Privacy policy - Game Bound

Revision date: 2026-09-03

1. WHO WE ARE (DATA CONTROLLER)

The controller of your personal data is:

Name:	Dvitex MB
Company code:	306145653
Registered address:	Šeškinės g. 45C-37, Vilnius
Phone:	+370 679 96599
Email:	info@gamebound.lt

In this privacy policy we explain what data of yours we collect, why we collect it, how long we keep it and what rights you have.

We process data in accordance with the General Data Protection Regulation (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

2. WHAT DATA WE COLLECT AND WHY

2.1. FULFILLING AN ORDER

Data:	first name, last name, email address, phone number, delivery address or the chosen parcel locker, contents and amount of the order
Purpose:	concluding and performing the contract with you, delivering the products
Basis:	performance of a contract (GDPR Article 6(1)(b))
Retention:	10 years from the order (accounting requirements)

2.2. PAYMENT

Data:	the fact of payment, amount, payment method, payment identifier
Purpose:	accepting payment for the order
Basis:	performance of a contract
Note:	WE DO NOT SEE OR STORE PAYMENT CARD DATA. Payments are handled by Montonio (see section 4).
Retention:	10 years (accounting documents)

2.3. ACCOUNT IN THE ONLINE STORE (if you register)

Data:	email, password (encrypted), order history
Purpose:	the ability to see order history and shop faster
Basis:	your consent / performance of a contract
Retention:	while the account is active or until you ask to delete it

2.4. NEWSLETTER

Data:	email address, first name
Purpose:	sending news and offers
Basis:	your consent (GDPR Article 6(1)(a))
Retention:	until you withdraw consent
Note:	you may withdraw consent at any time by clicking the “Unsubscribe” link in any letter.

2.5. PRODUCT REVIEWS

Data:	first name (or nickname), text of the review, rating
Purpose:	publishing reviews on the product page
Basis:	your consent
Retention:	while the review is published or until you ask to remove it

2.6. ENQUIRIES AND CORRESPONDENCE

Data:	first name, email address, phone (if you give it), text of the message
Purpose:	to answer your question and, if needed, to continue the correspondence
Basis:	legitimate interest in answering an enquiry (GDPR Article 6(1)(f)); if you ask about a future purchase - steps prior to entering into a contract (GDPR Article 6(1)(b))
Retention:	12 months from the last correspondence
Note:	you will find the enquiry form on the “Contacts” page. We receive the same data if you write directly by email.

2.7. EVENT REGISTRATION

Data:	name, email address
Purpose:	to reserve a place at a tournament or game night, send a confirmation and let you know if the event changes or is cancelled
Basis:	steps taken at your request before entering into a contract (GDPR Art. 6(1)(b))
Retention:	until the event ends and 3 months afterwards
Note:	you can cancel the booking at any time - the link is in the confirmation email. Once cancelled, the data is deleted immediately. If the participant is under 16, a parent or guardian must register them.

3. WHETHER YOU MUST PROVIDE DATA

The data needed to fulfil an order (name, contacts, delivery address) is mandatory - without it we cannot conclude and perform the contract.

Data for the newsletter, reviews, enquiries and event registration is provided voluntarily. In the enquiry form only the name, email and message are required - without them we could not reply. When registering for an event, the name and email are required - without them we could not confirm your place.

4. TO WHOM WE TRANSFER DATA

We do not sell your data. We transfer only as much as is necessary to fulfil the order:

4.1. PAYMENT SERVICE PROVIDER Montonio

Transferred:	order amount, order number, buyer contacts
Purpose:	accepting payment

Montonio is a licensed payment institution supervised by the Bank of Lithuania. For card payments Montonio engages payment processing partners, and for recording website errors - a technical logging service. These services operate only on the checkout page.

4.2. PARCEL CARRIERS Omniva, Unisend (formerly LP Express), SmartPosti Delivery is arranged by Montonio as an intermediary, parcels are delivered by the chosen carrier.

Transferred:	recipient name, phone, delivery address or parcel locker
Purpose:	delivery of the parcel

4.3. IT SERVICE PROVIDERS The website hosting and email service provider: Hostinger operations, UAB (Lithuania). This entity acts as a data processor under a contract with us.

4.4. STATE INSTITUTIONS When required by legal acts (e.g. the State Tax Inspectorate, law enforcement institutions).

Data is processed within the territory of the European Union / European Economic Area. The exception is the payment processing partners operating on the checkout page: they may process data outside the EEA as well. In such cases the standard contractual clauses approved by the European Commission apply.

5. COOKIES

5.1. Cookies are small text files saved on your device when you visit the website.

5.2. We use:

ESSENTIAL COOKIES - without them the website does not work. They cannot be refused.

login session
contents of the shopping cart
security cookies

Basis:	legitimate interest
Retention:	until the end of the browser session or up to 30 days

WISHLIST COOKIE - written only when you press the heart

Basis:	a function provided at your own request
Retention:	up to 30 days

5.3. We do not use optional cookies (analytics, advertising) on the website, therefore we do not ask for separate consent. If such cookies appear, we will announce it and ask for consent in advance.

5.4. You can also delete or block cookies in your browser settings. Please note that if essential cookies are blocked, the website may not work properly.

6. YOUR RIGHTS

You have the right:

TO KNOW what data of yours we process, and to receive a copy of it;
TO CORRECT inaccurate data;
TO ERASE data (“the right to be forgotten”), when it is no longer needed for the purpose for which it was collected, and when there is no legal obligation to keep it;
TO RESTRICT the processing of data;
TO OBJECT to the processing of data when it is based on legitimate interest;
TO RECEIVE the data in a structured, commonly used format (portability);
TO WITHDRAW CONSENT at any time, where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

HOW TO EXERCISE YOUR RIGHTS Write by email to info@gamebound.lt. We will reply within 1 month. In complex cases this term may be extended by a further 2 months - we will inform you about it. To confirm your identity we may ask for additional information.

COMPLAINT If you believe that your data is processed unlawfully, you have the right to lodge a complaint:

State Data Protection Inspectorate L. Sapiegos g. 17, 10312 Vilnius Tel. +370 5 271 2804 Email ada@ada.lt vdai.lrv.lt

7. DATA SECURITY

7.1. The website uses SSL encryption - data between your browser and the server is transmitted encrypted.

7.2. Access to personal data is granted only to those persons for whom it is necessary to perform their work functions.

7.3. Regular backup copies of data are made.

7.4. In the event of a personal data security breach which may pose a high risk to your rights, we will inform you and the State Data Protection Inspectorate in the manner prescribed by legal acts.

8. CHILDREN'S DATA

The website is not intended for persons younger than 14 years. We do not knowingly collect data of children younger than 14 years. Having learned about such data, we delete it without delay.

9. CHANGES TO THE POLICY

We may update this privacy policy. The latest revision is always published at www.gamebound.lt/privatumo-politika, indicating the revision date. We will inform you about material changes by email or by a notice on the website.