Data protection (privacy) policy

1. General provisions.

1.1. UAB “Signeda” (hereinafter “the Company”), respecting the right to privacy of its customers, including visitors of the https://www.signeda.lt/ website (hereinafter “the Website”) and its buyers (hereinafter “the Customers”), undertakes to ensure the protection of their personal data and their rights held as data subjects.

1.2. This Privacy Policy governs the primary principles and the procedure for the collection, processing and storage of all personal data of the customers of the Company.

1.3. By using the Company’s Website or its services or by purchasing any goods offered by the Company, thereby providing your personal data to the Company, you agree to the provisions of this Privacy Policy (with the exception of those concerning the data processing actions that will require a separate consent from you). The Customers are considered to have made themselves familiar with the Privacy Policy when registering on the Website they tick the box underneath the text of this Privacy Policy. The Privacy Policy may be accessed time and time again on the Website at the following address: https://www.signeda.lt/privacy-policy.

1.4. When processing your personal data, we adhere to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “the Regulation”), the Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter “the LLPPD”), the Law on Electronic Communications of the Republic of Lithuania (hereinafter “the LEC”) and other applicable legislation governing the protection of personal data.

2. Definitions used in the Privacy Policy.

2.1. ‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2.2. 'Data subject' means a natural person – a customer of the Company (including visitors of the Website) whose personal data are collected by the Company.

2.3. ‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2.4. ‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2.5. ‘Data processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller;

2.6. 'Data controller' means UAB “Signeda”, a company incorporated under the laws of the Republic of Lithuania, entity number: 135685159, registered address: Baltijos g. 39, Jonučiai Village, LT-53305 Kaunas District.

2.7. 'Cookie' means a small piece of text information, which is automatically created when browsing the Website and is stored on your computer or another device.

2.8. 'Direct marketing' means an activity intended for offering goods or services to individuals by post, telephone or any other direct means  and/or for obtaining their opinion about the offered goods or services.

3. What personal data do we collect?

3.1. The Company collects and further processes the following personal data about you which you provide when registering, ordering services and/or purchasing goods on the Website, or ordering services otherwise: forename, surname, address, email, telephone, data related to the provision of services, order details, account numbers, payment details, information about consent and objection to the processing of personal data for direct marketing purposes, passwords, and any other data that you provide in additional to the above at your own initiative when registering, ordering services and/or purchasing goods. Your personal data are stored by the Company during the period of our cooperation and 10 (ten) years following the end of cooperation.

3.2. Your personal data which have been collected and which you provide indirectly when registering, ordering services and/or purchasing goods on the Website are further processed by the Company, i.e. the above data are automatically collected from computers and/or mobile devices that you use when you log into the Website: login IP addresses and times, browser used by the user and its version, websites that you visited prior to entering our Website, data on the use of services, etc. These data are stored by the Company during the period of our cooperation and, depending on the data, up to one year following the end of this period. These data may be stored for a longer period of time if there are other legal grounds for such storage period.

4. What purposes are your personal data processed for?

4.1. The Company processes the above personal data for the following purposes of processing: for identifying the customers of the Company on its information systems when registering on the Website and logging into your account, for processing and managing services and/or goods, for managing accounting documents in relation to the service order, for completing and managing the delivery of goods, for contacting you, for performing contractual undertakings, for direct marketing purposes (only with prior consents of the data subjects).

5. How are your personal data processed?

5.1. The Company ensures that your personal data are: processed lawfully, fairly and in a transparent manner, collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; accurate and, where necessary, kept up to date; and processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

6. Your rights as the data subject.

You have the following rights as a data subject, which we will implement following a request received from you (by email: [email protected]; by post at the following address: Baltijos g. 39, Jonučiai Village, LT-53305 Kaunas District)

6.1. With proper confirmation of identity having been performed:

6.1.1. access to personal data and how they are processed;

6.1.2. to obtain rectification of inaccurate personal data concerning you;

6.1.3. to have your incomplete personal data completed,

6.1.4. to obtain from the Company the erasure of personal data concerning you if:

6.1.5. they are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

6.1.6. you have withdrawn your consent, and where there is no other legal ground for the processing;

6.1.7. the personal data have been unlawfully processed;

6.1.8. and on other grounds set forth in the Regulation;

6.1.9. to obtain from the Company restriction of processing;

6.1.10. to receive the personal data concerning you, which you have provided to the Company, in a structured, commonly used and machine-readable format (you shall also have the right to request the Company to have the personal data transmitted to another data controller);

6.1.11. to object to processing of personal data concerning you (e.g. for direct marketing or the like).

6.2. Please be advised that should you consider that there has been a breach of your rights as a data subject you may lodge a complaint with the State Data Protection Inspectorate. More information about the State Data Protection Inspectorate and complaint handling procedure can be found here: https://www.ada.lt/

7. Processing of personal data for direct marketing purposes.

7.1. We will send Company newsletters to you by email and/or enquire about the quality of existing services only with your prior consent and in accordance with the provisions of the Regulation.
7.2. The following personal data are processed for direct marketing purposes: forename, surname, email and telephone.
7.3. Your personal data are stored for direct marketing purposes until you unsubscribe from direct marketing communications.

8. Whom are your personal data provided to?

8.1. The Company’s staff are granted access to your personal data only when strictly necessary for the performance of their duties and only provided the member of staff has committed to abide by confidentiality requirements.

8.2. The Company may provide your personal data to: law-enforcement authorities when there is legal basis therefor, in response to formal requests by state authorities and a court (however, only with the assurance that the requests are legitimate), and to other third parties with your consent.

8.3. We shall only use processors providing guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the Regulation and ensure the protection of your rights as a data subject.

8.4. Please note that the above data processors have the right to process your personal data only on our instructions.

8.5. The data processor may not engage another processor without prior specific or general written authorisation of the Company.

8.6. Your personal data in regards to the provision of the relevant services to you may be transferred to other countries (including third countries), but only with your consent.

9. Use of cookies

9.1. To improve your experience on the Website we use cookies – small pieces of text information, which are automatically created when browsing the website and are stored on your computer or other terminal equipment. Cookies also help ensure smooth functioning of the website and let track the duration and frequency of visiting the Website and collect statistical information on the traffic to the website. Analysing these data, we can improve the website and make it more user friendly. You can choose on the Website whether you wish to use cookies. If you disagree with cookies being saved on your computer or another device, you may withdraw your consent to using them at any time by changing settings and deleting the saved cookies. We use the following Cookies on the Website:

Cookie	Name	Purpose of data processing	Moment of creation	Expires	Data used
Technical cookies of the website
Cookie necessary for website functioning	PHPSESSID	Cookie for website functionality to be implemented. It is deleted when you close the website window	At entrance to the page	When the website window is closed	Unique ID number
Google Tag Manager, Google Analytics, and Facebook Pixel cookies:
Website traffic meter	_ga	Cookie collects information about user behaviour on the website and is used to save statistical information.	At first entrance to the page	2 years	Unique ID number
Website traffic meter	_gid	Cookie collects information about user behaviour on the website and is used to save statistical information.	At entrance to the page	When the website window is closed	Unique ID number

10. Links used on the website.

10.1. The Website will contain links to third-party websites, legislation and social networks. It should be noted that third-party websites to which links are provided on the Website are subject to the privacy policies of those sites, and the Company does not accept liability for any content of information on those websites, their activities and the provisions of their privacy policies.