This privacy policy (hereinafter referred to as the "Policy") provides information on how UAB "NP Grupė" (hereinafter referred to as the "Company" or "We") manages and protects the personal data and privacy of its customers, website visitors (hereinafter referred to as "You", "Users"). The Company is the controller of your personal data, unless otherwise stated in the Policy.
1. Direct marketing
The Company processes your personal data for direct marketing purposes when it receives your consent for such processing. For the purpose of direct marketing, we process the following personal data: name, surname, email address, telephone number, delivery address, legal entity details.
2. E-shop
The company processes your personal data for the purpose of administering the online shop when it receives your explicit consent to such processing (by creating a user account), on the basis of concluding and executing a contract with you (by accepting and fulfilling orders in the online shop), on the basis of the performance of a legal obligation, or for the pursuit of the legitimate interests set out below.
The main purpose of the processing of personal data is to enable the User to use the online shop efficiently, optimally and in a personalised way. The personal data is used to:
- for the convenient, efficient and personalised functioning of the online shop;
- to ensure the smooth administration of the Online Shop and the Website (for example, by sending you reminders of your login details, notifying you of temporary inactivity of the Website, other interruptions, etc.);
- for the execution of e-commerce: the conclusion of the sales contract, the preparation of orders, the dispatch and delivery of goods, accounting, invoicing;
- proper provision of the services ordered;
- providing timely and appropriate responses to your enquiries and requests;
- Providing you with relevant information and interesting suggestions;
- to contact you with any information you provide;
- to carry out statistical and other analyses in order to continuously improve the content and services of the Website and the e-shop;
- for any other purpose disclosed to you at the time of providing your personal data.
For the purpose of administering the online shop, we process the following personal data about you: name, surname, name of the person who will collect the goods, email address and telephone number, the address to which the goods will be delivered or other delivery/collection method you have chosen, the payment method you have chosen and the related payment details, purchase and order history, IP address, network and location data where you provide it, history of enquiries and complaints, and any other publicly available data you have shared during your visit to the Online Shop.
The list of data to be processed is not exhaustive, as the Company may need to collect additional information in special cases and in order to achieve the purposes discussed in this Policy. Some of the above personal data is collected directly from Users, such as data collected when a User creates an account. Another part of the personal data is collected indirectly, such as network and location data of the User. Personal data may also be collected when other websites or portals transmit data to us with your consent (including when you connect to your account through social networks).
We will retain your personal information for no longer than is necessary for the purposes set out in this Policy. Personal data will be kept secure:
- until the User requests the removal (deletion) of his/her account; or
- 10 years after the last active activity on the User's account; or
- until the data is no longer necessary or relevant for the purposes set out in this Policy.
3. Processing of data following your requests, enquiries
The Company also processes your data when you contact us by email, post, telephone, by making a request, asking questions and providing any other information on our website or social networks. In such cases, the personal data you provide may be processed: name, surname, email address, telephone number, residential address, purchase history, etc.
You provide us with your data on the basis of your consent, which is expressed by your active action, i.e. contacting us by filling in an enquiry form, by e-mail, by telephone, by filling in an order form or by other means.
In these cases, the company processes your data in order to administer enquiries and complaints, to ensure the quality of our services, and to protect and defend our rights and legitimate interests.
The legal basis for the processing of personal data is the fulfilment of our legal obligation to process and respond to your enquiries, the Company's legitimate interest in evaluating the feedback of its customers, improving the quality of the services provided and your consent expressed by your active participation in a complaint.
The Company will retain the personal data provided by you and processed for the purpose of administering requests and/or complaints and ensuring the quality of its services for as long as is necessary to examine and respond to your request and/or complaint, in accordance with the requirements for the retention of documents of this kind laid down by law and the limitation periods for the establishment or defence of legal claims, and, in the event that such claims are made, for the period of time necessary for this purpose.
4. Processing of personal data of persons of the Company's contractors
The Company processes personal data of different categories of data subjects (e.g. e-shop buyers (legal persons), business partners, suppliers, other parties to transactions, as well as their employees, representatives and agents, and other persons visiting the Company). This data (name, surname, place of work, job title, contact information) is collected and processed for the following purposes and on the basis of these purposes:
- For the purpose of establishing, maintaining and developing business, professional or other legitimate relations with the Company;
- For the purpose of entering into, performing, administering transactions, contracts and agreements;
- Developing and safeguarding the legitimate interests of the Company;
- defending the Company against claims, demands, claims against it;
- In the performance of the Company's obligations under applicable law.
The Company shall keep the personal data of these persons for as long as the contract or business relationship is in force, or as long as is necessary to achieve the purposes for which they are processed, as well as in accordance with the retention requirements for this type of data set out in the legislation, the limitation periods for the establishment or defence of legal claims, and, in the event of such claims, for as long as is necessary for this purpose.
5. Processing of data on the website
In the event that you visit our website, the Company may process the user's IP address, network and location data when the user provides it. The data is collected by means of cookies and other similar technologies on the basis of the Users' consent.
6. Data processors. Data recipients
Please be informed that the Company uses certain third parties - service providers (data processors) for the processing of your personal data. Such processors include: data centre service providers, companies that analyse and provide services for internet browsing or online activity, companies that provide advertising, marketing services, newsletter service providers, companies that develop, provide, support and develop software, companies that provide information technology infrastructure services, companies that provide call and communication services, leasing companies, couriers and other service providers, to whom your personal data is only disclosed insofar as it is necessary for the provision of their services. In such cases, the Company shall ensure that the recipients comply with confidentiality and adequate data protection obligations.
Where there is a sufficient lawful basis (for example, where it is necessary for the conclusion or performance of a contract with you and where you have been informed of such transfer), the data may be transferred to our business partners, contractors, suppliers and other data controllers.
In the grounds and cases provided for by law, we are obliged to transfer your personal data to financial institutions, public supervisory authorities or authorities conducting pre-trial investigations.
Please be advised that certain technical data from your visit to the website (IP address, data collected by cookies, technical information of the browser you are using, other information related to the browser activity and browsing on the website) may be transferred or made available for statistical, analytical and related purposes to entities both within and outside the European Economic Area (e.g., in the case of our use of the Google Analytics service, such entity is a company operating in the United States of America). We remind you that personal data may be subject to less protection in non-EEA countries than in EEA countries, but we will carefully assess the conditions under which such personal data will be subsequently processed and stored after the transfer to the above entities. The Company will take reasonable steps to ensure that third parties process personal data in accordance with the requirements of the GDPR and other mandatory legislation (including, where necessary, supplementing data processing or supply agreements with standard contractual clauses on data protection approved by the European Commission).
The e-shop processes payments using the makecommerce.lt platform, which is operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475), and therefore your personal information necessary for the execution and confirmation of the payment will be transmitted to Maksekeskus AS.
7. Data retention period
Your personal data shall be kept no longer than is necessary under applicable law or after the expiry of the purposes for which they were collected. Longer retention of your personal data may be carried out when:
- it is necessary for us to defend ourselves against claims, demands or actions and to exercise our rights;
- there are reasonable suspicions of unlawful activity which are the subject of an investigation;
- Your data is necessary for the proper resolution of a dispute or complaint;
- for backups and other purposes related to the operation and maintenance of information systems or similar purposes;
- other grounds provided for by law.
8. Your rights
You have the following rights in relation to your personal data:
- To have access to your personal data and to the way it is processed;
- To request the rectification of incorrect, inaccurate or incomplete data, the erasure of your personal data, or the restriction of the processing of your personal data where the processing of your personal data is not in accordance with the requirements of the legislation, or where there is any other legal basis;
- Request the transfer of your personal data to another controller or to provide it directly in a form that is convenient for you (applies to personal data that you have provided and that is processed by automated means on the basis of a contract or consent);
- The right to object to the processing of your personal data if it is processed on the basis of legitimate interest, except where there are legitimate grounds for such processing or for the establishment, exercise or defence of legal claims.
9. Data protection
The Company shall protect Users' personal data against loss, misuse, unauthorised access, disclosure or alteration by implementing appropriate technical and organisational measures.
The Company recommends that Users additionally comply with the minimum safeguards for the protection of personal data:
- not to disclose login data to the Online Shop to third parties;
- choose a password of at least 8 characters;
- avoid using the same password on different websites on the Internet;
- keep your software up-to-date and take care of antivirus protection.
10. Contact
If you have any questions about this Policy, please contact us using the contact details provided on the Company's website.