While carrying out its activities, Girteka Nordic UAB, legal entity code 306167443, address Laisves al. 36, Vilnius (hereinafter – Girteka Nordic), e-mail: email@example.com, collects and processes personal data and pays attention to the privacy of each person whose personal data is processed.
Girteka Nordic processes personal data in accordance with the requirements of the Lithuanian and European Union legal acts, including the General Data Protection Regulation (hereinafter – GDPR).
Girteka Nordic, respecting the privacy of each individual and the protection of personal data, makes every effort to ensure the security and confidentiality of the personal data and other information processed.
1. WHAT IS PERSONAL DATA?
Personal data is defined as any information about a natural person which could be used to directly or indirectly identify the person. For example: the name, surname, e-mail address, phone number, image and other information.
3. WHAT IS THE PROCESSING OF PERSONAL DATA?
Any action (operation) performed on or with personal data, including collection, recording, storage, modification, granting of access, requesting, transfer, etc.
4. WHAT PERSONAL DATA DOES GIRTEKA NORDIC COLLECT AND PROCESS AND FOR WHAT PURPOSES?
4.1. DIRECT MARKETING
Direct marketing performed by Girteka Nordic consists of:
- news, commercial offers and surveys by e-mail;
- news, commercial offers and surveys by phone;
The legal basis for the personal data processing is the consent given by a person for their personal data processing for direct marketing purposes or the Company’s legitimate interest, in the presence of the conditions established in the Paragraph 2 of the Article 81 of the Electronic Communications of the Republic of Lithuania.
The following personal data is provided by a person and is processed for direct marketing purposes: the person’s name, surname, e-mail, telephone number, company name.
For direct marketing purposes, the collected personal data can be processed for 2 (two) years following the receipt of consent.
The person who has given the consent always has the right to unsubscribe to all or part of the direct marketing offers at any time. This can be done by clicking on the link in the newsletter/offer received, which allows to opt out of receiving all or part of the direct marketing offers. It is also possible to unsubscribe from direct marketing offers by writing an email to firstname.lastname@example.org. Declining direct marketing offers does not have negative consequences, only that the relevant offers, news or other direct marketing information will no longer be provided in the future.
Consent withdrawal does not affect the processing and outcomes of personal data already carried out prior to the consent withdrawal or the declaration of non-consent to the direct marketing.
4.2. TELEPHONE CONVERSATIONS RECORDING
Girteka Nordic manages conversation recordings for the purpose of quality improvement, training and conflict resolution.
Telephone conversations are recorded when:
- a person calls to Girteka Nordic himself;
- Girteka Nordic employees (company representatives) call a person.
The legal basis for personal data processing is the consent to the conversation recording. The consent to record conversations is given by a person choosing to continue a conversation (when the person calls Girteka Nordic) or confirming that he or she agrees for the conversation to be recorded (when Girteka Nordic calls the person).
If a person does not agree for the conversation to be recorded, alternative means to contact Girteka Nordic are available: by e-mail email@example.com or by visiting the Girteka Nordic office.
The following personal data is processed for conversation recording purposes: the phone number, name, surname, date of the call, time of start and end of the call, content of the conversation.
When a person calls Girteka Nordic himself, the conversation records are kept for 1 (one) year.
When Girteka Nordic calls a person, the records of the conversations are kept for 2 (two) years.
4.3. VIDEO SURVEILLANCE
Girteka Nordic performs video surveillance on the Company’s territory and premises, including the employees’ workplace.
Video surveillance is carried out to ensure the protection of property rights, guarantee the security and inviolability of property, and the safety of employees.
Video recordings are processed in accordance with Article 6 of the GDPR 1 d. (f), i. y. the processing is necessary for the legitimate interests of the controller or of a third party.
Video recordings are stored for 30 calendar days.
4.4. EXAMINATION OF INQUIRIES (COMPLAINTS, SUGGESTIONS, ETC.)
Any suggestions, ideas, questions, complaints, feedback, and other inquiries can be submitted on the Girteka website www.girteka.eu.
The following personal data is processed for the purpose of submitted suggestions, ideas, questions, complaints, feedback: the name, surname, telephone number, e-mail address. For this purpose, personal data are processed on the basis of Company‘s legitimate interest.
Personal data is processed while the application is being processed.
4.5. PROCESSING THE DATA OF CUSTOMERS, SUPPLIERS, SELLERS AND/OR THEIR REPRESENTATIVES
Girteka Nordic handles customer, supplier, seller and / or their representatives’ personal data for the purposes of maintaining commercial relations, concluding and executing contracts. For these purposes, personal data is processed for the conclusion and execution of contracts on the basis of the legitimate interest of Girteka Nordic and its customers, sellers and suppliers.
Personal data processed for this purpose: the name, surname, workplace, office position, telephone number, e-mail address.
The provision of this personal data is necessary for the conclusion and execution of the contract.
Personal data is stored for 10 years from the start of data collection. The term is extended for another 5 years, if commercial relations with the mentioned customers, suppliers or sellers are continued.
5. WHO IS PERSONAL DATA PROVIDED TO?
Girteka Nordic can transfer personal data to:
- personal data managers acting on behalf of Girteka Nordic: companies providing information technology services; any other personal data managers with whom Girteka Nordic enters into agreements for personal data processing;
- data recipients: Girteka Nordic partners with whom services are provided in collaboration; other companies of the Girteka group, when it is necessary, in order to properly provide services to the data subjects, to respond to their requests or due to the organizational structure and accountability of the group; to any third parties in the cases allowed for and to the extent defined by legal acts.
6. WHAT RIGHTS DO YOU HAVE?
As a data subject, you have the following rights:
- to be aware of the processing of your personal data;
- to access the personal data we processing about you;
- to require rectification of any incorrect, inaccurate or incomplete data;
- to require limitations on data processing activities;
- the right to object to the processing of your personal data where the processing of personal data is based on a legitimate interest;
- to request the deletion of personal data (if you withdraw your consent);
- the right to data portability;
- to withdraw your consent at any time (when personal data are processed on the basis of consent);
- the right to lodge a complaint with the data protection supervisory institution, whose contacts can be found at vdai.lrv.lt.
If you intend to exercise your rights, contact Girteka Nordic by e-mail firstname.lastname@example.org, presenting your specific request in detail. Please note that in exercising your rights, you must properly verify your identity. You can confirm your identity by signing with a qualified electronic or mobile signature or by submitting your identity document (the original or a notarized copy) with the application.
Girteka Nordic will process your application and provide the information free of charge within one month. If your sent requests are perceptibly unsubstantiated or disproportionate, in particular because of their repetitive content, Girteka Nordic reserves the right to charge a reasonable fee, taking into account the administrative costs of providing the information or notifications or actions you request, or to refuse to act upon the request.
If you believe that Girteka Nordic does not properly process your personal data or does not properly exercise or does not exercise at all your rights, first of all contact Girteka Nordic, and Girteka Nordic will be ready to resolve the problems together with you. In case you are not satisfied with the response from Girteka Nordic, you also have the right to apply to the national data protection supervisory institution, for which all the information can be found at www.vdai.lrv.lt.
7. WHAT ARE YOUR DUTIES AND RESPONSIBILITIES?
You assume full responsibility for the correctness and accuracy of the personal information you provide.
In the event when any personal data or other relevant information you have provided changes, you must immediately correct the personal data or other relevant information you have provided.
8. WHAT RIGHTS DOES GIRTEKA NORDIC HAVE?
When Girteka Nordic doubts the accuracy of the provided personal data or other relevant information, it has the right to request for the data or related information to be corrected and / or supplemented
9. WHERE TO ADDRESS IF YOU HAVE QUESTIONS?
If you have any questions regarding the processing of your personal data, please contact Girteka Nordic by e-mail at email@example.com.