- PURPOSE AND SCOPE 3
- CONTROLLER OF PERSONAL DATA 3
- WHAT INFORMATION DO WE COLLECT, FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS? 4
- HOW DO WE GET YOUR PERSONAL DATA? 5
- DIRECT MARKETING 5
- HOW DO WE SHARE YOUR PERSONAL DATA? 6
- INTERNATIONAL TRANSFER OF PERSONAL DATA 6
- HOW DO WE PROTECT YOUR PERSONAL DATA? 6
- HOW LONG DO WE KEEP YOUR PERSONAL DATA? 7
- WHAT RIGHTS DO YOU HAVE REGARDING YOUR PERSONAL DATA? 7
- COOKIES POLICY 8
- CONTACT US 9
Estnaila UAB (further - we, the Company, are the Service Provider) closed joint stock company, established and located in the Republic of Lithuania, legal entity code 304215302, address - Žalgirio st. 92, entrance 3, LT-09300, Vilnius, Lithuania.
According to data protection legislation, UAB "Estnaila" is the data controller responsible for processing your personal data. In this context, the term "personal data” means any information about a natural person that is identified or can be identified, directly or indirectly, in particular by an identifier, such as a name, personal identification number, location data and an Internet identifier, or by one or more of signs of physical, physiological, genetic, mental, economic, cultural or social identity of a natural person (e.g. your name and email mail address combination).
As a Personal Data Controller, we are responsible for ensuring the security of your personal data provided to us, primarily to prevent unauthorized access to your data. We are also responsible for ensuring that all data subjects have the opportunity to exercise their rights in relation to their personal data, such as the right to access or delete their personal data.
When processing personal data, we adhere to the following principles:
|1. Legality, fairness and transparency.||1. Your personal data is processed legally, honestly and transparently.|
|2. Limitation of purpose.||2. Your personal data is collected for established, clearly defined and legitimate purposes, and is not further processed in a manner incompatible with those purposes.|
|3. Data reduction.||3. Only such of your personal data are processed as are necessary to achieve the purposes for which they are processed.|
|4. Accuracy.||4. Your personal data must be accurate and, if necessary, constantly updated, all reasonable measures are taken to ensure that your inaccurate personal data, taking into account the purposes for which they are processed, are deleted or corrected immediately.|
|5. Storage period limitation.||5. Your personal data must be kept in such a form that allows the identification of data subjects no longer than is necessary for the purposes for which the personal data is processed.|
|6. Integrity and Confidentiality.||6. Your personal data must be processed in such a way that adequate security of personal data is ensured by applying appropriate technical or organizational measures, including protection against unauthorized or illegal data processing and against accidental loss, destruction or damage.|
|Purpose||Legal basis||Categories of personal data|
|1. Creation and management of a personal account.||Your consent.||First name, last name, name displayed on the account, e-mail email address, password.|
|2. Purchase/sale of goods.|
1. Your consent.
2. Conclusion and execution of the contract.
1. Name, surname, phone number, e-mail postal address, product delivery address, credit/debit card or other payment details and payment methods, information about purchased goods (quantities, purchase dates, prices of purchased goods, purchase history, etc.);
2. Other information provided by the buyer (notes to the courier, door code, etc.).
|3. Providing a response when you contact us through our website or other means of communication.|
1. Your consent.
2. Execution of the contract.
|Name, surname, phone number, e-mail e-mail address and other information provided during correspondence with us.|
|4. Execution of direct marketing campaigns.||Your consent.||Name, surname, phone number, e-mail mail adress.|
|5. Submission of complaints.||Fulfilling a contract.||Name, surname, e-mail postal address, phone number, information related to the goods (name of the goods, time of purchase of the goods, defects of the goods, payment information, etc.), content of the complaint.|
As our customer, we receive your personal data when we conclude or are preparing to conclude a contract(s) with you, as well as when you contact us directly by e-mail. by means of communication or by post.
We also receive your data as a website visitor or other person when you visit and use our website or submit inquiries to us or contact us.
We may collect personal data when it is provided to us by a third party that is related to you or communicates with us, such as business partners, service providers, etc.
Sometimes we need to provide your personal information to third parties in order to provide you with services. These third parties (data processors) include:
- Freelance IT specialists;
- Courier services;
- Companies providing direct marketing and service station (server) rental services;
Your personal data is transferred to third parties only to the extent that it is necessary to achieve specific goals.
The Service Provider and the third party with whom the Service Provider shares personal data operate under a separate agreement(s) governing the processing of personal data transferred to the third party.
We may also disclose and/or transfer your personal data to the following categories of recipients:
- For state and municipal institutions, institutions, organizations, and other public administration entities;
- For pre-trial investigation institutions, courts, bailiffs, notaries;
- For commercial banks, other financial institutions;
- For legal, financial, tax, business management, personnel administration, accounting advisors, etc.;
- To our partners or other persons who are a necessary part of the provision of our services;
- To other persons with whom we intend to enter into or have entered into contract(s).
We may also disclose your personal data if we are required to disclose or share your personal data in order to comply with legal requirements or requests.
- the country, territory or one or more specified sectors in that third country to which we send personal data is approved by the European Commission as having an adequate level of data protection;
- the recipient has signed or the terms of the service contract contain standard data protection conditions approved by the European Commission;
- special permission of the supervisory authority has been obtained.
We may transfer personal data to a third party by taking other measures if it provides adequate safeguards as specified in the Regulation.
We take various security measures to guarantee the security of your personal data. In our practice, we use legal, technical and organizational security measures in accordance with the latest data protection practices to protect against unauthorized access, loss, misuse, accidental or unauthorized destruction, alteration, disclosure or any other unauthorized processing of personal data.
We and any third-party service providers who may process personal data on our behalf are also contractually bound to comply with the principles and requirements of personal data confidentiality.
Using legal, technical and organizational security measures, the service provider cannot guarantee complete security and cannot guarantee protection against all possible security breaches.
We will keep your personal data as long as they are needed for the purposes for which they were collected and processed, but no longer than required by applicable laws and other legal acts.
If the legal acts of the Republic of Lithuania do not establish any personal data storage period, we will determine this period, taking into account the legal purpose of data storage, the legal basis and the principles of legal processing of personal data. Data not specified below are stored in accordance with the legal acts of the Republic of Lithuania:
- The personal data of the company's partners/clients and their employees/representatives are stored for 10 years after the contract expires, with the aim of concluding and executing contracts with them;
- Personal data of persons applying to the Company, which are processed in order to implement the management of requests received by the Company, are stored for 6 months from the resolution of the received request;
- Consents for the processing of Personal Data (e.g. for consent for direct marketing) are stored for 1 year after the end of the Personal Data for which consent was given for the storage period, unless the data subject revokes the given consent.
We also inform you that in certain cases your personal data may be stored longer:
- if it is necessary for the Company to be able to defend itself against claims, claims or lawsuits and to exercise its rights;
- there are reasonable suspicions of an illegal act, which is the subject of an investigation;
- personal data are necessary for the proper resolution of a dispute or complaint;
- a request to access your personal data is received;
- in the presence of other legal grounds.
As a data subject, you have the following rights:
|1. The right to receive information about whether the Company processes your personal data and, if so, to get acquainted with your personal data.||1. You have the right to receive information about what personal data we process, where it is collected from, for what purposes it is processed, how long it is stored, to whom it is provided, etc. It should be noted that your right to access data may be limited by legal acts, the protection of the privacy of others, and reasons related to our business and practice.|
|2. The right to demand the correction of inaccurate personal data related to you.||2. If it turns out that we are processing inaccurate, incomplete personal data about you, you have the right to demand correction and addition of personal data.|
|3. The right to demand deletion of data ("the right to be forgotten").||3. You have the right to demand the deletion of part or all of your processed personal data, if we no longer have a legal basis for processing them or there are other grounds provided for in legal acts.|
|4. The right to demand restriction of personal data processing.||4. You also have the right to demand a certain period of time to limit the processing of your personal data. This may be, for example, a situation where you believe that such processing is unlawful and/or the data about you is inaccurate and we need to verify this.|
|5. The right to object to the processing of personal data.||5. You have the right not to consent to us processing your personal data, if there is a basis for this set out in the Regulation.|
|6. The right to withdraw consent.||6. You have the right to withdraw your consent to processing personal data, if personal data were processed on the basis of consent. Withdrawal of consent does not affect the legality of consent-based data processing carried out before the withdrawal of consent.|
|7. The right to submit a complaint to the supervisory authority.||7. If you believe that the processing of our personal data is being processed in violation of your rights and legitimate interests, established in the applicable legal acts, you can file a complaint with the supervisory authority - the State Data Protection Inspectorate. You can find the complaint handling procedure of the State Data Protection Inspectorate here: https://vdai.lrv.lt/lt/atmintines/atmintine-asmenims-ketinantiems-kreiptis-i-valstybine-duomenu-apsaugos-inspekcija-del-skundo-pateikimo/kaip-kreiptis-i-inspekcija|
The above-mentioned rights will be exercised only after we receive your written request to exercise the above-mentioned rights and only after confirming your identity. Such written request shall be submitted to us in person at our registered office address, by regular mail or by electronic mail: firstname.lastname@example.org
Your requests will be processed within 30 (thirty) calendar days from the date of receipt of the request. In special cases, depending on the complexity of the requests and the amount of personal data, the period of 60 (sixty) calendar days may be extended, upon prior notification to you. The answer to your request is provided in the same form as the request was submitted, except if you prefer to receive the information electronically.
We may refuse to implement your right as a data subject or to provide you with the information you have requested, if the exceptions and/or restrictions on the implementation of the rights of data subjects established in the Regulation are applicable, as well as if it is determined that your request as a data subject is clearly unfounded or disproportionate. When we refuse to provide the requested information, we will state the reasons for such refusal in writing.
- How you can contact us?
Estnaila UAB, Žalgirio str. 92, entrance 3, LT-09300, Vilnius, Lithuania.
III. What are cookies?
Cookies (eng. cookies) are small text files that are saved to your device when you visit our Website. With the help of cookies, the website recognizes the user's device (for example, the next time the user visits the same website), as well as cookies can be used to determine the user's behavior, online habits, etc.
- What cookies we use?
There are different types of cookies. Some of the cookies are used directly by our Website, and the other part is used by third parties that place cookies on our Website. The cookies used directly by our Website are the so-called "first party cookies”, are cookies created by our Website. The information stored in them can only be read by our Website. "Third party cookies" are cookies that are placed on our Website when we use external services.
Some of the cookies we use are installed on your device only during the browsing session on the Website, such cookies are called "session cookies". These cookies automatically expire when the visitor's session ends and the web browser is closed.
Another type of cookie known as “persistent cookies" consists of a text file that is sent by a web server to a web browser, and which is stored in the web browser until the expiration date (unless the visitor deletes it before the expiration date).
Our Website uses 3 types of cookies:
- Mandatory cookies - these cookies are necessary for the proper functioning of our Website. Without mandatory cookies, our Website may not function properly.
- Advertising cookies – advertising cookies are used to show advertising messages that we think are relevant to you.
More information about the cookies we use can be found in the table below:
|Type of cookie||Purpose||Validity|
|elementor||Used in context with a website's WordPress application. The cookie allows the website to implement or change the content of the website in real time.||Permanent|
|PHPSESSID||Maintains user session state on page requests.||Session|
|test_cookie||Used to determine if the user's browser supports cookies.||1 day|
|wc_cart_hash_#||This cookie saves the visitor's shopping cart.||Permanent|
|wc_fragments_#||Saves the visitor's login information so they don't have to keep logging in when the browser is closed.||Session|
|_ga||Registers a unique ID that is used to generate statistical data about how the visitor uses the website.||2 years|
|_gat||Used by Google Analytics to ensure query speed.||1 day|
|_guid||Registers a unique ID that is used to generate statistical data about how the visitor uses the website.||1 day|
|ads/ga-audiences||Uses Google AdWords to engage visitors who are likely to become customers based on their behavior on websites.||session|
|IDE||Google DoubleClick is used to register and report the actions of the website visitor after viewing or clicking on one of the advertisements presented, in order to evaluate the effectiveness of the advertisement and to provide advertisements tailored to the visitor.||1 year|
|VISITOR_INFO1_LIVE||Attempts to determine user information bandwidth on websites with embedded YouTube videos.||179 days|
|YSC||Registers a unique ID to determine statistics of YouTube videos viewed by the user.||Session|
|yt.innertube::nextId||Registers a unique ID to determine statistics of YouTube videos viewed by the user.||Permanent|
|yt.innertube::requests||Registers a unique ID to determine statistics of YouTube videos viewed by the user.||Permanent|
|yt-remote-cast-available||Contains the user's video player preferences using an embedded Youtube video.||Session|
|yt-remote-cast-installed||Contains the user's video player preferences using an embedded Youtube video.||Permanent|
|yt-remote-connected-devices||Contains the user's video player preferences using an embedded Youtube video.||Permanent|
|yt-remote-device-id||Contains the user's video player preferences using an embedded Youtube video.||Permanent|
|yt-remote-fast-check-period||Contains the user's video player preferences using an embedded Youtube video.||Session|
|yt-remote-session-app||Contains the user's video player preferences using an embedded Youtube video.||Session|
|yt-remote-session-name||Contains the user's video player preferences using an embedded Youtube video.||Session|
Cookies from third-party websites
Our website may contain links to other third party websites. We do not control how cookies are placed by third-party websites, even if you are directed to them from our Website. Therefore, if you click on a link from our website and go to other websites, you should check the cookies they use separately.
- How to manage and delete cookies?
There are many ways you can manage cookies:
1) Cookie settings on our Website
To control the cookies we use, you can select the cookie settings in the notification line before you start browsing our Website.
In the notification line, you can control all cookies placed on our website, except mandatory cookies.
To update or change your consent to cookies, click here here.
2) Your browser settings
Most browsers allow you to change the settings of the cookies you use. To make it clearer how these settings are used, the links below may be useful, but in any case, you can use the "Help" function in your browser to get even more information:
- Cookie settings in the Internet Explorer browser; (https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies)
- Cookie settings in the Firefox browser; ( https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectlocale=en-US&redirectslug=enable-and-disable-cookies-website-preferences )
- Cookie settings in the Chrome browser.(https://support.google.com/chrome/answer/95647?hl=en
If you delete cookies, all settings controlled by these cookies will be deleted and will need to be recreated the next time you visit our Website. Without mandatory cookies, our Website may not function properly.