- The Company is engaged in the production of frame houses. For the provision of such services, the Company processes personal data on the legal bases and for the data processing purposes specified in this Policy and in the legislation applicable to the Company.
- This Policy is intended for persons who use or intend to use the services provided by the Company or who visit the website hus.lt.
Principles of Personal Data Processing
- The Company processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Union (hereinafter referred to as the Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legislation governing the processing of personal data.
- The scope of personal data processed depends on the Company’s services ordered or used and on the information provided by the website visitor who orders and/or uses the Company’s services, visits the website or registers on the website.
- The key data processing principles followed by the Company include but are not limited to the following:
- Personal data are collected only for explicit and legitimate purposes.
- Personal data are processed only in a lawful and fair manner.
- Personal data are kept up to date.
- Personal data are securely stored no longer than necessary for the purposes for which the data are processed or no longer than required by the legislation.
- Personal data are processed only by those employees of the Company who have been granted such a right according to their job functions.
- The Company processes data only when one or more of the following criteria for lawful processing are met: (i) to ensure the performance of a contract (i. e., for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract); (ii) the data subject’s consent has been obtained; (iii) where processing is necessary for compliance with a legal obligation applicable to the Company; (iv) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company; (v) where the processing of personal data is necessary for the legitimate interests of the Company or a third party (see Article 6(1) of the Regulation http://www.privacy-regulation.eu/lt/6.htm).
- When processing and storing personal data, the Company implements organisational and technical measures that ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as from against other illegal processing. Access to personal data processed by the Company shall be restricted to the Company’s employees and ancillary service providers for whom it is necessary for the performance of their job functions or the provision of services to the Company.
- Customers or potential customers, employees of the Company and other natural persons shall be responsible for ensuring the accuracy, veracity and completeness of personal data provided by them. In the event of a change in their personal data, they must inform the Company without delay. The Company will not be liable for any damage caused to a person and/or third parties as a result of his/her/their provision of incorrect and/or incomplete personal data or as a result of his/her failure to request to supplement and/or update the data which have changed.
Sources of Personal Data
- Personal data are usually obtained directly from the data subject (a customer or potential customer, employees or job candidates of the Company), who provide them as they visit the website, use the services provided by the Company, provide services to the Company, work or seek employment at the Company.
- In cases provided for by law or on the basis of consent, personal data may also be obtained from third parties (such as temporary employment agencies, enterprises providing employee search services, public authorities and registers).
- Although the customer is not obliged to provide any personal data to the Company, it may be possible that certain services will not be provided to him/her or he/she will not be able to be employed at the Company without providing his/her personal data.
Purposes of Personal Data Processing
- The Company processes personal data for the following main purposes:
- For the purposes of administration and performance of contractual relationship in order to duly fulfil its contractual obligations, maintain the relationship with suppliers, partners and customers in developing business, providing services and cooperating;
- For the provision of the services specified on the website;
- For the purposes of internal administration of the Company and for administration of its employees;
- For direct marketing and other marketing purposes;
- To fulfil the requirements laid down by waste management and other legislation and for data provision to the state authorities (data controllers);
- For the purpose of ensuring the safety of the Company’s equipment and property, the Company uses video surveillance equipment in the production and general use premises.
Provision and Recipients of Personal Data
- The Company shall have the right to transfer the personal data of its customer representatives or employees to third parties which require the processing of such customer personal data or the purposes specified in this Policy or legislation.
- The Company undertakes to transfer customer data to third parties only to the extent and only in cases where it is necessary for the provision of the respective services and/or fulfilment of the obligations laid down in the legislation. Where personal data are not necessary for the provision of a particular service, they shall not be transmitted. The Company shall only transfer personal data to the aforementioned third parties on the basis of an agreement on the provision of data or a specific piece of legislation, strictly in compliance with the requirements laid down in the legislation.
- The Company undertakes to respect the confidentiality obligation in respect of personal data of customers, employees, potential customers or employees. Personal data may be disclosed to third parties only if it is necessary for the conclusion and performance of the contract for the benefit of the data subject or for other legitimate reasons.
- The Company may provide the personal data processed to its data processors (sub-contractors) which provide IT, accounting, debt recovery or other ancillary services to the Company and process personal data on behalf of the Company. Data processors shall have the right to process personal data only in accordance with the instructions of the Company and only to the extent this is necessary in order to properly discharge the obligations laid down in a contract. The Company shall only use the processors which provide sufficient assurance that appropriate technical and organisational measures are implemented in such a way that the processing complies with the requirements of the Regulation and ensures the protection of the data subject’s rights.
- In addition, the Company may also provide customer data responding to the requests of courts, bailiffs or public authorities to the extent necessary for proper enforcement of the applicable legislation and instructions of the state authorities.
Personal Data Processing for Direct Marketing Purposes
- The Company may process the data subject’s contact details for direct marketing purposes. The consent to use personal data for direct marketing purposes can be given via e-mail firstname.lastname@example.org, by subscribing to the newsletter sent by the Company, by subscribing to the news on the Company’s social network accounts, by leaving the consent on the Company’s website (by ticking the appropriate box), by signing a questionnaire or agreement with the Company, or by otherwise informing the Company’s administration in writing. The consent for direct marketing should be voluntary, it is not a prerequisite for the contractual relationship with the Company, and it does not affect the relationship between the data subject and the Company.
- The Company may send informational messages if the person has given consent to the Company to use his/her data for direct marketing purposes and to the Company’s customers without separate consent for the marketing of similar services, provided they are given a clear, free and easily enforceable opportunity to object or refuse such use of their contact details and provided they did not initially object to such use of their data when sending each message.
- The Company may send e-mail notifications for direct marketing purposes.
- A person may withdraw his/her consent in relation to direct marketing at any time by giving notice to e-mail address email@example.com or by getting in touch with the Company by another method.
Time Limits for Personal Data Storage
- Personal data collected by the Company shall be stored in printed documents and/or electronically in the Company’s information systems. Personal data shall be processed for no longer than necessary for achieving the purposes of the processing, or for no longer than requested by the data subjects and/or provided for in the legislation. Generally, personal data are processed for 10 years after the termination of the contractual relationship.
- Although the customer may terminate the contract or refuse the Company’s services, the Company must continue to store the personal data of the customer’s representatives due to possible future claims or legal claims until the data retention periods expire.
- The Company seeks not to store any outdated or unnecessary information and to ensure that personal data and other information about clients are regularly updated, correct and destroyed in time.
Rights of Data Subjects
- The rights of a data subject shall include but shall not be limited to:
- The right to receive information on personal data processed by the Company, the sources from which and the ways in which the personal data were collected and on the basis on which they are processed;
- The right to request the Company to correct his/her personal data, suspend their processing, destroy them if the data are incorrect, incomplete or inaccurate, or if they are no longer required for the purposes for which they were collected. In this case, the data subject must submit a request, upon receipt of which the Company will verify the provided information and take the necessary actions. The accuracy and veracity of the available personal data are very important for the Company;
- The right to request the Company to destroy personal data or suspend the processing of such personal data, except their storage in case the person who has reviewed his/her personal data, finds that his/her personal data are processed unlawfully or unfairly;
- The right to object to the processing of his/her personal data when such data are processed or are intended to be processed for the purpose of direct marketing or for a legitimate interest pursued by the Company or a third party to which such personal data are provided;
- The right to withdraw his/her consent to the processing of his/her personal data for direct marketing purposes at any time;
- If the data subject is concerned about the Company’s actions (omissions) that may not comply with the requirements of this Policy or legislation, he/she may contact the Company and get free assistance.
- A person may exercise all his/her rights as a data subject by contacting the Company via
- If the issue with the Company cannot be resolved, the customer has the right to contact the State Data Protection Inspectorate (ada.lt), which is responsible for the supervision and control of personal data protection legislation.
- If a visitor of the website does not consent to cookies being recorded on his/her computer or another device, he/she may change his/her browser settings and turn off all cookies or turn them on (off) one at a time. However, the Company notes that in some cases this may slow down the browsing, limit certain website functionalities or block access to certain pages of the website. More detailed information on cookies used by the Company is available at org or www.google.com/privacy_ads.html.
- This Policy shall be governed by the law of the Republic of Lithuania and of the European Union.
- The Company reserves the right to amend Policy, therefore, visitors of the website are kindly asked to check regularly for any updates of the Policy and review the amended or new provisions.
We wish you a pleasant browsing on our website!