I. GENERAL PROVISIONS
1. By visiting our website, subscribing to our newsletter or purchasing goods without registering, you are entrusting us with your data which we process for the purposes set out in this Privacy Policy.
2. Personal data means any information that can be used to identify an individual, as well as any information about an individual who has already been identified.
3. Data Controller: SID apšvietimas, Ltd
4. SID Apšvietimas respects your privacy and protects the personal data that you provide to us and that we collect in the manner set out in this Privacy Policy.
5. SID apšvietimas takes appropriate organisational and technical measures to ensure that your personal data is always secure and that our processing activities comply with the requirements of data protection legislation and our internal policies.
II. THE PURPOSES FOR WHICH THE PERSONAL DATA ARE PROCESSED, THE PERSONAL DATA COLLECTED, THEIR RETENTION PERIOD AND THE BASIS FOR PROCESSING
6. Purpose of processing: direct marketing (sending newsletters)
a) Personal data. email address
b) Basis: consent.
(c) The time limit for processing (sending notifications) is 2 years. After this deadline, if you do not renew your subscription, newsletters will no longer be sent to you
d) You may unsubscribe from the newsletter at any time by notifying us by email info@sidapsvietimas.lt or by clicking on the link at the bottom of the newsletter.
e) We will passively retain your data for a period of 1 year after the withdrawal of your consent (basis: processing is necessary for the legitimate interests of the controller).
(f) Persons under the age of 16 may not provide any personal data for marketing activities through our website(s). If you are a person who is under the age of 16, you must obtain the consent of your parents or other legal guardians before you provide personal information for marketing purposes.
7. Processing of data: sale/custom order event (not registered users)
a) Personal data: name, surname, email address, telephone number, mailing address, telephone number; signature (if you are accepting the goods yourself), date and time of purchase and delivery, names of the goods, quantities, prices of the purchases and any discounts granted, method of payment for the purchases, and payment information;
b) Basis: 1) The processing is carried out for the performance of a contract to which the data subject is a party or in order to take action at the request of the data subject prior to the conclusion of the contract. 2) The processing is necessary for compliance with a legal obligation to which the controller is subject. 3) The processing is necessary for the legitimate interests of the controller.
(c) Duration of data processing: purchase data (including invoice data of the buyer) shall be kept in the seller’s accounting records for 5 years.
d) Depending on the method of delivery chosen by you, the details of the delivery (preferred time of delivery, address, other information relevant to the courier) are transmitted to the delivery partner.
e) Depending on the payment method, the payment information is transmitted to the partner managing the payment service (Paypal, Stripe).
8. Purpose of processing: games and lotteries
a) If you choose to participate in sweepstakes and games, we will process your data for the purposes of administering games, campaigns and/or competitions organised by us, our suppliers and partners.
(b) The data usually processed for this purpose are: name, surname, city, email address, phone number, Facebook account link when the game is organised on the Facebook social network. Depending on the specifics of the game or lottery, more data may be required.
c) We process your personal data in order to select and announce the winner and to contact you when we hand over prizes, winnings. Failure to provide your details will prevent you from participating in the game and/or the competition. If you win, we can’t offer you the price. Your identity will be verified before you claim your prize.
d) By choosing to participate in the game, participants will also consent to the publication of their details (name, surname, city, prize won) in the event of winning. Information about the winners will be published on the social media accounts managed by the Organiser. We are obliged to inform the competent authorities (e.g. the Tax Inspectorate) of the prize in the cases prescribed by law.
e) The personal data collected during the campaign/lottery will be used only for the purposes of organising the lottery and will be stored for a maximum period of 3 (three) months after the announcement of the campaign winners. Afterwards, the data cannot be stored and will be deleted.
9. Purpose of processing: organisation of events
a) SID apšvietimas can organise both public and private product launches and other events for its clients.
b) For representational – self-promotional purposes, we aim to make videos of moments from each event, so by agreeing to participate in SID Lighting events, you are also agreeing that a photo or video of you together with other event attendees will be published on the company’s website and on your social media accountse.
c) Depending on the nature of the event, the media may also be present to record the moments and participants. By choosing to take part in our events, you are therefore consenting to the publication of your image in a photo or video in the press and portals.
d) we will try to remind you each time you are invited to an event that you are being photographed or filmed;
e) If for some reason you wish to have a particular image of you removed from the public galleries of SID apšvietimas events (on the website or on social media), please contact SID apšvietimas.
10. Business partners, suppliers and other persons
a) SID apšvietimas also processes personal data of various categories of data subjects (customers, business partners, suppliers, counterparties in the case of natural persons), as well as representatives of legal entities (employees, agents, other representatives).
(b) Personal data: name, surname, personal identification number, date of birth, contact details (place or residence or place of work, telephone, e-mail), place of work, position, details of the terms of the contract concluded, details of the performance of the contract.
c) the data must be collected and processed for the purpose of establishing, maintaining and developing a business, professional or other legal relationship with SID apšvietimas; for the purpose of concluding, executing, administering and performing transactions, contracts and agreements; for the purpose of developing and safeguarding the legitimate interests of the company and its affiliates; for the purpose of defending any legal claim, action or suit brought against SID apšvietimas; and for the purpose of compliance by SID apšvietimas with its obligations under any applicable law.
(e) grounds for processing: the processing is necessary for the performance of a contract to which the data subject is a party or in order to carry out an action at the request of the data subject prior to the conclusion of the contract; the processing is necessary for compliance with the controller’s legal obligations; the processing is necessary for the controller’s legitimate interests.
(f) The processing of data shall be limited to what is necessary to achieve the purposes of the processing. Transaction information must be kept for the duration of the contract and for 5 (five) years after the end of the transaction.
11. Purpose of processing: handling customer enquiries, complaints, requests and feedback
a) Personal Data: identification and contact information provided by the Customer: name, surname, telephone number, email address, residential address, date of birth; Content of the Enquiry: the event that was the subject of the enquiry, the circumstances, date, location, the Customer’s request, demand or feedback, the product, other information contained in the Enquiry; Other documents and/or data provided in connection with the Enquiry: e.g. purchase receipt details, photos.
(b) The request may be made via the website www.sidapsvietimas.lt, by email, post, message, comment on social networks, leave feedback on websites.
(c) Data retention period: 12 months. If a legal dispute is initiated or is likely to be initiated in relation to the Enquiry, we may keep your data for a longer period of time until the expiry of the statutory periods of limitation for lodging a complaint or bringing an action, and/or until a final judgment has been entered.
d) We only use your data to enable us to properly and objectively process your Enquiry, to provide you with the information you require, to answer your questions, and to resolve your requests or requirements. We may also analyse the data in order to improve the quality of our operations and the services we provide to you, taking into account your opinions and suggestions.
e) SID apšvietimas does not publish information about its correspondence with customers. However, if a customer’s enquiry/complaint is received in public comment forms on websites or social networking sites, SID Lighting reserves the right to respond/comment publicly in the same form as the enquiry.
f) After the expiry of the processing and retention period set out in this Policy, we will destroy or reliably and irretrievably depersonalize your data as soon as reasonably practicable and within a period of time reasonably necessary to do so. SID apšvietimas will not be able to comply with this requirement if the request is made via websites/social networking accounts that are not administered by SID apšvietimas.
12. Cookies. When you visit the Data Controller’s websites, we want to provide you with content and features that are tailored to your needs.
(a) For this purpose, our website uses cookies. These are small pieces of information stored in your web browser. They help the Data Controller to recognise you as a previous visitor to a particular website, to store a history of your visits to the website and to tailor content accordingl Cookies also help to ensure the smooth running of websites, to monitor the duration and frequency of visits to websites and to collect statistical information about the number of visitors to websites. By analysing this data, we can improve our websites and make them more user-friendly for you.
b) Cookies are used for your convenience.
Remember your settings;
When you return, you will find the items you put in your basket;
To improve the content on our website.
c) We hope that you agree with this. If you change your mind in the future, you will be able to change your browser settings and delete the cookies you have saved.
13. Data management on Facebook/Instagram social networks
a) When posting comments, messages or otherwise interacting with us on the Facebook or Instagram platforms (www.facebook.com/www.instagram.com), you must personally make sure that you are taking full advantage of your confidentiality safeguards.
b) we would like to point out that personal data and/or any other information that you post on public access sites (e.g. on our Facebook page wall, etc.) is visible to other visitors; therefore, you should assess whether you want to disclose your personal data/account link prior to posting a message, and you should make sure that it does not contain any content that is offensive, discriminatory, or otherwise violates the law and/or the rights of other visitors. Translated with DeepL.com (free version)
c) SID apšvietimas has the right to remove any information posted by visitors on the Facebook page if such information violates the law or the rights of other visitors.
d) We will only use any data voluntarily provided by you for the purpose for which you provided such data (e.g. for the purpose of communicating with you, for participation in a game organised on a Facebook page, etc.). We do not store any additional data about you and do not pass it on to third parties unless required by applicable law.
e) Persons under the age of 16 are prohibited from sharing their personal data on the Facebook Page without prior parental consent. Comments, replies, sharing of information or other actions carried out by a minor on a social network shall be deemed to be made with parental consent.
f) The basis for processing your data is your consent expressed by your active actions: e.g. when you prepare to follow our account updates, when you contact us by providing personal data, when you comment on, edit and share the messages we publish, etc. We also process data for the purposes of our legitimate interests (e.g. to administer and ensure the proper functioning of the site and to ensure the security of your personal data).
g) Please note that when you visit a Facebook page, your browser and/or mobile device establishes a direct connection with the Facebook server, which installs cookies and plug-ins for you. Facebook in turn collects information about your actions on the page: which posts attract your attention, which sections you visit most often, what you search for, etc. SID apšvietimas does not affect the scope of the data collected and informs you to the best of its knowledge.
Detailed information about Facebook’s data processing, the purposes and scope of data use in relation to the data you provide can be found in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation.
III. PROVISION OF DATA TO THIRD PARTIES
14. Your data may be transferred to third parties for processing to assist in the operation and administration of the Services. Such persons may include database software providers, database administration service providers, data centre, hosting and cloud service providers, direct marketing service providers, providers of market research or business analytics services, accounting services, auditors, legal and financial advisors, etc., partners engaged for the purpose of fulfilling a specific order (courier service, payment administration service provider, etc.).
15. In each case, only the amount of data necessary for the execution of a specific order or the provision of a specific service shall be provided to the processor.
16. The data processors we use may only process personal data on our instructions and may not use it for other purposes or transfer it to other persons without our consent. They are also obliged to ensure the security of your data in accordance with applicable law and written agreements with us.
17. Data may also be provided to competent government or law enforcement authorities or persons exercising functions assigned to them by law, such as the police or supervisory authorities, but only upon request and only when required by applicable law or in the cases and procedures provided by law to safeguard our rights, the safety of our customers, employees and resources, and to assert, bring, submit and defend legal claims.
18. If SID apšvietimas uses a website analytics service (e.g. Google Analytics) that is used to determine how you use the information provided on the www.sidapsvietimas.com website, we may share your personalised data with third parties who rely on this information to evaluate how the website is used, to compile reports on website activity for website operators, and to provide other services relating to the use of the website, the web app and the mobile application.
IV. PROVISION OF DATA TO THIRD PARTIES OUTSIDE THE EU/EEE
19. As a general rule, data is processed within the territory of the European Union/European Economic Area, but in certain cases it may be transferred to and processed outside the EU/EEA.
20. Personal data may be transferred and processed outside the EU/EEA where the transfer is necessary for the conclusion and performance of a contract or where the Customer has given consent, and where appropriate safeguards are in place. Appropriate safeguards include:
(a) a contract containing standard terms and conditions adopted by the EU Commission or other approved clauses, codes of conduct, certificates, etc. approved under the General Data Protection Regulation;
(b) the non-EU/EEA country in which the recipient of the Personal Data is located ensures an adequate level of protection of the Personal Data as decided by the EU Commission;
(c) The recipient is certified in accordance with the requirements of the Data Protection Agreement between the EU and the United States of America (USA) (also known as the “Privacy Shield”) (for recipients located in the USA).
V. RIGHTS OF THE DATA SUBJECT
21. The data subject whose data are processed in the course of the Data Controller’s activities shall have the following rights:
– to know (be informed) about the processing of your data (right to know);
– to know your data and how they are processed (right of access);
– to request that incomplete personal data be rectified or, taking into account the purposes of the processing of the personal data, supplemented (right to rectification);
– to have your data erased or to stop the processing of your data (with the exception of storage) (right to erasure and right to be forgotten);
– require the Data Controller to restrict the processing of personal data on one of the legitimate grounds (right of restriction);
– the right to data portability (right to data portability);
– the right to object to the processing of his or her personal data or to withdraw his or her consent to the processing of personal data for one or more specified purposes at any time, without prejudice to the lawfulness of the processing based on the consent prior to the withdrawal of the consent;
– lodge a complaint with the State Data Protection Inspectorate (www.ada.lt) if you believe that your personal data is being processed in violation of the legal requirements.
22. For all questions concerning data processing and the exercise of the data subject’s rights, please contact SID apšvietimas.
23. In order to protect the data of other persons from unauthorised disclosure, upon receipt of a request for the provision of data or the exercise of other rights, the controller shall be entitled to take additional steps to establish the identity of the person, such as requesting other relevant profile data provided or sending a control message to the contact indicated to request an authorisation action. If the verification procedure is unsuccessful, the controller will reject the request.
24. Upon receipt of a request for the exercise of any right and successful completion of the above verification procedure, the request will be processed within one month of receipt of your request and completion of the verification procedure. Depending on the complexity of the request and the number of requests, the controller shall have the right to extend the one-month period by a further two months, informing the data subject before the end of the first month and stating the reasons for such extension.
25. If the request is made by electronic means, the reply shall also be made by electronic means, unless this will not be possible (e.g. due to the extreme volume of information) or if the request specifies an alternative method of reply.
26. If the circumstances and reasons set out in the legislation are found to justify refusal, a reasoned reply will be given.
VI. VALIDITY AND AMENDMENTS
This privacy policy is effective from 2018. 05 month 18 d. If we change this privacy policy, we will post an updated version on our website www.sidapsvietimas.lt