Privacy policy

1. Basic concepts

1.1. Data controller - UAB "Detra AMA", legal entity code 302760396, registered office address Gėlyno g. 14, LT-68100 Aleksandravo k., Marijampolė sav., Republic of Lithuania, the data are collected and stored in the Register of Legal Entities.
1.2. Data Subject - a legal entity, a legal person of legal age, i.e. a natural person aged 18 (eighteen) and over, or a minor legal person with the consent of parents or guardians who uses the Services of the Data Controller's Online Shop, whose personal data are processed by the Data Controller in accordance with this Privacy Policy and the laws of the Republic of Lithuania and other legal acts regulating the legal protection of personal data.
1.3. Online Shop - the Data Controller's online shop at www.detraama.lt.
1.4. Services - all services provided by the Data Controller.
1.5. Personal Data - any information relating to a natural or legal person - Data Subject.
1.6. Processing of personal data means any operation performed on personal data, such as collection, recording, accumulation, storage, classification, grouping, aggregation, alteration (addition or rectification), provision, disclosure, use, logical and/or arithmetical operations, retrieval, dissemination, destruction, or any other operation or set of operations.
1.7. Partner - a legal entity that provides services to the Data Controller in connection with the Data Controller's activities, or sells goods to the Data Controller, or undertakes joint projects with the Data Controller, including, but not limited to, marketing promotions, joint sales campaigns, loyalty programmes, etc.
1.8. Cookie means a file with a unique identification number that is transmitted from the Online Shop to the hard drive of a visitor's computer in order for the Online Shop administrator to be able to distinguish between the visitor's computer and to view the visitor's activity in the Online Shop, as well as to maintain the proper functionality of the Online Shop.
1.9. Direct Marketing means activities designed to offer goods or services to persons by mail, telephone or other direct means and/or to seek their opinion on the goods or services offered.
1.10. Privacy Policy - shall mean this document setting out the principles and rules for the processing of Personal Data when using the services of the Online Shop.
1.11. Account - means the basic login data of the Data Subject to the Online Shop, consisting of a single e-mail address and a Password.
1.12. Password means a unique combination of numbers, letters, or numbers and letters or other symbols created by the Data Subject and used to log in to the Online Shop.

2. General Provisions

2.1. The Data Subject authorises the Data Controller to carry out all processing of Personal Data to the extent and for the purposes set out in this Privacy Policy.
2.2. Personal Data shall be processed in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the Regulation) of the European Union, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and any other legal acts regulating the protection of personal data.
2.3. The Data Controller shall process Personal Data in accordance with the following principles:
2.3.1. Personal Data shall be collected only for clearly defined and legitimate purposes;
2.3.2. Personal Data shall be processed accurately, fairly and lawfully;
2.3.3. Personal Data shall be adequate and shall be limited to the extent necessary for their collection and further processing;
2.3.4. Personal Data is kept up to date;
2.3.5. Personal Data is stored securely and for no longer than required by the stated purposes of the processing or by law;
2.3.6. All information about Personal Data is confidential;
2.3.7. Personal Data is only processed by the Controller's employees who are authorised to process it by virtue of their job function or by duly authorised data processors.
2.3.8. The Customer's Personal Data and personal information will not be used for unlawful purposes.
2.4. The Data Subject shall be deemed to have read and accepted the current version of the Privacy Policy when making a purchase in the Online Shop. If the Data Subject disagrees with any part of the Privacy Policy or the Privacy Policy, in such case the Data Subject shall not place an order and shall not purchase the product in the Online Shop.
2.5. The Privacy Policy is available on the Online Shop and can be printed at any time. The Privacy Policy may be amended, supplemented or updated at the discretion of the Data Controller. The latest version of the Privacy Policy is published in the Online Shop.
2.6. The Data Subject may place an order in the Online Shop without registering, or through his/her Account after registering in the Online Shop.
2.7. When using the Services, as well as when making purchases in the Online Shop, the Data Subject must always provide accurate Personal Data to the Online Shop and shall be responsible for its correctness.
2.8. The Data Subject shall have the right to modify and supplement the Personal Data in the Account at any time, or to request the Controller to delete Personal Data.
2.9. The Data Subject must not disclose the Password to third parties and must keep it secure, otherwise the Data Subject shall bear all the related liability.

3. Collection, use, correction and storage of Personal Data

3.1. The Data Controller respects the right to privacy of each Data Subject. The Personal Data of the Data Subject (i.e. name, surname, company name, company code, company VAT number, email address, telephone number, delivery address, age/year of birth, payment details for the goods/services (bank account number, method of payment, etc.), purchase history, and, with the consent of the Data Subject, age, gender, date of birth, area of residence are collected and processed for the following purposes:
3.1.1. for the purpose of electronic commerce, the following Personal Data is processed: name, surname, company name, company code, company VAT number, place of residence/place of business (address), purchase history (types of goods purchased, amounts spent), telephone number;
3.1.2. For the purpose of direct marketing, the following Personal Data is processed: name, surname, company name, date of birth, place of residence/place of business (address), telephone number, e-mail address;
3.1.3. For the purpose of administration of discount cards, loyalty programmes, the following Personal Data is processed: e-mail address, telephone number, delivery address of the goods/service, date of birth, IP address.
3.1.4. for the purpose of administering electronic enquiries, for the purpose of direct marketing, the following Personal Data is processed: name, surname, company name, place of residence/place of business (address), gender, telephone number, email address;
3.2. Both when registering for the first time on the Online Shop and when placing each order, the Data Subject may give consent to the processing of his or her Personal Data for the purpose of Direct Marketing. If the Data Subject, having consented to the processing of his/her Personal Data for the purpose of Direct Marketing, including the receipt of Direct Marketing communications (e-newsletters with offers and articles, SMS messages), subsequently does not do so again and informs the Data Controller in accordance with the procedure set out below, the Data Controller will cease to process his/her Personal Data for the purpose of Direct Marketing, and will no longer send the Data Subject any electronic newsletters, except for the information relating to the order of the Data Subject.
3.3. The Customer shall have the right to withdraw its consent to the Data Controller to process the Data Subject's Personal Data for the purpose of Direct Marketing at any time, as set out in clause 3.2., by providing the Data Controller with a notice to this effect by email at info@detraama.lt, and by clearly stating that it is withdrawing its consent to the use of the Data Subject's Personal Data for the purpose of Direct Marketing.
3.4. The Data Subject shall have the following rights in relation to the processing of the Data Subject's Personal Data:
3.4.1. Right to receive information about the processing of the data;
3.4.2. Right of access to the processed data;
3.4.3. Right to request rectification of the data;
3.4.4. The right to request the erasure of data (Right to be forgotten). This right does not apply if the personal data for which erasure is requested is also processed on another legal basis, such as processing necessary for the performance of a contract or for the performance of an obligation under applicable law;
3.4.5. Right to restrict processing;
3.4.6. Right to object to processing;
3.4.7. Right to data portability. The right to data portability shall not adversely affect the rights and freedoms of others. The data subject does not have the right to data portability in respect of personal data processed in non-automatically structured files, such as paper files;
3.4.8. The right to lodge a complaint concerning the processing of personal data with the State Data Protection Inspectorate;
3.4.9. The Data Controller must enable the Data Subject to exercise the above-mentioned rights of the Data Subject, except in cases provided for by law, where it is necessary to ensure national security or defence, public order, the prevention, investigation, detection or prosecution of criminal offences, the protection of the State's important economic or financial interests, the prevention, investigation and detection of breaches of official or professional ethics, or the protection of the Data Subject's rights and freedoms or the rights and freedoms of other persons;
3.5. In order to protect the data against unauthorised disclosure, the Data Controller shall, upon receipt of a request from the Data Subject to provide data or to exercise other rights, verify the identity of the Data Subject.
3.6. The Data Controller's response to the Data Subject shall be provided no later than one month from the date of receipt of the Data Subject's request, taking into account the specific circumstances of the processing of personal data. This period may be extended by a further two months, if necessary, depending on the complexity and number of requests.
3.7. The Personal Data of the Data Subject shall not be disclosed to third parties, except in the following cases:
3.7.1. When the consent of the Data Subject has been obtained, as specified in this Privacy Policy;
3.7.2. Personal Data for e-commerce purposes are provided to Partners providing services to the Data Controller in connection with the activities carried out by the Controller;
3.7.3. To Partners belonging to the same group of companies located in a European Union Member State, for the purposes of IT solutions, financial/accounting;
3.7.4. To competent authorities in the cases provided for by the laws and regulations of the Republic of Lithuania;
3.8. The Data Subject agrees to the transfer of his/her Personal Data to the Partners in the execution of the order placed by the Data Subject on the Online Store, as well as to the Data Controller's provision of the Services to the Data Subject, and to the Data Controller's Partners as referred to in Clause 3.7.
3.9. The Data Controller shall implement organisational and technical measures to protect Personal Data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing. The level of Personal Data protection measures applied by the Data Controller shall comply with the requirements of the law of the Republic of Lithuania.
3.10. In order for the Data Controller to be able to offer the Data Subject full services in the Online Shop, information (Cookies) is stored on the Data Subject's computer (device), which is used for the identification of the Data Subject as a previous user of the Online Shop, for the collection of the statistics of the Online Shop's attendance, information about the shopping cart. The Data Subject may at any time delete some or all of the Cookies stored.

4. Storage period of Personal Data

4.1. Personal Data collected by the Data Controller is stored in printed documents and/or in the Data Controller's information systems. Personal Data shall not be processed for longer than is necessary to achieve the purposes of the processing or for longer than is required by the Data Subjects and/or provided for by law.
4.2. Although the Data Subject may terminate the contract and refuse the services of the Data Controller, the Data Controller shall remain obliged to retain the Data Subject's data for any claims or legal claims that may arise in the future, until such time as the data retention periods have expired.

5. Use of Cookies

5.1. The Data Controller uses cookies in the Online Shop to improve and enhance the experience of customers and visitors to the Online Shop.
5.2. The following types of cookies may be used by the Data Controller in the Online Shop:
5.2.1. Technical (essential) cookies - they help the visitor to the Online Shop to display the Shop and its content, to ensure the functionality of the Online Shop, to create an account, to log in to the account and to process the Data Subject's orders. Technical cookies are necessary for the proper functionality of the Online Shop and their use does not require the consent of the Online Shop visitor.
5.2.2. Functional cookies - used to help the Online Shop visitor use the Data Controller's Online Shop, to remember the choices and preferences made during the browsing process. Functional cookies are not necessary for the full functioning of the Online Shops, but they add functionality and improve the Data Subject's experience of using the Data Controller's Online Shop.
5.2.3. Analytical cookies - used to obtain information about how website visitors use the Data Controller's Online Shop. This is necessary to enable us to optimise and improve the Online Shop. With the help of analytical cookies, we may collect data about the web pages you have viewed, the pages you came from, the emails you opened and responded to, and date and time information. This also means that we may use information about you and your use of the Online Shop, such as the frequency of your visit, the number of clicks on a particular page, the search terms used, etc.
5.2.4. Commercial (advertising) cookies - used to provide you with advertisements that are more relevant to you and more in line with your interests, to limit the number of times you may see the same advertisement on the website and to measure the effectiveness of an advertising campaign by tracking your clicks. Advertisements may not be displayed on our website and may be displayed on other pages even after you leave our website. These cookies collect information for marketing purposes and track your activity not only on our website but also on other web pages.
5.3. Access to statistical data about visitors to the Data Controller's Online Shop is available to the Data Controller's employees, who are responsible for analysing this data and improving the Online Shop.
5.4. Access to technical records may also be available to the Data Controller's partners who provide content management tools for the Data Controller's Online Shop.
5.5. The Data Controller shall keep the data collected by cookies for no longer than is necessary to achieve the purposes of the processing or for no longer than is required by the Data Subjects and/or provided for by law.
5.6. Most browsers accept cookies by default. However, you can change your browser settings to inform you when a cookie is activated or updated, to select which cookies are allowed and which are not allowed, or to set all cookies to be blocked.
5.7. Please note that if you block some or all cookies, you may lose access to certain features, personalised (customised) settings and services of the Online Shop.
5.8. To learn more about cookies, such as how to manage or delete them, you can visit www.allaboutcookies.org.

6. Final Provisions

6.1. By providing Personal Data to the Data Controller, the Data Subject accepts this Privacy Policy, understands its provisions and agrees to comply with it.
6.2. The Data Controller has the right to amend, supplement the Privacy Policy in whole or in part. Additions or amendments to the Privacy Policy shall come into force from the date of their publication, i.e. from the date on which they are published in the Online Shop.