The purpose of the privacy policy is to inform how the personal data of data subjects is collected and processed, to explain how long it is stored, to whom it is provided, what rights data subjects have, and where to contact for their implementation or other issues related to the processing of personal data.
Personal data is processed in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the Regulation), the Law of the Republic of Lithuania on the Legal Protection of Personal Data and other legal acts regulating the protection of personal data.
MB Melioras is guided by the following basic data processing principles:
– personal data are collected only for clearly defined and legitimate purposes;
– personal data is processed only lawfully and fairly;
– personal data is constantly updated;
– personal data is stored securely and for no longer than required by the established data processing purposes or legal acts;
– personal data is processed only by those employees of the Company who are granted such right in accordance with their job functions or by duly authorized data processors.
1. CONCEPTS
1.1. Data controller – MB Melioras (hereinafter referred to as the Company), legal entity code 306738835, registration address Žaros g. 2D-2, Garliava, LT-53269 Kaunas r
1.2. Data subject – any natural person whose data is processed by the Company. The Data Controller collects only those data of the data subject that are necessary for carrying out the Company's activities and/or when visiting, using, browsing the Company's websites, Facebook, Instagram pages, etc. (hereinafter referred to as the Website). The Company ensures that the personal data collected and processed will be secure and will be used only for a specific purpose.
1.3. Personal data – any information relating directly or indirectly to a data subject whose identity is known or can be directly or indirectly determined from the relevant data. Processing of personal data – any operation performed on personal data (including collection, recording, storage, editing, modification, provision of access, submission of queries, transmission, archiving, etc.).
1.4. Consent – any freely given and informed indication by which the data subject signifies agreement to the processing of his or her personal data for a specific purpose.
1.5. Cookies – Small textual information pieces used on the Company’s website that are automatically created when browsing the website and are stored on a computer or other device used by the data subject (website visitor). Cookies are used to improve the browsing experience for website visitors, analyze website visitor traffic and behavior on the website.
2. SOURCES OF PERSONAL DATA
2.1. Personal data is provided by the data subject himself. The data subject contacts the Company, uses the services provided by the Company, purchases goods and (or) services, leaves comments, asks questions, subscribes to newsletters, contacts the Company with a request for information, etc.
2.2. Personal data is obtained when the data subject visits the Company's website. The data subject fills in the forms on it or for some reason leaves his/her contact details, etc.
2.3. Personal data is obtained from other sources. Data is obtained from other institutions or companies, publicly available registers, etc.
3. PROCESSING OF PERSONAL DATA
3.1. By providing personal data to the Company, the data subject agrees that the Company will use the collected data to fulfill its obligations to the data subject, providing the services that the data subject expects.
3.2. The Company processes personal data for the following purposes:
3.2.1. Ensuring the continuity of the company's activities. For this purpose, the following data is processed:
✓ For the purpose of concluding and executing contracts, the following personal data of suppliers (natural persons) may be processed: name(s), surname(s), personal code or date of birth, place of residence (address), telephone number, e-mail address, workplace, position, bank account and the bank where this account is held, date of execution of the monetary transaction or transaction, amount, currency and other data provided by the person himself, which the Company receives in accordance with legal acts while carrying out the Company's activities and (or) which the Company is obliged to process by laws and (or) other legal acts. For example, data contained in the business certificate (type of activity, group, code, name, periods of activity, date of issue, amount), individual activity certificate number, data whether the data subject is a VAT payer, etc. data necessary for the proper performance of the obligations established in the contract and (or) legal acts.
✓ In order to sell the products sold by the Company, personal data of customers (natural persons) may be processed: first name(s), last name(s), date of birth, telephone number, email address, place of residence (address).
3.2.2. Administration of inquiries, comments and complaints. For this purpose, the following data is processed:
✓ First name(s), last name(s) and/or username, email address, phone number, address, subject of the message, comment, response or complaint, text of the message, comment, response or complaint.
3.2.3. Sale of gift vouchers. The following data is processed for this purpose:
✓ Name(s), surname(s), gift voucher value, gift voucher buyer's name(s), surname(s), date of sale, gift voucher number, email address, phone number, gift voucher expiration date, billing details, name of the voucher recipient.
3.2.4. Conducting games and competitions. The following data is processed for this purpose:
✓ First name(s), last name(s) and/or username, phone number, email address, data about the person's skin condition and type.
3.2.5. E-commerce. The following data is processed for this purpose:
✓ Name(s), surname(s), date of birth, purchase history, delivery address, residential address, telephone number, email address, payment details for the product/service.
3.2.6. Ensuring the quality of telephone consultations about the services provided by the Company, improving the quality of customer service, controlling that information is provided in a qualified and efficient manner (recording of telephone conversations). For this purpose, the following data is processed:
✓ Telephone conversation recording, phone number from and to which the call is made, date of the telephone conversation, duration of the telephone conversation.
3.2.7. Direct marketing. The following data is processed for this purpose:
✓ First name(s), last name(s), date of birth, residential address, email address, telephone number.
3.2.8. For the purpose of ensuring the security of the company's employees, other data subjects and property (video surveillance). For this purpose, the following data is processed:
✓ Video image. Video surveillance systems do not use facial recognition and (or) analysis technologies, the video data recorded by them are not grouped or profiled according to a specific data subject (person). The data subject is informed about the ongoing video surveillance by information signs with a video camera symbol and the Company's details, which are provided before entering the monitored territory and (or) premises. The field of video camera surveillance does not include premises where the data subject expects absolute protection of personal data.
3.2.9. For other purposes for which the Company has the right to process the personal data of the data subject, when the data subject has expressed his/her consent, when the data needs to be processed due to the legitimate interest of the Company, or when the Company is obliged to process the data by relevant legal acts.
4. USE OF COOKIES
4.1. The company uses cookies on its website to improve and enhance the experience of customers and website visitors.
4.2. The following types of cookies may be used on the Company's website:
4.2.1. Technical (essential) cookies – help the website visitor to display the website and its content, help ensure the functionality of the website, create an account, log in to your account and manage your orders. Technical cookies are necessary for the proper functionality of the website and their use does not require the consent of the website visitor.
4.2.2. Functional cookies – used to help the website visitor use the Company's website, remember the choices and preferences made during browsing. Functional cookies are not necessary for the website to function fully, but they add functionality and improve your experience of using the Company's website.
4.2.3. Analytical cookies – used to obtain information about how website visitors use the Company's website. This is necessary so that we can optimize and improve the Company's website. With the help of analytical cookies, we can collect data about the web pages you have viewed, from which pages you came, which e-mails you have opened and responded to, and information about the date and time. This also means that we can use information about you and how you use this website, for example, the frequency of visits, the number of clicks on a particular page, the search terms used, etc.
4.2.4. Commercial (targeted or advertising) cookies – used to deliver personalized advertising to the visitor of the Company's website. This is called "remarketing", which is based on browsing actions, such as the products and/or services you have searched for, viewed.
4.3. Access to statistical data about visitors to the Company's website is available to the Company's employees, who are responsible for analyzing this data and improving the website.
4.4. Access to technical records may also be available to the Company's partners who provide content management tools for the Company's website.
4.5. Data collected by cookies is stored in the Company for no longer than is necessary to achieve the purposes of data processing or no longer than is required by the data subjects and/or provided for by legal acts.
4.6. More detailed information about cookies can be found at: AllAboutCookies.org.
4.7. If you do not agree to our use of cookies, you have the option to change your browser settings and control the number of cookies. Useful links on how to refuse cookies can be found below:
• For Chrome browser: https://support.google.com/chrome/answer/95647?hl=en ;
• For Firefox browser: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies ;
• For Safari browser: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac ;
• For Edge browser: https://support.microsoft.com/en-us/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy.
5. USE OF SOCIAL NETWORKS
5.1. All information you provide on social media (including messages, use of the "Like" and "Follow" boxes, and other communications) is controlled by the operator of the relevant social network.
5.2. Our Company currently has an account on the social network Facebook, the privacy policy of which is available at https://www.facebook.com/privacy/explanation ;
5.3. Our Company currently has an account on the social network "Instagram", the privacy policy of which is available at https://help.instagram.com/402411646841720 ;
5.4. Our Company currently has an account on the social network LinkedIn, the privacy policy of which is available at https://www.linkedin.com/legal/privacy-policy ;
5.5. Our Company currently has an account on the social network YouTube, whose privacy policy is available at https://policies.google.com/privacy?hl=en-US.
5.6. We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.
6. SENDING NEWSLETTERS
6.1. The Company uses the services of a third party, Omnisend, to send newsletters . The third party, Klaviyo , only uses the email address of the newsletter recipient for the successful sending of newsletters. The privacy policy of Omnisend is available at:
• Omnisend Privacy Policy : Omnisend
6.2. You can unsubscribe from newsletters by clicking the "Unsubscribe from Newsletter" button at the bottom of each received letter, by replying to the received letter, or by directly contacting the Company by e-mail and expressing your desire to no longer receive newsletters sent by the Company.
7. ELECTRONIC COMMERCE
7.1. The MB Melior elegance online store is created using the WordPress platform. Data collected for the purpose of e-commerce is stored on the Interneto Vizija servers.
7.2. The Company uses the Montonio platform to accept payments. The privacy policies of the payment acceptance platforms are available at the following addresses:
https://montonio.com/lt/legali-informacija/privatumo-politika/
7.3. Payment initiation services in the online store are provided by UAB "Montonio Finance", a private limited liability company in Lithuania, company code 305205122, address Konstitucijos pr. 7, Vilnius, Lithuania, holding a payment institution license No. LB002007 issued by the Bank of Lithuania.
7.4. Our website is protected by a security protocol based on a data encryption system certificate (SSL). Such a store's online address contains the letter "s": "https://".
8. PROVISION OF PERSONAL DATA
8.1. The Company undertakes to comply with the confidentiality obligation towards data subjects. Personal data may be disclosed to third parties only if this is necessary for the conclusion and performance of a contract in favor of the data subject, or for other legitimate reasons.
8.2. The Company may provide personal data to its data processors who provide services to the Company and process personal data on behalf of the Company. Data processors have the right to process personal data only in accordance with the Company's instructions and only to the extent necessary to properly perform the obligations set out in the contract. The Company uses only those data processors who sufficiently ensure that appropriate technical and organizational measures will be implemented in such a way that data processing complies with the requirements of the Regulation and the protection of the rights of the data subject is ensured.
8.3. The Company may also provide personal data in response to requests from a court or state authorities to the extent necessary to properly comply with applicable legal acts and instructions from state authorities.
8.4. The company guarantees that personal data will not be sold or rented to third parties.
9. PROCESSING OF PERSONAL DATA OF MINORS
9.1. Persons under the age of 14 may not provide any personal data through the Company's website. If a person is under the age of 14, in order to use the Company's services, prior to providing personal information, it is mandatory to provide written consent from one of the representatives (father, mother, guardian) for the processing of personal data.
10. PERSONAL DATA RETENTION PERIOD
10.1. Personal data collected by the Company are stored in printed documents and/or in the Company's information systems. Personal data are processed for no longer than is necessary to achieve the purposes of data processing or for no longer than is required by the data subjects and/or provided for by legal acts.
10.2. Although the data subject may terminate the contract and refuse the Company's services, the Company must continue to store the data subject's data for possible future requirements or legal claims until the data storage periods expire.
11. DATA SUBJECT RIGHTS
11.1. Right to receive information about data processing.
11.2. Right to access processed data.
11.3. Right to request correction of data.
11.4. Right to request erasure of data ("Right to be forgotten"). This right does not apply if the personal data requested to be erased are also processed on another legal basis, such as processing is necessary for the performance of a contract or compliance with an obligation under applicable law.
11.5. Right to restrict data processing.
11.6. Right to object to data processing.
11.7. Right to data portability. The right to data portability shall not adversely affect the rights and freedoms of others. The data subject shall not have the right to data portability in respect of personal data which are processed in non-automatically structured files, such as paper files.
11.8. The right to object to a decision based solely on automated processing, including profiling.
11.9. The right to file a complaint regarding the processing of personal data with the State Data Protection Inspectorate.
12. The Company must enable the data subject to exercise the above-mentioned rights of the Data Subject, except in cases established by law when it is necessary to ensure state security or defense, public order, prevention, investigation, detection or prosecution of criminal activities, important economic or financial interests of the state, prevention, investigation and detection of violations of official or professional ethics, protection of the rights and freedoms of the data subject or other persons.
13. PROCEDURE FOR EXERCISING THE RIGHTS OF THE DATA SUBJECT
13.1. The data subject may contact the Company to exercise his or her rights:
13.1.1. by submitting a written request in person, by mail, through a representative or by electronic means of communication - by e-mail: info@melior.lt;
13.1.2. orally – by phone: +370 68 967000;
13.1.3. in writing – to the address: Draugystės g. 17-1, LT-51229 Kaunas.
13.2. In order to protect data from unlawful disclosure, the Company, upon receiving a request from a data subject to provide data or exercise other rights, must verify the identity of the data subject.
13.3. The company's response to the data subject shall be provided no later than one month from the date of receipt of the data subject's request, taking into account the specific circumstances of the personal data processing. This period may be extended by two more months, if necessary, taking into account the complexity and number of requests.
14. RESPONSIBILITY OF THE DATA SUBJECT
14.1. The data subject must:
14.1.1. inform the Company about changes in the information and data provided. It is important for the Company to have correct and valid information about the data subject;
14.1.2. provide the necessary information so that, upon request by the data subject, the Company can identify the data subject and verify that it is communicating or cooperating with a specific data subject (provide a personal identification document or, in accordance with the procedure established by law or by electronic means of communication, which would allow for the proper identification of the data subject). This is necessary for the protection of the data subject and other persons' data, so that the disclosed information about the data subject is provided only to the data subject, without violating the rights of other persons.
15. FINAL PROVISIONS
15.1. By transferring personal data to the Company, the data subject agrees to this Privacy Policy, understands its provisions and agrees to comply with it.
15.2. In the course of developing and improving the Company's activities, the Company has the right to unilaterally change this Privacy Policy at any time. The Company has the right to unilaterally, partially or completely change the Privacy Policy by notifying about this on the website www.melior.lt.
15.3. Additions or changes to the Privacy Policy shall enter into force from the date of their publication, i.e. from the date they are posted on the website www.melior.lt.