PRIVACY POLICY OF JOLDIJA JSC

 

1. DEFINITIONS

1.1. Personal data – Any information related to a natural person - a data subject, whose identity is known or may be directly or indirectly identified using such data as a personal code, one or more features of physical, physiological, psychological, economic, cultural, or social nature.

1.2. Company – Joldija JSC, registered and operating under the laws of the Republic of Lithuania, company code: 133865639, VAT payer's code: LT338656314, registered office address / address for correspondence: Tikslo g. 10, LT-54311, Kumpiai village, Kaunas region municipality

1.3. E-shop – Online store functioning on the website.

1.4. User – a natural person visiting the Website.

1.5. Policy – This document, approved by the Company, containing basic rules for the collection, accumulation, processing, and storage of Personal Data during the use of the E-shop.

1.6. Offer - The offer of a Good presented by the Seller to the Buyer, sent to the e-mail address specified by the Buyer.

1.7. Account – The result of the Buyer's signing up at the E-shop, which creates an account that stores his/her personal data and order history.

1.8. Buyer is a natural or legal person who creates an Account on the Website or submits a Good Request, and may enter into transactions in accordance with the applicable legislation, includes duly authorized representatives of such persons. 

1.9. Good is any product that is sold on the Website. Words Good and Goods used in the Policy separately means both singular and plural.

1.10. Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

1.11. Agreement – purchase and sale agreement of Goods.

1.12. Website – Website www.joldija.lt.

1.13. Terms – Terms of Good purchase and sale in the online store of Joldija JSC www.joldija.lt, which define the rights and obligations of the Buyer and the Seller, Conditions of purchase of Goods and payment for them, procedure of Good delivery and return, liability of the parties and other provisions related to the conclusion and performance of the distance agreement and Purchase and Sale of Goods in the online store administered by the Seller.

2. GENERAL PROVISIONS

2.1. When visiting the Website, creating an account in the Eshop by submitting a Good Request (for the purpose of purchase or purchase the Goods without signing up) and thereby concluding and performing the Agreement or by subscribing to the newsletter, and also when visiting the premises of the Company, where video surveillance is performed, you entrust us with your data that we process for the purposes specified in this Policy. 

2.2. Data controller – the Company.

2.3. Details of the person responsible for the security of personal data: duomenys@joldija.lt. 

2.4. The Company respects the privacy of Users and protects the Personal Data of Users that you provide to us and which are also collected as specified in this Policy.

2.5. The Company shall take appropriate organizational and technical measures to ensure that the Personal data processed by the Company are always secure, and that the data processing operations comply with the requirements of the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Regulation, as well as other normative and internal Company legal acts.

2.6. Persons under the age of 14 (fourteen) may not provide any personal data to the Company. Persons under the age of 14 must obtain the consent of their legal representatives (parents, adoptive parents, guardians, caretakers) before submitting the personal information.

3. OBJECTIVES OF THE PERSONAL DATA PROCESSING, COLLECTED PERSONAL DATA, STORAGE DURATION AND BASIS FOR PROCESSING

3.1. Acceptance of Good requests.

3.1.1. Personal data: name, last name, e-mail address, telephone number, company represented, Good names, quantities.

3.1.2. Basis: 1) The legitimate interests of the Company. The Company deems the notice on data processing delivered and the acceptance of the Terms to be received by the Company when the User submits a Good Request to the Company. 2) The data are processed for the purpose of providing the Offer of the Good at the initiative of the User; i.e. to take action at the request of the data subject prior to the conclusion of the Agreement. (3) The processing of the data is necessary to fulfill the legal obligation applicable to the data controller. (4) The processing of data is necessary for the legitimate interests of the data controller.

3.1.3. Duration of the data processing: Good Request data is stored in the Company's database for 1 year.

3.2. Account administration and order management.

3.2.1. Personal data: Name, last name, e-mail address, telephone number, company represented, delivery and correspondence addresses, signature (if you accept the Goods yourself), date and time of purchase and delivery, Good names, quantities, purchase prices and granted discounts, method of payment for purchases and payment details; history of purchases performed through the Account.

3.2.2. Basis: 1) Company's legitimate interests (when creating an Account or submitting a Good Request without registration). We consider that your Consent to use the Account was received when you complete the actions required to create the account specified in the Terms and confirm the signing up or submit a Good Request. 2) The data are processed in order to perform the Agreement, a party of which is the data subject, or to take action at the request of the data subject prior to the conclusion of the Agreement. (3) The processing of the data is necessary to fulfill the legal obligation applicable to the data controller. (4) The processing of data is necessary for the legitimate interests of the data controller.

3.2.3. Duration of the data processing: Your account will be active 2 years after your last login into Account. Once this deadline has expired, the Account and its data will be deleted. Buyers have the option to close their Account at any time or to ask for help from the Company by e-mail at duomenys@joldija.lt.

3.2.4. After purchasing the Goods through the Website, the data of individual purchases (including the information about the Buyer specified in the invoice) are stored in the Company's accounting records for 10 years.

3.2.5. Depending on the method of Good delivery chosen by the Buyer, the data related to the delivery (the desired delivery time, address, other information relevant to the courier) is transferred to the Company Partner that performs the delivery of the Goods. 

3.2.6. Depending on the method of payment, the payment information is transferred to the partner administering the payment service.

3.2.7. If you have chosen on the Website to receive personal offers, we will not only process your personal data for this purpose, but will further analyze and use the history of your purchase data in order to know you better. We get the chance to get to know you, tailor your offers to your needs, and provide other benefits dedicated just for you. For these purposes, we use automated data analysis and decision making, including profiling. We group and analyze your particulars and/or purchase data and provide you with relevant and useful suggestions and other information, depending on your shopping habits and / or other features (e.g, location, specific purchase transactions, etc.). The processing of such data is carried out as long as your consent to the processing of data when you provide you personal data is in effect. Please note that you may opt out at any time by clicking on the special link in the newsletter.

3.3. Direct marketing (sending of newsletters).

3.3.1. Personal data: name, last name, e-mail address, company represented.

3.3.2. Basis: consent of a potential customer.

3.3.3. Time frame: 2 years. Once this deadline has expired, newsletters will no longer be sent without the renewal of a subscription.

3.3.4. Persons, who give their consent for direct marketing shall have the right to withdraw it at any time by notifying about the withdrawal by e-mail duomenys@joldija.lt, or by clicking on the link at the bottom of the newsletter.

3.3.5. Persons, who are younger than 14 years of age may not provide any personal data through the Website for marketing purposes. A person who is younger than 14 years of age must obtain and submit to the company consent from parents or other lawful guardians, prior to submitting personal information for marketing purposes.

3.4. Selection of employees, administration of job applicant database.

3.4.1. Personal data: 1) general information of the applicant – name, date of birth, place of residence or address of applicant's residence; email address and/or telephone number, information on the applicant's work experience (workplace, working period, position, responsibilities and/or achievements), information on the applicant's education (educational institution, period of studies, education and/or qualification acquired), information on the improvement of qualification (completed training, certificates obtained), information on the language proficiency, information technology, driving skills, other competencies, other information you provide in your CV, cover letter or other application documents; 2) references, employers' feedback - the person referring the applicant or providing a feedback, his contact information, the content of the reference or the feedback; 3) information of the applicant's evaluation - a summary of the interview with the applicant, the insights and opinion of the person(s) performing the selection, the results of the applicant's testing.

3.4.2. Basis: Consent.

3.4.3. Time frame: If you refuse to express your individual consent to the processing of your personal data after the selection of candidates, we undertake to delete and/or destroy your personal data within 5 (five) business days after the agreement is signed with the selected applicant.

3.5. Video Surveillance.

3.5.1. Personal Data: image data of the persons who entered the area of video surveillance cameras, as well as date, time and location of video recording.

3.5.2. Basis: Company's legitimate interests and protection of essential interests, including health and life.

3.5.3. Time frame: Surveillance videos are stored no longer than 60 (sixty) calendar days, except in the cases listed below when videos are stored for longer periods.

3.5.4. The Company organizes video surveillance in such a way that the area of surveillance would include only the necessary area (room, part of the room). Video surveillance in premises and/or areas for private use by individuals.

3.5.5. Videos may only be used to investigate suspected crimes and administrative offenses, or to prove and investigate damage done to the property of the Company by Company's employees, service providers, or third parties, and may be transferred only to those persons who have the right to receive such data in accordance with the law. Video records may be reviewed and, if necessary, handed over to law enforcement authorities upon written request by the authorities of law enforcement. When there is reason to believe that an offense or other illegal activity is recorded in the surveillance material, the required video data (episodes) are transferred to secure media and stored the entire time while there is an objective need.

4. COOKIES

4.1. When you visit the Website, we aim to provide such content and features that are tailored specifically to the User needs. To this end, the Website uses cookies – small elements of information stored in the Users' web browser. They are needed so that the Company could recognize you as a previous visitor of the Website, to preserve the history of your visits to the Website and to customize the content accordingly. Cookies also help to ensure the smooth running of the Website, allow to monitor the duration and frequency of Website visits, and collect statistical information about the number of Website visitors. By analyzing this data, the Company has the opportunity to improve the Website and make it more convenient for your use.

4.2. Cookies are used to make it easier for you to remember your settings, make it easier to log into your Account, they also allow you find the items you have added to your shopping basket or for which you have submitted a Good Request when you return.

4.3. You have the right to choose whether you want to accept cookies. You may give your consent to use cookies in the following ways: a) by not deleting them and / or not changing your web browser settings in a way that it would not accept cookies; b) by clicking "I Accept" tag in the Website notification about Cookies;

4.4. Information about cookies used on the Website:

a) PHPSESSID cookie

Cookie description / purpose:  A cookie necessary for the Website to function, dedicated for the implementation of Website's functionality.
Moment of cookie creation: During the access of the Website.
Cookies expiration time:  Till the closing of the Website window.
Data used: Unique ID number, saves data that has been entered into fields and forms. You can also save the contents of the Shopping Cart.

b) PrestaShop-da0985939d9ca385b6fc0e2865bb6094 cookie

Cookie description / purpose:  A cookie that is required for the Website to function, create User's ID, and thereby enabling the distinguishing of unique Users on the Website.
Moment of cookie creation: During the access of the Website.
Cookies expiration time:  2 years.
Data used: No data is collected or used.

c) _ga cookie

Cookie description / purpose:  A cookie, which uses the Google Analytics Tool to evaluate the purpose of the User Visit, prepare reports on Website Activity, and improve the User Experience while visiting the Website.
Moment of cookie creation: During the access of the Website.
Cookies expiration time:  2 years.
Data used: Unique ID number of random characters, saves data that has been entered into fields and forms. You can also save the contents of the Shopping Cart.

d) _Gid cookie

Cookie description / purpose: 

A cookie used to collect Google Analytics statistical information about the Website traffic (collects the information about the browser and computer that are used, visits, and time spent)

Moment of cookie creation: During the access of the Website.
Cookies expiration time:  1 day.
Data used: Unique ID number for random characters.

e) _hjid cookie

Cookie description / purpose: 

Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

Moment of cookie creation: During the access of the Website.
Cookies expiration time:  1 Years
Data used: Unique ID number for random characters.

f) _hjIncludedInSample cookie

Cookie description / purpose: 

Hotjar cookie. This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels.

Moment of cookie creation: During the access of the Website.
Cookies expiration time:  1 Years
Data used: Unique ID number for random characters.

5. PROVISION OF DATA TO THIRD PARTIES

5.1. Your data may be transferred to third parties in the European Union for processing, they assist in the performance of the Agreements and the administration of the Website. Such persons may include database software providers, providers of database administration services, providers of data center, hosting and cloud services, direct marketing service providers, providers of market research or business analytics, or accounting services, auditors, legal and financial advisors, etc., partners employed for the purpose of executing a specific order (courier service, person providing payment administration service, etc.). 

5.2. In each case, the data processor shall only be provided with the data necessary for the performance of a specific order or for the provision of a specific service.

5.3. The data processors employed by the Company may process personal data exclusively in accordance with the instructions of the Company and may not use this data for other purposes or transfer them to other persons without our consent. In addition, they must ensure the security of your data in accordance with applicable legislation and written agreements signed with us.

5.4. Data may also be provided to competent authorities or law enforcement agencies, or to persons performing statutory functions, such as police or supervisory authorities, but only upon request and only when required by applicable law or in the cases and procedures specified in the legislation; in order to ensure our rights, safety of our customers, employees and resources, and to file, present, and defend legal claims.

5.5. If the Company uses a website analysis service (such as Google Analytics), which is used to determine how you use the information provided on the Website, we may exchange your anonymised data with third parties, who rely on this information to evaluate how the Website is being used as they prepare reports for website operators on the activity of the website and during provision of other services related to the use of the website, the Internet and the mobile application. 

5.6. Personal data may be transferred and processed outside the EU/EEA, where the transfer is necessary for the conclusion and performance of the Agreement or after the the Buyer or the User gives their consent, as well as if appropriate safeguards are implemented: a) an agreement with the standard conditions accepted by the EU Commission or other approved paragraphs, codes of conduct, certificates, etc. approved under the Regulation; b) the non-EU/EEA country, where the Recipient of the Personal Data is located, shall ensure an adequate level of protection of personal data under a decision of the EU Commission; c) the Recipient is certified in accordance with the requirements of the Data Protection Agreement between the EU and the United States of America (USA) (also known as the "Privacy Shield") (applicable to recipients in the USA). In the absence of any of the appropriate safeguards mentioned above, the Company may rely on the exceptions provided for in article 49 of the Regulation, but they may only be applied in cases strictly defined in the Regulation.

6. RIGHTS OF THE DATA SUBJECTS

6.1. The data subject, whose data is processed in the Company's business, has the following rights:

6.1.1. to know (to be informed) about the processing of own data (right to know);

6.1.2. to familiarise with own data and how it is processed (right of access);

6.1.3. to require correction or based on the purposes of the personal data processing, to supplement the incomplete Personal data (right to correction);

6.1.4. to destroy own data (the right to be forgotten);

6.1.5. to demand the Company to limit the processing of Personal Data for one of the legitimate reasons (right to restrict);

6.1.6. the right to transfer of data (right of transfer);

6.1.7. the right to object to the processing of its Personal data or to revoke its consent to process the Personal data at any time to process the Personal Data for one or more specific purposes without affecting the legality of the consent-based data processing prior to the revocation of consent;

6.1.8. to submit a complaint regarding the processing of personal data to the State Data Protection Inspectorate (www.ada.lt), believing that the Company processes the Personal data by violating legal requirements. 

7. FINAL PROVISIONS

 

7.1. For all issues related to the data processing and exercising of the data subject rights, please contact the Company: Tikslo g. 10, LT-54311, Kumpiai village, Kaunas region municipality; email: duomenys@joldija.lt.

7.2. This edition of the Policy becomes effective from 31 January 2019, the Company may update or amend this Policy at any time. Such updated or amended Policy will come into effect from the date of their publication on the Website.