UAB „Nauja oda eshop“ Privacy Policy

1. What does this Privacy Policy mean?

This privacy policy (hereinafter referred to as Privacy Policy) defines the basic rules and conditions for the processing of personal data applicable to visitors of the website www.naujaoda.lt (hereinafter referred to as Website); customers of Nauja oda eshop, UAB (hereinafter referred to as Nauja oda eshop) (individuals) or representatives of customers (legal entities); candidates participating in Nauja oda eshop recruitment for open positions; individuals who contact/submit inquiries to Nauja oda; representatives of Nauja oda partners and service providers, and others.

2. About Nauja oda eshop

Nauja oda eshop, UAB, legal entity code 306079160, registered office at A. Goštauto g. 8-215, LT-01108 Vilnius, Republic of Lithuania, the company's data is collected and stored in the Legal Entities Register of the Republic of Lithuania. Contact details regarding personal data matters: email info@naujaoda.lt; phone No. +370 604 48270.

3. What is personal data?

Personal data refers to any information that Nauja oda eshop collects/stores about you, which can be used, for example, to identify you, provide services, sell products, etc., and is stored electronically or in paper form.

Personal data includes any information, including but not limited to, your name, surname, address, email address, phone number, which is collected/stored by Nauja oda eshop for the purposes specified in this Privacy Policy or in your separate consent or agreement with Nauja oda eshop.

4. Whose personal data does Nauja oda eshop process?

We need your personal data, which may be collected in the following ways. In this Privacy Policy, we outline what you can expect when Nauja oda eshop collects personal data about:

  • our customers (individuals) and our customers’ (legal entities) representatives;
  • individuals who cooperate with us (partners/external service providers);
  • visitors of the Website;
  • individuals who submit inquiries/requests to us;
  • candidates for open positions;

5. How does Nauja oda eshop collect your personal data?

We collect your personal data that you provide to us when you submit your personal data through the Nauja oda eshop website www.naujaoda.lt or when you contact us using the provided Nauja oda eshop contact details, when you provide us with your data so that we can provide services to you as a customer, or when you apply for a job with us, etc.

  • By entering into service provision/cooperation/other contracts;
  • When you submit your data (inquiries) to us via our website or in person;
  • When you contact Nauja oda eshop via email at the provided email address;
  • When you agree to the installation of cookies on your device;
  • When you apply for open positions at our company.
  • Or by submitting information in any other way.

6. What personal data do we process and for what purpose?

For the purpose of providing services and/or selling products to individuals, the following personal data of customers (individuals) is processed:

  • Name, surname, email address, phone number, bank account number, supplier and buyer details, and other personal data related to the provision of services or selling products.

For the purpose of providing services or selling products to legal entities, the following personal data of the clients' (legal entities) representatives is processed:

  • Contact details (name, surname, address, email address, phone number).

For the purpose of cooperation/partnership with Nauja oda eshop, the following personal data of partners/external service providers (their representatives) is processed:

  • Name, surname, phone number, address, email address, bank account number.

For the purpose of administration of inquiries received through the Nauja oda eshop website and providing responses, the following personal data of website visitors is processed:

  • Name, email address.

Note that Nauja oda eshop deletes any excess personal data submitted by data subjects that is not necessary for the purpose of submitting an inquiry and receiving a response.

For recruitment purposes, the following personal data of candidates is processed:

  • Name, surname, CV, phone number, email address, certifications, diplomas, image, qualifications, work experience (previous workplaces).

For the purpose of direct marketing, the following personal data of customers (individuals) or clients’ (legal entities) representatives is processed:

  • Name, email address.

When a visitor logs in or visits the Nauja oda eshop website, the following technical personal data is automatically collected and processed:

  • IP address;
  • Login date and time;
  • Website name and universal address (URL) of the website connecting to our website;
  • Operating system data of the visitor’s device;
  • Information about the visitor's internet service provider;
  • Visitor’s geographical location data;
  • Other related technical information.

In its activities, Nauja oda eshop is also a data processor for some of its clients and processes their personal data as Data Controllers, in their interest and on their behalf, according to Data Processing Agreements and written instructions for personal data processing.

7. What are the legal grounds for processing and how long is the data stored?

Contract (service provision/cooperation/other);

Legitimate interest – to respond to your inquiries, provide the information you request, etc.;

Compliance with legal obligations (compliance with legal requirements for business operations, accounting, archiving, etc.);

Consent (e.g., participating in recruitment, conducting direct marketing, etc.).

No. Purpose of personal data processing Storage period
1. Data processing for direct marketing purposes 10 years from the date of consent
2. Data processing for promotional purposes 1 year from the date of consent
3. Data processing for e-commerce purposes 2 years from the last login or purchase
4. Data processing for participation in cosmetic product testing 3 years from the end of the study

In exceptional cases, data may be stored longer if longer storage periods for personal data and related documents are set by applicable legal acts and are necessary (e.g., mandatory storage periods for accounting and other documents, etc.), or required by the legitimate interests of the data controller in judicial or other state institutions.

8. Participation in recruitment

Nauja oda eshop collects and processes your CV and/or cover letter and/or other information you submit during the recruitment process for the purpose of conducting the recruitment with your consent, which you give by submitting your CV and other information to Nauja oda eshop through the website.

After the recruitment process ends, we commit to delete and/or destroy your personal data within 5 working days after signing a work/internship contract with the selected candidate unless you specifically consent for your data to be used for the purposes indicated in your consent.

9. Direct marketing

Once you become our customer and have provided separate consent during the personal data collection, your personal data may be processed for direct marketing purposes.

You have the right to object at any time to the processing of your personal data for marketing purposes.

Nauja oda eshop will stop processing (using) your personal data for direct marketing purposes as soon as you object to the data processing for this purpose or withdraw your consent.

Your refusal to receive promotional offers and news will not prevent you from using our services, but it will mean that we will not be able to offer you beneficial offers. You can inform us about your objection or withdrawal of consent via email at info@naujaoda.lt.

For direct marketing purposes, Nauja oda eshop uses your personal data as long as you are a customer of Nauja oda eshop unless you withdraw your consent.

10. Disclosure of data

We may disclose information about you to our employees, service providers, or other recipients if reasonably required for the purposes specified in this Privacy Policy.

Under certain circumstances, we may be required to disclose your personal data when:

  • We are required to disclose information under the law, including situations where personal data must be disclosed to tax authorities and law enforcement for crime prevention and detection;
  • Personal data must be disclosed for legal proceedings or to obtain legal advice, or disclosing it is necessary to establish, exercise or defend our rights;
  • Information must be disclosed to protect our or others' interests (e.g., to prevent fraud);
  • Information must be disclosed to a third party providing administrative or data processing services on our behalf (our Data Processors). In such cases, we commit to taking measures to ensure that third parties protect personal data the same way we do, and to inform you of changes to this Privacy Policy;
  • Information must be disclosed to a potential buyer of our company’s assets or organization.

If your personal data is transferred to a third country and/or an international organization, we will inform you in advance and ensure that the data is transferred in compliance with applicable legal requirements.

11. Your personal data security

Your personal data will be processed in compliance with the General Data Protection Regulation, the Personal Data Legal Protection Act of the Republic of Lithuania, and other applicable legal requirements. In processing your personal data, we implement organizational and technical measures that ensure the protection of your personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.

12. Your rights

This section provides information about your rights related to our processing of your personal data and the cases when you can exercise these rights. If you want more information about your rights or want to exercise them, contact us at the following email address: info@naujaoda.lt.

We will respond to your request regarding your rights without undue delay, but no later than within 1 month of receiving your request. Depending on the complexity of the request and the number of requests received, the deadline may be extended for an additional 2 months.

  • Right to withdraw consent

If you have given us clear consent for the processing of your data, you can withdraw it at any time by notifying us via email at info@naujaoda.lt.

  • Right to access your personal data

We aim to ensure that you fully understand how we use your personal data, so you do not experience any inconvenience. You can contact us at any time to ask whether we are processing any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, submit a written request to us at the following email address: info@naujaoda.lt.

  • Additional rights

The following are additional rights you can exercise according to the procedures described below.

  • You have the right to request us to correct any inaccuracies in the data we hold. In such a case, we may ask you to verify the corrected information.
  • You have the right to request us to delete your personal data. Please note that we can only fulfill such a request if:
  • Your personal data is no longer necessary for the purposes for which it was collected (e.g., we need your personal data to respond to your emails);
  • The collection, storage, or use of personal data is prohibited by law;
  • Your personal data is no longer necessary to establish, exercise, or defend a legal claim, for example, in legal proceedings.
  • You have the right to request us to restrict the processing of your personal data or not to process it:
  • For the period necessary to verify the accuracy of your personal data when you file a complaint about the data's accuracy;
  • When our processing, storage, or use of your personal data is unlawful, but you decide not to request deletion of the data;
  • When your personal data is no longer necessary for us, but you need it to establish, exercise, or defend a legal claim;
  • For the period necessary to determine whether we have a more important legal ground to continue processing your personal data if you have exercised your right to object to the processing of personal data.
  • You have the right to data portability for the data we have received from you based on your consent or for the purposes of contract performance. Upon your request, we will transfer a copy of the data you submitted.
  • You have the right to object to the use of your personal data:
  • When we use such data to ensure our legitimate interests, but we do not have a more important legal basis to continue using your personal data; or
  • At any time when we use your personal data for sending newsletters or direct marketing purposes. In this case, the data will no longer be used for these purposes, but it may still be used for other legitimate purposes.

13. Complaints

If you believe that your rights as a personal data subject have been and/or may be violated, please contact us immediately with your complaint via email at info@naujaoda.lt. Upon receiving your complaint, we are committed to contacting you no later than 14 days and informing you about the progress of the investigation and, later, the result.

When contacting us to submit a complaint, we will only use your personal data to investigate the complaint and provide a response, as well as to assess the quality of the services we provide. If the complaint concerns one of our team members, we may need to disclose your identity to that person. At the time of filing the complaint, you can indicate that you do not wish your identity to be disclosed, and we will try to respect your request. However, it may not always be possible to investigate the complaint anonymously.

If you are dissatisfied with our response, you can file a complaint directly with the State Data Protection Inspectorate (phone No. +370 5271 2804, email: ada@ada.lt). You also have the right to file a complaint with the supervisory authority in the Member State of your habitual residence, workplace, or the place where the alleged personal data security violation occurred.

14. Responsibility

You are responsible for any actions (data transmission, submitted orders, etc.) carried out on our Website. You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If your provided data changes, you must immediately inform us by email at info@naujaoda.lt. We will not be responsible for any damage caused to you by providing incorrect or incomplete personal data or by failing to inform us of any changes.

15. Changes to the Privacy Policy

We may update or modify this Privacy Policy at any time. The updated or modified Privacy Policy will become effective upon its publication on our Website.

The "Last Updated" date at the bottom of the Privacy Policy indicates when the Privacy Policy was last updated.

The last update to the Privacy Policy was made on 2024-02-26.

close

Wishlist