The purpose of this Privacy Policy is to inform data subjects how their personal data is processed, what rights data subjects have and how those rights are exercised, and to set out other matters related to the processing of personal data.
The Company processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter – the GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts governing the protection of personal data.
SERVE LT, UAB, follows these key personal data processing principles:
–Personal data is processed lawfully and fairly;
–Personal data is collected for specified, explicitly defined and legitimate purposes and is not processed in a manner incompatible with those purposes;
–Personal data is adequate, relevant and not excessive in relation to the purposes for which it is processed;
–Personal data is accurate and, where necessary, kept up to date;
–Personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which it is processed;
–Personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
1.Definitions
1.1.Personal data – any information relating directly or indirectly to a data subject whose identity is known or can be established directly or indirectly using the relevant data.
1.2.Asmens duomenų tvarkymas - any operation performed on personal data (including collection, recording, storage, editing, alteration, organisation, destruction, etc.).
1.3.The Company – SERVE LT, UAB (legal entity code 135852715), with its registered office at Elniu str. 9-24, LT-08101, Vilnius.
1.4.Data subject – a natural person who is identified or can be identified and whose data is processed by the Company.
1.5.Interneto svetainė - tai Bendrovei priklausanti Interneto svetainė, pasiekiama adresais: serve.lt, serveonline.lt ir groziosalonas.lt.
1.6.Cookies – Bendrovės Interneto svetainėje naudojamos mažos tekstinės informacijos dalelės, kurios yra automatiškai sukuriamos naršant svetainėje ir yra saugomos kompiuteryje ar kitame duomenų subjekto (interneto svetainės lankytojo) naudojamame įrenginyje. Slapukai naudojami siekiant gerinti naršymo patirtį svetainės lankytojams, analizuoti svetainės lankytojų srautus bei elgesį interneto svetainėje, užtikrinti tinkamą Interneto svetainės funkcionavimą.
1.7.Consent – any freely given and informed confirmation by which the Data Subject agrees that their Personal Data may be processed for a specific purpose.
2.Sources of personal data
2.1.The Data Subject provides Personal Data to the Company themselves. Duomenų subjektas naudojasi Bendrovės teikiamomis paslaugomis, susikurdamas paskyrą Bendrovės Interneto svetainėje, pateikdamas Interneto svetainėje atsiliepimus, kreipdamasis į Bendrovę su užklausomis, pretenzijomis, skundais ir pan..
2.2.Personal data is obtained from other sources. Data is obtained from partners of the Company who advertise their services on the Website or use the services provided by the Company, from other natural or legal persons and similar sources.
3.Processing of personal data where the Company acts as the Data Controller
3.1.Asmens duomenis Bendrovė tvarko šiais tikslais:
3.1.1.Conclusion and performance of contracts. Data processed for this purpose: sutarties šalies ar jos atstovo (kai sutarties šalimi yra juridinis asmuo) vardas (-ai), pavardė (-ės), asmens kodas arba gimimo data, individualios veiklos pažymos numeris, gyvenamoji ar ūkinės komercinės veiklos vykdymo vieta (adresas), telefono numeris, elektroninio pašto adresas, darbovietė, pareigos, banko atsiskaitomoji sąskaita ir bankas, kuriame ši sąskaita yra, mokėjimo kortelės duomenys, piniginės operacijos atlikimo ar sandorio sudarymo data, suma, valiuta bei kiti duomenys, kurie pateikiami Bendrovei ir (arba) kuriuos Bendrovė gauna pagal teisės aktus vykdydama Bendrovės veiklą ir (arba) kuriuos tvarkyti Bendrovę įpareigoja įstatymai ir (arba) kiti teisės aktai. Pvz. verslo liudijime esantys duomenys (veiklos rūšis, grupė, kodas, pavadinimas, veiklos vykdymo laikotarpiai, išdavimo data, suma), individualios veiklos pažymėjimo numeris, duomenys ar duomenų subjektas yra PVM mokėtojas ir kt. duomenys, reikalingi sutarties ir (ar) teisės aktuose nustatytų pareigų tinkamam vykdymui;
3.1.1.1.Contracts, VAT invoices and other related documents are kept for the periods specified in the General Index of Document Retention approved by order of the Chief Archivist of Lithuania;
3.1.1.2.Duomenų tvarkymo teisinis pagrindas – būtinybė įvykdyti sutartį, kurios šalis yra Duomenų subjektas, arba siekiant imtis veiksmų duomenų subjekto prašymu prieš su juo sudarant sutartį (BDAR 6 str. 1 d. b punktas), Bendrovei nustatytų teisinių prievolių vykdymas (BDAR 6 str. 1 d. c punktas), teisėtas Bendrovės interesas, kai sutarties šalimi yra juridinis asmuo (BDAR 6 str. 1 d. f punktas).
3.1.2.Administration of enquiries, comments and complaints. The following data is processed for this purpose: The name(s) and surname(s) of the enquiring Data Subject, e-mail address, telephone number, the subject and content of the message, comment, review or complaint, and other data provided by the enquiring Data Subject.
3.1.2.1.Data relating to enquiries, comments and complaints is kept for 1 calendar year from the date of submission;
3.1.2.2.Duomenų tvarkymo teisinis pagrindas – būtinybė įvykdyti sutartį, kurios šalis yra Duomenų subjektas, arba siekiant imtis veiksmų Duomenų subjekto prašymu prieš su juo sudarant sutartį (BDAR 6 str. 1 d. b punktas), Bendrovei nustatytų teisinių prievolių vykdymas (BDAR 6 str. 1 d. c punktas), teisėtas Bendrovės interesas (BDAR 6 str. 1 d. f punktas).
3.1.3.Telefonu teikiamų konsultacijų apie Bendrovės teikiamas paslaugas kokybės užtikrinimas, gerinant klientų aptarnavimo kokybę, kontroliuojant, kad informacija būtų teikiama kvalifikuotai ir operatyviai (telefoninių pokalbių įrašymas). Šiuo tikslu tvarkomi šie duomenys: the content of the telephone call recording, the telephone number from which and to which the call is made, the date of the call, the duration of the call and other data provided during the call.
3.1.3.1.Telephone call recordings are kept for 14 calendar days;
3.1.3.2.Duomenų tvarkymo teisinis pagrindas – Duomenų subjekto sutikimas (BDAR 6 str. 1 d. a punktas).
3.1.4.Creation and administration of an account on the Website of the Company. The following data is processed for this purpose: paskyros naudotojo vardas, pavardė; slaptažodis; el. pašto adresas; mobiliojo telefono numeris; pareigos ir darbovietė, teikiamų arba užsakytų paslaugų informacija, miestas.
3.1.4.1.Data is kept until the account is deleted;
3.1.4.2.Legal basis for processing – the necessity to perform a contract to which the Data Subject is party, or in order to take steps at the request of the Data Subject prior to entering into a contract (GDPR Article 6(1)(b)), the legitimate interest of the Company where the contracting party is a legal person (GDPR Article 6(1)(f)).
3.1.5.Administration of the social network accounts of the Company. The following data is processed for this purpose: the user name or name and surname of the social network account, profile picture, the content of public comments, the content of correspondence with the Company.
3.1.5.1.When administering its social network accounts and processing personal data for this purpose, the Company and the operators of the social network platform are considered joint data controllers;
3.1.5.2.Duomenų tvarkymo teisinis pagrindas - Duomenų subjekto sutikimas (BDAR 6 str. 1 d. a punktas).
3.1.6.Direct marketing. Data processed for this purpose: name; surname; e-mail address.
3.1.6.1.Data is kept until consent is withdrawn;
3.1.6.2.Legal basis for processing – the consent of the data subject (GDPR Article 6(1)(a)).
3.1.7.Publication on the Website of reviews by Data Subjects about service providers. Data processed for this purpose: the name and surname of the person submitting the review, the name, surname, position and place of work of the data subject who provided the service, the content of the review, information about the service provided.
3.1.7.1.Duomenys saugomi vienerius metus nuo atsiliepimo paskelbimo;
3.1.7.2.Duomenų tvarkymo teisinis pagrindas – Duomenų subjekto sutikimas, kai atsiliepimą skelbia Duomenų subjektas, kuriam buvo suteikta paslauga (BDAR 6 str. 1 d. a punktas) arba teisėtas Bendrovės interesas, kai skelbiamas atsiliepimas apie paslaugą suteikusį asmenį (BDAR 6 str. 1 d. f punktas).
3.2.For other purposes, for which the Company has the right to process the personal data of the Data Subject, where the Data Subject has given consent, where the Personal Data must be processed on the basis of the legitimate interest of the Company, or where the Company is obliged to process the Personal Data by the relevant legal acts.
4.Processing of personal data where the Company acts as the Data Processor
4.1.When providing services, the Company acts as a data processor, i.e. the Company processes Personal Data on behalf of the data controller (service providers who purchase a subscription to use the services of the Company), for the purposes and to the extent determined by that controller.
4.2.As a data processor, the Company processes:
4.2.1.Personal Data of the employees of service providers or of specialists acting on behalf of service providers: name, surname, specialisation, profession, e-mail address, telephone number, image, place of service provision, work schedule and other information provided to the Company;
4.2.2.Personal data of the clients of service providers: name, surname, place, date and time of service provision, and other information provided to the Company.
4.3.Šiuos Asmens duomenis Bendrovė tvarko, siekdama įvykdyti sutartį, sudarytą su duomenų valdytoju, t.y. turėdama teisėtą interesą (BDAR 6 str. 1 d. f punktas).
4.4.The Company processes this Personal Data for the periods laid down in the data processing agreement concluded with the data controller.
5.Use of cookies
5.1.The Company uses cookies on the Website in order to develop and improve the experience of Website visitors.
5.2.The following types of cookies may be used on the Website of the Company:
5.2.1.Technical (necessary) cookies – help to display the website and its content to the visitor, help ensure the functionality of the website, create an account, log in to an account and manage your orders. Technical cookies are necessary for the proper functioning of the Website and their use does not require the consent of the Website visitor.
5.2.2.Functional cookies – used to help the Website visitor use the Website, to remember the choices and preferences made while browsing. Functional cookies are not necessary for the Website to function fully, but they add functionality and improve your experience of using the Website. They are used only with the express consent of the Website visitor.
5.2.3.Analytical cookies – used to obtain information about how Website visitors use the Website. This is necessary so that we can optimise and improve the Website. With the help of analytical cookies we can collect data about the web pages you have viewed, the pages you came from, which e-mails you opened and responded to, and information about the date and time. This also means that we may use information about you and how you use this website, for example the frequency of visits, the number of clicks on a particular page, the search terms used, etc. As part of our advertising campaigns, we may use analytical cookies to find out how users browse our website after being shown an advertisement online. This may also include advertisements on third-party websites. They are used only with the express consent of the Website visitor.
5.2.4.Commercial (targeted or advertising) cookies – naudojami siekiant pateikti suasmenintą reklama Interneto svetainės lankytojui. Tai vadinama „pakartotine rinkodara“, kuri pagrįsta naršymo veiksmais, pavyzdžiui, jūsų ieškotomis, peržiūrėtomis prekėmis ir (ar) paslaugomis. Naudojami tik esant Interneto svetainės lankytojo išreikštam sutikimui.
5.3.Access to statistical data about visitors to the website of the Company is held by employees of the Company who are responsible for analysing this data and improving the website.
5.4.Access to technical records may also be held by partners of the Company who provide the content management tools for the website of the Company.
5.5.The Google Analytics tool is provided by the US company Google Inc., which therefore also has access to the statistical data collected with the Google Analytics tool. This provider is subject to contractual and statutory obligations to ensure privacy. With the help of the Google Analytics tool, the Company collects and analyses statistical data about website traffic in order to improve the performance of the website and the user experience.
5.6.Išsamesnę informaciją apie slapukus galite rasti adresu: AllAboutCookies.org.
6.Use of social networks
6.1.All information that you submit through social media (including messages, the use of the Like and Follow buttons, and other communication) is controlled by the operator of the relevant social network.
6.2.Šiuo metu Bendrovė turi paskyrą socialiniame tinkle „Facebook“, kurio privatumo politika yra pateikiama adresu https://www.facebook.com/privacy/explanation.
6.3.We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.
7.Provision of personal data
7.1.Bendrovė įsipareigoja laikytis konfidencialumo pareigos Duomenų subjektų atžvilgiu. Asmens duomenis Bendrovė atskleisti trečiosioms šalims tik tada, jeigu to reikia sutarčiai Duomenų subjekto naudai sudaryti ir vykdyti, arba dėl kitų teisėtų priežasčių.
7.2.The Company may provide Personal Data to its Data Processors, who provide services to the Company and process personal data on behalf of the Company and for the purposes determined by the Company. Data processors have the right to process Personal Data only in accordance with the instructions of the Company and only to the extent necessary for the proper performance of the obligations laid down in the contract. The Company engages only those data processors who ensure the implementation of appropriate technical and organisational measures in such a way that the processing meets the requirements of the GDPR and the protection of the rights of the Data Subject is ensured.
7.3.The Company may also provide Personal Data in response to requests from a court or state institutions, to the extent necessary for the proper implementation of applicable legal acts and the instructions of state institutions.
8.Processing of the personal data of minors
8.1.Persons under 14 years of age may not submit any Personal Data through the Website of the Company. If a person is under 14 years of age and wishes to use the services of the Company, before providing personal information they must submit the written consent of one of their representatives (father, mother, guardian) to the processing of personal data.
9.Rights of the data subject
9.1.The right to receive information about the processing of data.
9.2.The right to access the data being processed.
9.3.The right to request rectification of data.
9.4.The right to request erasure of data (the right to be forgotten). This right does not apply if the Personal Data requested to be erased is also processed on another legal basis, such as processing necessary for the performance of a contract or the fulfilment of an obligation under applicable legal acts.
9.5.The right to restrict processing.
9.6.The right to object to processing.
9.7.The right to data portability. The right to data portability may not adversely affect the rights and freedoms of others. The Data Subject does not have the right to data portability in respect of personal data that is processed in structured filing systems by non-automated means, for example in paper files.
9.8.The right not to be subject to a decision based solely on automated processing, including profiling.
9.9.The right to lodge a complaint about the processing of personal data with the State Data Protection Inspectorate.
9.10.The Company must enable the Data Subject to exercise the rights of the Data Subject set out above, except in the cases laid down by law where it is necessary to ensure state security or defence, public order, the prevention, investigation, detection or prosecution of criminal offences, important economic or financial interests of the state, the prevention, investigation and detection of breaches of service or professional ethics, or the protection of the rights and freedoms of the data subject or of other persons.
10.Procedure for exercising the rights of the data subject
10.1.In order to exercise their rights, the Data Subject may contact the Company:
10.1.1.by submitting a written request in person, by post, through a representative or by electronic means of communication – by e-mail: serve@serve.lt;
10.1.2.orally – by telephone: +370 68209111;
10.1.3.raštu – adresu: Elnių g 9-24, Vinius, LT - 08101.
10.2.In order to protect data against unlawful disclosure, upon receiving a request from the Data Subject to provide data or to exercise other rights, the Company must verify the identity of the Data Subject.
10.3.The response of the Company to the Data Subject is provided no later than within one month from the date of receipt of the request of the Data Subject, taking into account the specific circumstances of the processing of Personal Data. Where necessary, this period may be extended by a further two months, taking into account the complexity and number of requests.
11.Responsibility of the data subject
11.1.The Data Subject must:
11.1.1.inform the Company about changes to the information and data provided. It is important for the Company to have correct and valid information about the data subject;
11.1.2.provide the information required so that, where the Data Subject submits a request, the Company can identify the Data Subject and make sure that it is communicating or cooperating with that specific Data Subject (submit an identity document or use the procedure laid down in legal acts or electronic means of communication that allow the data subject to be properly identified). This is necessary for the protection of the data of the Data Subject and of other persons, so that disclosed information about the data subject is provided only to the Data Subject, without infringing the rights of other persons.
12.Final provisions
12.1.By providing Personal Data to the Company, the Data Subject agrees to this Privacy Policy, understands its provisions and agrees to comply with it.
12.2.Plėtojant ir tobulinant Bendrovės veiklą, Bendrovė turi teisę bet kuriuo metu vienašališkai pakeisti šią Privatumo politiką. Bendrovė turi teisę vienašališkai, iš dalies ar visiškai pakeisti Privatumo politiką apie tai pranešdama internetinėje svetainėje serve.lt; serveonline.lt, groziosalonas.lt.
12.3.Privatumo politikos papildymai ar pakeitimai įsigalioja nuo jų paskelbimo dienos, t. y., nuo tos dienos, kai jie yra patalpinami Internetinėje svetainėje serve.lt; serveonline.lt, groziosalonas.lt arba kitos Privatumo politikoje nurodytos datos.
