We realise the special importance of protecting your personal data; therefore, we only collect and process the data which is necessary for our activities. We process personal data in a lawful, transparent and fair manner, for predefined purposes and only to the extent that is necessary for the achievement of those purposes. When processing personal data, we seek to make sure it is accurate, safe, confidential, properly stored and protected.
When processing your personal data, we comply with the requirements of the General Personal Data Protection Regulation (the “GDPR”) as well as other requirements for the processing of personal data set forth in other legal acts.
1. WHAT IS THIS DOCUMENT?
2. WHO ARE WE?
2.1. The Website is managed and administered by UAB Baltic Flax, Algirdo str. 40C, Vilnius, Lithuania.
2.2. Based on the provisions of the law, we are your personal data controller.
3. WHAT PRINCIPLES DO WE ADHERE TO?
3.1. In processing your personal data, we:
a) will comply with the requirements of the applicable legislation, including the GDPR;
b) will process your personal data in a lawful, fair and transparent manner;
c) will collect your personal data for specified, clearly defined and legitimate purposes, and will not continue to process it in a way that is incompatible with those purposes, except to the extent permitted by law;
d) will take all reasonable steps to ensure that any personal data that is not accurate or complete is immediately corrected, supplemented, suspended or destroyed;
e) will keep your personal data in such a way that your identity could be determined for no longer than is necessary for the purposes for which the personal data is being processed;
g) will ensure that your personal data is processed in such a way so as to ensure the proper security of the personal data, including protection against unauthorised processing or unlawful processing of the data, and accidental losses, destruction or damage, by applying the appropriate technical or organisational measures.
4. HOW WE COLLECT YOUR PERSONAL DATA?
4.1. We receive your personal data when:
a) you submit it to us (e.g. when you register with our website, contact our customer support, etc.)
b) you browse our Website and we generate data about your behaviour, visited pages, exit URLs, etc.
c) we receive your personal data from our partners and other parties (e.g. we might receive your personal data from social networks, payment providers, couriers, etc.).
4.2. You may also provide us with your personal data by writing to us, or by contacting our customer service team by telephone when submitting your complaints about the Website or our services. If you contact us in writing or by e-mail or telephone, we will store the correspondence or audio record (conversation record) data.
5. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
5.1. We may process your personal data for the following purposes:
a) to offer and sell our goods and provide our services to you;
b) to deliver the goods that you purchased;
c) to conduct and manage discounts, contests, quizzes, games and similar matters;
d) to ensure the functionality of the Website, to improve it, and to offer you better and customised services;
e) to provide you with offers and information about our goods and (or) the services related to our affiliates and partners;
f) to provide a high-quality professional service, as well as for its improvement, assurance, and for the purpose of resolving potential or emerging disputes.
5.3. We do not process your personal data for any other purposes which are not compatible with those listed above.
6. HOW AND WHAT TYPES OF PERSONAL DATA DO WE PROCESS?
6.1. We will process the following types of personal data:
a) to offer and sell our goods and provide our services to you: Name, Phone Number, Address, E-Mail address, I.P. Address, Location;
b) to deliver the goods that you purchased: Name, Phone Number, Address, E-Mail address, Work Name and Address (if delivered to your work), I.P. Address, Location;
c) to conduct and manage discounts, contests, quizzes, games and similar matters: Name, E-Mail Address, Location, I.P. Address;
d) to ensure the functionality of the Website, to improve it, and to offer you better and customised services: [Name, E-Mail, I.P. Address, Location;
e) to provide you with offers and information about our goods and (or) the services related to our affiliates and partners: Name, E-Mail, I.P. Address, Location;
f) to provide a high-quality professional service, as well as for its improvement, assurance, and for the purpose of resolving potential or emerging disputes: Name, E-Mail, I.P. Address, Location.
6.2. We may combine the personal data we have received from you with data from our own collection that is received from other public or accessible sources (e.g. we may combine your personal data with the data obtained through Website cookies, or with legally obtained data from third parties). By enforcing your rights, you will always be able to request corrections to your personal data.
7. DO WE USE YOUR PERSONAL DATA FOR DIRECT MARKETING?
7.1. Yes, we may use your personal data for direct marketing purposes, in order to provide you with offers and information about our goods and (or) services, or those of our affiliates and partners, that we believe may be of interest to you. However, we will only use your personal data for this purpose with your additional consent.
7.2. We process the following personal data for direct marketing purposes: name, e-mail address, location, I.P. Address.
7.3. You can choose whether or not you allow us to use your personal data for direct marketing purposes. You can do this:
a) by checking the acceptance text “I want to receive newsletters by e-mail”, or by not checking it, when registering on the Website, making purchase or sending a message via contact form;
b) by entering your e-mail address in to newsletter sign up form on the Website and clicking “Subscribe”.
7.4. We may combine the available information we have about you with the information available to third parties, in order to provide you with offers.
7.5. If you give us consent to use your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of our webpages, advertising and market research, and for other marketing and sales goals. In such cases, we will use your de-personalised data.
7.6. Even if you have given consent to the processing of your personal data for direct marketing purposes, you can easily withdraw this consent at any time for all or part of the related personal data processing activities. To do this, you can:
a) notify us of your refusal in the manner indicated in the messages and (or) offers that are received electronically (e.g. by clicking on the “unsubscribe” link in the newsletter, etc.); or
7.7. If you withdraw your consent, we will endeavour to terminate the processing of your personal data for direct marketing purposes as soon as possible.
7.8. The withdrawal of your consent does not automatically oblige us to destroy your personal data or to provide you with information about the personal data we are processing; therefore, we require you to specify such a request separately for the performance of these actions.
8.2. With cookies, we can collect the following types of information: IP address, browser type, browser resolution, device type, demographic details, location, and, if you have visited the Website from a third-party webpage, the URL link of that webpage.
8.3. We use the cookie information for the following purposes:
a) to ensure the functionalities of the Website (e.g. so that you can use the Website’s personalisation features);
b) to improve and develop the Website so that it better suits your needs;
c) for the development of services and analyses of the Website usage;
d) for the orientation of targeted marketing.
8.5. The Website may use the following types of cookies:
a) technical cookies – cookies that are essential for the functioning of the Website;
b) functional cookies – cookies that are not essential to the functioning of the Website, but that significantly improve its performance, quality and user experience;
c) analytical cookies – cookies that are used to generate a statistical analysis of the Website visitors’ navigation methods; the data collected by these cookies is used anonymously;
d) targeted or promotional cookies – cookies that are used to show you offers or other information that might interest you;
e) social network cookies – cookies that are necessary to use the Website information in your social network profile.
8.6. All of the information about the cookies used on the Website, their purpose and validity, and the data used is provided in the table below:
Google Analytics Cookies
|_ga||Used to distinguish users.|
|_gid||Used to distinguish users.|
|_gat||Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>.|
|_gac_<property-id>||Contains campaign related information for the user. If you have linked your Google Analytics and AdWords accounts, AdWords website conversion tags will read this cookie unless you opt-out.|
|__utmt||Used to throttle request rate.|
|__utmc||Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.|
|__utmv||Used to store visitor-level custom variable data. This cookie is created when a developer uses the _setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics.|
|pll_language||Used to remember the language selected by the user when he comes back to visit again the website. This cookie is also used to get the language information when not available in another way. Examples are ajax requests or the login page. The language code of the last browsed page.|
Third Party Cookies
|__cfduid||Used to identify individual clients behind a shared IP address and apply security settings on a per-client basis.|
a) without deleting them and (or) by not changing your Internet browser settings so that they do not accept cookies;
b) by clicking on the “I Accept” button on the link (bar) for the cookie on the Website;
8.9. In some cases, in particular in the case of the deactivation of technical and functional cookies, or a discrepancy or deletion of the cookies, this may slow down the speed of browsing the Internet, restrict certain Website features, and block access to the Website.
9. TO WHOM DO WE PROVIDE YOUR PERSONAL DATA?
9.2. We may transfer your personal data to companies that will help us carry out our business activities, as well as for help with direct marketing. In the case of such partners, we require that your data be processed only in accordance with our instructions and in compliance with the personal data protection laws.
9.3. We may disclose the following types of data about you to the following third parties:
9.4. third party service providers (e.g. couriers, technical service providers in the performance of establishing contracts with these service providers, including the delivery of services for newsletters or other marketing activities);
9.5. third party service providers whose services we normally use for data storage, telecommunications and website hosting purposes.
9.6. The ability of the abovementioned service providers to use your data will remain limited – they cannot use this data other than for the purposes of providing us with the stated services.
10. FOR HOW LONG DO WE STORE YOUR PERSONAL DATA?
10.1. We will store your personal data for no longer than is required for the processing purposes, or according to the legislation if it provides for a longer storage period.
10.2. We will store the data collected for the purposes specified in Clauses 5.1(a) and (b) for five (5) years after you purchased any goods or services via the Website.
10.3. We will store the data collected for the purposes specified in Clauses 5.1(c) for five (5) years after your last participation in our contest, quiz or game.
10.5. We will store the data collected for the purposes specified in Clause 5.1(e) (direct marketing) until you delete your account, or unsubscribe from the Website, in the manner specified in Clause 7.6.
10.6. We will strive not to store out-of-date and non-relevant personal data, so after updating it (e.g. adjusting or changing information in the account, etc.), only the relevant information is stored. However, historical information is stored if necessary, in accordance with the legal acts or for the performance of our activities.
11. HOW DO WE STORE YOUR PERSONAL DATA?
11.2. Unfortunately, online information transfers are not completely secure. Although we will do our best to protect your personal data, we cannot guarantee data security when you transfer your data to the Website – therefore, you assume the risks associated with the data transfer to the Website. Once we receive your data, we will apply strict procedures and security measures to protect your data against unauthorised access.
11.3. If there are unlikely circumstances and we find out about a breach of your personal data security that may seriously jeopardise your rights or freedoms, we will immediately inform you as soon as it is discovered and will determine which information has been accessed.
12. EXTERNAL WEBSITES
The Website may contain links to external websites – the websites of our business partners or websites that promote our goods and (or) services. When following such links to any of these websites, please note that these websites and the services available through them have their own separate privacy policies and that we do not accept any liability or obligation for these policies, or for the collection of personal data on these websites or during the provision of services, e.g. contact or location data. It is important to review these policies before submitting your personal information to these websites or using any related services.
13. WHAT RIGHTS DO YOU HAVE?
13.1. In processing your personal data, we guarantee your rights under the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a personal data subject, you have the following rights:
a) to know (to be informed) about the processing of your personal data;
b) to become acquainted with your personal data that we are processing;
c) to request the correction or an addition to any incorrect, inaccurate or incomplete personal data;
d) to request the destruction of your personal data when it is no longer needed for the purposes for which it was collected;
e) to request the destruction of your personal data if it is being processed illegally, or when you withdraw your consent to the processing of the personal data, or do not give such consent when it is necessary;
f) to disagree with the processing of your personal data or to withdraw the consent that was previously given;
g) to request a suspension (except for the storage) of your personal data processing operations, in the event of disputes or the need to verify the legality of the processing activities or the accuracy of the data, as well as in cases where we no longer need your personal data but you do not want us to destroy it;
h) to request, if it is technically possible, the provision of your personal data in an easily readable format for your consent or for the purpose of performing a contract, or to request the transferring of your personal data to another data controller.
13.2. We will endeavour to guarantee the exercising of your rights as a personal data subject, and to create all the necessary conditions for the effective exercising of these rights, but we reserve the right not to comply with your requirements when it is necessary to ensure:
a) the fulfilment of the legal obligations imposed on us;
b) the security or defence of the state;
c) public order, as well as the prevention, investigation, detection or prosecution of criminal offences;
d) the important economic or financial interests of the state;
e) the prevention, investigation and detection of breaches of professional ethics;
f) the protection of your rights and freedoms, or those of other persons.
13.3. You can provide us with the requirements related to the implementation of your rights in person, by post or by electronic means. Upon the receipt of your request, we may ask you to provide proof of identity, as well as any additional information related to the request which is necessary for us.
13.4. Upon the receipt of your request, we will respond to you within 30 calendar days from the receipt of your request and from the date of the submission of all documents necessary for the submission of the response.
13.6. When refusing to comply with your request, we will clearly indicate the grounds for such a refusal.
13.7. If you disagree with our actions or our response to your request, you can complain to the competent public authority about our actions and decisions.
14. TO WHOM CAN YOU FILE A COMPLAINT?
14.1. To file a complaint regarding the processing of your data, please provide it in writing, with as much information as possible, by using the contact details provided at the end of this policy. We will cooperate with you and will work to resolve all issues as soon as possible.
14.2. If you think that your rights have been violated under the GDPR, you can file a complaint with our supervisor – the State Data Protection Inspectorate – although, prior to this, we will try to resolve all disputes together with you.
16. HOW CAN YOU CONTACT US?
- by post – Algirdo str. 40C, Vilnius, LT-03218 Lithuania;
- by e-mail – firstname.lastname@example.org