New arrivals Best sellers Special offers

Privacy Policy

Last updated: 15 September 2026

General provisions

We care about your privacy and the security of the personal data you entrust to us, so we have prepared this privacy policy (the Privacy Policy). It explains how we process and protect your personal data, what rights you have, and provides other information about the processing of your personal data.

The controller of your personal data is MB „Auresport“, a small partnership established in the Republic of Lithuania, legal entity code 304529694, address Ožiarūčių g. 3, Avižieniai, Avižienių sen., Vilniaus r. sav., LT-14185, Lithuania (the Partnership or we). You can contact us by e-mail at info@11taskas.lt.

This Privacy Policy sets out the privacy terms that apply when you use our website www.11taskas.lt (the Website), through which, among other things, you can access our online store „11 taškas“.

In this Privacy Policy, “personal data” (Personal Data) means any information or set of information that allows us to identify you directly or indirectly, for example your name, surname, e-mail address, phone number, etc.

This Privacy Policy applies when you visit the Website, register as a user, browse and order our products, subscribe to newsletters, take part in games, promotions or competitions, contact us by phone or other communication channels, visit our pickup location, supply goods or services to us, or otherwise interact with us.

Some services on the Website may be provided by third parties, or you may be redirected to their websites (for example, to pay for products). In such cases, the data protection policies of those third parties also apply together with this Privacy Policy — please read them.

We may change this Privacy Policy unilaterally. We will inform you about changes by publishing the updated Privacy Policy on the Website or by other usual means of communication. Changes take effect from the publication date stated in the Privacy Policy unless another date is specified. If you continue to use the Website after the changes, we will consider that you agree with them.

What personal data do we process?

We obtain Personal Data in the following ways:

when you provide it to us yourself;
when we collect it while you use the Website or our social media accounts, contact us by phone or electronic means, or visit our pickup location;
to the extent permitted by law — from other sources, such as publicly available registers, databases, marketing partners and other third parties.

If you link your social network account to your account on our Website, depending on that network’s settings we may see certain data from your account: your name, surname or nickname, profile picture and e-mail address.

You have the right to change and update the information you have provided. In some cases (for example, when selling and delivering products) we need accurate and up-to-date information, so we may ask you to confirm it. When providing Personal Data, you are responsible for its accuracy, completeness and relevance.

Purposes of processing and retention periods

1. Registration on the Website, logging in and account maintenance

Data: username, password, e-mail address, IP address, date of registration and of consent to receive newsletters, date of last visit. When logging in with Facebook or Google – profile picture, name, surname, nickname, e-mail address. If you log in to the shop with your „11 taškas“ academy account, we receive your name, surname, e-mail address and phone number from it, so that you do not have to register a second time. Both systems are operated by MB „Auresport“.
Retention period: for the whole period of active use of the account and 5 years after the last login.
Legal basis: conclusion and performance of a contract (Article 6(1)(b) GDPR).

2. Online sales

Data: name, surname, personal identification number (if the buyer provides it voluntarily, for example when making a bank transfer), phone number, e-mail address, IP address, purchase history, delivery address, payment details, order and delivery history, returns history, communication with the customer.
Retention period: 10 years from the date of purchase. Accounting documents are kept for the periods set by law.
Legal basis: conclusion and performance of a contract (Article 6(1)(b) GDPR); legal obligation (Article 6(1)(c) GDPR); legitimate interests of the Partnership or a third party (Article 6(1)(f) GDPR).

3. Improving customer service quality (recording of phone calls)

Data: phone number, voice recording, date, content, start and end time of the call.
Retention period: 90 days from the date of recording.
Legal basis: legitimate interests of the Partnership or a third party (Article 6(1)(f) GDPR).

4. Direct marketing

Data: name, surname, e-mail address, date of consent to receive newsletters, date of last visit.
Retention period: 5 years after the last login, unless you withdraw your consent earlier.
Legal basis: your consent (Article 6(1)(a) GDPR).

5. Organising competitions, games and promotions

Data: name, surname, e-mail address, phone number; name and e-mail address of a friend to whom an invitation is sent.
Retention period: for the duration of the competition, game or promotion and 1 year after its end, unless you withdraw your consent earlier. In the event of a dispute – until it is resolved. If a prize acceptance certificate is signed – 10 years from the date of signing.
Legal basis: your consent (Article 6(1)(a) GDPR); in case of a complaint or dispute – legitimate interests (Article 6(1)(f) GDPR); in case of winning – legal obligation (Article 6(1)(c) GDPR).

6. Improving the Website and tailoring marketing communication

Data: IP address, browsing data, browser used, date and time of access, device manufacturer, model and operating system, visit statistics, other information collected by cookies.
Retention period: data collected by cookies and similar technologies is kept for the periods specified in the section on cookies.
Legal basis: your consent (Article 6(1)(a) GDPR); legitimate interests of the Partnership or a third party (Article 6(1)(f) GDPR).

7. Communication with persons interested in our products and visitors of our social media accounts

Data: name, surname, e-mail address, phone number, time and content of the enquiry, other information you choose to share (reviews, opinions, comments, ratings, documents provided, etc.).
Retention period: for the duration of the communication and 1 year after it ends.
Legal basis: legitimate interests of the Partnership (Article 6(1)(f) GDPR); your consent (Article 6(1)(a) GDPR).

8. Communication with customers (complaints, enquiries, requests)

Data: name, surname, e-mail address, phone number, time of the enquiry, content of the complaint, enquiry or request; where relevant – invoice number; if you contact us via Facebook – account data (profile picture, name, surname, nickname); other information you choose to share.
Retention period: for the duration of the communication and 2 years after it ends.
Legal basis: conclusion and performance of a contract (Article 6(1)(b) GDPR); legal obligation (Article 6(1)(c) GDPR); your consent (Article 6(1)(a) GDPR); legitimate interests of the Partnership or a third party (Article 6(1)(f) GDPR).

9. Ensuring the security of property and persons (video surveillance)

Data: video data of persons within the field of view of video surveillance.
Retention period: 30 days from the date of recording.
Legal basis: legitimate interests of the Partnership or a third party (Article 6(1)(f) GDPR).

10. Ensuring the Partnership’s operations, concluding and performing contracts with suppliers and partners

Data: for suppliers (natural persons) – name, surname, personal identification number, date of birth, address, phone number, e-mail address, bank account details, date, amount and currency of payment or transaction, business licence or individual activity certificate details, VAT payer details, etc.; where the partner is a legal entity – name, surname, position, phone number and e-mail address of the employee or representative, name and address of the represented legal entity, authorisation details, etc.
Retention period: for the duration of the contractual relationship and 10 years after it ends. Accounting documents are kept for the periods set by law.
Legal basis: performance of a contract (Article 6(1)(b) GDPR); legal obligation (Article 6(1)(c) GDPR); legitimate interests of the Partnership or a third party (Article 6(1)(f) GDPR).

How do we use your personal data and what principles do we follow?

We collect and process only the Personal Data needed for the purposes for which it is collected. We do not collect or keep data unrelated to our activities and the sale of products.

When processing your Personal Data, we:

comply with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR);
process data lawfully, fairly and transparently;
collect data for specified, explicit and legitimate purposes and do not process it in a manner incompatible with those purposes, except as permitted by law;
take reasonable steps to ensure that inaccurate or incomplete data is promptly corrected, supplemented, restricted or destroyed;
keep data in a form that permits identification for no longer than necessary for the purposes of processing;
do not disclose data to third parties or make it public, except in the cases set out in this Privacy Policy or by law;
apply appropriate technical and organisational measures to protect data against unauthorised or unlawful processing and accidental loss, destruction or damage.

To whom do we transfer your personal data?

We may transfer your Personal Data:

if we have your consent;
to courier and postal service providers (for example, AB Lietuvos paštas / LP EXPRESS, Omniva) – to the extent necessary to deliver the products ordered (name, surname, delivery address or parcel locker, phone number, e-mail address);
to state authorities, law enforcement authorities, courts and other persons performing functions assigned by law, in accordance with the laws of the Republic of Lithuania;
to data processors engaged by us (for example, IT and server service providers, website administration, accounting, call handling, analytics and advertising service providers, payment intermediaries). We require them to protect and process data as responsibly as we do and only on our instructions;
if necessary – to companies intending to acquire or having acquired the Partnership’s business;
to debt collection companies to which claims regarding debts are assigned, courts, out-of-court dispute resolution bodies and bankruptcy administrators.

Your Personal Data may be transferred outside the European Union or the European Economic Area only under the following conditions:

data is transferred only to trusted partners that help us provide our services to you;
data processing agreements have been signed with such partners, under which they undertake to ensure data security as required by law;
the European Commission has adopted an adequacy decision for the country where the partner is established, or the partner participates in the EU-U.S. Data Privacy Framework, or other appropriate safeguards provided for in the GDPR apply;
or you have consented to the transfer of data outside the EU or EEA.

If you would like to know to which specific persons we transfer your data, write to us at info@11taskas.lt.

Rights of the data subject

As a data subject, you have the following rights:

to know (be informed) about the processing of your Personal Data (right to be informed);
to access your Personal Data and information on how it is processed (right of access);
to request the correction or, taking into account the purposes of processing, completion of incomplete Personal Data (right to rectification);
to request the destruction of your Personal Data or suspension of its processing, except storage (right to erasure and right “to be forgotten”);
to request restriction of processing of Personal Data on one of the legal grounds (right to restriction);
to data portability (right to data portability). This right is exercised where there are grounds for it and appropriate technical means to ensure that transferring the data does not compromise the security of other persons’ data;
to object to the processing of your Personal Data on the basis of the legitimate interest of the Partnership or a third party, including profiling. If you object, we may continue processing only for compelling legitimate grounds which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims;
to object to the processing of your Personal Data for direct marketing purposes, including profiling related to such marketing.

We process your data for direct marketing only with your prior consent. If you no longer want it to be processed for this purpose, you can opt out by writing to info@11taskas.lt, without giving reasons. With your consent, your Personal Data may be profiled for direct marketing in order to offer you personalised offers. You may withdraw your consent to automated processing, including profiling, or object to it at any time.

We may refuse to exercise the rights listed above (except the objection to direct marketing and other cases where data is processed on the basis of your consent) where the GDPR allows the request to be refused or where, in cases provided by law, it is necessary to ensure the prevention, investigation and detection of crimes or breaches of official or professional ethics, and the protection of the rights and freedoms of the data subject, the Partnership and other persons.

You can submit a request or instruction regarding the processing of Personal Data by e-mail at info@11taskas.lt. To better understand your request and verify your identity, we may ask you to fill in the necessary forms, provide an identity document or its notarised copy or other information, and, depending on the content of the request, to visit us or submit the request in writing.

We will reply to your request and take the requested action, or explain why we refuse to do so, no later than within 1 month from the date of the request. Taking into account the complexity and number of requests, this period may be extended by a further 2 months — we will inform you about this within 1 month of receiving the request.

If your Personal Data is deleted at your request, we will keep only those copies of information that are necessary to protect our and other persons’ legitimate interests, comply with obligations of state authorities, resolve disputes, identify disruptions or comply with agreements concluded with us.

Where can you lodge a complaint?

If you wish to lodge a complaint about the processing of your Personal Data, send it to us at info@11taskas.lt with as much relevant information as possible. We will cooperate with you and try to resolve all issues as quickly as possible.

If you believe that your rights under the GDPR have been violated, you may also lodge a complaint with the supervisory authority – the State Data Protection Inspectorate of Lithuania. More information and contacts – vdai.lrv.lt.

Do we collect personal data from children?

Only persons aged 18 or over may independently purchase in our online store. We do not knowingly collect information directly from children under 18.

If you are under 18, please consult your parents or guardians and obtain their consent before providing us with your Personal Data.

For parents: we recommend monitoring how your children use the Website so that they do not provide us with Personal Data without your permission. Data of minors may be provided to us only with the consent of their parents or guardians.

How do we use cookies and other tracking technologies?

Our Website uses cookies (small files stored on the visitor’s device) and other tracking technologies to distinguish you from other visitors and make browsing more convenient.

We use cookies and other tracking technologies to analyse traffic, tailor services, content and advertising, measure the effectiveness of advertising, build trust and ensure security.

You can choose whether to accept cookies. If you do not want cookies to be stored on your device, change your browser settings and disable all cookies or enable/disable them one by one. More information – AllAboutCookies.org and policies.google.com/technologies/ads.

Please note that refusing cookies may slow down browsing, prevent some Website functions from working or restrict access to the Website.

We use the following categories of cookies:

Strictly necessary cookies – required for the Website to work, for example to recognise registered users and provide access to the account and shopping cart. If you refuse them, parts of the Website may not work.
Functional cookies – allow us to remember your choices (e.g. language) and provide enhanced features.
Third-party cookies – used by third parties for analytics or advertising. Analytics cookies collect information about how the Website is used; advertising cookies help show ads more relevant to your interests, limit the number of times the same ad is shown, etc.