Privacy Policy
PRIVACY POLICY
I. GENERAL PROVISIONS
1.1 This MB Grills Center Policy (hereinafter referred to as the "Policy") governs the basic principles and rules for the processing of your personal data through the use of the website www.griliai.lt (hereinafter referred to as the "Site").
1.2 This Policy: 1.2.1. applies when you visit the Website and use the opportunity to purchase products and/or services offered on the Website;
1.2.2. is designed to protect your personal data from unauthorised use;
1.2.3. defines the obligations of the controllers of your personal data;
1.2.4. explains how and for what purposes the Website collects, uses and stores (processes) your personal data;
1.2.5. informs you of your rights as a data subject and how to exercise them.
1.3 In this Policy, the following terms are used:
1.3.1. personal data means any information about an identified (known) or identifiable natural person (data subject), whether directly or indirectly, through the use of relevant identifiers, such as name and surname, e-mail address, Internet Protocol (IP) address, and any other data or attributes.
1.3.2 Data Subject (you) - a natural person whose personal data is processed on the grounds and for the purposes set out in this Policy.
1.3.3 Data Controller - MB Grill Centre (legal entity code 304749060, registration address Europos pr. 34-47, LT-46370 Kaunas), which processes your personal data on the basis of the purposes and measures set out jointly.
1.4 In processing your personal data, we comply with the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, and other laws and legal acts regulating the processing and protection of personal data and their proper implementation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
II. BASIC PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA
2.1 The information we collect about you depends on the information you provide to us when you register to purchase products and/or services offered on the Website, agree to the use of cookies and/or subscribe to newsletters.
2.2 You are not obliged to provide us with any Personal Data when using the Website, but we may not be able to provide you with the opportunity to purchase the services and/or products offered on the Website.
2.3 The data provided by you during your use of the Website is collected and further processed jointly by the Data Controllers referred to in Clause 1.3.3 of this Policy.
2.4 We collect Personal Data that you provide when you use the Website and register to purchase products and/or services offered by us, i.e.:
2.4.1. basic information - name, surname, email address and telephone number;
2.4.2. information relating to the registration for the purchase of the products and/or services offered on the Site - the service/product to be ordered, the information on consent and non-consent to the processing of Personal Data for direct marketing purposes (when you register for our newsletter), and the related records;
2.4.3. other data about the use of the Website - data collected through the use of cookies and similar technologies related to web browsing, etc.
2.5 We collect and further process Personal Data only on the grounds and for the relevant purposes as defined in the legal acts referred to in point 1.4 of this Policy, as follows: 2.5.1. for the purpose of your registration for the purchase (order) of the services and/or products offered on the Website; 2.5.2. with your consent, where Personal Data is processed for the purpose of direct marketing;
2.6 In all of the above cases, we will only process your Personal Data to the extent necessary to achieve the relevant clearly defined and legitimate purposes, taking into account the protection of the Data Subject's privacy.
2.7 We ensure that Personal Data is processed accurately, fairly and lawfully, that it is only processed for purposes that are consistent with the purposes identified prior to the collection of the Personal Data, and that Personal Data is only processed in strict compliance with the clear and transparent requirements for processing personal data as set out in the law.
2.8 We will retain the data referred to in Clauses 2.4.1 and 2.4.2 of this Policy (other than your consent to the processing of Personal Data for direct marketing purposes) provided by you at the time of your registration on the Site for a maximum period of 6 (six) months.
2.9 We will retain the data referred to in clause 2.4.3 of this Policy for no longer than the period specified in the Cookie Policy referred to in clause 4.1 of this document.
2.10. We will not retain your Personal Data for longer than the period set out in this Policy, unless a longer retention period for such Personal Data is specified by law.
2.11 Your Personal Data is processed responsibly and securely. Data Controllers shall, both when establishing the means of processing Personal Data and during the processing itself, implement appropriate technical and organisational measures for data protection as provided for by law, in order to protect the Personal Data processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unauthorised processing. The appropriate measures shall be determined taking into account the risks arising from the processing of Personal Data.
III. CONDITIONS FOR DIRECT MARKETING (NEWSLETTER)
3.1 If you have agreed to subscribe to our newsletter, we will use your email address to send you non-individualised information about products, discounts, offers, competitions, news, surveys and other news. The information collected will only be used for the purpose of sending the newsletter.
3.2 Our newsletter is sent from the Data Controller. We may pass on your email address to third parties providing specialised services for the sole purpose of sending the newsletter to you.
3.3 Duration of processing of the data (email address): 5 years, but no longer than your consent.
3.4 You can unsubscribe from the newsletter by notifying info@griliai.lt or by clicking on the link at the bottom of the newsletter.
IV. PAGES
4.1 Data is collected using cookies and similar technologies in connection with web browsing, etc. on the basis of Cookie Policy.
4.2 You can control the use of cookies by changing your browser settings or in other ways.
V. RIGHTS OF THE DATA SUBJECT
5.1 Please be informed that as a Data Subject you have the following rights:
5.1.1. to know (be informed) about the processing of your Personal Data;
5.1.2. to be informed from what sources and what Personal Data has been collected, for what purpose it is processed, and to which recipients it is being and has been provided;
5.1.3. to request the rectification of the processing of his/her Personal Data if the data is inaccurate and/or incomplete;
5.1.4. to request the destruction of his/her Personal Data or the suspension of the processing of his/her personal domains if the Personal Data processed is excessive, if the Data Subject withdraws his/her consent or if there is any other sufficient ground for this;
5.1.5. to receive Personal Data relating to you that you have provided to the Company in a structured, commonly used and computer-readable format and to transmit that data to another data controller, or to require us to transmit such Personal Data directly to another data controller where this is technically feasible (the right to data portability).
5.2 You may contact any of the Data Controllers in relation to the rights set out in paragraph 5.1. The Data Controller authorised to exercise your rights is MB Grill Centre. MB Grill Centre, with the assistance of the designated Data Protection Officer, will provide you with the necessary information, as well as exercise your other rights as a Data Subject in accordance with the provisions of the legislation and this Policy.
5.3 You must submit a written request to any Data Controller for the provision of the information or action referred to in 5.1 of this Policy together with a document confirming your identity or, in accordance with the procedure established by law, by means of electronic communications that allow for proper identification of you who have confirmed your identity. If you contact the Data Controller in writing, you must attach a notarised copy of the identity document to your request, unless the written request is made directly to the Data Controller's employees and you can be identified at the time of the request.
VI. FINAL PROVISIONS
6.1 If you have any questions or complaints regarding the processing of Personal Data, you may contact the Data Controller, by emailing the Data Protection Officer at info@griliai.lt or you have the option of registering your complaint by calling +37067690777. You can also contact the State Data Protection Inspectorate if you have a complaint, although in the first instance we will endeavour to resolve all situations with you.
6.2 This Policy shall be reviewed and updated at least once a year or in the event of a change in the legislation governing the processing of personal data.
6.3 Data Controllers have the right to amend the rules described in this Policy in part or in full. We will inform you of the changes by posting the updated version of the Policy on the Website. For this reason, we recommend that you periodically visit our Website, where you will always find the most up-to-date version of the Policy.
Last updated: 23-05-2018
