Introduction

UAB “Dovaina”, legal entity code: 158859156, registered office address: Uolės st. 16, Dovainonys, Kaišiadorių district. (hereinafter – the Company), respects the privacy of each person and the protection of personal data, therefore has prepared the following privacy policy rules, on the basis of which, among other things, the Company will process the personal data provided to the Company by customers and employees. By using the services of the dovaina.lt website, the person confirms that he has familiarized himself with this privacy policy, understood it and agreed with it.

1. General provisions

1.1. This privacy policy (hereinafter – the Policy) regulates, among other things, the collection, processing and storage of personal data performed by the Company as a data controller.

1.2. The company is engaged in commercial business activities, which include the manufacture of food industry equipment from conception, design, installation and maintenance, metal processing, production, cleaning and coating of non-standard metal products and structures, trade in spare parts for trucks, trailers and buses and other services. For the provision of these services, the Company processes personal data in accordance with the legal grounds and purposes of data processing set out in the Policy, as well as with the legal acts applicable to the Company.

1.3. This Policy is addressed to persons who use or intend to use the Company’s services or visit the dovaina.lt website.

2. Principles for processing personal data

2.1. The company processes personal data in accordance with the European Union’s General Data Protection Regulation (EU) 2016/679 (hereinafter – the Regulation), the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing of personal data.

2.2. The volume of personal data processed depends on the Company’s services ordered or used and what information the website visitor provides when ordering and/or using the Company’s services, visiting or registering on the website.

2.3. The Company is guided, among other things, by the following basic principles of data processing:

• Personal data is collected only for clearly defined and legitimate purposes.
• Personal data is processed only lawfully and fairly.
• Personal data is constantly updated.
• Personal data is stored securely and for no longer than required by the established purposes of data processing or legal acts.
• Personal data is processed only by those employees of the Company who have been granted such right according to their work functions.

2.4. Data in the Company is processed only in the presence of one or more criteria of legal processing – (i) in order to ensure the provision of services in accordance with the contract (i.e. in order to fulfill the contract or in order to take action at the request of the data subject before concluding the contract); (ii) with the consent of the data subject; (iii) when processing data is necessary to fulfill a legal obligation applicable to the Company; (iv) it is necessary to process data in order to perform a task carried out in the public interest or in the performance of public authority functions assigned to the Company; (v) when personal data needs to be processed for the legitimate interests of the Company or a third party (see Article 6 d. 1 of the Regulation, http://www.privacy-regulation.eu/lt/6.htm).

2.5. When processing and storing personal data, the Company implements organizational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any other illegal processing. Only those employees of the Company and auxiliary service providers who need it to perform work functions or provide services to the Company have access to the personal data managed by the Company.

2.6. The company’s client or potential client, employees and other natural persons are responsible for ensuring that the personal data provided by them is accurate, correct and complete. If the personal data provided by them changes, they must immediately inform the Company about it. The company will not be responsible for damage caused to the person and/or third parties due to the fact that the person provided incorrect and/or incomplete personal data or did not apply for the addition and/or change of the data after they have changed.

3. Sources of personal data

3.1. Personal data is usually obtained directly from the data subject (the Company’s client or potential client, employees or candidates), who provides them when visiting the website, using the services provided by the Company, providing services to the Company, working or seeking employment at the Company.

3.2. In cases provided for by legislation or on the basis of consent, personal data may also be obtained from third parties (e.g. temporary employment companies, companies providing employee search services, state institutions and other registries).

3.3. Although the client is not obliged to provide any personal data to the Company, it is possible that certain services will not be provided to him or he will not be able to get a job in the Company if personal data is not provided.

4. Purposes of processing personal data

4.1. The company processes personal data for the following main purposes:

• For the purposes of administration and execution of contractual relations, in order to properly fulfill contractual obligations, to maintain relations with suppliers, partners and customers during business development, service provision and cooperation;
• Providing the services specified on the website;
• For internal company and employee administration purposes;
• For marketing purposes;
• Fulfilling the requirements established by legal acts in waste management and other areas and providing data to state institutions (data controllers);
• In order to ensure the security of the company’s facilities and property, the company’s production and common premises are equipped with video surveillance.

5. Provision of personal data and their recipients

5.1. The company has the right to transfer the personal data of its customer representatives or employees to third parties that need to process customer personal data for the purposes specified in this Policy or legal acts.

5.2. The company undertakes to transfer customer data to third parties only to such an extent and only in cases where it is necessary to provide the relevant services and/or to fulfill the obligations set out in legal acts. If personal data are not necessary for the provision of a specific service, they are not transferred. The Company transfers personal data to the aforementioned third parties on the basis of a data provision agreement or a specific legal act, in strict compliance with the requirements set by the legal acts.

5.3. The company undertakes to observe the duty of confidentiality in relation to the personal data of customers, employees, potential customers and employees. Personal data may be disclosed to third parties only if it is necessary to conclude and execute a contract for the benefit of the data subject, or for other legitimate reasons.

5.4. The Company may provide processed personal data to its data processors (subcontractors), who provide the Company with IT, accounting, debt collection or other support services and process personal data on behalf of the Company. Data processors have the right to process personal data only in accordance with the Company’s instructions and only to the extent that it is necessary in order to properly fulfill the obligations stipulated in the contract. The company uses only those data processors who sufficiently ensure that appropriate technical and organizational measures will be implemented in such a way that the data processing meets the requirements of the Regulation and ensures the protection of the data subject’s rights.

5.5. The company may also provide customer data in response to requests from courts, bailiffs or state institutions to the extent necessary for the proper implementation of applicable legislation and instructions of state institutions.

6. Processing of personal data for the purpose of direct marketing

6.1. For direct marketing purposes, the Company may process the data subject’s contact details. Consent to the use of personal data for direct marketing purposes is expressed by subscribing to the newsletter sent by the Company by mail, by subscribing to news on the Company’s social network accounts, by leaving consent on the Company’s website (by placing a check mark), by signing a questionnaire or contract with the Company, as well as by informing the Company’s administration in another written way. Giving consent for direct marketing is voluntary, it is not a condition of contractual relations with the Company and does not affect the relationship between the data subject and the Company.

6.2. The Company may send informative messages if the person has given consent to the Company using their data for the purpose of direct marketing, and to the Company’s customers without separate consent for the marketing of similar services, if they are given a clear, free and easily implemented opportunity to disagree or refuse such use of their contact data and if they initially did not object to this use of data when sending each message.

6.3. For direct marketing purposes, the Company may send messages by e-mail.

6.4. Consent for direct marketing can be revoked by the individual at any time by informing about it by e-mail address: info@dovaina.lt, or by otherwise contacting the Company.

7. Personal data storage term

7.1. Personal data collected by the Company are stored in printed documents and/or in the Company’s information systems in electronic format. Personal data is processed no longer than is necessary to achieve the purposes of data processing or no longer than is required by the data subjects and/or provided for by legal acts. Generally, personal data is processed for 10 years after the end of the contractual relationship.

7.2. Although the client may terminate the contract or refuse the Company’s services, the Company must continue to store the personal data of the client’s representatives due to possible demands or legal claims that may arise in the future until the data storage terms expire.

7.3. The company strives not to store outdated or unnecessary information and to ensure that personal data and other information about customers is constantly updated, correct and destroyed in a timely manner.

8. Rights of data subjects

8.1. The data subject has, among others, the following rights:

• Receive information about his personal data processed by the Company, from where and in what manner personal data is collected and on what basis it is processed;
• Contact the Company with a request to correct his personal data, stop their processing, destroy them if the data is incorrect, incomplete or inaccurate, or if it is no longer necessary for the purposes for which it was collected. In this case, the data subject must submit a request, upon receipt of which the Company will check the provided information and take the necessary actions. It is very important for the company that the personal data it has is accurate and correct;
• Apply to the Company with a request to destroy personal data or to stop the processing of such personal data, except for storage – in the event that, after learning about his personal data, the person determines that the personal data is being processed illegally or dishonestly;
• Do not consent to the processing of personal data when these data are processed or intended to be processed for the purpose of direct marketing or for the legitimate interest pursued by the Company or a third party to whom personal data is provided;
• At any time, withdraw your consent to the processing of personal data for the purpose of direct marketing;
• If the data subject is concerned about the actions (inaction) of the Company, the possible non-compliance with the requirements of this Policy or legal acts, he can contact the Company and receive free assistance.

8.2. A person can exercise all his rights as a data subject by contacting the Company by e-mail info@dovaina.lt.

8.3. If it is not possible to resolve the issue with the Company, the customer has the right to apply to the State Data Protection Inspectorate (ada.lt), which is responsible for the supervision and control of legal acts regulating the protection of personal data.

9. Cookies

9.1. To improve Company’s website traffic, the Company may use cookies – small pieces of textual information that are automatically created when browsing the website and are stored on the website visitor’s computer or other terminal devices.

9.2. The information collected by cookies allows for more convenient browsing on the Company’s website and to learn more about the behavior of visitors to the Company’s websites, to analyze trends and to improve both the website and the services provided by the Company or the information provided on the website. The company processes personalized personal data with the help of cookies.

9.3. If the website visitor does not agree to cookies being saved on his computer or other terminal device, he can change the settings of his internet browser and disable all cookies or enable/disable them one by one. However, the Company points out that in some cases this may slow down the speed of browsing the website, limit the operation of certain website functions or block access to some pages of the website. For more information about the cookies used on the Company’s website, please visit www.google.com/privacy_ads.html.

10. Final Provisions

10.1. This Policy is subject to the laws of the Republic of Lithuania and the European Union.

10.2. The company reserves the right to change this Policy, so we kindly ask website visitors to periodically check whether the Policy has changed and familiarize themselves with its changed or new provisions.