or service providers located in countries outside the EEA — for example, for cloud hosting, technical support, or specialist services. Where applicable, such recipients are listed in Section 3 of this Policy.

Whenever we send your Data outside the EEA, we make sure that it remains protected, and your privacy rights are respected. Where Data is transferred outside the EEA:

• We check whether the country has an “adequacy decision” from the European Commission, which means it provides a level of data protection similar to that of the EU;
• Where no adequacy decision exists, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission. These are legally binding agreements requiring the recipient to uphold EU-level privacy and security standards;
• Before using SCCs, we conduct a Data Transfer Impact Assessment, as required by the Schrems II decision and EDPB guidance, to evaluate whether additional safeguards are necessary in the recipient country;
• Where needed, we may also apply supplementary technical or contractual safeguards, such as encryption, access controls, and audit rights.

If you would like more details about these transfers, you can contact us using the details provided in Section 11 of this Policy.

9. Do We Use Automated Decision-Making or Profiling?

In Short: Yes, but we don't make important decisions about you based solely on AI. We may use smart tools to support our services, but all important decisions involve real people, not just programs.

We may use certain Artificial Intelligence (AI)-based tools and fully or semi-automated systems — for example, in customer support or during phone calls — to enhance the speed and accuracy of our services.

However, we do not engage in automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, within the meaning of Art. 22(1) of the GDPR. Specifically:

• Any recommendations, responses, or information generated by AI tools are provided for informational purposes only and are subject to review and validation by our human staff;
• We do not use algorithms or automated systems to make decisions about you that produce legal effects (e.g., the denial of a service), without meaningful human involvement;
• You have the right to request human intervention and express your point of view if you believe any decision or response has been generated through automated means that significantly affects you, and to obtain an explanation and review of such a decision by a human member of our staff.

10. What Are Your Rights?

In Short: You have rights over your Personal Data, including access, correction, deletion, objection, and more. This section outlines how you can exercise them and what to expect.

If we process your Data as set out in this Policy, or you believe we may be doing so, you have the following rights as a Data Subject. These rights apply regardless of whether we process your Data as a client, supplier, contractor, or professional contact:

• Right to Be Informed – You have the right to clear, transparent information about how we collect and use your Data. This detailed Policy aims to provide that (Art. 12-13 of the GDPR).
• Right of Access – You can ask us whether we process your Data and request a copy of the Data we hold about you (Art. 15 of the GDPR).
• Right to Rectification – If your Data is inaccurate or incomplete, you can ask us to correct or update it (Art. 16 of the GDPR).
• Right to Erasure ("Right to Be Forgotten") – You can request that we delete your Data if it is no longer necessary for the purposes for which it was collected, you withdraw your consent (where processing was based on consent), you object and there are no overriding legitimate grounds, or the Data was unlawfully processed. Note: This right is subject to limitations (Art. 17 of the GDPR).
• Right to Restrict Processing – You may request that we temporarily limit the processing of your Data in situations such as contesting the accuracy of the Data, or objecting to processing while we assess our legal grounds (Art. 18 of the GDPR).
• Right to Data Portability – Where processing is based on your consent or a contract and carried out by automated means, you can request a copy of your Data in a structured, commonly used, machine-readable format, and ask us to transfer it to another provider (Art. 20 of the GDPR).
• Right to Object – You can object to processing based on our legitimate interests or for direct marketing purposes. We will stop such processing unless we demonstrate compelling legitimate grounds (Art. 21 of the GDPR).
• Right to Withdraw Consent – Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing that took place before your withdrawal (Art. 7(3) of the GDPR).
• Right to Lodge a Complaint – If you're unhappy with how we handle your Data, please contact us first. However, you may also lodge a complaint with the Lithuanian State Data Protection Inspectorate (https://vdai.lrv.lt/lt/) or the supervisory authority in your country of residence or place of work.

Please note: Your rights are not absolute. In some cases, the exercise of your rights may be restricted under applicable data protection laws — for example, where fulfilling your request would adversely affect the rights and freedoms of others, or where we are legally required to retain certain Personal data.

11. How to Exercise Your Rights or Contact Us?

If you have any general questions about this Policy, how we process Data, a complaint or if you wish to exercise any of your Data Subject rights, you can contact us by email at dpo@prokoksknivar.com.

To help us process your request efficiently, please:

• Clearly express your question or complaint,
• Specify which Data Subject right you wish to exercise (if applicable),
• Provide enough information to identify you (we may ask for proof of identity or proceed identity verification process), and
• Include any relevant details that will help us respond quickly.

You may also authorise someone to act on your behalf. If so, please ensure your authorized person provides us with written and signed authorisation confirming they are allowed to act for you. We may deny a request if sufficient proof of authorization is not provided.

We aim to respond without undue delay and within one month of receiving your request. If your request is particularly complex or involves multiple issues, we may extend this period by an additional month – in which case, we will inform you in advance and explain the reason for the delay.

12. Regional Addenda

This Addendum supplements our Global Privacy Policy and applies where your Personal Data is subject to the laws of the country or region in which you reside, or where our processing activities are specifically targeted. These regional terms complement the Global Privacy Policy and override it only where required by applicable local law.

THE END OF POLICY