SECURITY POLICY OF PERSONAL DATA PROCESSED BY THE COMPANY
By purchasing on the www.skanuskebabai.lt website, you trust UAB "Egas.eu" (hereinafter - the Company, or us) with your personal data and give us the right to process them in this Policy (hereinafter - the Policy) and the rules for buying and selling goods in the Skanuskebabai online store (hereinafter - the Rules ) provided for the scope, methods and purposes. You also provide your data by giving us your feedback.

If you do not agree with the Rules, this Policy or their separate conditions, we will unfortunately not be able to provide you with the opportunity to use all or any of the services provided by the Company (hereinafter - the Services).

In this Policy, you will find all the information about what kind of data we collect and process, what we use it for, how long we keep it, etc. This information is important, so we hope you read it carefully.

We draw your attention to the fact that the Policy can be changed, supplemented, updated.

Personal data means any information that can be used to identify an individual, as well as any information about an individual that has already been identified.

We respect your privacy, and the security of your personal data is our priority. We take appropriate organizational and technical measures to ensure that your personal data is always secure, and data processing actions meet the requirements of data protection legislation and our internal policy.

For what purpose are personal data collected (processed)?

The company collects and processes your personal data listed in this Policy on the following legal grounds:

– Your consent to the terms and conditions set forth in the Rules and this Policy;

– Our legitimate interest;

- Fulfillment of legal obligations arising and applicable to the Company.

In the scope and conditions provided by the applicable legal acts, one or more of the above-mentioned legal bases may be applied to the processing of your personal data.

The company collects and processes your personal data listed in this Policy on the following legal grounds:

when processing personal data, the Company follows the personal data processing requirements established in the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other legal acts related to the protection of personal data from 2018. by the General Data Protection Regulation of May 25 (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data).

The Company collects and further processes your personal data only on the legal grounds defined in legal acts - in order to conclude and/or execute an employment contract with you, with your consent, when the Company is required to process personal data by the relevant legal acts, and when personal data needs to be processed due to the Company's legal interest (only if the interests of the data subject are not more important).

Consent to the processing of personal data can be withdrawn easily and free of charge.

In the scope and conditions provided by the applicable legal acts, one or more of the above-mentioned legal bases may be applied to the processing of your personal data.

What data do we process and why?

Processing of your purchase data

Providing you with Services and various benefits - concluding and executing purchase and sale agreements, making refunds (if you return the purchased item), providing discounts, etc. - we process data about your purchase transactions (hereinafter - purchase data).

Your purchase data is processed for the purpose of service administration:

Data categories

Your name, surname, e-mail postal address, telephone number, delivery and address, date and time of purchase and delivery, product names, quantities, purchase prices and discounts granted, payment method for purchases and payment information

Basis of data processing

Your consent to use the account under the conditions set forth in the Rules

Data processing term

5 years from the date of the purchase transaction.

How do we use your purchase data?

We store the purchase data for 5 years from the date of the purchase transaction, and we destroy them after the deadline.

Handling customer inquiries, complaints, requests and feedback

We will use your personal data to respond to your inquiries, complaints, requests and to administer your feedback (hereinafter - Inquiry).

Data from our customer reviews

Data categories

Identification and contact information provided by you: name, telephone number, e-mail address;

Content of your Request: the event you are applying for, its circumstances, date, place, your request, demand or feedback.

Legal basis for data processing

Our legal Fulfilment of obligations to examine and respond to user requests, as well as our legitimate interest in evaluating our customers' feedback, with the aim of improving the quality of our activities and services provided.

Data processing term

Up to 6 months

We use your data only so that we can properly and objectively examine your request, provide you with the necessary information, answer your questions, and resolve your requests or requirements. We can also analyse the request data in order to improve the quality of our activities and services provided to you, taking into account your opinion and suggestions.

We process and store your Inquiry and your related data until we examine the Inquiry, provide you with an answer and implement the decisions made, and also for up to 6 (six) months after the Inquiry is resolved.

If a legal dispute is initiated as a result of the Request or there is a possibility of such a dispute, we may store your data for longer, until the statute of limitations for filing a complaint or lawsuit provided for in legal acts expires and/or the final decision comes into force.

At the end of the period of processing and storage of your data set in this Policy, we will destroy your data.

From which sources do we collect your personal data?

We receive almost all of your personal data only from you. You provide us with questionnaire data directly, e.g. by filling out registration forms.

We also receive your data directly from you when you submit a Request in any of the ways you choose: by emailing us, by submitting a written request to us, by calling our customer complaint hotline.

If, in order to qualitatively and objectively examine your Inquiry, we need to collect additional information or conduct an investigation of significant circumstances, we can link your Inquiry data with the data we have and/or collected during the examination of your Inquiry, e.g. purchase transaction data, interview our employees, etc.

We also receive your data through video surveillance. Data is collected based on our legitimate interest to ensure the security of our customers, staff and assets.

In what cases and to which third parties do we disclose your data?

Data may be provided to competent authorities or law enforcement agencies, such as the police or supervisory authorities, but only at their request and only when required by applicable law or in the cases and procedures provided for by law, in order to ensure our rights, our customers, employees and resource security, to assert, provide and defend legal claims.

What rights do data protection legislation give you and how can you use them?

Data protection legislation gives you many rights that you can freely exercise, and we must ensure you this opportunity. We provide information about your specific rights and their implementation methods in this Policy below, please read it carefully.

The right to access your personal data processed by us

You have the right to receive our confirmation as to whether we are processing your personal data, as well as the right to access your personal data processed by us and information about the purposes of data processing, categories of processed data, categories of data recipients, data processing period, sources of data acquisition, automated decision making acceptance, including profiling, and its meaning and implications for you.

We provide most of this information to you in this Policy and we believe it is useful to you.

The right to correct personal data

If the data provided to us in your application form has changed or you believe that the information we process about you is inaccurate or incorrect, you have the right to demand that this information be changed, clarified or corrected.

Right to withdraw consent

In cases where we process your data based on your consent, you have the right to withdraw your consent at any time and data processing based on your consent will be terminated.

If your consent expires, revokes or cancels it, we destroy the data processed with your consent.

In any case, we may store your consent and proof of it for a longer period, if necessary, in order to be able to defend ourselves against demands, claims or lawsuits brought against us.

Right to file a complaint

If you believe that we process your data in violation of the requirements of data protection legislation, we always ask you to contact us directly first. We believe that with good faith efforts we will be able to dispel all your doubts, satisfy your requests and correct any mistakes we have made.

If you are not satisfied with our proposed method of solving the problem or, in your opinion, we will not take the necessary actions according to your request, you will have the right to file a complaint with the supervisory authority, which is the State Data Protection Inspectorate in the Republic of Lithuania.

The right to disagree with the data processing, when the processing is based on legitimate interests

You have the right to object to the processing of personal data when personal data is processed based on our legitimate interests. However, taking into account the purposes of providing the Services and the balance of the legitimate interests of both parties (both you as the data subject and us as the data controller), your objection may mean that after we stop processing your data based on our legitimate interest, we will not be able to give you the opportunity continue to use our Services.

Right to erasure (right to be forgotten)

In certain circumstances specified in data processing legislation (when personal data is processed illegally, the basis for data processing has disappeared, etc.), you have the right to request that we delete your personal data. To exercise this right, please submit a written request to our Company.

It is important to note that your data will be deleted without your separate request.

The right to restrict data processing

 

In certain circumstances specified in data processing legislation (when personal data is processed illegally, you dispute the accuracy of the data, you have submitted an objection to data processing on the basis of our legitimate interest, etc.), you also have the right to limit the processing of your data.

To exercise the right specified in this section, please submit a written request to our Company.

Application processing procedure

In order to protect the data of all our candidates and buyers from unauthorized disclosure, we, upon receiving your request to provide data or exercise your other rights, will be required to identify you. For this purpose, we may ask you to provide the relevant profile data you have provided (eg name, e-mail address or phone number) and we will compare whether the data you have provided matches the relevant profile data. As part of this verification, we may also send a verification message to the contact specified in the registration form (by SMS or e-mail) requesting an authorization action. If the verification procedure is unsuccessful (e.g.: the data you specified in the form do not match the data specified in the form or you do not authorize according to the received SMS or e-mail message), we will be forced to state that you are not the subject of the requested data and will have to reject your request.

Upon receiving your request for the exercise of any of your rights and successfully completing the verification procedure specified above, we undertake to provide you with information about the actions we have taken in accordance with Your request. Taking into account the complexity and number of requests, we have the right to extend the one-month period for another two months, informing you about this before the end of the first month and stating the reasons for such an extension.

If your request is submitted by electronic means, we will also provide you with the answer by electronic means, except in cases where this will be impossible (for example: due to an extremely large amount of information) or if you request to be answered in another way.

We will refuse to satisfy your request with a reasoned answer, when the circumstances specified in the legal acts are established, informing you about this in writing.

In what ways and what contacts can you contact us?

 

For all data processing issues, you can contact us in the following ways:

by e-mail : info@kebabinn.lt

postal correspondence address - J. Galvydžio g. 4, 08222 Vilnius.

Address the letter as follows: UAB "EGAS.eu", Data Protection Officer.

Our details as data controller:

UAB "EGAS.eu"

Legal entity code: 302975986

Office address: J. Galvydžio g. 4, 08222 Vilnius, Republic of Lithuania

How safe is your data?

We use various security technologies and procedures to protect your personal information from unauthorised access, use or disclosure. Our suppliers are carefully selected, and we require them to use appropriate measures that can protect your confidentiality and ensure the security of your personal information. However, the security of information transmission over the Internet or mobile connection cannot be guaranteed; any transfer of information to us in the specified ways is done at your own risk.

Longer data storage

At the end of the term of processing and storage of your data set in this Policy, we destroy your data.

Your personal data may be stored longer than specifically stated in this Policy only when:

– it is necessary for us to be able to defend ourselves against claims, claims or lawsuits and to exercise our rights;

- there are reasonable suspicions of an illegal act, which is the subject of an investigation;

– Your data is necessary for the proper resolution of a dispute or complaint;

– for backup copies and other similar purposes;

- in case of other legal acfor the grounds provided therein.

We also use the services of Facebook and other online advertising providers. You can read about the privacy policies of these service providers, the data collected and the personal data protection measures applied in the privacy policies of the aforementioned service providers. More information about how it works, as well as information about how you can object to the display of such advertisements or such use of data, can be found in the information provided by the aforementioned service providers - https://www.facebook.com/policies/ads#;

Policy validity and changes

This Policy is valid from 2018 June 5. If we change this Policy, we will post the updated version on this page.