Privacy policy

The controller of the personal data specified in this document is UAB “Seri-Deco”, code 302681326, registered office address Naugarduko g. 96, Vilnius, Lithuania (hereinafter referred to as the Company).

This privacy policy (hereinafter referred to as the “Privacy Policy”) is intended for persons who visit the website of this Company ( www.seri-deco.lt ), use the information contained on the website and the services provided therein. The Privacy Policy also provides information about the processing of personal data of Customers and other persons visiting the Company’s stores, which the Company carries out in the course of its activities, selling goods and/or providing services.

Data subjects in this Privacy Policy may hereinafter be referred to as “Visitors” or “You”.

The Privacy Policy establishes and defines the purposes and procedure for processing and collecting personal data, the scope of personal data collected, and informs Visitors about their rights.

By using the services and continuing to browse the websites, the visitor (website user) confirms that he/she has read this Privacy Policy, understands its provisions and agrees to comply with them.

On what basis do we process your data?

The Company collects and processes personal data in accordance with the legal acts of the EU and the Republic of Lithuania regulating the protection of personal data.
The Company processes the personal data of Visitors on the following grounds:

on the basis of consent, which is expressed by your active actions, i.e. contacting us and providing personal data, or other active actions;
for the implementation of our legitimate interests (e.g., to administer the Website and ensure its proper functioning; to carry out video surveillance in the Company’s stores and their territories and to ensure the safety of property and persons, etc.);
in order to fulfill our obligations under the law.
The Company seeks to ensure that personal data is processed accurately, fairly and lawfully, that it is processed only for the purposes for which it was collected, and that it is processed in accordance with clear and transparent principles and requirements for the processing of personal data. established in legal acts.

What data about you do we process and why?

Processing of personal data on the website

When you visit and browse our website, the Company, in order to collect statistical data about visits to the website and improve the quality of services and the visitor experience, processes the following anonymous data: IP address, MAC address, date of visit, duration, pages visited. , devices and applications used for browsing the Internet, etc.

In addition, our website uses cookies. Cookies are small text files (up to a few KB) that your browser places on your computer, tablet or other smart device when you visit our website. With cookies, we aim to ensure the efficient and secure operation of the website and to analyze your habits so that the website is convenient, efficient and meets your needs and expectations.

We use the website analysis service Google Analytics, which allows us to record and analyze statistical data about the use of the website. You can learn more about Google Analytics and the information that these tools allow us to collect here – https://support.google.com/analytics/answer/6004245?hl=lt . If you do not want Google Analytics tools to record information about your browsing on the Internet, you can use the Google Analytics opt-out browser add-on.

Processing of personal data for direct marketing purposes.

The company processes your personal data for direct marketing purposes after receiving your explicit consent to such data processing, e.g. when you subscribe to our newsletters, etc. (the basis for data processing is your consent);

We may process your name, e-mail address and telephone number for direct marketing purposes.

Your personal data may be processed for direct marketing purposes in the following ways:

You may receive a newsletter with our offers, promotions and news by e-mail;
You may receive invitations to events, offers and similar information by e-mail.
You may unsubscribe from our newsletters at any time by clicking the unsubscribe link at the bottom of our newsletters.
We also use the services of Facebook, Google and other online advertising providers. You can read about the privacy policies of these service providers, the data collected, and the personal data protection measures applied in the privacy policies of the aforementioned service providers. For more information about how this works, as well as information about how you can opt out of such ads or data use, please see the information provided by the aforementioned service providers – https://lt-lt.facebook.com/policies/ads# ; https://policies.google.com/technologies/ads .

Processing of personal data in the context of video surveillance

In order to ensure the protection of the property, health and life of the Company, our employees and other persons, we carry out video surveillance in our stores, office premises and territories.

We carry out video surveillance and process the data of Visitors entering the video surveillance field (video data) on the basis of our legitimate interest.

Our video surveillance systems do not use facial recognition and/or analysis technologies, and the video data recorded by them is not grouped or profiled according to a specific data subject (person).

Visitors are informed about the ongoing video surveillance by information signs with a video camera symbol and the data controller’s details, which are provided before entering the monitored territory and/or premises.

The video camera surveillance field does not include premises where Visitors expect absolute protection of personal data, such as changing rooms, rest rooms, toilets.

Personal data of Visitors (video data) collected during video surveillance are stored for up to 30 (thirty) calendar days from the date of recording.

Processing of personal data for other purposes

We may also process your personal data when providing you with other services, fulfilling warranty obligations for the goods we sell, issuing invoices and/or other accounting documents for goods and/or services. Typically, such personal data is processed on the basis of a contract for the use of goods and/or services, on the basis of your consent or in compliance with the obligations imposed on us by law.

We may also process personal data for other purposes if we have received your (data subject) consent or when the processing of personal data is based on other criteria for lawful processing provided for in legal acts.

From what sources do we collect your personal data?

The Company manages:

Data that you provide when you communicate with the Company, use the services provided by the Company, maintain legal relations with the Company, for example, register for services or participate in programs, subscribe to newsletters, contact us for information, etc. ;
which are generated when you use our services, visit our stores, for example, when you use our network (e.g. call, send an email or visit our websites), enter the field of video surveillance cameras installed in our stores or their territories, etc.
How long do we process and store your data?

We will process and store your personal data for no longer than is necessary for the purposes for which the data was collected, achieved, or for the period required by law.

We describe in detail the periods of retention of personal data in this Policy or in the privacy notices or policies for the relevant categories of personal data.

Your personal data may be retained for a longer period than specified in the Policy only when:

there are reasonable suspicions of illegal activity that is under investigation;

your data is necessary for the proper resolution of a dispute or complaint;
if we have received complaints related to a Visitor or have noticed violations committed by the relevant Visitor;
for backup copies and other purposes related to the operation and maintenance of information systems or similar purposes;
in the presence of other special grounds, conditions or cases provided for by law.
In what cases and to which third parties do we disclose your data?

The Company does not transfer your personal data to any third parties without your prior consent, except for the cases described below.

We may transfer your data to third parties that help us provide and administer the Services. Such parties may include companies providing data centers, hosting and related services, companies providing advertising and marketing services, companies developing, providing, maintaining and developing software, companies providing information technology infrastructure services, companies providing communication services, companies performing and providing analysis services. Internet browsing or online activities, security services providing security services, companies providing parcel delivery and freight transportation services, etc. In each case, we provide the data processor with only as much data as is necessary to fulfill a specific order or provide a specific service.

Our data processors may process your personal data only on our instructions. They are also required to ensure the security of your data in accordance with applicable laws and written contracts concluded with us.

Data may also be provided to competent government or law enforcement authorities, such as the police or supervisory authorities, but only at their request and only when required by applicable laws or in cases and procedures provided for by law in order to ensure our rights. , the security of our customers, employees and assets, and to assert, exercise and defend legal claims.
In which territories and jurisdictions do we process your personal data?

We process your personal data in the European Union. We do not currently intend to transfer and do not transfer your personal data to third parties.

Please note that certain technical data about your visit to the website (IP address, cookies, technical information about the browser you use, other information related to browser activity and navigation on the website) may be transferred or made available to entities operating both in and outside the European Economic Area for statistical, analytical and related purposes (e.g., when we use the Google Analytics service, such an entity is a company operating in the United States of America). We remind you that in non-EEA countries, personal data may be subject to lower protection than in EEA countries, but we will carefully assess the conditions under which such data of yours will be subsequently processed and stored after transfer to the entities specified above. .

Data Security

The Company implements and constantly updates appropriate organizational and technical security measures that help protect personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.

Any personal data you provide, including your name, surname, e-mail address and any other information contained in the e-mail, may be processed by the Company or the owner of the e-mail with whom it has been agreed, the data center, storage and other IT infrastructure. service providers for the purposes of maintaining the security of the Company’s IT systems, ensuring business with customers, suppliers and other business partners, ensuring that the data is properly protected and not lost in the event of a security breach.

What rights do data protection laws give you?

Personal data protection legislation gives you many rights that you can freely exercise, so we must ensure that you have such an opportunity. In this privacy policy, we provide information about your specific rights and how to further exercise them. Please read it carefully.

The right to access your personal data processed by us

You have the right to obtain our confirmation as to whether we are processing your personal data, as well as the right to access your personal data processed by us and information about the purposes of data processing, categories of data processed, categories of data recipients, and data processing period.

We provide most of this information in this privacy policy and believe that it is useful to you.

Right to rectification of personal data

If the data you have provided to us has changed or you believe that the information we process about you is inaccurate or incorrect, you have the right to request that this information be changed, corrected, or amended.

Right to withdraw consent

In cases where we process your data on the basis of your consent, you have the right to withdraw your consent at any time and the processing of data based on your consent will be terminated.

Right to lodge a complaint

If you believe that we are processing your data in breach of data protection legislation, please always contact us directly first. We believe that we will be able to dispel all your doubts, satisfy your requests and correct any errors made, if any, with our fair efforts.

If you are not satisfied with the solution we propose or, in your opinion, we do not take the necessary action in accordance with your request, you will have the right to file a complaint with the supervisory authority, which in the Republic of Lithuania is the State Data Protection Inspectorate (more information: www.ada.lt ).

The right to object to data processing when the processing is based on legitimate interests.

You have the right to object to the processing of personal data when the personal data is processed based on our legitimate interests.

To exercise the right specified in this section, submit a written request to our data protection officer.

The right to erasure (the right to be forgotten)

In certain circumstances specified in the data processing legislation (when personal data are processed unlawfully, the basis for data processing has disappeared, etc.), you have the right to request that we erase your personal data. To exercise this right, please submit a written request to our Data Protection Officer.

Right to restrict data processing

In certain circumstances specified in data processing legislation (when personal data is processed unlawfully, you contest the accuracy of the data, you have objected to data processing based on our legitimate interest, etc.), you also have the right to restrict the processing of your data.

To exercise the right specified in this section, submit a written request to our data protection officer.

Right to data portability

You have the right to transfer data that we process based on your consent and that are processed by automated means to another data controller. We will provide the data that you wish to transfer in a machine-readable format commonly used in our systems, and upon your request and if technically feasible, we will transfer the data directly to another data controller specified by you.

To exercise the right to data portability, submit a written request to our data protection officer.

Application processing procedure

In order to protect your and other persons’ data from unlawful disclosure, upon receipt of your request to provide data or exercise your other rights, we will be obliged to verify your identity. For this purpose, we may ask you to provide your name, surname, e-mail address or telephone number and compare whether the data you provided matches the relevant data. When performing this verification, we may also send a control message (by SMS or e-mail) to the specified contact, requesting an authorization action. If the verification procedure is unsuccessful (e.g.: the data you provided does not match the data we have or you do not authorize yourself according to the received SMS or e-mail), we will be forced to conclude that you are not the Visitor of the requested services and we will be obliged to reject your request.

Upon receipt of your request to exercise any of your rights and upon successful completion of the above verification procedure, we undertake to provide you with information immediately, but in any case not later, on the actions we have taken in response to your request. within one month from the receipt of your request and the end of the verification procedure. Taking into account the complexity and number of requests, we have the right to extend the one-month period for another two months, informing you about this by the end of the first month and indicating the reasons for such an extension.

If your request is submitted electronically, we will also provide the response electronically, except in cases where this is not possible (e.g. due to an extremely large volume of information) or if you request a response in another way.

We will refuse to satisfy your request with a reasoned response when the circumstances specified in the legal acts are established, informing you about this in writing.

In what ways and through what contacts can you contact us?

For all questions regarding data processing, you can contact us in the following ways:

Phone: 8 5 215 90 32

E-mail: info@seri-deco.lt

By mail: Naugarduko g. 96 Vilnius LT-03202, Lithuania.

Other Provisions

This Privacy Policy may be updated by the Company at any time. The Company will notify Visitors of the updates by posting a new version of the Privacy Policy on the Website.

If any provision of the Privacy Policy is found to be invalid or unenforceable, this provision shall not affect the legality and validity of the remaining provisions of the Privacy Policy.

This Privacy Policy is effective as of May 25, 2018.