1. GENERAL PROVISIONS
1.1. The Controller of the personal data referred to in this document is Rūta UAB, legal entity code 144696375, address Tilžės g. 133, LT-76349 Šiauliai, e-mail email@example.com (hereinafter referred to as the ‘Company’). Rūta UAB is committed to protect and respect your privacy and to make every effort to ensure that our processing of personal data complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation).
1.5. We would like to point out that all actions carried out with the personal data of the Visitors are carried out in accordance with the applicable provisions of the legal acts of the European Union and the Republic of Lithuania, in particular the General Data Protection Regulation and the Law on Legal Protection of Personal Data of the Republic of Lithuania.
2. GROUNDS FOR DATA PROCESSING
2.1. The Company collects and processes personal data in accordance with the legal acts of the EU and the Republic of Lithuania regulating the protection of personal data. The Company processes the personal data of Visitors on the following grounds:
2.1.1. On the grounds of consent, which is expressed by your active actions, i.e., by contacting us and providing personal data, or by other active actions.
2.1.2. For our legitimate interests (e.g., administering the website and ensuring its proper functioning; carrying out video surveillance of the Company’s stores and their premises and ensuring the security of property and persons, etc.; conducting the Company’s business and commercial activities, etc.).
2.1.3. Drafting, executing, administering and amending contracts, agreements and similar documents.
2.1.4. To fulfil the obligations imposed on us by law.
2.2. The Company aims to ensure that personal data are processed accurately, fairly and lawfully, that they are processed only for the purposes for which they were collected, and that they are processed in accordance with the clear and transparent principles and requirements for the processing of personal data as laid down by law.
3. COLLECTION OF PERSONAL DATA
3.1. The Company shall only collect and process your personal data which is relevant and necessary to achieve the purposes for which it is processed.
3.2. The Company receives personal data using the following methods:
3.2.1. The Visitor provides information about himself/herself when he/she submits information on the Company’s online shop by creating an online shop account and placing an order in the online shop, or when the Visitor communicates with the Company in any form.
3.2.2. Data relating to the Visitor is generated automatically when the Visitor uses the online shop. This method of obtaining personal data includes the situation where information is collected automatically by the Company by means of cookies, on the legal basis of the Visitor’s consent to the processing of his/her personal data, through the use of the Company’s online shop and its features.
3.2.3. Data about the Visitor is obtained from third parties. The method of obtaining personal data includes the situation where, on the basis of the Visitor’s consent, the Company receives information about the Visitor from third parties such as Facebook, Inc., Google, Inc.
3.3. Personal data collected and processed by the Company:
|Description of data||Collection and processing of personal data||Legal basis for processing|
|Registration data||Required registration details: email address, name, surname, telephone number, delivery address, payment information (including but not limited to bank account number), bank card number.||The processing of such personal data is carried out in accordance with the agreement concluded between you and ruta.lt for the use of the ruta.lt website.|
The Company collects personal information that you provide when you purchase goods on the ruta.lt website.
The Company collects the following personal data from you: name, surname, email address, telephone number, delivery address, delivery method, payment method, payment information (including but not limited to bank account number), IP address.
|On the basis of a sale and purchase agreement.|
|Cookies||Visitor’s browsing and activity on the ruta.lt website.||On the grounds of the Visitor’s consent.|
|Contact information, feedback and enquiries||When you give us feedback, contact us for help or ask us questions, we may collect data such as your name, email address, telephone number and/or other contact information in order to respond to your feedback, to provide you with assistance or to answer your questions. This includes records and copies of your correspondence with us (including email addresses and telephone numbers), if any.||On the grounds of the contract concluded between you and ruta.lt for the use of the ruta.lt website.|
In order to ensure that your use of our website is as easy and convenient as possible, we carry out an analysis of your actions, during which we analyse and process the following personal data:
purchase history; browsing history; payment history; reviews of your purchases; responses to surveys; history of communications between you and us, including electronic correspondence and telephone conversations.
|On the grounds of legitimate interest.|
|Marketing data||In order to provide you with general offers of our products and the promotions and projects we organise, we process the following personal data: name, surname, telephone number, email address, device identification numbers.||On the grounds of your consent.|
|Personalized marketing data||Name, phone number, email address, delivery address, delivery method history, payment history, purchase history, IP address, device identification numbers.||On the grounds of your consent.|
|Processing of personal data for invoicing and other accounting documents||The Company may also process the personal data of the Customer when issuing invoices and/or other accounting documents for goods and/or services. We process this data in order to ensure the correct fulfilment of tax obligations, to issue accounting documents, to make declarations to public authorities, and to be able to issue and administer accounting documents for you, such as invoices when you purchase goods in a shop. parduotuvėje.||The processing of these personal data is carried out on the basis of a contract for the consumption of goods and/or services, as well as for the fulfilment of our legal obligations.|
3.4. Personal data is kept for as long as is necessary for the performance of the contract for the purchase of the goods, but not for less than the period of time for which we are obliged to do so by the legislation governing our activities. The Customer’s personal data that are processed after the Customer has consented to such processing shall be processed and stored until the consent is withdrawn.
3.5. The Company shall not disclose personal data to any third party without the Customer’s prior consent, except in the cases described below:
3.5.1. We may transfer personal data to third parties who assist us in carrying out our activities and administering our services. Such persons may include couriers. In each case, we only provide the processor with as much data as is necessary to execute a specific order or provide a specific service.
3.5.2. The data may also be provided to competent government or law enforcement authorities, such as the police or supervisory authorities, but only upon request and only when required by applicable law or in the cases and procedures provided by law, in order to protect our rights, the safety of our customers, employees and resources, and to bring, submit and defend legal claims.
4. RIGHTS RELATED TO THE PROTECTION OF PERSONAL DATA
4.1. Visitors (Customers) of the online shop ruta.lt have:
4.1.1. The right to receive information about the processing of personal data.
4.1.2. The right to have access to your personal data that we store.
4.1.3. The right to request the rectification of personal data stored by the Company relating to you (most of which you can rectify by logging into your account).
4.1.4. The right to ask us to delete your data (‘right to be forgotten’).
4.1.5. The right to restrict the processing of your personal data.
4.1.6. The right to object to the processing of your personal data.
4.1.7. The right to withdraw consent to the processing of your data.
4.1.8. If you wish to exercise your rights, or if you have any questions about the processing of personal data or the exercise of your rights, please contact us at firstname.lastname@example.org
4.2. The Company informs that the relevant actions implementing the above-mentioned rights of the Visitors will be carried out as soon as possible, but no later than 1 (one) month after the date of your request. Please note that, if necessary, the deadline of 1 (one) month may be extended by a further 2 months, depending on the complexity and number of requests. In such case, the Company shall inform the User of such extension within 1 (one) month of receipt of the request, providing reasons for the delay.
4.3. The Company’s online shop and its services are intended only for persons over the age of 14. If we have reasonable grounds to suspect that we are processing the data of individuals who are younger than the age specified in this paragraph, we will delete the data of those individuals from our databases.
5.3. If we make significant changes, we will notify you on the website or by other appropriate means of communication, such as email, so that you can access the changes.
6.2. To comply with the law, we ask for your consent before using analytical and targeting (commercial) cookies, e.g., the visitor gives consent and selects ‘only necessary cookies’. You can accept or reject analytical and targeting (commercial) cookies at any time by changing your preferences for these cookies accordingly. For the changes to take effect, you will also need to delete the cookies stored on the basis of your previous consent. Other categories of cookies are installed in accordance with the law, so your consent is not required.
6.3. If the Visitor agrees to accept cookies to be stored on his/her device, the online shop Visitor must click ‘I agree’.
6.4. Our website also uses third party cookies. These cookies are used to create a browsing history for each visitor so that we can show you personalised advertising and provide you with the best experience when browsing our online shop.
7. DIRECT MARKETING NOTIFICATIONS
7.1. The Company shall be entitled to send direct marketing communications to the Visitor by e-mail and/or SMS after obtaining the Visitor’s explicit consent.
7.2. The Visitor has the right to withdraw the consent(s) given to the Company to process his/her personal data for direct marketing purposes at any time. You can do this by emailing us at email@example.com, indicating that you do not wish to receive emails and/or SMS messages, or by clicking ‘Unsubscribe’ at the bottom of each promotional email.