UAB “Naftos dujos” Privacy Policy for the Website and Online Store
I. GENERAL PROVISIONS
1. This Privacy Policy sets forth the principles and procedures for the collection, processing, and storage of personal data belonging to natural persons—website visitors (hereinafter referred to as “Customers”).
2. The controller of the Customer’s personal data is UAB “Naftos dujos” (hereinafter referred to as the “Company”), legal entity code 166797537, Mažeikiai, Algirdo g. 42, LT-89103, tel. +370 682 82350, email: info@naftosdujos.lt. The controller ensures that personal data within the Company, when the Customer uses our website www.naftosdujos.lt (hereinafter referred to as the “Website”), will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation” or “GDPR”), the Law on the Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts regulating the protection of personal data,
3. Email address of the company’s data protection officer info@naftosdujos.lt.
4. The Company collects the Customer’s personal data only to the extent necessary for the provision of services or has another lawful basis for the processing of personal data.
5. If the Customer checks the box on the Website indicating that they agree to the terms of the GDPR, it is deemed that they have read the current version of the Privacy Policy, agree to it, and authorize the Company to perform all personal data processing activities to the extent and for the purposes set forth in this Privacy Policy. The Privacy Policy may be amended, supplemented, or updated at the Company’s discretion, without the Customer’s consent. The new version of the Privacy Policy takes effect upon its publication on the Company’s website..
6. When registering an account on the website and making purchases in the online store, the Customer must always provide accurate and correct personal information. An account consists of the Customer’s login credentials for the online store, which include an email address and a secure password created by the Customer..
7. The Customer has the right to change or update their personal data at any time or to request the deletion of their account. The Customer must not disclose their Password to third parties and must keep it secure; otherwise, the Customer shall bear full responsibility for any related consequences..
II. PURPOSES OF PERSONAL DATA PROCESSING
8. The Company processes the Customer’s personal data it has received on the following grounds and for the following purposes:
- 8.1. For e-commerce purposes. The following Customer data is processed: first name, last name, email address, phone number, IP address, and payment details.
- 8.2. For the purpose of improving the website. To ensure the smooth operation of the website and online store, we process Customer data obtained through cookies.
- 8.3. For direct marketing purposes.
III. PROVISION OF PERSONAL DATA
9. All information regarding the Customer’s personal data is confidential. We do not disclose the Customer’s personal data to third parties, except in the following cases:
- 9.1. the Customer’s consent has been obtained, as specified in this privacy policy;
- 9.2. personal data is processed for e-commerce purposes and is provided to partners providing services to the Company (e.g., courier services, payment agencies, etc.). If the Customer does not agree to the Privacy Policy, they will not be able to use the online store;
- 9.3. Personal data is processed for the purposes of online commerce and website improvement and is provided to the Company’s partners who provide services related to the implementation and maintenance of information technology (IT) systems, website development, data storage, and security;
- 9.4. The provision of data to third parties is required by laws and other legal acts;
- 9.5. Data is provided to law enforcement authorities upon their request, in accordance with the procedures established by law.
10. When processing Customer data received from the Company, the Company’s partners must process such data in accordance with the provisions of the GDPR and other laws and regulations governing the protection of personal data.
IV. STORAGE OF PERSONAL DATA
11. When processing personal data, we implement the necessary organizational and technical security measures to protect personal data from accidental or unlawful disclosure or other unlawful processing.
12. Personal data collected for e-commerce purposes is stored for 5 (five) years.
13. Personal data collected for e-commerce purposes is stored for 5 (five) years or until consent to receive direct marketing messages and offers is revoked.
14. We will store personal data collected via cookies for the duration of the cookie’s validity period. Upon expiration of the specified periods, the data will be deleted in a manner that prevents its recovery.
V. ENFORCEMENT OF THE RIGHTS OF DATA SUBJECTS
15. In accordance with the procedure established by law, a Customer whose data is collected and processed has the right to:
- 15.1. receive information from the Company regarding the processing of personal data and to access such data;
- 15.2. request the correction or supplementation of incorrect or inaccurate personal data;
- 15.3. request that the processing of personal data be restricted;
- 15.4. object to the processing of personal data (in such a case, access to the content of our website may be revoked or restricted);
- 15.5. file a complaint regarding a violation of personal data processing with the Company’s data protection officer or the supervisory authority when personal data is processed in violation of the GDPR or other laws governing the legal protection of personal data.
16. When exercising their rights, the Customer must present a document confirming their identity (ID card, passport, or driver’s license). Upon the Customer’s request, once a year, the Company provides information about their processed personal data free of charge.
17. Please submit any complaints, requests, or questions regarding the processing of your personal data to the Company at the following address: Mažeikiai, Algirdo g. 42, LT-89103, or by email at info@naftosdujos.lt. Upon receiving a Customer’s complaint, request, or inquiry regarding the processing of personal data, the Company will provide the Customer with a response within 30 (thirty) calendar days.
VI. COOKIES
18. This Website uses cookies. Cookies are text files that, with your consent, are stored in the browser of your device (e.g., computer, mobile phone, tablet) when you browse the Website and collect information about your browsing activity. When you visit the Website for the first time, cookies are transferred to your computer and are later used to distinguish this computer from others. This is a common practice on websites, making it easier to navigate a website you have already visited and simplifying access to the information provided. Cookies are used to manage your IP address and browsing information, such as the sections of the website you have visited, the time spent on the website, and so on.
19. You can view which cookies are being stored at any time and can delete some or all of the stored cookies. To learn more about cookies, such as how to manage or delete them, please visit www.allaboutcookies. org Please note that deleting or blocking the cookies used may affect the operation of the Website and some of its features, and may also negatively impact your use of the online store’s services.
20. To ensure that you can use the Website more conveniently and effectively, we use the following cookies:
| Cookie name | Purpose | What data is stored | Duration | Is it necessary for a website? | GDPR category |
|---|---|---|---|---|---|
sbjs_current |
Saves the current source of visitor traffic | UTM parameters, referral source, campaign information | Session | No | Marketing / Analytics |
sbjs_current_add |
Additional information about your current visit | Home page, timestamp, navigation data | Session | No | Marketing / Analytics |
sbjs_first |
Saves the source of the visitor’s first visit | First referral, UTM source, and campaign data | A session or longer (depending on the configuration) | No | Marketing / Analytics |
sbjs_first_add |
Additional information about your first visit | Landing page, date/time of first visit | A session or longer | No | Marketing / Analytics |
sbjs_migrations |
Sourcebuster is used for migration and version management | Technical tracking data | Session | No | Techninis / Analytics |
sbjs_session |
Identifies an active user session | Session ID, visit information | Until the end of the session or a specified time | No | Analytics |
sbjs_udata |
Stores additional user information | Browser, device, OS, screen, or user-agent data | Session | No | Analytics / Profiling |