Privacy policy
The objective of the privacy policy – to inform you about the procedure for collecting and processing your personal data, to explain how long we store and to whom we provide the data, what rights you have as the data subject, where you can apply regarding the exercise of rights or other issues related to the processing of personal data.
We hereby inform you that the processing of your personal data is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter – the Regulation), Law on Legal Protection of Personal Data of the Republic of Lithuania as well as other legislation, regulating the protection of personal data.
We work in accordance with the following basic principles of data processing:
- personal data are collected only for explicit and legitimate purposes;
- personal data are processed fairly and lawfully;
- personal data are kept up to date;
- personal data are stored safely and for no longer than is necessary for the purposes for which the data is processed or in accordance with the legislation;
- personal data are processed only by those employees of the company who were granted such rights under their duties or by duly authorised data processors.
1. What are the terms used?
1.1. Data controller – "VIRBANTĖ" UAB (hereinafter – the Company), legal entity code - 155306353, registered office: Katkų St. 33, Panevėžys.
1.2. Data subject – any natural person whose data we process. We only collect data from the data subject which are necessary for the activities of the Company and/or when visiting, using and browsing our website (hereinafter – the Website) and so on. We ensure that the personal data which are collected and processed will be safe and used only for a specific purpose.
1.3. Personal data – any information which is directly or indirectly related to you as the data subject, whose identity is known or may directly or indirectly identified while using the appropriate data. The processing of personal data - any operation performed upon personal data (including collecting, recording, organisation, storage, editing, modification, access, submission of requests, transmission, archiving and others).
1.4. Consent – any freely and knowingly given confirmation by which you consent to the processing of your personal data for a specific purpose.
2. How we collect your personal data?
2.1. You provide the personal data yourself. You can contact our Company, use our services, leave comments, ask questions and so on.
2.2. We receive your personal data when you visit the Company’s website. You fill in forms on the Website or leave your contact details, etc.
2.3. We receive your personal data from other sources. We may lawfully receive personal data from other institutions or companies as well as publicly accessible registers and others.
3. What data we are processing and for what purposes?
3.1. By providing your personal data you agree that the collected data will be used to fulfil our obligations to you while providing our services.
3.2. We process your personal data for the following purposes:
3.2.1. Conclusion and performance of contracts between the Company and the data subject in respect of goods as well as provided and received services; saving contacts by ensuring the possibility to contact them; tax accounting and payment control. For this purpose, we process the following data:
ü name, surname.
ü Communications data (telephone number, email).
ü Workplace and position (if the information is provided by the representative of a legal entity).
ü Address of permanent residence (for VAT invoice).
ü Bank account details (if a natural person provides the services to the Company).
3.2.1. Debt management. For this purpose, we process the following data:
ü name, surname.
ü Personal number/date of birth.
ü Payment history.
ü Address of permanent residence.
ü Other information related to debt.
3.2.2. For the purpose of ensuring the security of the Company’s employees, other data subjects and assets (video surveillance). For this purpose, we process the following data:
ü video image. Video surveillance systems do not use facial recognition and/or analysis technologies, the recorded video data are not grouped or profiled according to the specific data subject (person). The data subject is informed about the video surveillance by providing information signs with the symbols of a video camera and details of the monitoring area and/or room. The field of video surveillance does not include premises where the data subject expects absolute protection of personal data.
3.2.3. For other purposes, which gives us the right to process your personal data, when you give your consent, when the processing of data is necessary due to a legitimate interest or when the relevant legislation obliges us to process data.
4. To whom we provide your personal data?
4.1. We undertake to comply with the duty of confidentiality towards you.
4.2. We may provide your personal data to our data processors, who provide services to our Company and process personal data on our behalf. The data processor has the right to process personal data only under the instructions of our Company and only to the extent necessary for the fulfilment of contractual obligations. We work only with those data processors who are able to ensure that proper technical and organizational measures will be implemented in a way, which would guarantee that the data processing complies with the requirements of the Regulation and ensures the protection of your rights.
4.3. We may also provide personal data in response to requests from a court or public authorities to the extent which is necessary to properly comply with current legislation and instructions of public authorities.
4.4. We ensure that your personal data will not be sold or rented to third parties.
5. What are the requirements for minors?
5.1. If you are younger than 14 years old, before using our services and providing your personal data you must submit a written consent from one of your representatives (father, mother, guardian) regarding the processing of your personal data.
6. How long do we store your personal data?
6.1. The personal data we collect are stored as printed documents and/or on information systems. Your personal data shall not be processed for a longer period than necessary for achieving the purposed of the processing or for a longer period than it is required by you and/or provided by legislation.
6.2. Although you may terminate the contract and refuse the services provide, we must continue to store your personal data due to the possible future requirements or legal claims until the retention period expires.
7. What are your rights?
7.1. Right to information about the processing of data.
7.2. Right of access to data which are being processed.
7.3. Right to rectification.
7.4. Right to erasure of data (“Right to be forgotten”). This right does not apply if the personal data you request to be erased are processed on another legal basis, such as the processing is necessary for the performance of the contract or it is considered as the fulfilment of an obligation under current legislation.
7.5. Right to restriction of processing.
7.6. Right to object to the processing of data.
7.7. Right to data portability. Right to data portability cannot adversely affect the rights and freedoms of others. You shall not have the right to data portability in respect of such personal data which are processed manually in filing systems, for example, paper files.
7.8. Right not to be subject to a decision solely based on automated processing, including profiling.
7.9. Right to submit a complaint concerning the processing of personal data to the State Data Protection Inspectorate.
8. We create conditions for you to exercise the above mentioned rights, except in the cases provided by the law, when it is necessary to ensure the security or defence of the state, public order, prevention, investigation, detection of criminal offences or criminal prosecution, important economic or financial interests of the state, prevention, investigation and determination of violations of integirty or professional ethics, protection of the rights and freedoms of the data subject or other persons.
9. How you can contact us?
9.1. Regarding the exercise of your rights, you can contact us:
9.1.1. by submitting a written request in person, by post, through a representative or by electronic means of communication (email: virbante2@elekta.lt);
9.1.2. orally – by phone +370 612 74 102;
9.1.3. in writing – at the address Katkų St. 33, Panevėžys.
9.2. In order to protect your data from an unauthorized disclosure, we must verify your identity after receiving your request to provide data or exercise other rights..
9.3. We will respond you no later than within a month from the date we receive your request, while taking into account the specific circumstances related to the processing of personal data. If necessary, this period may be extended for two more months, depending on the complexity and number of requests.
10. What are your responsibilities?
10.1. You will have to:
10.1.1. inform us about any changes in the provided information and data. It is important for us to have correct and valid information.
10.1.2. to provide the necessary information so that after you submit a request, we could identify you and make sure that we certainly communicate or cooperate with you (submit a personal identification document, follow legal procedure established by legislation or use electronic means of communication which would allow to properly identify the data subject). It is necessary for the protection of your personal data and the data of others, in order to ensure that the information disclosed will be only provided to you, without violating the rights of other persons.
11. Final provisions
11.1. By transferring your personal data, you agree to this Privacy Policy, understand its provisions and agree to follow them.
11.2. While developing and improving the activities of the Company, we have the right to unilaterally amend this Privacy Policy at any time. We have the right to unilaterally, partially or completely, change the Privacy Policy, by notifying it on the website www.virbante.lt.
11.3. Amendments or annexes of the Privacy Policy shall enter into force upon their notification, i.e. from the day they are placed on the website www.virbante.lt.