Privacy Policy
Last Updated: 2026.04.10
1. DEFINITIONS
1.1. Company or Data Controller: Insoda, UAB (trading as mr.Soda.lt), a private limited liability company established and operating under the laws of the Republic of Lithuania, legal entity code 306374926, VAT code LT100016396014, registered address at Žaslių g. 14, Žiežmariai, LT-56235 Kaišiadorių r., Lithuania.
1.2. Client or Data Subject: A natural person—a customer of the Company (including website visitors)—whose Personal Data is collected by the Company.
1.3. E-shop: The Company’s electronic shop located at https://mrsoda.lt.
1.4. Services: All services provided by the Company.
1.5. Personal Data: Any information relating to a natural person (Data Subject) whose identity is known or can be identified, directly or indirectly, by reference to data such as a personal identification number or one or more factors specific to the physical, physiological, psychological, economic, cultural, or social identity of that person.
1.6. Processing of Personal Data: Any operation performed on Personal Data, such as collection, recording, accumulation, storage, classification, grouping, combination, alteration (supplementation or correction), provision, publication, use, logical and/or arithmetic operations, search, dissemination, destruction, or any other action or set of actions.
1.7. Partner: A legal entity that provides services to the Company related to its activities, sells goods to it, or carries out joint projects with the Company (including, but not limited to, marketing promotions, joint sales campaigns, loyalty programs, etc.) in media, on websites, in the E-shop, retail stores, retail chains, etc.
1.8. Cookie: A small piece of text information automatically created when browsing the website and stored on the visitor's computer or other device.
1.9. Direct Marketing: Activities intended to offer goods or services to individuals by mail, telephone, or other direct means and/or to inquire about their opinion regarding the offered goods or services.
1.10. Privacy Policy: This document, which sets out the principles and rules for the Processing of Personal Data when using the services of the E-shop.
1.11. Account: The basic login data of the Client for the E-shop, consisting of an email address and a Password.
1.12. Password: A unique combination of numbers, letters, or other symbols created by the Client, used to log in to the E-shop.
2. GENERAL PROVISIONS
2.1. By using the Services and purchasing from the E-shop, the Client acknowledges and agrees that the Company may perform all Personal Data processing actions within the scope and for the purposes set out in this Privacy Policy.
2.2. Personal Data is processed in accordance with Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts regulating the protection of personal data.
2.3. The Company processes Personal Data in accordance with the following principles:
2.3.1. Personal Data is collected for specified and legitimate purposes;
2.3.2. Personal Data is processed accurately, fairly, and lawfully;
2.3.3. Personal Data is adequate and limited to what is necessary for collection and further processing;
2.3.4. Personal Data is constantly updated;
2.3.5. Personal Data is stored in a form that permits identification of Data Subjects for no longer than is necessary for the purposes for which the data were collected and processed;
2.3.6. All information regarding Personal Data is confidential;
2.3.7. The Client's Personal Data and personal information will not be used for unlawful purposes.
2.4. It is deemed that the Client, by purchasing in the E-shop, has read the current version of the Privacy Policy and agrees to it. If the Client does not agree with any part of the Privacy Policy, the Client must not place an order or purchase goods in the E-shop.
2.5. The Privacy Policy can be accessed in the E-shop and printed at any time. The Company reserves the right to amend, supplement, or update the Privacy Policy at its discretion. The new version of the Privacy Policy will be published in the E-shop.
2.6. The Client may place an order in the E-shop without registration or by registering an Account.
2.7. During initial registration, the Client must provide their email address, create a secure Password, and provide accurate Personal Data. The Client is responsible for the accuracy of this data. Upon creating an Account, the Client is assigned an identification code.
2.8. When using the Services or purchasing in the E-shop, the Client must always provide accurate Personal Data and is responsible for its correctness.
2.9. The Client has the right to change and supplement Personal Data in the Account at any time or to submit a request to the Company to delete the Account.
2.10. The Client must not disclose the Password to third parties and must keep it secure. Failure to do so renders the Client liable for any related consequences.
3. COLLECTION, USE, CORRECTION, AND STORAGE OF PERSONAL DATA
3.1. The Company respects each Client's right to privacy. The Client's Personal Data is collected and processed for the following purposes:
3.1.1. For E-commerce purposes:
Data Processed: Name, surname, email address, phone number, delivery address, age/year of birth, IP address, payment details (bank account No., payment method, etc.), purchase history.
Retention Period: 5 (five) years from the date of the last login to the E-shop.
3.1.2. For Direct Marketing purposes:
Data Processed: Name, surname, phone number, email address, address, age, gender, date of birth, place of residence.
Retention Period: 5 (five) years from the date of the last login to the E-shop.
3.2. The Client may provide consent for the processing of their Personal Data for Direct Marketing purposes. If the Client explicitly consents to receive Direct Marketing communications but later no longer wishes to receive them, the Client may inform the Company, and the Company will cease processing Personal Data for this purpose and stop sending newsletters, except for information related to the Client's active orders. 3.3. The Client has the right to withdraw consent for Direct Marketing at any time by submitting a notice to info@mrsoda.lt, clearly stating the withdrawal of consent. 3.4. The Client may also opt-out of Direct Marketing by clicking the unsubscribe link found in every newsletter or promotional email sent.
3.5. Rights of the Data Subject: The Client possesses the following rights regarding their Personal Data:
3.5.1. To receive information from the Company about the processing of their Personal Data and to access their data;
3.5.2. To receive information regarding the sources from which the data was collected, the purpose of processing, and the recipients to whom data has been provided within the last 1 (one) year;
3.5.3. To request rectification, destruction of Personal Data, or suspension of processing actions (except for storage) if the data is processed in violation of the GDPR or the laws of the Republic of Lithuania.
3.6. To exercise these rights, the Client must provide proof of identity (e.g., a copy of an ID card, passport, or driver's license acceptable to the Company). The Company provides information about processed Personal Data to the Data Subject free of charge once per year. Requests should be sent to info@mrsoda.lt. The Company reserves the right to modify or delete data only after identifying the requesting Client.
3.7. Data Transfer to Third Parties: The Client's Personal Data is not transferred to third parties, except in the following cases:
3.7.1. When the Client’s consent has been obtained as described in this Policy;
3.7.2. To Partners providing services to the Company related to the Company’s activities (e.g., courier services, IT providers);
3.7.3. To competent authorities in cases provided for by the laws and legal acts of the Republic of Lithuania;
3.7.4. Payments in the E-shop are processed using the makecommerce.lt platform, managed by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475). Therefore, your personal information required for payment execution and confirmation will be transferred to Maksekeskus AS.
3.8. The Client acknowledges their right to object to the processing of their Personal Data for Direct Marketing purposes, either immediately or at a later time.
3.9. The Client agrees that their Personal Data may be transferred to Partners for the purpose of fulfilling the Client's order placed in the E-shop, as well as when the Company provides Services to the Client, as specified in clause 3.7.
3.10. If the Client does not agree with this Privacy Policy, the Client will not be able to use the services of the E-shop.
3.11. The Company implements organizational and technical measures intended to protect Personal Data against accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing.
3.12. The Client agrees that in cases where it is necessary under instructions from competent authorities, or where the Client's Personal Data may have been used in illegal activities, or where there are reasonable suspicions of identity theft which are under pre-trial investigation, the Personal Data may be stored on the Company's servers for longer than specified in this Policy.
3.13. Upon receiving a request or instruction from the Data Subject regarding the processing of Personal Data, the Company shall provide a response (either granting the request or providing a motivated refusal) no later than 30 (thirty) calendar days from the date of the request.
3.14. Cookies: To provide full-featured services in the E-shop, cookies are stored on the Client’s computer (device) with the Client’s consent. These are used to identify the Client as a previous user, collect traffic statistics, and manage the shopping cart. The Client may review which cookies are stored and delete some or all cookies at any time.
3.15. To learn more about cookies, including how to manage or delete them, you can visit www.allaboutcookies.org.
4. OTHER PROVISIONS
4.1. The Company has the right to amend or supplement this Privacy Policy in whole or in part. Amendments or supplements take effect from the day of their publication in the E-shop.
4.2. For any questions, please contact us at: info@mrsoda.lt or by phone: +370 611 31116.