UAB VR TRADING PRIVACY POLICY
We respect the privacy of every visitor to our website and are committed to the fair and lawful processing and protection of your personal data. This privacy policy (“Privacy Policy”) is addressed to individuals (both natural and legal persons) who use or provide services to VR TRADING UAB or who are their employer. Data may also be collected on the website https://www.maistosauga.lt (the “Website”) and or through any services provided on it, in order to inform individuals about what information we collect and how we use it.
PERSONAL DATA CONTROLLER
The controller of your personal data is the data protection consultancy company UAB “VR TRADING” , legal entity code: 300085345, registered business address: Mosėdžio g. 11B, LT-48190 Kaunas; mailing address K.Petrausko g. 26-221, LT45146 Kaunas (hereinafter referred to as the “Company”), which is registered according to the procedure established by law and which adheres to the current legislation of the Republic of Lithuania and of the European Union regulating the processing of personal data.
The services provided by the Company include the provision of services including, but not limited to, assessment of the processing of personal data, consulting companies on legal and technical issues, impact assessment, performance of the functions of a data protection officer, training, and all other services that the Company provides in the field of data protection or may provide in the future (hereinafter referred to as “Services”).
CONCEPTS
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a personal identification number, location data and an online identifier, or to one or more factors specific to the natural person’s physical, physiological, genetic, mental, economic, cultural or social identity.
‘Request’ means a request by a data subject for the exercise of his or her rights.
Regulation means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation).
GENERAL PROVISIONS
This Privacy Policy does not constitute an agreement between the Company and you regarding the processing of your data. This Privacy Policy informs you about the basic principles of processing of personal data and the exercise of the rights of the data subject. Additional information may be provided in purchase and sale, service and other agreements.
By using the Company’s services, submitting his/her data, sending a CV, completing a request form, continuing browsing the website, the data subject confirms that he/she has read this Privacy Policy, understands its provisions and agrees to abide by it.
PRINCIPLES FOR PROCESSING PERSONAL DATA
The Company processes personal data in accordance with the EU and Lithuanian legal acts regulating the processing of personal data.
The scope of personal data processed depends on the services ordered or used and the information provided by the person when ordering and/or using the services, visiting or registering on the website.
The processing of personal data is subject to the criterion of lawful processing – in order to ensure the provision of services; with the consent of the individual; when the processing of personal data is obliged by the Company by the relevant legislation; when the processing of personal data is necessary for the legitimate interest of the data controller or a third party.
The Company aims to ensure that personal data is processed accurately, fairly and lawfully, that it is processed only for the purposes for which it was collected, and that it is processed in accordance with the clear and transparent principles and requirements for the processing of personal data as set out in legislation.
SOURCES OF PERSONAL DATA
Personal data may be obtained directly from the data subject, who provides it when filling in an enquiry form on the website, sending his/her curriculum vitae, subscribing to the newsletter or otherwise contacting the Company; from the customer’s activities, the Company’s personal data processors or other external sources. Data may also be obtained from publicly available sources such as company websites.
Data may be generated when a person uses services, such as making a phone call, sending a text message, sending an email, ordering services, visiting websites or filling in a form.
The person is not obliged to provide any personal data, but it is possible that certain services, such as the sale of goods or the billing of an invoice, may not be provided if personal data is not provided.
PURPOSES OF DATA PROCESSING
We use the data we collect to:
(a) to provide a high quality of Service to our customers and to provide a personalised service;
b) to identify and contact customers;
c) for marketing purposes on the basis of your consent: to send you emails with news, publications and information about events, to provide you with tailored content on social networks, to remember information relevant to you;
d) to improve the performance of the website so that you can easily find what you are looking for;
e) for the purpose of recruitment, on the basis of your consent, which you give to us or to the company providing the recruitment services by sending us your CV.
We undertake not to pass on your personal data to any unrelated third parties, except in the following cases:
(a) where there is your consent to the disclosure of personal data;
b) to ensure the provision of services in accordance with a contract;
c) to law enforcement authorities in accordance with the procedure provided for by the legislation of the Republic of Lithuania;
d) to our service providers (IT system maintenance companies, companies providing accounting services, companies providing event organisation services);
e) partners.
COLLECTION AND USE OF PERSONAL DATA
The Company collects personal data about:
(a) persons who make a request for the purpose of receiving services provided by the Company. The following data is collected: contact details of legal and natural persons, such as name, title, company (institution), e-mail address, telephone number;
(b) persons who participate in training organised by the Company. The following data shall be collected: name, surname, signature, company (institution);
c) persons who agree to receive our newsletters or who agree to receive our information by e-mail. The following data are collected: name, company (institution), e-mail address, telephone number. By registering, you give your consent to the Company to collect and process the personal data you provide for the purpose of providing the Company with the newsletters, publications and event information you subscribe to;
d) visitors to the website and their IP address;
e) applicants for a job or internship.
COOKIES
Cookies – A cookie is a small file made up of letters and numbers that we place on your browser or on your computer’s hard drive with your consent. We use different cookies for different purposes. Cookies also help us to distinguish you from other users of the Website, which ensures a more enjoyable Website experience and allows us to improve our Website. You can refuse the use of cookies in your browser or website settings, but this may restrict your access to all the services provided on the Website.
We use the following cookies on the Website:
(a) Performance enhancing (session) cookies. These are designed to improve the performance of the Website and collect general (anonymous) information about the use of the Website.
a) Analytical. These cookies allow the Company to identify and count visitors to the Website and to track how visitors move around the Website as they use it. This helps the Company to improve the performance of the Website, for example to ensure that users can easily find what they are looking for.
b) Functional cookies. These cookies are used to identify Customers when they return to the Website. This allows the Company to provide tailored content on social networks and to remember information that is relevant to Customers.
MEANS OF STORING PERSONAL DATA AND STORAGE PERIOD
Personal data is protected against loss, misuse and damage. Physical and technical measures are in place to ensure that the personal data we collect from you is secure. We remind you that data transmitted over the Internet is not completely secure. The Company cannot guarantee the complete security of the data, but only undertakes to take all necessary steps to protect it.
We will retain your data for 10 (ten) years after the date of your last use of our services or content. Personal data obtained on the basis of the data subject’s consent will be stored from the time the consent is obtained until it is withdrawn. If you withdraw your consent to the processing, we will only retain your consent for 10 (ten) years from the expiry of the consent period or withdrawal of consent for the purpose of asserting, exercising or defending any legal claims of the Company.
SELECTION OF EMPLOYEES AND TRAINEES
We collect and process your CV and/or cover letter and/or other information provided by you for the purpose of participating in the recruitment process for the purpose of conducting a selection for a job or traineeship on the basis of your consent, which you express to us or to the recruitment service provider by sending your CV.
If you do not submit your CV and/or cover letter, we will not be able to assess your suitability for the position. In the event that you do not express your explicit consent to the processing of your personal data after the recruitment process has ended, we undertake to delete and/or destroy your personal data within 10 working days after the successful candidate has signed the employment contract.
RIGHTS OF THE DATA SUBJECT
Each data subject has the following rights:
(a) the right to know (be informed) about the processing of his/her personal data;
(b) the right to have access to his/her personal data and how they are processed, i.e. to be informed about the period of retention of personal data, the technical and organisational measures in place to ensure the security of the data, to be informed from which sources and which personal data have been collected, for what purpose they are processed and to whom they are provided;
(c) the right to obtain rectification, erasure or suspension, with the exception of storage, of the processing of his/her personal data where the processing is not in accordance with the provisions of law;
(d) the right to object to the processing of their personal data, unless the processing is carried out for a legitimate interest pursued by the controller or by a third party to whom the personal data are submitted and the interests of the data subject are not overriding;
(e) the right to request the restriction of the processing of personal data;
(f) the right to require that personal data which he or she has provided, if processed on the basis of his or her consent or on the basis of a contract, and if processed by automated means, be transmitted by the controller to another controller, provided that this is technically feasible (data portability);
(g) the right to lodge a complaint with the State Data Protection Inspectorate concerning the processing of personal data.
h) the right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on consent prior to the withdrawal of consent;
(i) the right to withdraw at any time the consent given for the processing of personal data for direct marketing purposes;
The data subject shall submit a written request for the exercise of his/her rights in person, by post, by courier or by e-mail, upon presentation of a document proving his/her identity, or upon verification of his/her personal identity by means of a procedure established by law or by means of electronic communications which permit the proper identification of the individual. Upon receipt of the data subject’s request, the Company will provide a response no later than 30 calendar days after receipt of the data subject’s request.
In the event of failure to resolve the matter with the Company, the Client shall have the right to contact the State Data Protection Inspectorate, which is responsible for the supervision and control of the legislation governing the protection of personal data.
CHANGE OF POLICY
The Company reserves the right to change the Privacy Policy at any time and such changes shall be effective from the date of their publication on the website https://www.maistosauga.lt/. Persons intending to use the Services provided by the Company are always advised to familiarize themselves with the latest version of the Privacy Policy.
CONTACTS
You may contact the Company with inquiries, requests or comments regarding the Privacy Policy, as well as to request updates to the Company’s information about an individual or the individual’s preferences. We invite you to contact us with any questions at admin@maistosauga.lt or by phone +370 685 72544.