UAB BSC Vilnius, legal entity code 300024424, registered office at Kareiviu g. 19, LT-09133 Vilnius, data about the company collected and stored in the Register of Legal Entities (hereinafter - the company), is the controller of personal data obtained when a person uses the company's products and/or services, as well as when he/she visits our web site. This means that UAB BSC Vilnius, independently or jointly with others, determines the purposes and means of the processing of personal data and undertakes to respect and protect personal data and the privacy of individuals.
This Privacy Notice:
- outlines the company's commitment and responsibility to protect and respect the privacy of individuals;
- explains how the company collects, uses and protects (processes) personal data;
- informs data subjects about how their personal data is processed and what rights each data subject has.
In processing the personal data of data subjects, we comply with the requirements of European Union legislation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, and other directly applicable legislation regulating the protection of personal data, as well as with the instructions of the competent authorities.
CONCEPTS
- Personal data shall mean any information relating to a natural person, i.e. the data subject, whose identity is known or can be established, directly or indirectly, by reference to the data concerned.
- Data subject means any natural person: customer, employee, partner, visitor.
- Customer - any person who orders, buys or uses our company's services. A customer with whom the company has started a purchase transaction must ensure that he/she is aware of the privacy notice and complies with its provisions.
- Impersonalized data - information that no longer relates to a natural person because all elements that allow the identification of the individual have been removed from the personal data set.
- Services - any products and/or services offered by the Company, both electronically and non-electronically.
HOW DO WE COLLECT YOUR PERSONAL DATA?
The information we collect about you depends on the information you provide to us when you order goods or register on our website.
WHAT PERSONAL DATA DO WE COLLECT FROM YOU?
We collect data that falls into the following categories:
- Basic information such as name, surname, date of birth, address, contact details;
- data relating to the provision of goods and/or services, billing, payment details, information about consent and non-consent to the processing of personal data for direct marketing purposes and provision to third parties, contact details and related records;
- data generated by means of communication, such as the IP address used by the internet user during the connection, etc.;
- other data relating to the use of services and/or goods, such as data collected through the use of cookies relating to internet browsing, etc.;
Sources of data:
- Data that you provide yourself, for example when you interact or have a legal relationship with our company, such as when you purchase services or register for services; subscribe to newsletters; or contact us to request information;
- data that is generated automatically when you use our services, to the extent permitted by applicable law, for example when you contact us or use our services (e.g. when you visit our website, make a phone call or send an email);
You are not obliged to provide any personal data to the company. However, in certain cases, if you choose not to do so, we may not be able to provide you with goods and/or services.
HOW DO WE USE YOUR PERSONAL DATA?
The Company collects and further processes your personal data only on the basis of the lawful grounds defined in the legislation on the protection of personal data - for the purpose of concluding and/or executing a contract with you; with your consent; when the processing of personal data is required by the relevant legislation or when the processing of personal data is necessary for the Company's legitimate interest (only if the interests of the data subject are not overridden).
The Company processes personal data for the following purposes:
- The conclusion and performance of electronic contracts, including, but not limited to, keeping records of customers and payments under the concluded contracts. We process personal data that is necessary to ensure the proper provision of services to our customers - to properly identify the individual, to accept and fulfil orders, to provide customer service, to invoice for goods and/or services. The legal basis is the performance of a contract with you (Art. 6, 1(b) GDPR) and the enforcement of mandatory legislation (Art. 6, 1(c) GDPR). The data is processed for this purpose for 10 years after the performance of the contract.
- Direct marketing. We process personal data (name, surname, email address, telephone number) for direct marketing purposes. We have the right to send direct marketing communications about similar goods and services by email to our existing customers, provided that they do not object. The basis for processing the data in relation to our existing customers is our legitimate interest (Article 6(1)(f) GDPR) - i.e. our aim to inform our existing customers about similar goods and services. You are given the right to object at the time of purchase. On this basis, we will send you direct marketing communications if you do not object and for a maximum period of 1 year after your last purchase. In relation to potential customers, the legal basis for processing is consent (Article 6(1)(a) GDPR). This means that we will only send our communications to potential customers if they have actively expressed their consent. The data is processed for this purpose until you withdraw your consent. You have the right to withhold your consent or to withdraw your previously expressed consent at any time without suffering any negative consequences.
In all of the above cases, the company shall only process personal data to the extent necessary to achieve the relevant clearly defined and legitimate purposes, taking into account the protection of the privacy of the data subject.
The Company shall ensure that personal data are processed accurately, fairly and lawfully, that they are processed only for purposes that are consistent with the purposes identified prior to the collection of the personal data, and that they are processed only in strict compliance with the clear and transparent requirements for the processing of personal data as set out in the legislation.
HOW DO WE PROTECT YOUR DATA?
For the processing of your personal data, the company has implemented appropriate organizational and technical security measures to protect personal data against accidental or unlawful destruction, alteration, disclosure or any other unauthorized processing.
WHO DO WE PROVIDE YOUR DATA TO?
We may provide your data to:
- Data processors (subcontractors) who provide services to us and process your data on behalf of the company as data controller and other companies as independent data controllers. Please note that processors have the right to process personal data only on our instructions and only to the extent necessary for the proper performance of their contractual obligations. When using subcontractors, we take all necessary measures to ensure that our processors have also implemented appropriate organizational and technical security measures and maintain the confidentiality of personal data.
- Data processors may be established outside the Republic of Lithuania, the European Union, or the European Economic Area. If we transfer your personal data to such processors, we will take all necessary measures provided for by law to ensure that your right to privacy continues to be adequately protected. For information on what additional security measures are in place, please contact us using the contact details below.
- To other third parties where such provision is necessary and not contrary to law.
HOW LONG DO WE KEEP YOUR DATA?
We do not keep your personal data for longer than the purposes of the processing or as required by law, provided that such law provides for longer retention.
Data collected for direct marketing purposes is kept until you withdraw your consent.
We aim not to store outdated or unnecessary information and to ensure that personal data and other customer information is kept up to date and correct.
HOW DO WE USE COOKIES?
In order to improve your experience on our websites, we use cookies, which are small pieces of textual information that are automatically created when you browse the website and stored on your computer or other device. The information collected by cookies enables us to provide you with a more user-friendly browsing experience, to provide you with attractive offers and to learn more about the behavior of users of our websites, to analyze trends and to improve both the website and the service we provide to you and the Company.
HOW TO MANAGE AND DELETE COOKIES
You can control the storage of cookies on your terminal device by using the pop-up window when you open our website. All cookies, other than essential ones, will only be stored with your active consent.
When you use your browser to access the content we provide, you can configure your browser to accept all cookies, reject all cookies or to notify you when a cookie is sent. Every browser is different, so if you don't know how to change your cookie preferences, please check your browser's help menu. Your device's operating system may have additional cookie controls. If you do not want information to be collected by cookies, you can use a simple procedure in most browsers that allows you to opt out of cookies. To learn more about how to manage cookies, please visit AllAboutCookies.org or www.google.com/privacy_ads.html .
However, please note that in some cases, deleting cookies may slow down the speed of your web browsing, limit the functionality of certain website features or block access to a website.
WHAT ARE YOUR RIGHTS?
You have the right to:
- to contact the company to request information about the processing of your personal data by the company;
- to request the company to correct your personal data and/or to suspend the processing of such personal data, except for storage, in the event that, after consulting the personal data, you find that the data are incorrect, incomplete or inaccurate;
- to request the company to erase personal data or to suspend the processing of such personal data, except for storage, in the event that, after having access to your personal data, you discover that the personal data are being processed unlawfully or fraudulently;
- request the company to transfer your personal data to another controller or processor;
- object to the processing of your personal data where the processing is carried out or intended to be carried out for direct marketing purposes or for the legitimate interest pursued by the company or by the third party to whom the personal data are provided.
If you have any questions about the information contained in this Privacy Policy, please contact us in any way that is convenient for you:
- Email: info@fit2.shop
- by phone +370 637 09990
If you are unable to resolve the matter with the company, you have the right to contact the State Data Protection Inspectorate www.vdai.lt, which is responsible for the supervision and control of the legislation governing the protection of personal data.