Privacy policy
I. GENERAL PROVISIONS
1.1 The purpose of the Privacy and Cookie Policy of UAB "DECORATUS", legal entity code 302281588, registered office address Metalistų g. 10, Šiauliai (hereinafter referred to as the "Company") (hereinafter referred to as the "Policy") is to inform about the collection and processing of personal data of data subjects, to explain for how long the data is stored, to whom it is provided, what rights the data subjects have, and where they may turn to for their implementation or on any other issues related to the personal data processing.
1.2. Personal data is collected and processed in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the "Regulation"), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts regulating the protection of personal data.
1.3. The personal data of the subjects shall be collected and processed only for the purposes set out in this Policy.
1.4. The Company shall be deemed to be the controller of the subjects' personal data.
II. BASIC CONCEPTS
The data controller is UAB "DECORATUS", (hereinafter - the Company), legal entity code 302281588, registered office address: 10, Metalistų g. Šiauliai, e-mail: info@decoratus.lt.
EU Regulation 2016/679 - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
Processing of personal data (EU Regulation 2016/679) means any operation or sequence of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, sorting, organisation, storage, adaptation or alteration, retrieval, access, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination with other data, restriction, erasure or destruction.
Data Subject - any natural or legal person whose data is processed by the Company. The Data Controller collects only those data of the Data Subject that are necessary for the performance of the Company's activities and/or visiting, using, browsing the Company's website www.decoratus.lt (hereinafter referred to as the "Site"). The Company ensures that the personal data collected and processed will be secure and will be used only for the specified purpose.
Personal data means any information relating directly or indirectly to a data subject whose identity is known or can be established, directly or indirectly, by reference to the data concerned. Processing of personal data means any operation performed on personal data (including collection, recording, storage, editing, alteration, access, retrieval, transmission, archiving, etc.).
Consent of the data subject (EU Regulation 2016/679) means any freely given, specific and unambiguous indication of the data subject's wishes, by means of a statement or an unambiguous action, which is freely given and which is unambiguous and unambiguous and which constitutes the data subject's indication of his or her consent to the processing of personal data concerning him or her.
Information Processing Rules - the Rules for the secure handling of electronic information in the Company's Information Systems.
Other terms used in this Policy shall be understood as defined in the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating personal data processing.
III. SOURCES OF PERSONAL DATA OF SUBJECTS
3.1. The personal data shall be provided by the data subject. The data subject, using the Self-Service system of the Website, fills in or changes the data about himself/herself, contacts the Company, uses the services provided by the Company, leaves feedback, asks questions, contacts the Company to provide information, etc.
3.2. Personal data is obtained when the data subject visits the Company's Website.
3.3. Personal data is obtained on the basis of consent. In cases where the data subject has expressed a wish to receive information or to express an opinion on specific services, personal data may be processed in order to ensure the provision of the necessary information to the data subject. The data subject shall have the right to withdraw the consent given to the Company at any time. The consent shall remain valid until it is fulfilled or, as the case may be, revoked, if sooner. The withdrawal of consent shall not affect the lawfulness of the processing based on the corresponding consent given before the withdrawal.
3.4. Personal data is obtained from other sources. Data obtained from other bodies or companies, publicly accessible registers, etc.
IV. THE PURPOSES OF THE PROCESSING OF DATA SUBJECTS' DATA
4.1. The Company processes the Personal Data of Subjects for the following purposes:
4.1.1. for the purpose of initiating the transaction;
4.1.2. the proper and lawful execution and accounting of contracts and other agreements, whether written or oral, between the Company and the Entity;
4.1.3. the performance of actions at the request of the Subject, whether or not prior to the signing of a contract with the Company (Article 6(1)(a), (c) or (f) of the Regulation).
V. PERSONAL DATA OF SUBJECTS COLLECTED BY THE COMPANY
5.1. For the purpose of initiating a transaction: name, telephone number and/or email address, correspondence, as well as personal data provided by the subject.
5.1.2. the proper and lawful execution and accounting of contracts and other agreements, whether written or oral, between the Company and the Entities:
5.1.3. if applying from a legal person: name, surname, title, place of work, contact telephone number and email address, correspondence, signature;
5.1.4. if applying as a private person: name, surname, date of birth, residential address, bank account number, contact telephone number and e-mail address for correspondence, signature.
5.2. For the purpose of carrying out actions at the request of the Subjects before or without signing a contract with the Company: the name, surname, contact telephone number and/or e-mail address of the Data Subject, as well as other personal data provided by the Data Subject on his/her own initiative or which are necessary for the fulfilment of the request (e.g. the address, if the Data Subject asks for a reply to be sent by post), correspondence with him/her regarding the fulfilment of the request received.
5.3. The Company does not request data that is not necessary for the Company's activities, provision of services or purchase of services/goods in connection with the above-mentioned purposes of collecting personal data. Therefore, by refusing to provide the necessary data, the Subjects refuse to order our services or provide their goods or services.
VI. PROVISION OF SUBJECT DATA
6.1. The company undertakes to respect the duty of confidentiality towards data subjects. Personal data may be disclosed and provided to third parties:
6.1.1. where it is necessary for the formation and performance of a contract for the benefit of the data subject, or for other legitimate reasons;
6.1.2. bailiffs, providers of legal and/or debt recovery services, assignees of debt; managers of joint debtor files;
6.1.3. notaries, if the contract concluded with the entities requires notarial form;
6.1.4. companies providing data centres, website administration and related services, companies developing, providing, maintaining and developing software, companies providing information technology infrastructure services, companies providing communication services;
6.1.5. for the protection of the Company's legitimate interests, for the defence of the Company's rights before pre-trial authorities or in court;
6.1.6. to law enforcement authorities at their request or on our initiative if we suspect that a criminal offence has been committed, as well as to courts and other dispute resolution authorities; tax authorities;
6.1.7. in accordance with the procedures provided for by law, to the state authorities: the State Tax Inspectorate, the Centre of Registers, Sodra, the Labour Exchange, etc.;
6.1.8. at the request of the subjects (postal, courier or similar service providers specified by the subject in his/her request).
VII. DATA SUBJECT RIGHTS
7.1. Be informed about the processing of their data.
7.2. Upon making a request to the Company, to be informed from what sources and what personal data have been collected, for what purpose they are processed, and to which recipients the data have been and are being provided.
7.3. To request the Company to rectify incorrect, incomplete or inaccurate personal data and/or to suspend the processing of such personal data, with the exception of storage, in the event that, after consultation of the personal data, it is established that the data are incorrect, incomplete or inaccurate. The Company shall promptly notify the Subject of the rectification, destruction or suspension of the processing of personal data, whether or not carried out at the Subject's request (the right to request rectification of personal data).
7.4. Upon request, the Subject shall have the right to receive the personal data relating to him or her which he or she has provided to the Company in a structured, commonly used and computer-readable format, so that such data can be transmitted to another data controller (right to data portability).
7.5. Upon request, the Subject shall have the right to request that the Company erase the personal data relating to him/her where the person does not consent or withdraws consent to the processing of the data (right to be forgotten), unless the Company is unable to erase the Subject's data due to its necessity for the performance of the contract or due to the mandatory execution of the legislation.
7.6. To apply to the Company with a request to restrict (suspend) the processing of personal data, except for storage - in the case, for example, when a request is made to rectify personal data (pending the verification of the accuracy of the personal data and/or its correction), when it is established that personal data are processed unlawfully and the data subject does not agree to the deletion of the data, when consent to the processing of personal data is expressed (while the assessment is being made as to whether or not the Company's legitimate interests are overridden), and so on (the right to demand the limitation of the processing of personal data).
7.7. To contact the Company and object to the processing of personal data where the processing of personal data is carried out on the basis of a legitimate interest (right to object).
7.8. The subject has the right to be informed of breaches of his or her data security. The Company undertakes to send a notification to the Subject to his/her e-mail address (if known to the Company) within 72 hours of becoming aware that the Subject's data has been compromised (e.g. the Company's server has been hacked, etc.).
7.9. A subject who disagrees with the actions or omissions of the Company has the right to lodge a complaint with the State Data Protection Inspectorate.
7.10. Withdraw the consents given to the Company at any time.
7.11. All enquiries and requests relating to Subject Data must be sent to the Company's e-mail address info@decoratus.lt. Alternatively, a Subject may submit a request by visiting the Company's office. In all cases (i.e., whether the request is sent by e-mail or the original request), the Company's representative receiving the request shall be entitled to request a proof of identity or a legally certified copy thereof.
7.12. The Company shall respond to requests and enquiries from Subjects no later than 30 days after receiving them.
VIII. COOKIES AND THE PURPOSES OF THEIR USE
8.1. This website uses cookies. A cookie is a small text file that a website stores on your device when you visit it. These cookies are necessary to ensure that the basic functions of the website work properly.
8.2. Information about used cookies:
Could be accessed in section: Cookies Policy
8.3. By browsing the Website, the Subject may consent to the recording of the Cookies provided for in this Policy on his/her computer or other device. The Subject may revoke this consent at any time by changing the settings of his/her Internet browser, but in such case certain functions of the Website may not work for him/her. The Subject has the possibility to view what information (cookies) the Company records and can delete some or all of the recorded cookies. If the Subject wishes to prevent cookies from being stored on his/her computer or other device, he/she may choose to receive a notification in his/her browser settings before any cookie is stored. You can also set your browser to optionally reject all or some cookies immediately. The Subject may also delete cookies that have already been stored on his/her computer or other device.
IX. STORAGE OF DATA OF SUBJECTS
9.1. The data that the Company collects from Subjects is processed by the Company's staff. Processors shall have the right to process personal data only on the instructions of the Company and only to the extent necessary for the proper performance of their obligations under the Contract. The Company shall take all reasonably practicable steps to ensure that the data of the Subjects is processed securely and in accordance with this Policy.
9.2. Subject data collected by the Company is stored in hard copy documents and/or in the Company's information systems in electronic format. Personal data shall not be processed for longer than is necessary to achieve the purposes of the processing or for longer than is required by the data subjects and/or provided for by law.
9.3. If the Company has doubts as to the correctness of the data provided by the Subjects, the Company shall have the right to suspend the processing of the data of such Subject, to verify and correct such data.
9.4. Although the data subject may terminate the contract and refuse the Company's services, the Company must continue to store the data subject's data for possible future claims or legal claims until the data retention periods expire.
X. FINAL PROVISIONS
10.1. By using the Website and providing the Company with personal data, the Data Subject confirms that: he/she has carefully read this Privacy Policy, understands its provisions, agrees with this Privacy Policy and agrees to comply with it.
10.2. As part of the development and improvement of the Company's business, the Company has the right to unilaterally change this Privacy Policy at any time by posting a notice on the Site. Changes shall be effective from the date of their posting on the Site.
10.3. This policy shall be reviewed and updated at least once a year or in the event of changes in the legislation governing the processing of personal data. The updated Privacy Policy shall be promptly posted on this Website.