1. TERMS
The following terms are used in this Privacy Policy:
"Personal data" or "Data" means any information about the User whose identity has been identified or whose identity can be directly or indirectly identified (the data subject).
"Data processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
"Data controller" is UAB NNF Metal, company code 300110478, registered office at J. Basanavičiaus str. 131, Šiauliai, the Republic of Lithuania, which determines your data management goals and means as defined in this Privacy Policy.
"Internet Website" is the Data Manager Website, the address of which is http://www.elensen.com.
"You", "Your" or "User" is a natural person who has visited the Data Manager's Website and whose Data is processed under this Privacy Policy.
"Newsletter" means a newsletter sent by the Data Manager about the latest Deals by the Data Manager or the sale of goods that Users can order on the Website.
"Privacy Policy" means this Privacy Policy, which determines the basic rules for collecting, processing and storing Personal Data of the Data Manager applicable to Users while using the Website.
"Regulation" means 2016/679 Regulation on the Protection of Individuals with Regard to the Processing of Personal Data and Free Movement of Such Data, which will enter into force in the European Union on 25 May 2018, under which Directive 95/46 / EC shall be repealed.
"Cookies" are type of messages with a unique identification number that is given to a Web browser by a Web server. It is transmitted to the user's hard disk drive so that the Data Manager could distinguish the user's computer from the Internet and see it on the Internet.
"Consent" means a free, and unambiguous expression of your will under declaration or unequivocal actions pursuant to which you give consent to process any personal data related to you.
The terms and definitions mentioned in this Privacy Policy are understood as defined and explained in the Regulation, which you can find by clicking on this link.
MAIN INFORMATION
2.1. This Privacy Policy sets the terms for your Personal Data Management using the Data Manager's Web site.
2.2. The terms and conditions of the Privacy Policy apply to you every time you want to access the content and / or service we provide as well as to purchase goods sold online.
2.3. We confirm that this Privacy Policy is prepared, and, on this Website, your Personal Data is processed in accordance with the requirements of the Regulation and the legal acts of the Republic of Lithuania.
2.4. On our Website, we apply all technical and administrative security measures available to us, so that our collected Data is protected against loss, unauthorized use and transfer.
2.5. Please read this Privacy Policy carefully, because by using our website and purchasing products contained therein, you agree that we used Your Personal Data in accordance with the purposes and means specified in this Privacy Policy.
3. THE INFORMATION we collect about you
3.1. To properly provide our services, we collect the following information about you on the Website:
3.1.1. Personal data submitted by you
3.1.2. Automatically collected data
3.1.3. Data from third-party sources
3.1.4. Additional data
3.2. You may choose not to provide us with certain information (e.g. information requested at the time of registration with our e-shop or at the time of purchase of goods or services without registration), but in this case, our online purchase service may be inaccessible.
4. HOW WE USE YOUR DATA
4.1. We handle your personal data and collect personal information about you for the following purposes:
4.1.1. Register you on our system so that you could use our online purchase service;
4.1.2. Payment for the items through the selected external banking service provider;
4.1.3. To fulfil your order and deliver the purchased goods to your address;
4.1.4. Considering your separate Consent, for the purposes of direct marketing, for example, by sending you a Newsletter, submitting promotional offers and announcements about our promotions or news;
4.1.5. Billing and accounting purposes;
4.1.6. To improve the functioning of our Website;
4.1.7. To contact you, to answer your questions, to share information or to post a newsletter about our news and offers if you have subscribed to it.
5. DISCLOSURE OF PERSONAL DATA
5.1. We undertake not to disclose or transfer your Personal Information to unrelated third parties except in the following cases:
5.1.1. If an Individual Consent has been received for this Data Transfer;
5.1.2. When it is necessary to complete the contract with you and provide our services properly to our partners who provide delivery or other services related to your order. For these service providers, we will provide only as much of your personal data as you will be required to fulfil a specific commitment;
5.1.3. Data transfer is obligatory upon the demand of law enforcement agencies in accordance with the procedure established by legal acts of the Republic of Lithuania;
5.1.4. In other cases, provided in the Regulation and legal acts of the Republic of Lithuania.
6. DATA STORAGE TERMS
6.1. The Data controller undertakes to protect the User's personal data for a specific period specified in the applicable laws and other legal acts of the Republic of Lithuania and / or this Privacy Policy, but not longer than is required by applicable laws and regulations of the Republic of Lithuania or pursuant to this Privacy Policy to achieve the goals of Policy Data Management.
6.2. If you register on our Website but do not make any payment or purchase any product that we offer, we will keep the data you have provided on our Website for no longer than 2 (two) years. In such a case, in 5 (five) calendar days before the expiry of the term of 2 (two) years, we will send an inquiry to the e-mail address you provided as to whether you agree to further processing your data. If you express an objection or do not respond in 5 (five) calendar days, we will delete all data related to you, including your account in the system.
6.3. After you register on our Website and if you make at least one payment for purchasing the goods we offer or after purchasing the goods offered on the Website without first registering it (by shopping as a guest), we will keep your personal Data for 10 (ten) years from the performed payment on the Website, as foreseen in the Clause 10.15 of Order of the archivist of the Government of the Republic of Lithuania "On Approval of the Register of Terms for the Storage of General Documents”. In such case, in 5 (five) calendar days before the expiry of the term of 10 (ten) years, we will send an inquiry to your e-mail address as to whether you agree to further processing your data. If you express an objection or during the above 5 (five) calendar days without responding, we will delete all data related to you, including your account in the system.
6.4. By registering on our Website and at the same time subscribing to the Newsletter, we will store your Data and send the Newsletter in accordance with the following procedure and terms as specified in paragraphs 6.2 and 6.3 of this Privacy Policy.
6.5. If you do not register on our Website, but subscribe to the Newsletter by submitting an e-mail, we will store your Data (e-mail address) and send the Newsletter in accordance with the following procedure and terms as specified in paragraphs 6.2 and 6.3 of this Privacy Policy.
7. YOUR RIGHTS
7.1. By using our Website as a User, you have the following rights in relation to Your Data Management:
7.1.1. Know for what purpose we handle personal data;
7.1.2. Require rectification or addition of Personal Data (right to rectify);
7.1.3. Require transfer of Data to another data controller (right to transfer);
7.1.4. Destroy all our processed Data about you (right to be forgotten);
7.1.5. Require that we restrict the processing of your Personal Data for one of the legitimate reasons (right to limit);
7.1.6. To disagree with the processing of your Personal Data when this Data is processed or intended to be processed for direct marketing purposes.
7.2. According to personal data submitted by you, for the direct marketing purposes, there may be profiling of your carried out to offer the solutions and suggestions individually made for you. You can always withdraw your consent to the processing of personal data in automated, including profiling, handling method or to oppose by contacting us in this Privacy Policy, using the contact data.
7.3. You have a right to submit any request or instruction related to your personal data in written to the Manager of data in this Privacy Policy, using the contact information (e-mail or postal address).
7.4. The Data Manager upon the receipt of such a request or order shall respond and perform the steps in the request or refuse to perform stating the reasons for refusal no later than within thirty (30) days from the date of referral. If necessary, the specified period may be extended by another two months depending on the complexity and number of requests. In this case, the Data Manager informs the Customer of any such extension, together with a reason for the delay. within 30 (thirty) days from the receipt of the application.
7.5. If the Customer has discovered the unlawfulness of his Data Management or in the event of a dispute with the Data Manager, he / she has the right at any time to apply to the out-of-court dispute resolution authority in Lithuania - the State Data Protection Inspectorate, in the order specified on its website, which can be found here.
7.6. The Data controller may not provide the Customer with the conditions for the implementation of the above rights, except for the disagreement with the processing of Personal Data by direct marketing, and to apply to an out-of-court dispute resolution institution where, in cases provided for by law, it is necessary to ensure the prevention, investigation and detection of offenses, professional or professional ethics violations, or the protection of the rights and freedoms of others.
8. Newsletter
8.1. On our Web site, users who sign up and create an account or do not register, can subscribe to the Newsletter, indicating their email, mailing address and expressing the consent of the Data Manager for the processing of personal data for direct marketing purposes.
8.2. The User, before giving consent to the processing of Personal Data, introduces this Privacy Policy and confirms that he/she is not less than 14 years of age.
8.3. The User may at any time refuse to receive the Newsletter sent by the Data Manager by writing to the web address indicated by the Internet site or by selecting the "Unsubscribe" section at the bottom of the Internet site.
8.4. The order and terms of sending the newsletter are specified in paragraphs 6.4 and 6.5 of this Privacy Policy.
9. TECHNICAL AND SECURITY MEASURES
9.1. Personal data is protected against loss, unauthorized use and alteration. We have implemented physical and technical measures to protect all information we collect for our service provision. Please note that while we are taking appropriate action to protect your Data, no website, online transaction, computer system or wireless connection is completely safe.
10. THIRD PARTY WEBSITES, SERVICES AND PRODUCTS ON OUR WEBSITE
10.1. When you use our Website, you may be directed to web sites that we do not control. We may also allow third-party Websites or gadgets to provide links on our Website. We are not responsible for the privacy policies of such third parties or any content on other sites. We encourage you to read and get acquainted with the privacy policies of such countries and Websites as well as other legal documents.
11. PRIVACY POLICY CHANGES
11.1. The Data Manager may, at his/her discretion, change this Privacy Policy from time to time.
11.2. The Data Manger recommends that you regularly visit the Website of Data Manager to find the latest version of the Privacy Policy. The Data Manager can notify you of the privacy policy changes to your contact details.
12. CONTACT INFORMATION
12.1. If you have any questions regarding this Privacy Policy or Personal Data, you can contact us via the contact details provided by the Data Manager on the Website or by e-mail: info@elensen.com.
Updated on 25 May 2018