This privacy policy sets out how UAB Labostera collects, uses, stores and processes your personal data when you use our services and website.

The first time you visit our website, we will ask you to agree to the use of cookies under the terms set out in this notice.

Our website provides privacy control settings that give you the opportunity to decide how we process your personal data. Using privacy settings, you can limit the amount of information we collect about you through cookies.

This report will answer the following questions:

(a) how we use your data;

(b) to whom and when we provide your data;

(c) how long we keep your data;

(d) what our direct marketing policy is;

(e) what rights you have in relation to your data;

(f) how we use cookies;

(g) what else you should pay attention to.

1. How do we use your data?

1.1. In this section you will find the following information:

(a) the categories of data we process;

(b) in the event that we do not receive the data from you, information about the sources of such data;

(c) the purposes for which we process your data; and

(d) the legal basis for the processing of data.

1.2. We process information about your use of our website and the services we provide (“usage data”). Usage data may include your IP address, geographical location, browser type and version, operating system, referral source, duration of visit to the website, pages viewed, navigation paths on the website, as well as information about the periods and frequency of use of the services. We obtain this data with the help of cookies or similar technologies. We process this data in order to better understand your use of the website and the services provided on it. We process this data on the basis of legitimate interest, namely, in order to monitor and improve the website and the services provided on it.

1.3. We process your access data (“access data”). Access data may include your name, surname, e-mail address, telephone number, date of birth and other data provided by you during registration. We receive this data directly from you. We process access data for the purposes of administering the website, providing services, ensuring the security of the website and the services provided, and for communicating with you. We process this data for the purpose of performing the contract between you and us (or, at your request, taking action to conclude such a contract), as well as on the basis of legitimate interest, namely, in order to properly administer the website and our activities related to it.

1.4. We process information related to the goods we sell and the services we provide to you (“service provision data”). Service provision data may include your contact details, your payment details and details of the provision of services (information about a specific order for goods, documents necessary for the conclusion and execution of a purchase and sale agreement, correspondence for the purpose of providing services, etc.). We process service provision data in order to provide you with services and to properly maintain accounting for the provision of services. We process this data for the purpose of performing the contract between you and us (or, at your request, taking action to conclude such a contract), as well as on the basis of legitimate interest, namely, in order to properly administer the website and our activities related to it.

1.5. We process the information that you provide to us when you wish to receive our communications and newsletters by e-mail or other means of communication (“communication data”). We process this data for the purpose of sending relevant communications and newsletters. We process this data with your consent. In addition, if we have already provided you with services on our website and you do not object to this, we will also process the communication data on the basis of legitimate interest, namely, in order to maintain and improve relationships with existing customers.

1.6. We process information related to any communication you send to us (“communication data”). Communication data may include both the content of the correspondence, call, and metadata related to such communication. In the case of correspondence, the website automatically creates metadata related to your communication, which is provided using the forms on the website. We process communication data in order to contact you, as well as for accounting purposes. We process this data on the basis of legitimate interest, namely, in order to properly administer the website and our activities related to it, to ensure uniform and good quality consulting practices, and to resolve conflict situations between you and our employees.

1.7. We may process your personal data specified in this notice when it is necessary to assert, exercise or defend legal claims, whether arising from judicial, administrative or other, extrajudicial proceedings. For this purpose, we process your personal data on the basis of legitimate interest, namely, to protect and ensure our rights, yours and those of others.

1.8. We may process your personal data as specified in this notice when it is necessary to obtain or maintain insurance coverage, manage risks or for professional advice purposes. For this purpose, we process your personal data on the basis of legitimate interest, namely, to adequately protect our activities from risks.

1.9. In addition to the specific purposes specified in this section of the notice, we may also process your personal data where processing is necessary to comply with legal obligations to which we are subject, as well as where it is necessary to protect your vital interests or those of other natural persons.

2. To whom and when do we provide your data?

2.1. We may disclose your personal data to any of our group companies (including both our subsidiaries and our controlling company and all of its subsidiaries) to the extent necessary to achieve the purposes set out in this notice.
2.2. We may disclose your personal data to our insurers and professional advisers to the extent necessary to obtain or maintain insurance cover, manage risks, obtain professional advice, or assert, exercise or defend legal claims, whether arising from judicial, administrative or other, extrajudicial proceedings.
2.3. Financial transactions related to the provision of services on the website may be processed by our payment service providers. We share your service data with payment service providers only to the extent necessary for the purposes of processing your payments, money transfers and complaints and inquiries related to such payments and money transfers.
2.4. We may disclose your personal data to other service providers for the purposes of providing specific services to the extent necessary to provide such services (for example, website hosting providers, courier services, persons providing and maintaining servers, e-mail service providers). When using subcontractors, we take all necessary measures to ensure that our data processors have also implemented appropriate organizational and technical security measures and maintain the confidentiality of personal data.
2.5. In addition to the specific cases of possible disclosure of your personal data specified in this section of the notice, we may also disclose your personal data when such disclosure is necessary to comply with legal obligations to which we are subject, as well as when it is necessary to protect your vital interests or those of other natural persons.
2.6. The persons referred to in this section may be established outside the Republic of Lithuania, the European Union or the European Economic Area. In the event that we transfer your personal data to such persons, we will take all necessary measures provided for by law to ensure that your right to privacy continues to be properly protected.

3. How long do we store your data?

3.1. We process your personal data for any purpose or purposes for no longer than is necessary for that specific purpose or purposes. In any case:
(a) access data is stored for no longer than 3 (three) years from the last update of your account information or 10 (ten) years from the end of the last provision of services to you (whichever is later);
(b) service provision data is stored for no longer than 10 (ten) years from the date of completion of the service provision;
(c) message data is stored for no longer than 2 (two) years from the date of consent or, in the case of messages sent to existing customers in order to maintain and improve relationships with existing customers, 2 (two) years from the end of the provision of the relevant services;
(d) communication data is stored for a maximum of 2 (two) months from the end of the communication.
3.2. In certain cases, we are not able to specify in advance specific periods for which we will retain your personal data. For example, usage data will be retained for as long as necessary for the specific purposes for which it is processed.
3.3. Notwithstanding the terms specified above in this section of the notice, we have the right to store your personal data when such storage is necessary to comply with legal obligations to which we are subject, as well as when it is necessary to protect your vital interests or those of other natural persons.

4. Direct marketing

4.1. With your consent, we will send marketing messages by email and/or SMS to inform you about our news.
4.2. Also, if we have already provided you with services and you do not object to this, we will also inform you about our other products that may be relevant to you and information related to them.
4.3 You may opt out of receiving marketing communications at any time.
4.4. You can do this:
(a) by clicking on the relevant link in any marketing communication you receive;
(b) by contacting us by email at info@labostera.lt and labostera.lt in other via the contacts listed on the website.
4.5. After you have taken any of the above actions, we will update your profile to ensure that you no longer receive marketing communications from us in the future.
4.6. Please note that our business consists of a number of interconnected services, so it may take several days for all systems to be updated, so you may continue to receive marketing communications while your request is still being processed.
4.7. Opting out of marketing communications will not stop communications directly related to the provision of services to you.

5. Your rights

5.1. In this section of the notice, we provide you with an overview of the rights you have under data protection legislation. As the exercise of some rights is complicated, we only provide the main aspects of them in this notice. We invite you to familiarize yourself with the relevant legislation and the guidelines of the supervisory authorities in order to have complete information about these rights.
5.2. Your main rights under data protection legislation are as follows:
(a) the right to access data;
(b) the right to request correction of data (you can perform most of the actions related to this right by logging into your account, if one has been created);
(c) the right to request erasure of data;
(d) the right to restrict data processing;
(e) the right to object to data processing;
(f) the right to data portability;
(g) the right to lodge a complaint with a supervisory authority;
(h) the right to withdraw consent.
5.3. Right to access data. You have the right to obtain from us confirmation as to whether we are processing personal data concerning you, and, where processing is carried out, the right to access the personal data processed and certain additional information. This additional information includes the purposes of the data processing, the categories of personal data, and the recipients of the data. Unless this would prejudice the rights and freedoms of others, we will provide you with a copy of your personal data at your request. We will provide the first copy free of charge, but we may charge a reasonable fee for additional copies to cover administrative costs.
5.4. Right to request rectification of data. You have the right to request that inaccurate personal data about you be corrected and, taking into account the purposes of data processing, incomplete data be completed.
5.5. In certain cases, you have the right to request the erasure of your personal data. These situations include cases where: (i) the personal data are no longer necessary to achieve the purposes for which they were processed; (ii) you withdraw your consent and there is no other legal basis for the processing of the data; (iii) you object to the processing of the data based on the provisions of applicable legislation; (iv) the data are processed for the purpose of direct marketing; (v) the data are processed unlawfully. Please note that in certain cases you will not be able to exercise this right due to the applicable exceptions. Such exceptions include cases where the data are necessary to: (i) exercise the freedom of expression and information; (ii) comply with legal obligations to which we are subject; (iii) assert, exercise or defend legal claims.
5.6. In certain cases, you have the right to restrict data processing. These situations include cases where: (i) you dispute the accuracy of the data; (ii) the data is processed unlawfully, but you do not want them to be erased; (iii) we no longer need the personal data, but you need such data to assert, exercise or defend legal claims; (iv) you have objected to the processing of the data on grounds of public interest or legitimate interest, pending an assessment of the validity of your objection. In the event of restriction of the processing of your data, we will continue to store your data, but will not process it further, except: (i) with your consent; (ii) to assert, exercise or defend legal claims; (iii) to protect the rights of others; (iv) for purposes of public interest.
5.7. You have the right to object to the processing of your personal data, on grounds relating to your particular situation, where we process your personal data for purposes of public interest or on the basis of our or third party’s legitimate interests. If you object to such processing of your personal data, we will no longer process your relevant personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We may also continue to process such data for the establishment, exercise or defence of legal claims.
5.8. You have the right to object at any time to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you object to such processing of your personal data, we will no longer process your relevant personal data for this purpose.
5.9. You have the right to object to the processing of your personal data for scientific or historical research or statistical purposes. If you object to such processing of your personal data, we will no longer process your relevant personal data for this purpose unless we can demonstrate that such data are necessary for a task carried out for reasons of public interest.
5.10. Right to data portability. To the extent that our legal basis for processing your data is:
(a) consent; or
(b) the performance of the contract or actions are carried out at your request before the conclusion of the contract,
You have the right to receive your personal data in a structured, commonly used and machine-readable format. You may not exercise this right if it would adversely affect the rights and freedoms of others.
5.11. If you believe that we are violating data protection legislation when processing your personal data, you have the right to file a complaint with the State Data Protection Inspectorate, whose registered office is L. Sapiegos g. 17, LT- 10312 Vilnius, https://vdai.lrv.lt/lt/.
5.12. In cases where the legal basis for data processing is your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing of your data prior to withdrawal.
5.13. In addition to the specific measures specified in this section of the notice or on the website, you can also exercise any of the rights mentioned in this section of the notice by contacting us by email at info@labostera.lt and other contacts specified on the labostera.lt website.

6. About cookies

6.1. Cookies are small text files that act as your identifiers, which the website server sends to your browser and which are stored in your browser. Each time your browser contacts the website server, such identifier is sent back to the website server.
6.2. Cookies do not usually contain any information that could identify the user, however, your personal data that we process may be associated with information obtained and stored using cookies.
6.3. We use the following cookies:

7. How can you manage cookies?

7.1. You can delete all cookies stored on your computer, and in most browsers you can set cookies not to be stored. Please note that if cookies are disabled, you may lose access to many features that are necessary for the website to function properly. For more information about cookies, please visit https://www.allaboutcookies.org/ or https://www.aboutcookies.org/. On these websites you can find detailed information about cookies and how to disable them using your browser and how to delete cookies that are already on your computer. To delete cookies from your mobile phone, you should find the relevant information in the user manual of your phone.
7.2. Most web browsers allow users to refuse or delete cookies. The means to do so may vary depending on the specific browser and its specific version. You can also access up-to-date information on how to block or delete cookies on the websites of the browser providers themselves, for example Chrome; Firefox; Internet Explorer; Safari.
7.3. Blocking cookies may have a negative impact on the use of many websites.
7.4. If you block cookies, you will not be able to use all the features of our website.

8. Third-party websites

The website may contain links to and from the websites of partners, information sources, and related parties. Please note that the websites of other parties to which you access by selecting links on this website have their own privacy policies and we do not assume any responsibility for these privacy policies. We recommend that you familiarize yourself with the privacy notices of these other websites before providing any of your personal data to them.

9. Children's personal data

9.1. The services provided on our website are intended for persons over the age of 18.
9.2. Personal data of persons younger than the age specified in this section shall be processed only if the holder of parental responsibility for the child gives consent to do so.
9.3. If we have reasonable doubts that we are processing the data of a person who is younger than the age specified in this section without the consent of the child's parent or guardian, we will delete the data of such person from the databases.

10. Data update

Please let us know if your personal information that we process needs to be corrected or updated.

Any changes to this notice will be posted on the website and, in the event of material changes, we will notify you by email.
Updated – 2024-10-22