1.1. We respect the rights of our Customers and other entities to their private information and process their personal data lawfully and fairly to justify their trust.
1.2. The personal data controller is UAB “Tirnoda”, company code 305340230, Laisvės pr. 115, Vilnius. Tel. +370 672 02210, e-mail:email@example.com, www.xdalys.lt, hereinafter referred to as the Company.
1.3. We collect only such Customer Data as is necessary for the Company`s operations and / or access, use, browsing on the Company`s website www.xdalys.lt (hereinafter referred to as the Website), Company`s Facebook and other social network accounts, websites, and etc. We assure that Customer Data collected and processed will be secure and will be used only for a specific purpose.
2.1. Customer shall mean any natural person or legal entity, data subject who orders, purchases, uses or has expressed an interest in using the Company`s services, visits the Company`s website, point of sale, or is otherwise related to the Company`s services.
2.2. Personal Data shall mean any information directly or indirectly related to the Customer who is identities or may be directly or indirectly identified through the use of the relevant data. Processing of Personal Data shall mean any operation with Personal Data (including collection, recording, storing, editing, modifying, granting access, requesting, transmitting, archiving, etc.).
3. PERSONAL DATA PROCESSING
3.1. The Company processes personal data in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the Regulation), Law of the Republic of Lithuania on Legal Protection of Personal Data and other legal acts regulating the processing of personal data.
3.2. The amount of personal data processed depends on the Company`s services / goods ordered, purchased or used and the information provided by the individual as a visitor of the Company`s website when ordering, purchasing and / or using the Company`s services, visiting or registering on the Company`s website.
4. SOURCES OF PERSONAL DATA
4.1. Customer shall provide Personal Data by contacting the Company, registering for services, using the Company`s services, purchasing goods, participating in a loyalty program, lottery or contests, surveys or researches, leaving comments, asking questions, subscribing to newsletters and / or using the Company`s services applying to the company for consultation.
5. PERSONAL DATA PROCESSING
5.1. The Seller receives the personal data directly from the Customer (after he/she has registered in the customer's account of the website, after initiating the Sale and Purchase Agreement). The Customer must provide correct personal data during registration and / or purchase. The Seller does not process personal data received in other ways. It is the Customer`s responsibility to ensure that the information provided in the registration form and / or during ordering is accurate, correct and complete. In case of change of the Customer`s registration data, the Customer must update it immediately. The Seller shall never be liable for any damage caused to the Customer and / or third parties as a result of provision of incorrect and / or incomplete personal data by the Customer or failure to change or supplement the data. By submitting personal data to the Company, the Customer agrees that Company will use the data collected to fulfil its obligations to the Customer and to provide the services that the Customer expects. The Customer`s personal data is required by the Company for the following purposes:
5.1.1. Conclusion and performance of agreements for provision and receipt of services, sale and purchase agreements with the data subject; maintenance of contacts by ensuring that they can be contacted; Tax accounting and payment control;
5.1.2. For direct marketing purposes.
188.8.131.52. By ticking the box “I want to get the best xdalys.lt deals and get the news first” in the registration form, the Customer indicates that he / she agrees to receive information and promotional materials about the services and goods from the Seller to the Customer`s e-mail.
184.108.40.206. The following data shall be processed for direct marketing purposes: name, surname, e-mail address.
220.127.116.11. In order to define favourite and actual products of the Customer, so that the Company could provide individual and urgent offers, personal data of the Customer shall be also processed using automated analysis method. This method ensures that the Customer is offered relevant products and only offers that are or may be interesting to the Customer. Automated analysis tools are based on the Customer`s browsing history on xdalys.com and other information provided by the Customer.
18.104.22.168. The following data shall be processed for direct marketing purposes: user name of the Customer, account photo, gender, communications and any other information that the Customer agrees to share through third party websites (for example, when “Facebook” user clicks “Like”).
5.1.3. For the purpose of e-commerce.
22.214.171.124. After registration, but before the making an order, the following data are processed: name, surname, e-mail, telephone number, address (where the Customer provides the address on the delivery form), IP address, Customer identifier (assigned by the system to the Customer). These data are processed to allow the Customers to access their account or other purchases without the need to re-enter the data.
126.96.36.199. When ordering, the following information is processed on xdalys.lt: name, surname, e-mail, telephone number, address (where the Customer provides the address on the delivery form), payment information (i.e. bank account or payment card account details), Customer order identifier (assigned by the system to the Customer). These personal data are stored and processed until the order is fully executed. The data is then transferred to a passive database.
188.8.131.52. The following Customer data is processed when requesting in sections “Contact Form”, “Ask about Product” and “Negotiate the Price” of the Website: name, telephone number, e-mail address, product of interest.
184.108.40.206. The following personal data shall be processed for “Online Assistance” request (Tawk.to real-time chat plugin): e-mail, telephone number, name, real-time communication history, visit time, real-time browsing history, browsing and talk time, country, city, number of prior calls, IP number, operating system of the Customer, browser of the Customer.
220.127.116.11. It is possible to specify another person who will collect the goods purchased by the Customer, if such person has given his consent. By providing the Company with information on third parties who are collecting the Goods, the Customer confirms that he/she has the consent of such persons to transfer, use and process his/her personal data.
5.1.4. The Company may use data not directly related to the Customer for statistical purposes. Such statistical data will be collected and processed in such a way as to prevent the disclosure of the Customer's identity or any other personal data that could be used to identify the Customer.
5.1.5. Security of the Company, Customer assets and employees (video surveillance). In its legitimate interests, the Company seeks to ensure the security of its assets, information, employees and third parties, to prevent, control and detect unlawful acts and to ensure effective investigation of such cases. The Customer is not obliged to provide personal data and the Company does not seek to identify the Customer unless it is necessary for the purposes intended. However, due to the nature of video surveillance, the Company cannot guarantee that it will be able to perform its tasks or obtain its services without the Customer falling into the video surveillance field. Video camera records will be stored for a maximum of 4 months unless the record contains information that is required as evidence in a civil, administrative or criminal case or necessary for investigation, in which case the video may be stored for the period necessary for these purposes and immediately destroyed when not needed.
5.1.6. For other purposes for which the Company has the right to process the Customer's personal data, where the Customer has given his consent, when the processing is necessary for the Company's legitimate interest, or when the processing is required by applicable law.
6. PERSONAL DATA PROVISION
6.1. The Company undertakes to observe the obligation of confidentiality regarding the Customer`s personal data. Personal data may only be disclosed to third parties where this is necessary for the conclusion and performance of the contract in the interest of the data subject or for other legitimate reasons.
6.2.The following data shall be provided to third parties for the proper execution of the order:
6.2.1 To courier service companies that deliver the goods to the Customer at the addresses specified by the Customer;
6.2.2 To the companies involved in provision of marketing services.
6.3. The Company may provide personal data to its data processors, which provide services to the Company and process personal data on behalf of the Company. Data processors have the right to process personal data only in accordance with the instructions of the Company and to the extent necessary for the proper performance of their obligations under the contract. The Company shall employ only data controllers who reasonably guarantee that appropriate technical and organizational measures will be taken to ensure that the data processing complies with the Regulation and that the rights of the data subject are protected.
6.4. The Company may also provide the Customer data in response to requests from a court or official authority to the extent necessary for the proper enforcement of applicable laws and regulations of official authorities.
7.2. xdalys.lt has accounts on the following web pages:
7.2.1 xdalys.lt (fan page; social network “Facebook”);
8. PERSONAL DATA STORAGE TERM
8.1. Personal data collected by the Company is stored in printed documents and / or in the Company`s information systems in electronic format. Personal data shall be processed for no longer than is necessary for the purposes for which the data were processed or for a period not exceeding that required by the data subjects and / or provided for by law.
8.2. Although the Customer may terminate the contract and refuse the Company`s services, the Company must continue to protect the Customer`s personal data for any future claims or legal claims until the data retention periods have expired.
9. RIGHTS OF THE CUSTOMER, AS A DATA SUBJECT
9.1. The Customer shall have the right to:
9.1.1. Request the Company to provide information on whether the Company is processing its personal data and, if so, to access the personal data processed;
9.1.2. Request the Company to correct his / her personal data and / or to suspend the processing of such personal data, other than storage, in cases where the personal data have been found to be incorrect, incomplete or inaccurate. Every customer who logs into their account can access, verify, modify or delete their data. Requests for access, data corrections and inaccuracies can be sent by email to firstname.lastname@example.org. Please state clearly your name and username on the application;
9.1.3. Request the Company to delete his / her personal data, which is only processed with his / her consent if the Customer recalls the relevant consent (“Right to be Forgotten”). This right shall not apply if the personal data requested to be deleted are also processed on another legal basis, such as processing necessary for the performance of the contract or fulfilment of an obligation under applicable law;
9.1.4. Restrict the processing of his / her personal data in accordance with applicable law, for example, for a period during which the Company will assess whether the Customer is entitled to request the deletion of his / her personal data;
9.1.5. Receive personal data supplied by him/her, which are processed on the basis of his/her consent or the performance of a contract, in writing or in a shared electronic format and, if possible, transferred to another service provider (data portability);
9.1.6. Disagree with the processing of his/her personal data if the processing of personal data is based on a legitimate interest, including profiling for direct marketing purposes (for example, receipt of marketing offers or participation in surveys);
9.1.7. Recall his/her consent (“Right to be Forgotten”) to process personal data for direct marketing purposes at any time by logging in to his/her account, sending a letter to the Company's designated contacts or address;
9.1.8. Disapprove of being subject to a fully automated decision, including profiling, if such decision has legal effects or similar significant effect on the Customer. This right shall not apply where such decision is necessary for the purpose of concluding or executing the contract with the Customer, is permitted by applicable law, or the Customer has expressly agreed to it;
9.1.9. Contact the State Data Protection Inspectorate if the matter cannot be resolved with the Company.
9.2. The Customer may apply to the Company for the exercise of his/her rights:
9.2.1. By written request served personally, sent by post, through a representative or by electronic communication means - by e-mail: email@example.com;
9.2.2. Verbally – by telephone +370 672 02210;
9.2.3. In writing – at the address: Laisvės pr. 115, Vilnius, Lithuania.
9.3. The Customer requests for data subject rights are processed free of charge by the Company. The processing of the application may be refused or may be subject to payment of an appropriate fee where the application is manifestly unfounded or excessive, as well as in other cases laid down by law.
10. RESPONSIBILITY OF THE CUSTOMER
10.1 To inform the Company about changes in the information and data provided. It is important for the Company to have correct and valid Customer information;
10.2. To provide the information required to enable the Company, upon Customer`s request, to identify the Customer and to ensure that it is communicating or cooperating effectively with the Customer (by providing an identity document or by law or electronic means of proper identification of the Customer). This is required to protect Customer and other personal data so that disclosed information about the Customer is provided solely to the Customer, without prejudice to the rights of third parties.
11.1 A cookie is a small text file that a website saves on your computer or mobile device when you visit it. It allows the website to “remember” your actions and options (such as registration name, language, font size, and other display options) for a period of time, without having to re-enter them each time you visit or browse its various pages. Cookies are used on the website of UAB “Tirnoda”, link http://new.xdalys.lt
11.2 Cookies used on our website:
11.2.1 For use of functional cookies and the provision of services. Cookies are very important to the operation of our website and electronic services and they provide a smooth user experience.
11.3 You do not need to allow these cookies for the website to work, but doing so will make browsing easier for you. You can delete or block cookies, but in that case some options of the website may not work as intended.
11.4 The cookie-related information is not used to identify you. These cookies are not used for any purpose other than those described above.
11.5 You can control and / or delete cookies if you wish. Details can be found at www.aboutcookies.org. You can delete all cookies already existing on your computer and set most browsers to prevent cookies from being saved to your device. However, in this case, you may need to manually change some options each time you visit the website, and some services and options may not work.
12. FINAL PROVISIONS
12.3. Other websites linked from this site may have different site usage policies, privacy policies, personal data processing and other policies than those applicable to this site. The Company is not responsible for the rules, privacy policies, personal data processing and other regulations applicable to Third Party Sites.
13. CONTACT INFORMATION
If you have any questions about personal data processing, wishes or comments, please contact us: UAB “Tirnoda”, company code 305340230, Laisvės pr. 115, Vilnius. Tel. +370 672 02210, e-mail: firstname.lastname@example.org