Privacy and Cookie Policy
THE INFORMATION HAS BEEN PREPARED AND PROVIDED IN ACCORDANCE WITH THE GENERAL DATA PROTECTION REGULATION EU 2016/679.
We inform you that the company MB "Eska dalys" (data controller) company code 306662138, registered office address Dragūnų g. 6-40, LT-92331 Klaipėda, collects, processes and stores data of data subjects.
This data is collected for the following purposes:
for the purpose of performing the company's functions, services and obligations and contracts, or in order to take steps prior to entering into a contract;
to comply with a legal obligation to which the data controller is subject;
for the purposes of the legitimate interests of the data controller or a third party;
in order to protect the vital interests of the data subject or another natural person;
in order to perform a task carried out in the public interest or in the exercise of public authority vested in the controller.
All personal data provided by the Client (including sensitive personal data) are processed and stored in accordance with the provisions of the Law on the Legal Protection of Personal Data of the Republic of Lithuania, Regulation EU 2016/679 and the local legal acts of the Service Provider regulating the processing and protection of personal data. The Service Provider undertakes to ensure the security of the processed personal data by implementing appropriate technical and organizational measures to protect personal data against unlawful destruction, accidental alteration, disclosure and any unlawful processing.
In accordance with the requirements of EU Regulation 2016/679, we must obtain your consent to the processing and storage of data before providing you with services. This consent is given by signing a separate consent form, which provides precise information about the types of data processed, the purposes of data processing, data storage periods and potential recipients and processors who may process the data in the course of providing or assisting in providing services, or in cooperation with our company.
RIGHTS OF DATA SUBJECTS
THE DATA SUBJECT'S RIGHT TO ACCESS THE DATA AND HOW THEY ARE PROCESSED (ARTICLE 15 OF THE REGULATION)
The data subject, having provided the data controller or data processor with a personal identification document or, in accordance with the procedure established by legal acts or by electronic means of communication that allow for proper identification of the person, having confirmed his or her personal identity, has the right to obtain confirmation from the data controller whether personal data relating to him or her are being processed, and if such personal data are being processed, has the right to access his or her personal data, from what sources and what personal data of his or her are collected, for what purpose they are being processed, to which data recipients they are and have been provided for at least the last 1 year. When personal data are transferred to a third country, the data subject has the right to be informed of the appropriate safeguards related to the transfer of data. Upon request, the data controller shall provide a copy of the processed personal data free of charge once per calendar year. For any other copies requested by the data subject, the data controller may charge a reasonable fee, determined in accordance with administrative costs. When the data subject submits the request by electronic means and except in cases where the data subject requests it to be provided otherwise, the information shall be provided in a commonly used electronic form.
THE DATA SUBJECT'S RIGHT TO REQUEST CORRECTION OF INACCURATE DATA (ARTICLE 16 OF THE REGULATION)
The data subject shall have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes for which the data were processed, the data subject shall have the right to have incomplete personal data completed, including by providing a supplementary statement.
- RIGHT TO REQUEST DELETION OF DATA („RIGHT TO BE FORGOTTEN”) (ARTICLE 17 OF THE REGULATION)
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:
the personal data are no longer necessary to achieve the purposes for which they were collected or otherwise processed;
the personal data subject withdraws consent and there is no other legal basis for processing the data;
the personal data subject does not consent to the processing of data in accordance with Article 21;
personal data was processed unlawfully;
the personal data was collected when the data subject was under the age of 16 and the minor's data was collected without the consent of their parents or guardians.
However, these rights do not apply if the processing of data is necessary:
in order to exercise the right to freedom of expression and information;
for compliance with a legal obligation under Union or Member State law to which the controller is subject which requires processing, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
in order to assert, exercise or defend legal claims.
RIGHT TO RESTRICT DATA PROCESSING (ARTICLE 18 OF THE REGULATION)
The data subject has the right to request that the data controller restrict data processing where one of the following applies:
the personal data subject contests the accuracy of the data for a period during which the data controller may verify the accuracy of the personal data;
the processing of personal data is unlawful and the data subject does not consent to the erasure of the data and instead requests the restriction of their use;
the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or
the data subject has objected to the processing of the data, pending verification of whether the legitimate grounds of the data controller override those of the data subject.
RIGHT TO DATA PORTABILITY (ARTICLE 20 OF THE REGULATION)
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the data controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another data controller, without hindrance from the data controller to whom the personal data have been provided, where:
data processing is based on consent;
data is processed by automated means.
This right may not adversely affect the rights and freedoms of others.
In exercising his or her right to data portability, the data subject shall have the right to have personal data transmitted directly from one data controller to another, where technically feasible. This right shall not apply where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
RIGHT TO REFUSE AND WITHDRAW YOUR CONSENT TO DATA PROCESSING (ARTICLE 21 OF THE REGULATION)
The data subject shall have the right, on grounds relating to his or her particular case, to object at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to personal data relating to him or her being processed for such marketing purposes, including profiling insofar as it is related to such direct marketing.
Where the data subject objects to the processing of data for direct marketing purposes, the personal data shall no longer be processed for such purposes.
Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1), the data subject shall have the right, on grounds relating to his or her particular case, to object to the processing of personal data relating to him or her, except where the processing is necessary for the performance of a task carried out for reasons of public interest.
Note: the rights of data subjects are subject to various restrictions, which you can learn more about by contacting the contacts below. Please note that your refusal to consent to data processing may limit or completely terminate your ability to use our services if we cannot provide services or fulfill our obligations without your data. However, if the processing of your data for direct marketing purposes is suspended, you will continue to be able to use our services, but you will no longer be able to receive direct marketing-related notifications about discounts, etc.
RIGHT TO FILED A COMPLAINT WITH A DATA PROTECTION SUPERVISORY AUTHORITY.
Data processing and protection in the Republic of Lithuania is supervised and controlled by the State Data Protection Inspectorate (SDI). If you believe that a company has violated your data processing rights, you have the right to contact the SDI by e-mail: ada@ada.lt
FINAL PROVISIONS
If you wish to exercise your rights, our employee will provide you with a document form in which you will indicate your wishes regarding data processing in the company. We will provide a response about the decision within 30 calendar days. You can obtain more information about the rights of the data subject:
Company's responsible person for data processing Tel. No. +370 649 08006 and e-mail info@eskadalys.lt
