UAB „Linoksa“ PRIVACY POLICY
1. DEFINITIONS
1.1. Personal data – any information relating to a natural person – data subject, whose identity is known or can be directly or indirectly determined by using data such as a personal identification number, one or more physical, physiological, psychological, economic, cultural or social characteristics specific to that person.
1.2. Company – UAB „LINOKSA“, registered and operating in accordance with the laws of the Republic of Lithuania, company code: 135475488, VAT number: LT354754811, registered office/address for correspondence: Jankiškių g. 16, LT-02300, Vilnius, Lithuania.
1.3. E-shop – an electronic shop operating on the Website.
1.4. User – a natural person visiting the Website.
1.5. Provisions – This document approved by the Company, which provides for the basic rules for the collection, storage, processing and storage of Personal Data when using the E-store.
1.6. Offer – The Seller’s offer of the selected Product to the Buyer, sent to the Buyer’s specified e-mail address.
1.7. Account – The result of the Buyer’s registration in the E-store, which creates an account that stores his personal data and order history.
1.8. Buyer – a natural or legal person who creates an Account on the Website or submits a request for a Product, who can conclude transactions in accordance with applicable law, or duly authorized representatives of these persons.
1.9. Product – any product sold on the Website. The terms “product”, “products” used separately in the Provisions mean both singular and plural.
1.10. Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
1.11. Contract – Contract for the purchase and sale of Goods.
1.12. Website – Website www.linoksa.lt.
1.13. Rules – “UAB “Linoksa” electronic store www.linoksa.lt rules for the purchase and sale of goods”, which establish the rights and obligations of the Buyer and the Seller, the conditions for the acquisition and payment for the Goods, the procedure for the delivery and return of the Goods, the liability of the parties and other provisions related to the conclusion and performance of the Distance Contract, the purchase and sale of Goods in the E-store administered by the Seller.
2. GENERAL PROVISIONS
2.1. By visiting the Website, creating an account in the E-store, submitting a Product request (in order to purchase or purchase Products without registration) and thus concluding and performing the Agreement or subscribing to the newsletter, as well as visiting the Company's premises where video surveillance is carried out, you entrust us with your data, which we process for the purposes set out in these Regulations.
2.2. Data Controller – the Company.
2.3. Contacts of the person responsible for the protection of Personal Data: info@linoksa.lt.
2.4. The Company respects the privacy of Users and protects the Personal Data of Users that you provide to us and that we collect, as specified in these Regulations.
2.5. The Company takes appropriate organizational and technical measures to ensure that the Personal Data processed by the Company are always secure, and data processing activities comply with the requirements of the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Regulation and other regulatory and internal legal acts of the Company.
2.6. Persons under the age of 14 (fourteen) may not provide any personal data to the Company. Persons under the age of 14 must obtain the consent of their legal representatives (parents, adoptive parents, guardians, custodians) before providing personal information.
3. PURPOSES OF PERSONAL DATA PROCESSING, PERSONAL DATA COLLECTED, THEIR STORAGE PERIOD AND GROUNDS FOR PROCESSING
3.1. Acceptance of product inquiries.
3.1.1. Personal data: name, surname, e-mail address, telephone number, represented company, Product names, quantities.
3.1.2. Basis: 1) Legitimate interests of the Company. The Company considers information about data processing and consent to the Rules to be received when the User submits a Product request to the Company. 2) The data are processed in order to submit a Product offer on the User's initiative, i.e. in order to take action at the request of the data subject before concluding the Agreement. 3) Data processing is necessary to fulfill a legal obligation applicable to the data controller. 4) Data processing is necessary to achieve the legitimate interests of the data controller.
3.1.3. Data processing term: Product request data is stored in the Company's database for 1 year.
3.2. Account administration and order management.
3.2.1. Personal data: Name, surname, e-mail address, telephone number, represented company, delivery and correspondence addresses, signature (if you accept the Goods yourself), date and time of purchase and delivery, Product names, quantities, purchase prices and discounts granted, payment method for purchases and payment information; history of purchases made through the Account.
3.2.2. Basis: 1) The Company's legitimate interests (when creating an Account or submitting a Product request without registration). We consider your Consent to use the Account to be received when you perform the necessary steps to create an account as provided for in the Rules and confirm registration or submit a Product request. 2) The data is processed in order to fulfill the Agreement to which the data subject is a party, or in order to take action at the request of the data subject before concluding the Agreement. 3) The data processing is necessary to fulfill a legal obligation applicable to the data controller. 4) The data processing is necessary to achieve the legitimate interests of the data controller.
3.2.3. Data processing term: The Account will be active for 2 years after the last login to the Account. Upon expiry of this term, the Account will be deleted and its data deleted. Buyers have the opportunity to delete their Account at any time or contact the Company for assistance, e-mail. at info@linoksa.lt.
3.2.4. When purchasing goods through the Website, the data of individual purchases (including the data specified in the invoice about the Buyer) are stored in the Company's accounting for 10 years.
3.2.5. Depending on the method of delivery of the Goods chosen by the Buyer, the data related to the delivery (desired delivery time, address, other information relevant to the courier) is transferred to the Company's partner delivering the Goods.
3.2.6. Depending on the payment method, the payment information is transferred to the partner administering the payment service.
3.2.7. If you have chosen to receive personal offers on the Website, in order to get to know you better, we will process not only your profile data for this purpose, but will also analyze and use your purchase data history. We gain the opportunity to get to know you, adapt offers to your needs and provide other benefits specifically for you. For these purposes, we use automated data analysis and decision-making, including profiling. We group and analyze your questionnaire and/or purchase data and, taking into account your shopping habits and/or other characteristics (e.g., place of residence, specific purchase transactions, etc.), provide you with relevant and useful offers and other information. The processing of such data is carried out as long as your consent to the processing of data for the purpose of providing you with personalized offers is valid. We remind you that you can withdraw your consent at any time by clicking on a special link in the newsletter.
3.3. Direct marketing (sending newsletters).
3.3.1. Personal data: name, surname, e-mail address, represented company.
3.3.2. Basis: consent of the potential client.
3.3.3. Term: 2 years. After this period, if the subscription is not renewed, the newsletters will no longer be sent.
3.3.4. Persons who have expressed their consent to direct marketing have the right to withdraw their consent at any time by notifying them of their withdrawal by e-mail to info@linoksa.lt or by clicking on the link at the bottom of the newsletter.
3.3.5. Persons who are under 14 years of age may not provide any personal data for marketing activities through the Website. Persons who are under 14 years of age must obtain and provide the Company with the consent of their parents or other legal guardians before providing personal information for marketing purposes.
3.4. Employee selection, administration of the database of job candidates.
3.4.1. Personal data: 1) general information about the candidate - the candidate's name, surname, date of birth, place of residence or address of residence, e-mail. address and/or telephone number, information about the candidate's work experience (place of work, period of work, duties, responsibilities and/or achievements), information about the candidate's education (educational institution, period of study, acquired education and/or qualification), information about professional development (training attended, certificates obtained), information about language skills, information technology, driving skills, other competencies, other information that you provide in your CV, cover letter or other application documents; 2) recommendations, employer reviews – the person recommending or providing feedback on the candidate, their contact, the content of the recommendation or feedback; 3) candidate assessment information – a summary of the interview with the candidate, insights and opinions of the person(s) conducting the selection, the results of the candidate's testing.
3.4.2. Basis: Consent.
3.4.3. Term: If you do not express your separate consent to process your personal data after the selection of candidates, we undertake to delete and (or) destroy your personal data within 5 (five) business days after the contract is concluded with the selected candidate.
3.5. Video surveillance.
3.5.1. Personal data: video data of persons entering the video surveillance area, date and time, place of recording of video recordings.
3.5.2. Basis: The Company's legitimate interests and protection of essential interests, including health and life.
3.5.3. Term: Surveillance video recordings are stored for no longer than 60 (sixty) calendar days, except for the cases specified below, when video recordings are stored for longer terms.
3.5.4. The Company organizes video surveillance in such a way that the surveillance field does not cover a larger area (premises, part of a premises) than is strictly necessary. Video surveillance in premises and/or areas intended for private use by individuals.
3.5.5. Video recordings may only be used to reveal suspected criminal acts, administrative violations of law or to prove and disclose damage caused by damage to the Company's employees, service providers, third parties, or damage to the Company's property, and may only be transferred to persons entitled to receive this data in accordance with the procedure established by law. Video recordings may be allowed to be viewed and, if necessary, transferred to law enforcement authorities upon receipt of a written request from law enforcement authorities. When there is reason to believe that a crime or other illegal actions are recorded in the surveillance material, the necessary video data (episodes) are transferred to secure media and stored for as long as there is an objective need.
4. COOKIES
4.1. When you visit the Website, we aim to provide such content and functions that would be tailored specifically to the needs of Users. For this purpose, the Website uses cookies – small elements of information stored in the Users’ internet browser. They are designed for the Company to recognize you as a previous visitor to the Website, save the history of your visits to the Website and adapt the content accordingly. Cookies also help ensure the smooth operation of the Website, allow you to monitor the duration and frequency of visits to the Website and collect statistical information about the number of visitors to the Website. By analyzing this data, the Company has the opportunity to improve the Website and make it more convenient for you to use.
4.2. Cookies are used to make it easier for you to remember your settings, to log in to your Account, and to find the Products you have added to your cart or for which you have submitted a Product request upon return.
4.3. You have the right to choose whether you want to accept cookies. You can give your consent to the use of cookies in the following ways: a) without deleting them and (or) without changing your Internet browser settings so that it does not accept cookies; b) by clicking on the “I agree” button in the Website’s cookie notification;
4.4. Information about cookies used on the Website:
Cookie Purpose of the cookie: Cookie creation time: Cookie expiration date: Data used:
PHPSESSID Cookie, necessary for the functioning of the Website, is intended to implement the functionality of the Website. When entering the Website. Until the Site window is closed. A unique ID number, saves data entered into fields, forms. It can also save the contents of the Shopping Cart.
"PrestaShop-
da0985939d9ca
385b6fc0e2865bb6094 A cookie necessary for the Site to function, designed to create a User ID, thus enabling the distinction of unique Users on the Site. When entering the Site. 2 years. No data is collected or used.
_ga A cookie using the Google Analytics tool, which allows you to evaluate the purpose of the User's visit, prepare reports on the Site's activity and improve the User's experience when visiting the Site. When entering the Site. 2 years. A unique ID number of random characters, saves data entered into fields, forms. It can also save the contents of the Shopping Cart.
_gid Cookie used by Google Analytics to collect statistical information about the Website's traffic (information about the browser used, computer, visits, time spent is collected) When entering the Website. 1 day. Unique random character ID number.
_hjid Cookie used for the HotJar tool (information is collected to improve the user experience on the Website) - to ensure that the user's behavior is associated with the randomly assigned ID number When entering the Website. 1 year. Unique random character ID number
_hjIncludedInSample Cookie used for the HotJar tool (information is collected to improve the user experience on the Website) - to ensure information about whether the user is included in the sample of actions performed on the Website When entering the Website. 1 year. Unique random character ID number.
5. PROVISION OF DATA TO THIRD PARTIES
5.1. Your data may be transferred for processing to third parties operating in the European Union who assist in the execution of the Agreements and the administration of the Website. Such persons may include database software suppliers, database administration service providers, data center, hosting and cloud service providers, direct marketing service providers, market research or business analytics service providers, accounting service providers, auditors, legal and financial consultants, etc., partners engaged for the purpose of fulfilling a specific order (courier service, person providing payment administration service, etc.).
5.2. In each case, only as much data as is necessary to fulfill a specific order or provide a specific service is provided to the data processor.
5.3. Data processors engaged by the Company may process personal data exclusively in accordance with the Company's instructions and may not use them for other purposes or transfer them to other persons without our consent. In addition, they must ensure the security of your data in accordance with applicable law and written agreements concluded with us.
5.4. Data may also be provided to competent government or law enforcement agencies, or persons performing functions assigned to them by law, such as the police or supervisory authorities, but only upon their request and only when required by applicable law or in the cases and procedures provided for by law, in order to ensure our rights, the safety of our customers, employees and resources, to assert, present and defend legal claims.
5.5. If the Company uses a website analysis service (e.g. Google Analytics), which is used to determine how you use the information provided on the Website, we may exchange your anonymized data with third parties who rely on this information to evaluate how the Website is used, prepare reports for website operators on the activities of the Website and provide other services related to the use of the Website, the Internet and mobile applications.
5.6. Personal data may be transferred and processed outside the EU/EEA when the transfer is necessary for the conclusion and performance of the Contract or with the consent of the Buyer or User, as well as if appropriate safeguards are implemented: a) a contract has been concluded that includes standard terms and conditions adopted by the EU Commission or other approved clauses, codes of conduct, certificates, etc., approved in accordance with the Regulation; b) The country outside the EU/EEA in which the Recipient of Personal Data is located ensures an adequate level of protection of personal data by decision of the EU Commission; c) The Recipient is certified in accordance with the requirements of the data protection agreement between the EU and the United States of America (USA) (also known as the “Privacy Shield”) (applies to recipients located in the USA). In the absence of any of the above-mentioned appropriate safeguards, the Company may make use of the exceptions provided for in Article 49 of the Regulation, but they may only be applied in cases strictly formulated in the Regulation.
6. RIGHTS OF THE DATA SUBJECT
6.1. The data subject, whose data is processed in the Company's activities, has the following rights:
6.1.1. to know (be informed) about the processing of his/her data (right to know);
6.1.2. to get acquainted with his/her data and how they are processed (right to access);
6.1.3. to demand correction or, taking into account the purposes of personal data processing, to supplement incomplete Personal Data of the person (right to correction);
6.1.4. to destroy his/her data (right to be forgotten);
6.1.5. to demand that the Company restrict the processing of Personal Data on one of the legitimate grounds (right to restriction);
6.1.6. the right to data portability (right to portability);
6.1.7. the right to object to the processing of his/her Personal Data or to withdraw his/her consent to the processing of Personal Data at any time, so that Personal Data is processed for one or more specific purposes, without affecting the lawfulness of data processing based on consent until the withdrawal of consent;
6.1.8. to file a complaint regarding the processing of personal data with the State Data Protection Inspectorate (www.ada.lt), believing that Personal Data is processed by the Company in violation of the requirements of legal acts.
7. FINAL PROVISIONS
7.1. For all issues related to data processing and the exercise of data subject rights, please contact the Company at Jankiškių g. 16, LT-02300, Vilnius, Lithuania, e-mail: info@linoksa.lt.
7.2. This version of the Regulations is valid from 2023. 03. 31. The Company may update or amend these Regulations at any time. Such updated or amended Terms will enter into force on the date of their publication on the Website.