1. General provisions
This Privacy and Cookie Policy (the Policy) explains how we collect, use, store and process your personal data when you visit the online shop serksnomedus.lt (the Website), buy our products or otherwise interact with us.
When processing personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications and other applicable legislation.
By using the Website, you confirm that you have read this Policy.
2. Data controller
| Name | Farmer Regina Šerkšnienė |
|---|---|
| Farmer code | 0151411 |
| VAT code | LT 1000 0989 4819 |
| Address | Pušynės g. 6, Girkalnis, LT-60314 Raseinių r. sav. |
| info@serksnomedus.lt | |
| Phone | +370 650 21 221 |
3. What personal data we collect
Depending on how you use the Website, we may process the following data:
a) Order and purchase data
- first name and last name;
- delivery and billing address;
- email address;
- phone number;
- order contents, amount and purchase history;
- payment method (we do not store payment data ourselves – see Section 6).
b) Communication data
- data you provide when you contact us by email, through the contact form or by phone.
c) Technical and usage data (collected automatically)
- IP address and approximate location;
- browser and device type, operating system;
- date and time of visit, pages viewed, referring source;
- data generated by cookies and similar technologies (see Section 9).
We do not collect special categories of (sensitive) personal data, and we do not process data of children under 14 without the consent of a parent or guardian.
4. Purposes and legal bases for processing
| Purpose | Data processed | Legal basis (GDPR) |
|---|---|---|
| Fulfilling orders, selling and delivering goods | Order and purchase data | Performance of a contract (Art. 6(1)(b)) |
| Accounting and invoicing | Purchase and payment data | Legal obligation (Art. 6(1)(c)) |
| Handling enquiries and complaints, customer service | Communication data | Legitimate interest / contract (Art. 6(1)(f) / (b)) |
| Website operation and security (e.g. spam protection with reCAPTCHA) | Technical data | Legitimate interest (Art. 6(1)(f)) |
| Statistics and traffic analysis (Google Analytics) | Cookie data | Consent (Art. 6(1)(a)) |
| Marketing, remarketing and measuring advertising effectiveness (Meta Pixel, Google Ads) | Cookie data | Consent (Art. 6(1)(a)) |
| Direct marketing by email (if you subscribe to our newsletter) | Email, first name | Consent (Art. 6(1)(a)) |
5. Data retention periods
- Order and accounting data – kept for the period required by law (e.g. the Law on Accounting), usually 10 years.
- Customer account and purchase history data – for as long as you have an account or until you ask us to delete it.
- Communication (enquiry) data – up to 2 years after the end of the communication.
- Marketing consent data – until you withdraw your consent.
- Cookie data – see the cookie table in Section 9 (the duration of each cookie is listed separately).
6. Who we share data with (recipients)
We do not sell your data. We may share data only with trusted service providers (data processors) who help us run our business:
- Hosting provider – to host the Website;
- Courier and postal service providers – to deliver goods;
- Payment service providers and banks – to process payments (you enter your card details in the secure environment of the payment institution; we neither see nor store them);
- Accounting service provider;
- Google Ireland Ltd. – traffic statistics and advertising (Google Analytics, Google Ads, Google Tag Manager, reCAPTCHA);
- Meta Platforms Ireland Ltd. – advertising and measuring its effectiveness (Meta / Facebook Pixel, Conversions API);
- Competent authorities – where required by law.
Some service providers (e.g. Google, Meta) may transfer data outside the European Economic Area (EEA), including to the USA. In such cases, the transfer is based on the Standard Contractual Clauses (SCC) approved by the European Commission and/or the EU-US Data Privacy Framework.
7. Your rights
Under the GDPR, you have the right to:
- access the personal data we process about you;
- have inaccurate data corrected;
- have your data erased (the “right to be forgotten”);
- restrict the processing of your data;
- data portability;
- object to the processing of your data (including direct marketing);
- withdraw your consent at any time (this does not affect the lawfulness of processing carried out before the withdrawal);
- lodge a complaint with the supervisory authority – the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, ada@ada.lt, vdai.lrv.lt).
To exercise your rights, please email us at info@serksnomedus.lt. We will reply within 30 calendar days at the latest.
8. Data security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure: SSL/TLS encrypted connection (HTTPS), restricted access, regular updates and protection against automated attacks (reCAPTCHA).
9. Cookie policy
9.1. What cookies are
Cookies are small text files that your browser stores on your device when you visit the Website. They help the Website work properly, remember your choices, analyse traffic and show relevant advertising. Other technologies, such as localStorage and tracking pixels, are used in a similar way.
9.2. Cookie categories
- Strictly necessary (technical) – needed for the Website to work (cart, session, security). Used without consent.
- Statistics (analytics) – help us understand how visitors use the Website. Used only with your consent.
- Marketing – used for advertising and measuring its effectiveness. Used only with your consent.
9.3. Cookies used on the Website
This list was compiled by scanning the Website on 10 November 2026 (home, shop, product, cart, checkout, account and contact pages). Non-essential cookies are not used until you choose otherwise in the cookie banner.
Strictly necessary
No consent needed| Name | Provider | Purpose | Duration |
|---|---|---|---|
woocommerce_cart_hash woocommerce_items_in_cart | serksnomedus.lt | Cart functionality: whether the cart has items and whether its contents changed | Session |
wp_woocommerce_session_* | serksnomedus.lt | Links your browser to your cart and order | 2 days |
wordpress_logged_in_* wordpress_sec_* wp-settings-* | serksnomedus.lt | Logged-in user session and settings (only if you log in to an account) | Session / 1 year |
cmplz_banner-status cmplz_functional cmplz_statistics cmplz_marketing cmplz_preferences cmplz_policy_id cmplz_consented_services | serksnomedus.lt (Complianz) | Remembers your choice in the cookie banner | 1 year |
wp_consent_* | serksnomedus.lt (WP Consent API) | Passes your consent to other plugins on the Website so they respect your choice | 30 days |
AWSALBTG AWSALBTGCORS | EveryPay (Swedbank) | Load balancing of the payment system during checkout | 7 days |
wc_cart_hash_* wc_fragments_* wc_cart_created storeApiCartData storeApiNonce | serksnomedus.lt (localStorage / sessionStorage) | Cart data in the browser so pages load faster | Session / until cleared |
elementor | serksnomedus.lt (localStorage / sessionStorage) | State of Website elements (e.g. dismissed notices) | Until cleared |
_grecaptcha | Google (localStorage) | reCAPTCHA protection against spam and bots in forms | Until cleared |
Statistics
Consent required| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique visitors | 13 months |
_ga_HLFMPX9N74 | Google Analytics 4 | Keeps the visit (session) state | 13 months |
Marketing
Consent required| Name | Provider | Purpose | Duration |
|---|---|---|---|
_fbp _fbc | Meta (Facebook) | Meta Pixel: recognises the browser to measure advertising effectiveness and for remarketing | 3 months |
lastExternalReferrer lastExternalReferrerTime | Meta (localStorage) | Remembers which website you came from | Until cleared |
_gcl_au _gcl_ls | Links ad clicks to orders (conversion linking) | 3 months | |
sbjs_current sbjs_current_add sbjs_first sbjs_first_add sbjs_session sbjs_udata sbjs_migrations | serksnomedus.lt (WooCommerce) | Remembers the source you came from so a marketing channel can be attributed to the order | Session / 30 min |
With marketing consent, we also use the Meta Conversions API (events sent from the server) to measure advertising effectiveness. Without consent, this data is not sent. The list of cookies may change as we improve the Website.
9.4. How to manage cookies
- You can accept or reject non-essential (statistics and marketing) cookies in the cookie banner shown when you visit the Website. You can change your choice at any time:
- You can also manage or delete cookies in your browser settings. Please note that if you disable strictly necessary cookies, some Website features (e.g. the shopping cart) may not work.
- Browser instructions: Chrome, Firefox, Safari, Edge.
- You can opt out of Google Analytics by installing the browser add-on.
10. Changes to this Policy
We may update this Policy from time to time. The current version is always published on the Website with the date of the last update. We will inform you separately of any material changes.
11. Contact
For any questions about personal data and cookies, please contact us: email info@serksnomedus.lt / phone +370 650 21 221