1. GENERAL PROVISIONS
1.1. This website is controlled by private limited liability company BALTISCHES HAUS, legal entity code 111543781, legal address J. Jasinskio g. 16A, Vilnius (hereinafter – the Company, We, Our).
1.2. The Company respects the right of privacy of the visitors to this website, including the Company’s clients (hereinafter – You, Your), and shall undertake to ensure the protection of Your personal data (hereinafter – Personal Data) during your visit and/or use of services provided by the Company.
1.3. This Company’s Privacy Policy (hereinafter – the Privacy Policy) contains information related to key principles of the processing of Your Personal Data, also information about collection, processing and storage of Your Personal Data. Visitors to the website that are under the age of 16 (hereinafter – the Minors) are kindly asked not to provide any Personal Data.
1.4. By using this website and/or services provided by the Company and by providing Personal Data to the Company, You hereby agree with the provisions of the Privacy Policy (with the exception when explicit consent for the processing of the Personal Data is required). You may get familiar with the Privacy Policy at any time on this website.
1.5. The Company shall have the right to amend this Privacy Policy at any time. If you would like to follow the changes to the Privacy Policy, you should periodically check this website.
1.6. Your Personal Data shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter – the Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter – the Law on Personal Data Protection), the Law on Electronic Communications of the Republic of Lithuania (hereinafter – the Law on Electronic Communications) and other applicable legislation regulating the protection of Personal Data.
1.7. If you have any questions and/or intend to submit a request, you may contact the Company by email to duomenuapsauga@balthaus.eu. If you are not satisfied with the Company’s reply to Your request, you shall have the right to refer to the State Data Protection Inspectorate with respect to actions of the Company.
2. DEFINITIONS
2.1. Personal Data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as an identification number, or to one or more factors specific to the physical, physiological, psychological, economic, cultural or social identity of that natural person;
2.2. Recipient means legal or natural person to which the Company provides Personal Data and which independently determines the purpose and measures pertaining to the processing of received Personal Data;
2.3. Data Subject means natural person whose Personal Data the Company controls and/or processes;
2.4. Consent of the Data Subject means any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her;
2.5. Provision of Personal Data means a disclosure of Personal Data by transferring them or making them available in any other way (except for disclosure of such data in mass media);
2.6. Processing of Personal Data means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
2.7. Processor means legal or natural person processing Personal Data according to the purpose set and under procedure specified by the Controller;
2.8. Controller means private limited liability company BALTISCHES HAUS, legal entity code 111543781, legal address J. Jasinskio g. 16A, Vilnius;
2.9. Direct marketing means activities aimed at offering goods or services to persons by post, telephone or other direct means and/or asking their opinion on the goods or services offered.
3. PROCESSED PERSONAL DATA
3.1. The Company shall collect and process the following Personal Data you have provided indirectly when visiting this website, i.e. such Personal Data will be automatically collected from Your computers and/or mobile devises used during Your registration:
3.1.1. name, surname;
3.1.2. email, telephone number;
3.1.3. communication (message);
3.1.4. IP address.
4. THE PURPOSE OF PROCESSED PERSONAL DATA AND RETENTION PERIOD
4.1. The Company shall process Your Personal Data on the following legitimate grounds:
4.1.1. to conclude agreement and/or perform concluded agreement;
4.1.2. on the basis of Your consent;
4.1.3. to implement the legitimate interest of the Company.
4.2. The Company shall process Your Personal Data for the following purposes:
4.2.1. to identify You and to contact You when submitting enquiries on services provided by the Company;
4.2.2. for the purpose of direct marketing by sending You the newsletters (notifications) of the website or contacting You by phone (only if you chose to receive newsletters (notification) by phone).
4.3. Your Personal Data shall be stored for no longer than is necessary for achieving Personal Data processing purposes determined by the Company.
5. PERSONAL DATA PROCESSING CONDITIONS
5.1. The Company shall ensure the following:
5.1.1. Your Personal Data are processed lawfully, fairly and in a transparent manner;
5.1.2. Your Personal Data are processed under defined procedure and only for specified, explicit and legitimate purposes as defined by the Company and not further processed in a manner that is incompatible with those purposes;
5.1.3. the minimum amount of Your Personal Data that is necessary and sufficient for the implementation of the objectives of this Privacy Policy is processed;
5.1.4. only accurate Personal Data are processed, and, upon identification of inaccurate data, processing of such data is restricted;
5.1.5. Personal Data are processed in a secure manner protecting Your Personal Data from unauthorised or unlawful processing of Personal Data, accidental loss, destruction or damage, also, by using appropriate technical and organisation measures;
5.1.6. Personal Data are stored for no longer than is necessary for achieving Personal Data processing purposes set by the Company;
5.1.7. only authorised persons under the obligation to ensure the confidentiality of processed Personal Data process Your Personal Data in the Company.
6. RIGHTS OF THE DATA SUBJECTS
6.1. You will have the following rights of the Data Subject which may be exercised by submitting a request and indicating a specific right you would like to implement, as well as a personal identity document; the request may be submitted by email to duomenuapsauga@balthaus.eu or by post (the request should be sent to the address J. Jasinskio g. 16A, Vilnius) or presented to the Company directly (at the address J. Jasinskio g. 16A, Vilnius):
6.1.1. to be informed about the processing of the Personal Data and get access to Personal Data (receive a copy of Personal Data);
6.1.2. to obtain rectification of inaccurate Personal Data;
6.1.3. to obtain erasure of any Personal Data, where:
6.1.3.1. the Personal Data are no longer necessary in relation to the purposes for which they were processed;
6.1.3.2. you have withdrawn consent and where there is no other legal ground for the processing of Your Personal Data;
6.1.3.3. Your Personal Data are processed without legitimate grounds;
6.1.3.4. in other cases as determined in the Regulation.
6.1.4. to obtain restriction of processing Personal Data:
6.1.4.1. for a period enabling the Company to verify the accuracy of Your Personal Data
6.1.4.2. if the processing of Your Personal Data is unlawful and You oppose the erasure of Your Personal Data;
6.1.4.3. where the Company no longer needs Your Personal Data, but You need them in order to exercise your rights to lodge a complaint or defend your rights.
6.1.5. to obtain Personal Data in commonly used, machine-readable and interoperable format;
6.1.6. to object to the processing of Personal Data;
6.1.7. to lodge a complaint with the State Data Protection Inspectorate.
7. PERSONAL DATA TRANSFER
7.1. The Company shall have the right to transfer Your Personal Data to the following subjects:
7.1.1. Personal Data processors providing website support services to the Company;
7.1.2. Personal Data processors providing website hosting services to the Company.
7.2. We will engage only those Processors which apply appropriate technical and organisation measures to ensure the protection of Personal Data that comply with the provisions of the Regulation and guarantee, as a Data Subject, Your rights and the implementation thereof.
7.3. We will not transfer Your Personal Data outside the European Economic Area, unless a country to which Your Personal Data are transferred ensures adequate protection level or you agree with such transfer of Your Personal Data.
7.4. Processors engaged by the Company shall process Your Personal Data only in accordance with the Company’s instructions. An engaged processor shall have the right to contract a sub-processor only upon receipt of advance written consent of the Company.
7.5. Your Personal Data may be also transferred to law enforcement agencies, courts or other state authorities, but only to the extent permitted by the laws.
8. USED COOKIES
8.1. To ensure the possibility to navigate and browse this website more easily and more efficiently and to guarantee high-quality service provision meeting Your needs, the following cookies are used (cookies are files storing information on the hard drive of Your computer or search engine): Name Description Validity [_ga] [Google Analytics permanent cookie used to distinguish visitors to the website when information about website traffic is collected], 2 years; [_gid] [Google Analytics permanent cookie used to distinguish visitors to the website when information about website traffic is collected], 24 hours; [_gat] [Google Analytics session cookies used by Google Analytics to increase request rate], 1 minute; [SESS{id}] [Used to keep the user of the website logged into the system], 10 hours.
8.2. You will have the possibility to accept or refuse cookies: when visiting the website You will see a message notifying You about the use of cookies and requesting Your consent for the use thereof. If You select not to agree with the use of cookies, they will not be used (with the exception of cookies used to ensure proper functionality, e.g., SESS {id}).
9. LINKS
9.1. The website uses links to third party websites. Please be advised that privacy policies of third-party websites to which the Company’s website provides links shall be applied to the use of such websites, therefore, the Company shall not be liable for the content of information and/or activity of such websites.
