The Rules for the Processing of Clients’ Personal Data (hereinafter referred to as the Rules) regulate the principles for the collection, use and storage of personal data of clients, determine the purposes and measures of processing personal data of clients, determine who and for what purposes can get acquainted with personal data of clients.
CONCEPTS
Responsible person – a natural or legal person appointed by the Company to manage the personal data of customers in accordance with a service or other agreement;
Company – UAB Dažų ir Dangų Fabrikas, Grikienių g. 16, Sudervė, Vilniaus r. Lietuva, shop@ddf.lt ; +37065460083
Other concepts used in these Rules are understood as they are defined in the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating the processing of personal data. Key concepts:
Personal data – any information relating to a natural person – a data subject whose identity is known or can be directly or indirectly established using data such as a personal identification number, one or more characteristics of physical, physiological, psychological, economic, cultural or social characteristics. character traits of a person.
Data processing – any action performed with personal data: collection, recording, accumulation, storage, classification, grouping, connection, change (addition or correction), provision, publication, use, logical and (or) arithmetic operations, search, distribution, destruction. or another action or set of actions.
Third party – a legal or natural person, with the exception of the data subject, data controller, data processor and persons who are directly authorised by the data controller or data processor to process data.
PRINCIPLES OF PERSONAL DATA MANAGEMENT OF THE CLIENT
The company is guided by the following principles when processing personal data of customers:
- processes personal data of clients only to achieve the legitimate purposes defined by these Rules;
- personal data of customers are processed accurately, honestly and lawfully, in compliance with the requirements of legal acts.
- The Company processes personal data of customers in such a way that personal data is always accurate and constantly updated in case of change;
- The Company processes personal data of clients only to the extent necessary to achieve the goals of processing personal data of clients;
- personal data of customers are stored in such a form that the identity of the data subjects can be established no longer than is necessary for the purposes for which these data were collected and processed;
- Personal data is processed accurately, fairly and lawfully.
PURPOSES OF PROCESSING THE CUSTOMER’S PERSONAL DATA
Detailed information on the processing of personal data of customers is provided in this policy.
The main processed personal data: name, surname, telephone number, e-mail address, e-mail address and other data necessary to fulfil orders and submit marketing offers.
Main purposes of personal data processing:
- Processing and fulfilment of orders, analysis of user data, purchases and use of the page in order to improve the user experience and the site, for marketing and advertising purposes.
RIGHTS OF THE DATA SUBJECT
The company appoints a responsible person who ensures that the rights of customers as data subjects are secured, properly implemented and that all information is provided correctly, in a timely manner and in a form acceptable to employees.
Rights of customers as data subjects and means of their implementation:
- Be aware of the collection of your personal data. When collecting personal data of a client, the company must inform these persons what personal data the client must provide, for what purpose the relevant data is collected, to whom and for what purpose they can be provided and what are the consequences of not providing personal data. . Simplified information is provided in customer consents. The customer has the right to get acquainted with his personal data, demand correction, clarification or addition of incorrect or incomplete personal data. The customer may also object to the processing of certain optional personal data.
- Familiarise yourself with your personal data and how it is processed. The Client has the right to apply to the Company with a request to provide information on why and for what purpose his personal data is being processed. This information is provided to the Client free of charge once a year. If the client applies more than once a year for the provision of such information, the fee for the provision of this information may not exceed the cost of providing such information.
- Request correction, destruction of your personal data or suspension of processing of your personal domains.
- Do not give consent to the processing of personal data. The client has the right not to give consent to the processing of certain optional personal data. Such disagreement may be expressed by failure to complete certain sections of the questionnaire or other documents to be completed, as well as by submitting a subsequent request to stop processing optional personal data. The Company provides written information about which personal data is processed on an optional basis. Upon receipt of a request to stop processing of optional personal data, the Company immediately stops such processing, unless this is contrary to the requirements of legal acts, and informs the employee / client about this.
PERSONAL DATA SECURITY MEASURES
The rights of access to personal data and the authority to process personal data are granted, deleted and changed by order of the Head of the Company.
When protecting personal data, the company implements and ensures appropriate organisational and technical measures to protect personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.
The Company ensures proper storage of documents and data arrays, takes measures to prevent accidental or illegal destruction, alteration, disclosure of personal data, as well as any other illegal processing. Copies of documents containing personal data of employees must be destroyed in such a way that these documents cannot be reproduced and their content cannot be identified.
In the company, only those persons who are authorised to access such data have the right to access personal data, and only when it is necessary to achieve the goals set forth in these Rules.
The Company ensures the security of the premises where personal data is stored, the proper placement and review of technical means, compliance with fire safety regulations, proper network management, maintenance of information systems and other technical measures necessary to ensure the protection of personal data. data.
The Company takes measures to prevent accidental or unlawful destruction, alteration, disclosure of personal Data, as well as any other illegal processing by properly and securely storing documents and data files entrusted to it.
If the data processor or other responsible person has doubts about the reliability of the established security measures, he should contact his line manager to assess the existing security measures and, if necessary, initiate the acquisition and installation of additional measures.
Employees or other responsible persons who carry out automatic processing of personal data or from whose computers access to sections of the local network where personal data is stored use the passwords assigned to them. Passwords are changed when certain circumstances arise (for example: when changing an employee, when there is a threat of hacking, when it is suspected that the password has become known to third parties, etc.).
An employee working on a particular computer and gaining access to personal data can only know his password. Passwords are stored securely and are only used when needed.
Upon detection of violations of the security of personal data, the Company takes immediate measures to prevent the unlawful processing of personal data.
Failure to comply with these Rules, taking into account the severity of the violation if the employee does not comply with them, may be recognized as a violation of labour duties, for which employees may be held accountable under the Labor Code of the Republic of Lithuania.
DATA COLLECTION, COOKIES
We process your Personal Data collected in the following ways:
- When you yourself provide us with Personal Data;
- When we ourselves collect your personal data when you use the website, our managed social accounts when you contact us by phone or email. by means of communication upon arrival at our point of issue;
- To the extent permitted by applicable law, we may also obtain information about you from other sources such as public registries, databases, marketing partners and other third parties.
Depending on the settings of the social network you use, if you choose to link your social network account with your account on our website, we may be able to see certain data from your social network account, including your personal account information: first name, last name or nickname in the account, your profile photo and email postal address.
You have the right to change and update the information provided to us. In some cases (for example, when selling goods to you, delivering them to you, etc.), we need to have reliable and up-to-date information about you, which is necessary for the quality of our services, so we may ask you from time to time to confirm that information about you that we have is correct.
By providing us with Personal Data, you are responsible for ensuring that the Personal Data is correct, complete and up-to-date.
We use third party cookies on our website that are not controlled by us, such as Google Analytics, Google Ads, Facebook and other cookies. We use these cookies to obtain statistical information about the use of the website and to provide online advertising based on your behaviour.
FINAL PROVISIONS
These Rules are reviewed and updated in case of changes in legal acts governing the processing of personal data.
Employees and other responsible persons are familiarised with these Rules against signature or in electronic form and are obliged to comply with the obligations set forth in them and be guided by the principles set forth in these Rules when performing their labour functions. At the request of the customer, he is given the opportunity to familiarise himself with these Rules.
The Company has the right to partially or completely change these Rules. Employees and other responsible persons are informed about changes against signature or electronically.
The rules were last updated on – 2023 04 17