Privacy policy
Date of last update: 25 February 2025
This Privacy and Cookie Policy (” Privacy Policy“) answers the most important questions about how we collect, use and store information about you ( “you” or “your”). It also explains what rights you have in relation to the personal data you provide to us.
This Privacy Policy applies to your use of the website https://asteri.agency and the services we provide (” Services“).
Who are we?
The data controller is MB Asteri, website https://asteri.agency, e-mail address hello@asteri.lt, registered office address J.Savickio 4-7, Vilnius (hereinafter referred to as “we“).
How do we process your personal data?
We process your personal information for the following purposes:
- For the purposes of providing and administering the Services: ordering and providing the Services, concluding and executing contracts, administering payments.
- For direct marketing purposes: to send you marketing and promotional communications (such as newsletters, other communications by email and/or SMS).
- For the purposes of website operation and quality assurance.
How do we obtain and what personal data do we process?
We collect personal information that you have directly provided to us (for example, by expressing an interest in receiving information about our Services, events; by contacting us directly to receive Services, etc.). We may also receive personal information through the use of cookies located on our website.
The personal information we collect depends on the actions you take and different personal data may be processed for different purposes. The personal data we process include:
- Service recipient’s details: name, surname, email address, tel. Name, email address, phone number (personal and/or work), address, date of birth. For customers for whom we create a customer account on Asteri.lt, in addition: email address and password (encrypted).
- Service basket data: information about the Services provided, payment history.
- Login details (only for clients for whom the agency creates an account): username (password) or other unique code, email address, password.
- Device details: device type (phone, computer, tablet, etc.), device name/model/OS/host, IP address.
- Browser data: browsing or search history, browser interactions/clicks (including on advertisements), browser login source (from which page you came), browser queries or other information, browsing statistics.
- Social network data: IP address, device information, other information from the social network account (Meta Pixel can link the user’s actions on the website to his/her Facebook/Instagram account if the user is logged in to his/her social network).
Personal data is not processed through automated decision-making, including profiling.
What is the legal basis for processing your information?
We process your personal information depending on the actions you choose to take (e.g. agreeing to receive newsletters, providing you with services, etc.) and only when we have a legal basis for doing so. Therefore, when processing your personal data, we rely on:
- By consent. We process your personal data if you have given us permission (i.e. consent) to use your personal information for a specific purpose (e.g. for direct marketing). You can withdraw your consent at any time.
- On the basis of contract performance. We process your personal data where it is necessary for us to fulfil our contractual obligations to you, including the provision of our Services, or at your request before entering into a contract with you.
- On the basis of a legal obligation. We process your personal data in order to comply with our legal obligations, such as cooperating with law enforcement authorities or supervisory authorities, complying with their lawful instructions, and in other cases where we are expressly obliged by law to process relevant personal data about you.
- On the basis of legitimate interests. We process your information where it is reasonably necessary for the achievement of our legitimate business interests and it does not infringe your fundamental rights and freedoms (e.g. for the purpose of defending our violated rights and legitimate interests in a dispute with you).
How long do we keep your information?
We will retain your personal information only for as long as it is necessary to achieve the purposes set out in this Privacy Policy, unless a longer period of time is required or permitted by law (e.g. tax, accounting or other legal requirements).
Your personal data is stored in accordance with the purpose of the processing:
- For the purposes of service provision and contract performance, and payment administration – retained for 10 (ten) years (after completion of the contract).
- For direct marketing purposes – retained for a maximum of 2 (two) years from the date of consent or until the consent is withdrawn (until the earlier of the event/expiry of the term).
- A customer’s account is kept for as long as the customer is actively using the services or until the customer requests deletion of their account.
When and with whom do we share your personal information?
We may need to share your personal information with the following people:
- Supervisory or law enforcement authorities. Where we are required to do so by law or in response to lawful requests from authorities.
- Service providers and our other business partners. Where we may need to use other service providers, such as accountants, payment processors, payment intermediaries, IT service providers, marketing service providers, etc., to provide the Services to you and to meet our legal obligations.
Please note that your personal information will not be transferred outside the European Economic Area (EEA) (except when using third party services such as. In the event of a transfer of personal data, we will ensure that the transfer of personal data is carried out in accordance with the requirements of the General Data Protection Regulation.
Do we use cookies?
Yes, we use these cookies:
- Strictly necessary cookies. These cookies are necessary to enable us to provide you with the Services you expect from us.
- Functional cookies. These cookies allow the website to provide better functionality and personalisation. These cookies are necessary to save user preferences (e.g. shopping cart) or other settings.
- Analytical and/or statistical cookies. These cookies allow us to count visits and traffic sources so that we can evaluate and improve our website. They help us to know which pages are most and least popular and to see how visitors move around the site.
- Promotional cookies. These cookies are needed to show you tailored advertising (ads) and third-party offers.
- Social media cookies. These cookies are set by various third parties, such as social media services, which we have included on the website so that you can share our content with your friends and networks. They may track your browser on other websites and build a profile of your interests. This may affect the content and messages you see on other websites you visit.
We use Google Analytics and other plugins to manage cookies.
For more information about the cookies we use and a list of cookies, please see our Cookie Policy: https://asteri.lt/slapuku-politika/
How can you manage cookies?
At the bottom left corner of our website there is a cookie control button which allows you to choose which cookies can be used during your visit to our website.
You can configure your browser to refuse some or all (other than essential) cookies, or to ask for your permission before accepting cookies. Please note that if you delete cookies or disable future cookies, you may not be able to use certain parts or features of our website. For information on how to adjust or change your browser settings, please visit www.aboutcookies.org or www.allaboutcookies.org.
For information about third party cookies, their policies and control options, please refer to the cookie policies of these third parties.
Your data protection rights
Under the General Data Protection Regulation and national laws, you have the following rights:
- Your right to be informed – you have the right to be informed about how we use your personal data and what your rights are. For this reason, we provide this Privacy Policy.
- Your right of access – you have the right to ask us for copies of the personal information we hold about you.
- Your right to rectification – you have the right to ask us to correct personal information that you believe is inaccurate. You also have the right to ask us to complete information that you consider incomplete.
- Your right to request erasure – You have the right to ask us to erase your personal information in certain circumstances. However, this is not an absolute right as we may need to keep your personal data for legal or legitimate reasons.
- Your right to restrict processing – you have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – you have the right to object to the processing of your personal information under certain circumstances.
- Your right to data portability – in certain circumstances, you have the right to request that we transfer the personal information you provide to another organisation or to you.
- Your right to lodge a complaint – You also have the right to lodge a complaint with the relevant data protection supervisory authority. In Lithuania, the competent authority is the State Data Protection Inspectorate, legal entity code 188607912, address L. Sapiegos g. 17, Vilnius, Lithuania.
There is no fee for exercising your rights. We endeavour to respond to all legitimate requests under this Privacy Policy within one month of receipt. In some cases (for example, if the matter is particularly complex or if you send us multiple requests), it may take more than one month. In such cases, we will inform you of this.
If you wish to make a request, please contact us at info@asteri.lt.
Children’s personal data and privacy
Our Services are not intended for persons under the age of 14. We do not knowingly collect personal information from anyone under the age of 14. If you are a parent or guardian and you know that your child has provided us with personal information, please contact us.
If we become aware that we have collected personal data of persons under the age of 14 without verifying parental consent, we will take steps to remove this information from our servers.
Links to other websites
Our Services may contain links to other websites not operated by us. If you click on a link from a third party, you will be redirected to that third party’s website (e.g., our partner websites, social networks, etc.). We strongly recommend that you review the privacy and cookie policies of each website you visit.
We have no control over, and accept no responsibility for, the content, privacy policies or practices of third party websites or services.
Changes to this Privacy Policy
We reserve the right, at our sole discretion, to change, modify, add and/or remove portions of this Privacy Policy at any time. In addition, we aim to ensure that it is updated promptly if we make material changes to our processes or practices. We will notify you of any changes by posting the new Privacy Policy on this page.
You are advised to review this Privacy Policy periodically to be aware of any changes. Changes to this Privacy Policy are effective when posted on https://asteri.agency.
In this Privacy Policy, we have explained how we process your personal data and what your rights are to control this. We hope you have found this Privacy Policy useful.