PRIVACY POLICY

BAGSTATE PRIVACY POLICY

We understand the importance of protection of your personal data, therefore we process your personal data lawfully, transparently, and fairly, for the pre-determined purposes and only to the extent necessary to achieve those purposes. When we process your personal data, we make every effort to ensure that they are accurate, secure, confidential, properly stored and protected.

When processing your personal data, we comply with legal requirements, including the requirements of the GDPR.

1. WHAT IS THIS DOCUMENT?

1.1. This Privacy Policy (the “Privacy Policy”) informs you of our policies regarding the collection, use and disclosure of data when you visit our website bagstate.eu (“Website”), order goods or enter into contract with us or otherwise provide your personal data. The Privacy Policy applies to every person who visits the Website, as well as to any actions you may take on the Websites.

1.2. Please read this Privacy Policy carefully to find out how we process your personal data, where we get them from and what your rights as a data subject are.

1.3. The term "personal data" as used in this Privacy Policy means any information which could be used to identify you directly or indirectly.

2. WHO IS THE DATA CONTROLLER?

2.1. The Website is managed and administered by Agata Stefanovič, individual activity number 1533766, address Dobilų g. 12, Vilniaus county, LT-15180, Lithuania.

2.2. In accordance with the relevant legal provisions, we are a controller of your personal data, i.e. the legal person responsible for the collection, processing and / or use of personal information (“BAGSTATE”).

2.3. If you have any questions about our Privacy Policy and practice, processing of your personal data, please contact us at contact@bagstate.eu.

3. HOW DO WE COLLECT YOUR PERSONAL DATA?

3.1. We process your personal data obtained in the following ways:

3.1.1. Directly, when you contact us via email or social media, for example Facebook Messenger, when you provide review on a product you have purchased;

3.1.2. Indirectly, when you browse our Websites or engage in online shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.

4. WHAT PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSES?

We only collect the personal data we need to operate our website, process your orders, communicate with you, and meet our legal obligations. The type of information we collect depends on how you interact with Bagstate.

We may also use anonymous or aggregated information for analytics and to improve our website and services. This information cannot be used to identify you.

Please do not send us sensitive personal information, such as information about your health, political opinions, religious beliefs, or other special categories of personal data, unless we specifically ask for it.

5. CUSTOMER REVIEWS

5.1. If you choose to leave a review on our Website, we may collect the following personal data:

• your name or the name you choose to display;

• your email address;

• your order information (where needed to verify your purchase);

• your rating and review; and

• the date your review was submitted.

5.2. We use this information to:
a) verify that reviews come from genuine customers (where applicable);
b) publish reviews on our Website;
c) improve our products, services, and customer experience; and
d) respond to your feedback if necessary.

5.3. We process review information based on your consent and our legitimate interest in maintaining trustworthy customer reviews and improving our products and services.

5.4. Your review will remain published until you ask us to remove it or until we decide to remove it. We may retain related records for longer where required by law or to protect our legal rights.

5.5. If you would like your review removed, you can contact us at contact@bagstate.eu. Withdrawing your consent will not affect any processing that took place before your request.

6. COOKIES AND SIMILAR TECHNOLOGIES

6.1. Our Website uses cookies and similar technologies, such as pixels and tags, to ensure the Website functions properly, remember your preferences, improve your browsing experience, analyze Website traffic, and measure the effectiveness of our advertising.

6.2. Some cookies are necessary for the Website to operate, while others are only used with your consent, where required by law.

6.3. We may use third-party services, such as Google Analytics and Meta Pixel, to better understand how visitors use our Website, improve our services, and measure the performance of our marketing campaigns.

6.4. You can manage or withdraw your cookie preferences at any time through our cookie settings. For more information about the cookies we use and how to control them, please see our Cookie Policy.

7. PERSONALIZED ADVERTISING

If you consent to marketing cookies, you may see advertisements for Bagstate on other websites or social media platforms after visiting our website.

To help us understand how visitors use our website and measure the effectiveness of our advertising, we may use tools such as Google Analytics, Meta Pixel, and similar technologies. These tools may collect information about your browsing activity on our website, such as the pages you visit, the products you view, and whether you complete a purchase.

We may use this information to:

• understand how our website is used;

• improve our products, website, and marketing;

• measure the performance of our advertising campaigns; and

• show you advertisements that may be relevant to your interests.

These technologies are only used where permitted by law and, where required, with your consent. You can manage or withdraw your cookie preferences at any time through our cookie settings. If you subscribe to our marketing emails, you can unsubscribe at any time by clicking the "Unsubscribe" link included in any email.

8. TO WHOM DO WE PROVIDE YOUR PERSONAL DATA?

8.1. We guarantee that your personal data will not be sold, provided or otherwise transferred to third parties without a legitimate basis, as well as used for purposes other than those for which they were collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy or applicable law. However, we reserve the right to provide information about you if we were required to do so by law or if required to do so by law enforcement authorities or prosecuting authorities.

8.2. We may transfer your personal data to companies that help us operate, i.e. data processors. From such data processors, we require that your data be processed only in accordance with the instructions given by us and the applicable data protection legislation. We enter into agreements with these data processors that oblige the parties to adhere strictly to the personal data protection requirements.

8.3. We may disclose the personal data we collect about you to the following third parties:

a) to purchasers, and advisers if we sell our business or assets or restructure whether by merger, re-organization or otherwise;
b) our legal and other professional advisers, including our auditors;
c) governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so or to exercise our legal rights;

9. HOW WE KEEP YOUR INFORMATION SAFE

We take reasonable steps to protect your personal information. Our website is hosted by Hostinger, which provides security measures to help protect the website and the data processed through it. We only work with trusted service providers that are required to handle personal data securely.

While we do our best to protect your information, no website or internet transmission can be guaranteed to be 100% secure. Any information you provide is transmitted at your own risk.

If we become aware of a personal data breach that is likely to affect your rights or freedoms, we will notify the relevant authorities and affected individuals where required by law.

10. HOW LONG DO WE STORE YOUR PERSONAL DATA?

10.1. We store your personal data for no longer than required for the purposes of the processing or as required by law if it provides a longer storage period. Section 4 of the Privacy Policy specifies the terms of storage of your personal data separately for each purpose of use of personal data.

11. YOUR RIGHTS

11.1. Under the GDPR, you have the right to:
a) access the personal data we hold about you;
b) request that we correct inaccurate or incomplete personal data;
c) request that we delete your personal data where permitted by law;
d) object to or restrict the processing of your personal data in certain circumstances;
e) withdraw your consent at any time where processing is based on your consent;
f) request a copy of your personal data or ask us to transfer it to another organization, where technically possible.

11.2. To exercise any of these rights, please contact us using the details provided in Section 14. We may ask you to verify your identity before processing your request.

11.3. We will respond to your request within one month, unless the GDPR allows us to extend this period due to the complexity or number of requests.

11.4. If we are unable to comply with your request, we will explain the reason, unless we are legally prevented from doing so.

12. TO WHOM CAN YOU MAKE A COMPLAINT?

12.1. If you wish to make a complaint about our processing of your personal data, please provide it in writing, providing as much information as possible, using the contact details indicated at the end of this Privacy Policy. We will immediately try to resolve any issues.

12.2. If you consider that the collection and processing of personal information relating to you infringes yours rights, you have the right to lodge a complaint within the regulation of your region. Although, above all, we seek to resolve all disputes with you promptly and amicably.

13. HOW WILL WE CHANGE THIS PRIVACY POLICY?

13.1. We will continue to update our policies and practices as needed. We will notify you of any changes to our Privacy Policy by posting any changes here. If we do, you'll see that the date at the top of this Privacy Policy has changed.

14. HOW TO CONTACT US?

14.1. Please send all documents related to this Privacy Policy or contact us at the following contacts:

Agata Stefanovič

Individual activity code 1533766

Address: Dobilų g. 12, Vilniaus county, LT-15180, Lithuania

Email: contact@bagstate.eu

This Privacy Policy has been published on July 27, 2026