|
The purpose of the privacy policy is to inform how data subjects are collected and processed, how long they are stored, whom they are provided with, what data subjects have the rights to, and where to apply for them, or other matters related to the processing of personal data.
Personal data are processed in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the Regulation), the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the protection of personal data.
UAB "Nordic Idea" follows the following basic data processing principles:
- personal data is collected for clearly defined and legitimate purposes only;
- personal data is processed only lawfully and honestly;
- personal data is constantly updated;
- personal data is stored safely and for no longer than required by the data processing objectives or legislation;
- personal data is processed only by employees of the Company who have been given such a right in accordance with their functions or duly authorized data controllers.
-
1.1. Data controller – UAB "Nordic Idea" (further the Company), legal entity code 302642572, address Vasario 16 St. 38, Garliava town, Kaunas district municipality.
-
1.2. The data subject is any natural person whose data is managed by the Company. The data controller collects only those data subject that is necessary for the Company's activities and (or) visiting, using, browsing the Company's website, etc. (hereinafter - the Website). The company ensures that the collected and processed personal data will be safe and will only be used for a specific purpose.
-
1.3.Personal data is any information that directly or indirectly relates to a data subject whose identity is known or can be directly or indirectly identified using the relevant data. Personal data processing is any transaction with a personal data (including collecting, recording, storing, editing, modifying, granting access, requesting, transmitting, archiving, etc.).
-
1.4. Consent - any voluntary and deliberate confirmation by which the data subject agrees that his / her personal data will be processed for a specific purpose.
- 2.1. Personal data is provided by the data subject himself/herself. The data subject applies to the Company, uses the services provided by the Company, buys goods and / or services, leaves comments, questions, applies to the Company for the purpose of receiving information, etc.
- 2.2. Personal data is obtained when the data subject visits the Company's website. The data subject completes the forms contained therein or for some reason leaves his / her contact details and so on.
- 2.3. Personal data is obtained from other sources. Data is obtained from other institutions or companies, publicly accessible registers, etc.
-
3.1. When submitting personal data to the Company, the data subject agrees that the Company will use the collected data in fulfilling its obligations to the data subject in providing the services the data subject expects.
- 3.2. The personal data is processed by the Company for these purposes:
- 3.2.1. Establishment and execution of the Company's provided and received services, contracts for goods with the data subject; saving contacts and ensuring the opportunity to contact them; Tax accounting and contributory control. To this end, the following data is processed:
-
- Name (s), surname (s);
- Communication data (telephone number, e-mail address);
- Work lace and office (if the information is provided as a representative of the legal entity);
- Home address (VAT invoice).
- 3.2.2. Debts management. To this end, the following data is processed:
-
- Name (s), surname (s);
- Personal identification number / birth date;
- Personal identification number / birth date;
- Address;
- Other information related to the debt.
- 3.2.3. Administration of inquiries, comments and complaints. To this end, the following data is processed:
-
- Name (s);
- Communication data (telephone number, e-mail address);
- Street, house number;
- Text of an inquiry, comment or complaint.
-
3.2.4. For the purpose of securing the Company's employees, other data subjects and property (video surveillance). To this end, the following data is processed:
- video image. Video surveillance systems do not use facial recognition and / or analysis technology, the image data captured by them is not grouped or profiled by a particular data subject (person). For the purpose of performing video surveillance, the data subject is informed by the information signs with the camera's symbol and the Company's requisites, which are submitted before entering the observable area and / or the premises. The camcorder's tracking field does not include premises where the data subject expects absolute personal data protection.
- 3.2.5. For other purposes, in which the Company has the right to process personal data of the data subject when the data subject expresses his / her consent, when the data is to be processed due to the legitimate interest of the Company, or when the Company is required to process the data by the relevant legislation.
-
4.1. The Company undertakes to respect the confidentiality obligation with respect to data subjects. Personal data may only be disclosed to third parties if it is required for the conclusion of the contract for the benefit of the data subject or for other legitimate reasons.
-
4.2. The Company can submit personal data to its data processors who provide services to the Company and process personal data on behalf of the Company. Data processors have the right to process personal data only in accordance with the instructions of the Company and only to the extent necessary for the proper fulfillment of the obligations laid down in the contract. The Company only uses data processors who adequately ensure that appropriate technical and organizational measures are implemented in such a way that the data processing complies with the requirements of the Regulation and ensures the protection of the data subject's rights.
-
4.3. The Company can also provide personal data in response to requests from courts or public authorities to the extent necessary to properly enforce existing legislation and instructions from public authorities.
- 4.4. The Company guarantees that personal data will not be sold or leased to third parties.
-
5.1. The personal data collected by the Company is stored in printed documents and / or in the Company's information systems. Personal data is processed for no longer than what is necessary for the purpose of data processing or for no longer than required by the data subjects and / or provided for by law.
-
5.2. Although the data subject may terminate the contract and cancel the Company's services, the Company must keep data subject data for possible future claims or legal claims until the expiration of the data storage terms.
-
6.1. The right to receive information on the processing of data.
-
6.2. The right to get acquainted with data processed.
-
6.3. The right to request rectification of data.
-
6.4. The right to request deletion of data ("The right to be forgotten"). This right does not apply if the personal data requested to be deleted is also handled on another legal basis, such as processing necessary for the execution of the contract or enforcement of obligations under applicable law.
-
6.5. The right to restrict the processing of data.
-
6.6. The right to disagree with data processing.
-
6.7. The right to data portability. The right to data portability cannot adversely affect rights and freedoms of others. The data subject has no rights to the portability of the data in relation to personal data processed in manually-structured files, such as paper files.
-
6.8. The right to require that a decision would not be based on the appliance of the automated data processing, including profiling, only.
-
6.9. The right to submit a complaint regarding the processing of personal data to the State Data Protection Inspectorate.
-
7. The Company must provide the data subject with the rights specified above, except in cases provided for by law, when it is necessary to ensure the security or defense of the state, public order, prevention of criminal acts, investigation, detection or prosecution, important economic or financial interests of the state, prevention of official or professional ethics violations, investigation and detection, the protection of the rights or freedoms of the data subject or other persons.
-
8.1. The data subject can apply to the Company for the implementation of his / her rights:
-
8.1.1. by submitting a written request personally, by post, through a representative or by electronic means of communication – by e-mail: info@nordicidea.eu;
-
8.1.2. verbally – by phone +370 37 552 141;
-
8.1.3. in writing – address Vasario 16 St. 38, Garliava town, Kaunas district municipality.
-
8.2. In order to protect the data against unauthorized disclosure, the Company must verify the identity of the data subject upon receipt of the data subject's request for data or other rights.
-
8.3. The Company's response to the data subject is given not later than within one month from the date of receipt of the data subject's request, taking into account the specific circumstances of the processing of personal data. This period may, if necessary, be extended by a further two months, depending on the complexity and the number of requests.
-
9.1. To improve visiting, cookies - small pieces of textual information that are automatically generated when browsing a website and are stored on a computer or other terminal device – are used.
-
9.2. The information collected by the cookies allows for more convenient browsing on the website, offering suggestions and more information about the behavior of the website users, analyzing trends and improving both the website and the services provided.
-
9.3 Data subjects always remain anonymous.
-
9.4. Cookies are used transparently and responsibly. What cookies are saved can always be viewed in the browser. It is always possible to cancel the use of the cookies at any time by changing the settings and deleting saved cookies. In some cases, deleting or disabling the cookies to record and use cookies can slow down the browsing speed of the website, restrict certain functions of the website or block access the site.
-
| COOKIE NAME |
COOKIE DESCRIPTION |
COOKIE EXPIRATION DATE |
| _ga |
The part of the "Google Analytics" statistics system, stores information about a visitor's website visits, how many visits to the website, visit duration, browser information, etc |
2 years |
| _gat |
The part of the "Google Analytics" statistics system, stores information about a visitor's website visits, how many visits to the website, visit duration, browser information, etc |
Valid until the browser is turned off |
| _gid |
The part of the "Google Analytics" statistics system, stores information about a visitor's website visits, how many visits to the website, visit duration, browser information, etc |
Valid until the browser is turned off |
| evo_session |
Session ID cookie used to ensure page functionality (e.g. returning to the last place in the list) |
Valid until the browser is turned off |
- 10.1 The data subject has:
- 10.1.1 to inform the Company about changes in the submitted information and data. It is important for the company to have correct and valid information of the data subject;
-
10.1.2 to provide the necessary information so that at the request of the data subject the
Company could identify the data subject and make sure that the Company communicates or co-operates with the concrete data subject (to provide a personal identity document, or in accordance with the procedure laid down by legal acts or by electronic means of communication that allows the data subject to be properly identified). It is necessary for the data subject's and other persons' data protection so that disclosure of the data subject's information is provided only to the data subject without any violation of the rights of other persons.
- 11.1 By transferring personal data to the Company, the data subject agrees with this Privacy Policy, understands its provisions and agrees to comply with it.
- 11.2 In developing and improving the Company's activities, the Company has the right at any time to unilaterally change this Privacy Policy. The Company has the right to unilaterally, partially or completely change the Privacy Policy by notifying it on the website www.nordicidea.eu.
- 11.3 The additions or changes to the Privacy Policy come into force from the date of their publication, i.e. from the day they are posted on the website www.nordicidea.eu .
|
