Privacy policy

UAB „DIAPLAST“ PRIVACY POLICY

PREAMBLE

  1. UAB “DIAPLAST”, legal entity code 210875290, registered office address Elektrėnų st. 10F, LT-51218 Kaunas, Lithuania (hereinafter – the Company) is the manager of the online store diaplast.lt.
  2. The trust of every User of the Online Store in the Company, in the Online Store managed by the Company and in the goods sold in it is important to the Company. This trust, among other things, is inseparable from the proper processing and protection of the User’s Personal Data. Therefore, in this section of the website of the Online Store, you will find the provisions of the Company’s Privacy Rules (hereinafter – the Privacy Rules), which regulate the receipt, use, management, processing and other actions of processing Personal Data in the Company’s activities, as well as the related rights of the Users and the Company’s responsibilities.
  3. Please note that by using the website of the Online Store and the services provided therein, the User agrees to the provisions of the Privacy Rules. If the User does not agree to comply with the Privacy Rules of the Online Store, the User may not continue to use the Company’s Online Store website.
  4. We note that the Company has the right to unilaterally change the provisions of the Privacy Rules at any time by notifying the Users of the Online Store website in advance. Any change in the provisions of the Privacy Policy takes effect from the day of its publication on the Online Store website, so please read the provisions of this Privacy Policy every time before starting to use the features provided by the Online Store. If, after reading the provisions of these Privacy Rules, you decide to continue using the opportunities provided by the Online Store, you confirm that you agree with them and accept them.
  5. The User, if he has any questions related to the User’s Personal Data, may contact us directly by e-mail at diaplast@diaplast.lt.
  6. You can find more detailed information about the Company and the Company’s contact details in the “CONTACT” sections of the Online Store website, as well as below in this document.
  7. We note that all actions performed with the User’s Personal data are performed in accordance with the applicable provisions of the European Union and the Republic of Lithuania legal acts, primarily the General Data Protection Regulation and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

BASIC CONCEPTS

  1. The manager is the Company, i.e. i.e. UAB “DIAPLAST”, legal entity code 210875290, registered office address Elektrėnų st. 10F, LT-51218 Kaunas, Lithuania, establishing the purposes and means of data processing.
  2. Online store – online store available at diaplast.lt
  3. User – a natural person visiting the website of the online store and/or a natural person seeking to purchase goods sold by the Company and/or to receive services provided by the Company, and/or purchasing them.
  4. Personal data – any information related to a natural person – a data subject whose identity is known or can be directly or indirectly determined.
  5. Data recipient – a legal or natural person to whom the Data Controller provides personal data.
  6. Online store account is an account for logging in to the Online store website, which is created by the active actions of the User in accordance with the sequence of actions specified on the Online store website, and which stores the User’s personal data and order history.
  7. Direct marketing – activities aimed at offering goods or services to individuals by mail, telephone or other direct means and/or asking for their opinion on the offered goods or services.
  8. A partner of the Company is a person who supplies goods or services to the Company, with whom joint actions or projects may be carried out.

METHODS OF OBTAINING PERSONAL DATA

  1. The Company receives User Personal Data in three ways, when:
    – The user provides information about himself;
    – Data related to the User are generated automatically when the User uses the Online Store website;
    – Data about the User is obtained from third parties.
  2. The User of the Company’s Online Store website independently submits information to the Company in the following cases:
    – After the User creates an Online Store account and places an order in the Online Store;
    – During the User’s communication with the Company in any form.
  3. The third method of obtaining Personal Data includes a situation where, based on the User’s consent, the Company receives information about the User from third parties, such as Facebook, Inc., Google, Inc. The company from Facebook, Inc. receives such Personal Data of the User as the User’s image and the Facebook.com social network account (profile) name, while from Google, Inc. The Company receives only the User’s image data.

PURPOSES OF USER PERSONAL DATA PROCESSING

  1. The Company processes Users’ Personal Data for the following purposes:
    – For the purpose of e-commerce on the Company’s online store website;
    – For the purpose of organizing and conducting contests, promotions, games;
    – For the purpose of providing services;
    – For the purpose of conducting direct marketing;
    – For the purpose of evaluating, improving and ensuring professional service quality and resolving potential or arising disputes with Users (audio recording is performed).
  2. The Company does not process the User’s Personal Data for any other purposes incompatible with the above-mentioned purposes.

PERSONAL DATA PROCESSED AND LEGAL GROUNDS FOR PROCESSING THEM

  1. In its activities, the company processes the following personal data of Users:
    – On the legal basis for the conclusion and execution of the contract: Personal data of the User, such as name, personal identification number, surname, e-mail address, telephone number, product delivery address, Internet Protocol (IP) address, bank account number, method of payment for the purchased product, order history, residential address. These Personal Data are processed for the purpose of e-commerce on the Company’s Online Store website;
    – On the basis of the User’s consent: Personal data of the User, such as name, surname, telephone number, e-mail address, Internet Protocol (IP) address, video, image. These Personal Data are processed for the purpose of organizing and conducting contests, promotions, games;
    – On the legal basis of the conclusion and execution of the contract: Personal data of the User, such as name, surname, personal identification number, telephone number, e-mail address, workplace address, personal complaints. These Personal Data are processed for the purpose of providing the services published on the Company’s Online Store website;
    – On the basis of the User’s consent: User’s Personal data, such as name, surname, e-mail address, city, purchase category, purchase amount data, image data, Facebook.com account name, residential address. These
  2. The Company notes that it does not collect, process or perform any other data processing operations related to the User’s sensitive (special) personal information, such as religious or political views, health, etc.

USER RIGHTS AND PROCEDURE FOR THEIR IMPLEMENTATION

  1. The Company ensures, observes and respects the rights of Users of the Company’s Online Store website:
    – the right to information, i.e. i.e. the right to be informed about the Company’s processing of the User’s Personal Data;
    – the right to receive information related to the User’s Personal data processed by the Company;
    – the right to correct the User’s Personal Data if they are inaccurate or incomplete;
    – the right to be forgotten when the Personal Data are no longer necessary to achieve the purposes for which they were collected or otherwise processed or/and the User revokes the consent on which the Personal Data processing was based and there is no other legal basis for processing the Personal Data, or/and the User does not agree with the processing of Personal Data and there are no overriding legitimate reasons for processing Personal Data, or/and when Personal Data was processed illegally, or/and Personal Data must be deleted in accordance with legal obligations established by the law of the European Union or the Company’s member state, or/and the User’s personal data were collected in the context of offering information society services;
    – the right to restrict the processing of the User’s Personal Data when the User disputes the accuracy of the Personal Data for a period during which the Company can verify the accuracy of the Personal Data or/and the Processing of the Personal Data is illegal and the User does not agree to the deletion of the Personal Data and instead requests the restriction of its use , or/and the Company no longer needs the User’s Personal Data for data processing purposes, but the User needs them in order to assert, exercise or defend legal claims, or/and The User has objected to the processing of Personal Data until it is checked whether the Company’s legitimate reasons are superior to the User’s reasons;
    – the right to object to the processing of the User’s Personal Data, i.e. The User has the right, for reasons related to the User’s specific case, to object at any time to the processing of the Personal Data related to him, when such data processing is carried out in order to perform a task carried out in the public interest or in the performance of public authority functions assigned to the Company, including profiling , or/and it is necessary to process Personal Data in pursuit of the legitimate interests of the Company or a third party, except in cases where such interests of the User or the fundamental rights and freedoms necessary to ensure the protection of personal data are for them superior, especially when the User is a child, including profiling, or/and when Personal Data is processed for the purpose of Direct Marketing, including profiling related to Direct Marketing. The Company hereby indicates that, taking into account the implementation of the User’s right to object to the processing of Personal Data, it no longer processes Personal Data, except in cases where the Company proves that Personal Data is processed for compelling legitimate reasons that are superior to the Company’s interests, rights and freedoms, or in order to claim , enforce or defend legal claims.
    – the right to portability of Personal Data, i.e. The User has the right to receive the Personal Data related to him, which he has provided to the Company, when the processing of the User’s Personal Data is based on consent and/or contract and such User’s Personal Data is processed by automated means of Personal Data Processing. The Company hereby indicates that, using its right to data portability, the User has the right for the Company, when technically possible, to directly transfer the Personal Data to another data controller, i.e. to a natural or legal person determining the purposes and means of data processing.
    – the right to withdraw consent regarding the processing of Personal Data, when the processing is based on the User’s consent.
  2. The company informs that the relevant actions that implement the above-mentioned rights of the Users will be carried out as soon as possible, but no later than 1 (one) month after the date of your application. We note that, if necessary, the 1 (one) month deadline can be extended for another two months, depending on the complexity and number of requests. In such a case, the Company shall inform the User of such extension within 1 (one) month from the receipt of the request, together with the reasons for the delay.
  3. The Company points out that, without limiting the possibility of taking other administrative or judicial remedies, each User has the right to file a complaint with a supervisory authority, primarily in the EU member state where he has his permanent residence, place of work or place where the alleged violation was committed, if the person believes that the processing of Personal Data related to it is carried out in violation of the valid legislation on legal protection of data. In the Republic of Lithuania, such supervisory authority is the State Data Protection Inspectorate, legal entity code 188607912, address A. Juozapavičiaus str. 6, LT-09310 Vilnius, Lithuania.
  4. If the User wishes the Company to implement the above-mentioned rights or if the User has questions regarding the implementation of his rights, please contact the Company.

PERSONAL DATA STORAGE TERMS

  1. The terms of storage of Personal data processed by the company, taking into account the purposes of Personal data processing, are as follows:
    – The User’s Personal data, processed for the purpose of e-commerce on the Company’s Online Store website, are stored for 5 (five) years from the User’s last use of the Company’s Online Store;
    – The User’s Personal data, processed for the purpose of organizing and running contests, promotions, games, are stored for 5 (five) years from the User’s last participation in a contest, promotion or game organized by the Company;
    – The User’s Personal data, processed for the purpose of providing services, are stored for 5 (five) years from the User’s last use of the Company’s services;
    – The User’s Personal Data processed for the purpose of Direct Marketing are stored for 5 (five) years from the date of receipt of the User’s consent to process his Personal Data for the purpose of Direct Marketing; for the purpose of resolving disputes with customers, are stored for 3 (three) years from the date of receipt of the relevant Personal Data.
  2. The Company makes all reasonable and reasonable efforts to protect the User’s Personal Data during the periods indicated above. At the end of the Personal Data storage period, the Company destroys the User’s personal information.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES AND DISCLOSURE OF PERSONAL DATA

  1. The company uses the services of reliable third parties established in Lithuania and other European Union countries and beyond, such as courier services, leasing companies, companies providing direct marketing and service station (server) rental services.
  2. The Company informs the User that in order to achieve the Personal Data processing purposes identified in these Privacy Rules, taking into account the specific purpose of Personal Data processing, the Company transfers the User’s Personal Data to the above-mentioned third parties.
  3. The User’s Personal data is transferred to third parties only as and to the extent necessary to directly fulfill their duties and ensure the User’s legitimate interests.
  4. The Company and the third party to whom the Company has transferred the User’s Personal Data operate in accordance with a separate agreement(s) regulating the processing of the Personal Data transferred to the third party, necessary to implement technical and organizational security measures and other Personal Data necessary legal provisions governing processing.
  5. The User undertakes and is obliged to keep the Account password and login name for connecting to the Company’s Online Store website, as well as other Personal Data. The User undertakes and is obliged not to disclose Personal Data about himself or third parties to any other third parties, if such Personal Data of third parties became available to him, and to immediately inform the Company of identified violations.
  6. The Company aims to ensure the confidentiality of the User’s personal information and under normal circumstances of using the Company’s Online Store website, the Company has no right to disclose the User’s Personal Data to any other Data Recipients, if this is not required by the process of implementing the services provided by the Company.
  7. In the event that the Company is obliged on the basis of laws or other legal acts, the Company must disclose information about the User to the competent authorities.

SECURITY OF PERSONAL DATA

  1. The Company takes care of the security and confidentiality of the User’s Personal Data. In order to prevent unauthorized access to Personal Data or unauthorized disclosure of Personal Data and to protect the available information, the Company has implemented appropriate technical and organizational security measures.
  2. The Company notes that although the Company strives to implement appropriate technical and organizational security measures, these or any other measures cannot guarantee complete security and cannot protect against all possible security breaches at any time.

CHILDREN’S PERSONAL DATA AND PRIVACY

  1. The Company’s online store and the services provided in it are intended for persons over the age of 16, therefore the Company does not knowingly collect and process Personal Data of children under the age of 16.
  2. However, the Company notes that parents have the right to submit their consent to the Company if their minor child under the age of 16 would like to use the Company’s Online Store and the opportunities it provides, for example, to purchase a product or service.
  3. If you become aware that your child has provided personal information to the Company without your consent, please contact the Company by email at diaplast@diaplast.lt.

DIRECT MARKETING

  1. The Company, with the clear consents of the User, has the right to send Direct Marketing messages to the User by e-mail and/or short “sms” message.
  2. The User has the right at any time to withdraw the consent(s) given to the Company to process his Personal Data for Direct Marketing purposes.
  3. If the User no longer wishes for his/her Personal Data to be used for Direct Marketing purposes, the User may:
    – unsubscribe from the newsletter by clicking on the “unsubscribe” link at the bottom of the newsletter.
    – write an email to diaplast@diaplast.lt or call +370 3745 4026 and indicate that he/she does not wish to receive emails and/or SMS messages;
  4. The sending of e-mails and/or SMS messages is terminated only by e-mails clearly specified by the User. email addresses and/or phone numbers.
  5. The User has the right to object to the use of his/her personal data for direct marketing purposes by informing the Company about this by e-mail diaplast@diaplast.lt

ENFORCEMENT OF THE PROVISIONS OF THE PRIVACY RULES
These Privacy Rules take effect from 2025. January 01 Any changes to the Privacy Policy will be posted and publicly visible on the Company’s Online Store website.

CONTACT DETAILS
UAB „DIAPLAST“
Legal entity code 210875290
Elektrėnų g. 10F, LT-51218 Kaunas, Lithuania
Phone +370 3745 4026
E-mail: diaplast@diaplast.lt

Privacy Policy Revision Date 2025 January 01