This Privacy Policy (hereinafter the Privacy Policy) explains how UAB R & T Beverage group, legal entity code 305714710, VAT payer code LT100019028313, registered office at Ramybės g. 4-70, LT-02103 Vilnius, Lithuania (hereinafter the Company) processes the personal data you may provide on the website www.ohm-bucha.com (hereinafter the Website), on our social media accounts, when contacting us by email or by telephone, or when visiting our office.

What personal data do we collect?

When you visit the Company's office, the Website or our social media accounts, or contact us by email or telephone, we may collect the following information:

• information we collect with the help of cookies (see “What cookies are used on this Website?” for details);
• information you provide when sending us enquiries, requests or complaints (name, surname, email address, the text of your enquiry). We will keep this data for 2 (two) years from the day your enquiry is received;
• information you provide in order to take part in competitions, promotions and/or prize draws we organise (name, surname, email address, telephone number and any other data we ask for under the rules of the competition or promotion). We will keep this data for the period set out in the rules of that competition, promotion and/or prize draw, on the basis of your consent, which you give by submitting your personal data in order to take part;
• data you provide of your own free will, through your own actions (name, surname, comment, enquiry and so on) on our social media accounts (for example, Facebook). We will keep this data for 2 (two) years from the day it is submitted;
• any other personal data you may provide to us at any time while using our Website or communicating with us. We will keep this data for 2 (two) years from the day it is submitted;
• information you provide when buying in the Website shop: name, surname, email address, telephone number, delivery and invoicing address and, when buying on behalf of a legal entity, also the company name and VAT payer code; as well as the content and value of the order, the delivery and payment method chosen, the preferred delivery time and any order notes you add. We process this data in order to enter into and perform a contract of sale with you;
• accounting document data: VAT invoice details, payment date and amount. We process this data in order to comply with a legal obligation that applies to us;
• technical data relating to the order: IP address and the time the order was placed. We process this data on the basis of our legitimate interest, in order to keep payments secure and to prevent fraud;
• if you decide to create an account on the Website, account data: username, email address and order history. Creating an account is not compulsory; you can buy without one.

What cookies are used on this Website?

A cookie is information that a web server sends to a web browser and that is stored in the browser. This information is sent back to the web server every time the browser asks the server for a page. This allows the web server to identify and follow the web browser.

You will find more information about the cookies used on the Website here:

Who may we disclose your personal data to?

We may disclose your personal data to data processors who provide us with services or carry out work for us (providers of information technology, software maintenance and administration services, security services, document archiving services and so on) and who process your data on behalf of the Company as the data controller. Data processors are entitled to process personal data only in line with our instructions, and only to the extent necessary. When engaging data processors, we take all the steps needed to make sure that they too have put appropriate organisational and technical measures in place to keep personal data secure, and that they maintain the confidentiality of personal data.

In order to fulfil your order, we also pass your personal data to the payment service providers Paysera LT, UAB and Stripe Payments Europe, Ltd., who process the payment transaction data, and to our delivery partners, to whom we pass only the data needed to deliver the parcel: the recipient's name, surname, delivery address and telephone number. We do not collect or store payment card data; that is handled by the payment service provider.

Some of the service providers we engage (for example, providers of payment, analytics or marketing tools) may process data outside the European Economic Area. In such cases the data is transferred only on the basis of the standard contractual clauses approved by the European Commission, or on another appropriate safeguard provided for in law.

How is the personal data you provide through social media used?

All the information you give us through social media (including messages, use of the “Like” and “Follow” buttons and other communication) is controlled by the operator of the social network.

We currently have the following social media accounts:

• "Facebook" - @drinkohmbuchawhose privacy notice is provided at this link
• "Instagram" - @myohmbuchawhose privacy notice is provided at this link
• “LinkedIn“ – Ohm!Bucha kombuchawhose privacy notice is provided at this link

We recommend reading the privacy notices of these third parties and contacting the service providers directly if you have any questions about how they use your personal data.

How is your personal data processed?

Your personal data will be processed in line with the requirements of the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legislation.

We process your personal data only on the lawful bases set out in personal data protection legislation: with your consent, and where the data has to be processed for the legitimate interest of the Company (video surveillance).

When processing your personal data, we apply organisational and technical measures that protect personal data against accidental or unlawful destruction, alteration or disclosure, and against any other unlawful processing.

How long do we keep your data?

We will keep your personal data for the periods set out in this Privacy Policy. Once the retention periods expire, the data will be erased or destroyed.

Where your personal data appears in the text of documents (contracts, orders, requests and so on), we will archive and keep it for the periods set out in the Index of General Document Retention Periods approved by order of the Chief Archivist of Lithuania.

The following periods apply to data relating to purchases in the Website shop:

• we keep order data and the related accounting document data for 10 (ten) years from the date the accounting document was issued, as required by the legislation of the Republic of Lithuania on accounting and tax administration;
• if you have created an account on the Website, we keep the account data for as long as the account is active. You can close the account at any time by writing to info@rtbeverage.lt.

We undertake that in all cases we will keep your personal data no longer than the purposes of processing require, or than legislation provides for, where a longer retention period is set out there.

What are your rights?

You have the right:

• to submit a written request asking us to tell you whether data relating to you is being processed and, where it is, to have access to your personal data and to the following information: the purposes of processing; the categories of personal data concerned; the recipients or categories of recipients to whom your personal data has been or will be disclosed; where possible, the envisaged retention period for the personal data or, if that is not possible, the criteria used to determine that period;
• to ask us to rectify inaccurate personal data relating to you, or to complete incomplete data;
• to ask us to erase your personal data. This right is not absolute, and it can be relied on where at least one of the following applies: the personal data is no longer needed for the purposes for which it was collected or otherwise processed; you have decided to withdraw your consent to the processing of your personal data, where your personal data is processed solely on the basis of consent and there is no other basis for processing it; your personal data has been processed unlawfully; your data has to be erased because we are under an obligation to do so;
• to ask us to restrict the processing of your personal data, where one of the following applies: you contest the accuracy of the data, for a period allowing us to verify the accuracy of your personal data; the processing of your personal data is unlawful and you do not want your data erased, and ask us to restrict its use instead; we no longer need your data for the purposes of processing, but you need it in order to establish, exercise or defend legal claims. Where the processing of your personal data has been restricted, we may process such data, except for storage, only with your consent, or in order to establish, exercise or defend legal claims, and/or to protect the rights of another person, or for reasons of public interest;
• to ask us to transmit your personal data to another data controller, where that is technically feasible;
• to lodge a complaint with us if you believe that your rights as a data subject have been or may have been infringed.

How can you exercise your rights?

• email: info@rtbeverage.lt
• by post to Ramybės g. 4-70, LT-02103 Vilnius, Lithuania
• in person at our office at Ramybės g. 4-70, LT-02103 Vilnius, Lithuania

We will answer the requests, complaints and claims we receive in writing, in the manner and within the periods laid down in law, and we will try to give you the information as quickly as possible, and in any event no later than within 30 days of receiving your request.

If, having received a request, complaint or claim, we have doubts about the identity of the person contacting us, we are entitled to ask that person for an identity document.

If we are unable to give you the information you need, and/or you have a complaint about the way your personal data is being processed, you have the right to lodge a complaint with the State Data Protection Inspectorate.

How will we tell you about changes to the Privacy Policy?

We may update or change this Privacy Policy at any time. An updated or amended Privacy Policy takes effect once it is published on our Website. It is worth checking it from time to time to make sure you are happy with the current version of the Privacy Policy.

When we update the Privacy Policy, we will tell you about any changes we consider material by publishing them on the Website. You can look at the “Last updated” date shown at the bottom to see when the Privacy Policy was last updated.

How to contact us

If you have any questions about the terms of this Privacy Policy, please contact us using the details below, by telephone, by email or by registered post:

UAB R & T Beverage group
Legal entity code: 305714710
VAT payer code: LT100019028313
Registered office: Ramybės g. 4-70, LT-02103 Vilnius, Lithuania
Phone number: +370 675 37648
Email: info@rtbeverage.lt

These Privacy Policy provisions are governed by the law of the Republic of Lithuania. Any disputes arising out of these privacy provisions will be settled by negotiation and, failing that, by the courts of the Republic of Lithuania in Vilnius.

The Privacy Policy was last updated on 15 August 2026.