We realise the special importance of protecting your personal data; therefore, we only collect and process the data which is necessary for our activities. We process personal data in a lawful, transparent and fair manner, for predefined purposes and only to the extent that is necessary for the achievement of those purposes. When processing personal data, we seek to make sure it is accurate, safe, confidential, properly stored and protected.

When processing your personal data, we comply with the requirements of the General Personal Data Protection Regulation (the “GDPR”) as well as other requirements for the processing of personal data set forth in other legal acts.

1. WHAT IS THIS DOCUMENT?

1.1. This Privacy Policy (the “Privacy Policy”) sets forth the privacy terms for your use of the website baltic-flax.com (the “Website”).
1.2. Please read this Privacy Policy carefully to understand how we will process your personal data, where we receive it from and what rights you have as a data subject.
1.3. The Privacy Policy applies to anyone who visits the Website, regardless of whether you have registered on the Website or not, and it also applies to the actions that you may undertake on the Website. If you use the Website, then you will have read and agreed to this Privacy Policy. If you do not agree to the Privacy Policy, you are not authorised to use the Website.
1.4. The term “personal data” used in this Privacy Policy includes any information that could help to indicate your identity, either directly or indirectly. Personal data consists of your surname, name, date of birth, postal or e-mail address, location data and Internet identifier, as well as your features, etc.

2. WHO ARE WE?

2.1. The Website is managed and administered by UAB Baltic Flax, Algirdo str. 40C, Vilnius, Lithuania.
2.2. Based on the provisions of the law, we are your personal data controller.

3. WHAT PRINCIPLES DO WE ADHERE TO?

3.1. In processing your personal data, we:

a) will comply with the requirements of the applicable legislation, including the GDPR;
b) will process your personal data in a lawful, fair and transparent manner;
c) will collect your personal data for specified, clearly defined and legitimate purposes, and will not continue to process it in a way that is incompatible with those purposes, except to the extent permitted by law;
d) will take all reasonable steps to ensure that any personal data that is not accurate or complete is immediately corrected, supplemented, suspended or destroyed;
e) will keep your personal data in such a way that your identity could be determined for no longer than is necessary for the purposes for which the personal data is being processed;
f) will not transfer your personal data to third parties and will not release it, except as provided for in the Privacy Policy or in the cases allowed by law;
g) will ensure that your personal data is processed in such a way so as to ensure the proper security of the personal data, including protection against unauthorised processing or unlawful processing of the data, and accidental losses, destruction or damage, by applying the appropriate technical or organisational measures.

4. HOW WE COLLECT YOUR PERSONAL DATA?

4.1. We receive your personal data when:

a) you submit it to us (e.g. when you register with our website, contact our customer support, etc.)
b) you browse our Website and we generate data about your behaviour, visited pages, exit URLs, etc.
c) we receive your personal data from our partners and other parties (e.g. we might receive your personal data from social networks, payment providers, couriers, etc.).

4.2. You may also provide us with your personal data by writing to us, or by contacting our customer service team by telephone when submitting your complaints about the Website or our services. If you contact us in writing or by e-mail or telephone, we will store the correspondence or audio record (conversation record) data.

5. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

5.1. We may process your personal data for the following purposes:

a) to offer and sell our goods and provide our services to you;
b) to deliver the goods that you purchased;
c) to conduct and manage discounts, contests, quizzes, games and similar matters;
d) to ensure the functionality of the Website, to improve it, and to offer you better and customised services;
e) to provide you with offers and information about our goods and (or) the services related to our affiliates and partners;
f) to provide a high-quality professional service, as well as for its improvement, assurance, and for the purpose of resolving potential or emerging disputes.

5.2. We will not request and process specific categories of personal data that will reveal your racial or ethnic origin, political opinions, religious or philosophical beliefs or membership in trade unions, as well as health data or data about your sexual life and sexual orientation. In case you accidentally or unintentionally submit this data to us on the Website or otherwise when using the Website, such data will be deemed to have been provided with your consent. Accordingly, we will process this data in conjunction with your other data that has been provided according to Clause 5.1. of the Privacy Policy.
5.3. We do not process your personal data for any other purposes which are not compatible with those listed above.

6. HOW AND WHAT TYPES OF PERSONAL DATA DO WE PROCESS?

6.1. We will process the following types of personal data:

a) to offer and sell our goods and provide our services to you: Name, Phone Number, Address, E-Mail address, I.P. Address, Location;
b) to deliver the goods that you purchased: Name, Phone Number, Address, E-Mail address, Work Name and Address (if delivered to your work), I.P. Address, Location;
c) to conduct and manage discounts, contests, quizzes, games and similar matters: Name, E-Mail Address, Location, I.P. Address;
d) to ensure the functionality of the Website, to improve it, and to offer you better and customised services: [Name, E-Mail, I.P. Address, Location;
e) to provide you with offers and information about our goods and (or) the services related to our affiliates and partners: Name, E-Mail, I.P. Address, Location;
f) to provide a high-quality professional service, as well as for its improvement, assurance, and for the purpose of resolving potential or emerging disputes: Name, E-Mail, I.P. Address, Location.

6.2. We may combine the personal data we have received from you with data from our own collection that is received from other public or accessible sources (e.g. we may combine your personal data with the data obtained through Website cookies, or with legally obtained data from third parties). By enforcing your rights, you will always be able to request corrections to your personal data.

7. DO WE USE YOUR PERSONAL DATA FOR DIRECT MARKETING?

7.1. Yes, we may use your personal data for direct marketing purposes, in order to provide you with offers and information about our goods and (or) services, or those of our affiliates and partners, that we believe may be of interest to you. However, we will only use your personal data for this purpose with your additional consent.
7.2. We process the following personal data for direct marketing purposes: name, e-mail address, location, I.P. Address.
7.3. You can choose whether or not you allow us to use your personal data for direct marketing purposes. You can do this:

a) by checking the acceptance text “I want to receive newsletters by e-mail”, or by not checking it, when registering on the Website, making purchase or sending a message via contact form;
b) by entering your e-mail address in to newsletter sign up form on the Website and clicking “Subscribe”.

7.4. We may combine the available information we have about you with the information available to third parties, in order to provide you with offers.
7.5. If you give us consent to use your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of our webpages, advertising and market research, and for other marketing and sales goals. In such cases, we will use your de-personalised data.
7.6. Even if you have given consent to the processing of your personal data for direct marketing purposes, you can easily withdraw this consent at any time for all or part of the related personal data processing activities. To do this, you can:

a) notify us of your refusal in the manner indicated in the messages and (or) offers that are received electronically (e.g. by clicking on the “unsubscribe” link in the newsletter, etc.); or
b) send us a request to the e-mail address indicated in this Privacy Policy. The request must clearly indicate your full name and other registration details (if any). If you make a request to withdraw your consent in this way, we may ask for proof of identity.

7.7. If you withdraw your consent, we will endeavour to terminate the processing of your personal data for direct marketing purposes as soon as possible.
7.8. The withdrawal of your consent does not automatically oblige us to destroy your personal data or to provide you with information about the personal data we are processing; therefore, we require you to specify such a request separately for the performance of these actions.

8. HOW DO WE USE COOKIES?

8.1. We collect information about you by using cookies and similar technologies. Cookies are small files that are temporarily stored on your device’s hard drive and allow us to recognise you through your visits to the Website, save your personal browsing history and options, customise your content, speed up your Website searches, create a comfortable and friendly Website, and deliver it more efficiently and reliably. The use of Cookies is a common practice in Internet browsing, which facilitates the use of a website.
8.2. With cookies, we can collect the following types of information: IP address, browser type, browser resolution, device type, demographic details, location, and, if you have visited the Website from a third-party webpage, the URL link of that webpage.
8.3. We use the cookie information for the following purposes:

a) to ensure the functionalities of the Website (e.g. so that you can use the Website’s personalisation features);
b) to improve and develop the Website so that it better suits your needs;
c) for the development of services and analyses of the Website usage;
d) for the orientation of targeted marketing.

8.4. We may combine the information obtained through the use of cookies with the information received from you by other means (e.g. information on the use of the Website may be combined with the personal data submitted by you).
8.5. The Website may use the following types of cookies:

a) technical cookies – cookies that are essential for the functioning of the Website;
b) functional cookies – cookies that are not essential to the functioning of the Website, but that significantly improve its performance, quality and user experience;
c) analytical cookies – cookies that are used to generate a statistical analysis of the Website visitors’ navigation methods; the data collected by these cookies is used anonymously;
d) targeted or promotional cookies – cookies that are used to show you offers or other information that might interest you;
e) social network cookies – cookies that are necessary to use the Website information in your social network profile.

8.6. All of the information about the cookies used on the Website, their purpose and validity, and the data used is provided in the table below:

Google Analytics Cookies

Cookie Name Description
_ga Used to distinguish users.
_gid Used to distinguish users.
_gat Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>.
_gac_<property-id> Contains campaign related information for the user. If you have linked your Google Analytics and AdWords accounts, AdWords website conversion tags will read this cookie unless you opt-out.
__utma Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics.
__utmt Used to throttle request rate.
__utmb Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics.
__utmc Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.
__utmz Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics.
__utmv Used to store visitor-level custom variable data. This cookie is created when a developer uses the _setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics.

Language Cookie

pll_language Used to remember the language selected by the user when he comes back to visit again the website. This cookie is also used to get the language information when not available in another way. Examples are ajax requests or the login page. The language code of the last browsed page.

Third Party Cookies

__cfduid Used to identify individual clients behind a shared IP address and apply security settings on a per-client basis.

8.7. You can give consent to use cookies in the following ways:
a) without deleting them and (or) by not changing your Internet browser settings so that they do not accept cookies;
b) by clicking on the “I Accept” button on the link (bar) for the cookie on the Website;
8.8. You may withdraw consent to use cookies issued to us at any time. You can do this by changing your Internet browser settings so that the browser does not accept cookies. The way to do this will depend on your operating system and Internet browser. For detailed information on cookies, their use and their withdrawal, visit http://AllAboutCookies.org or http://google.com/privacy_ads.html.
8.9. In some cases, in particular in the case of the deactivation of technical and functional cookies, or a discrepancy or deletion of the cookies, this may slow down the speed of browsing the Internet, restrict certain Website features, and block access to the Website.

9. TO WHOM DO WE PROVIDE YOUR PERSONAL DATA?

9.1. Your personal data will not be sold, disclosed or otherwise unlawfully transferred to third parties, or used for purposes other than the purposes for which the data has been collected. We will not transfer your personal data in any other way, except in accordance with the ways stated this Privacy Policy. However, we reserve the right to provide information about you if we are required to do so in accordance with the law, or if we are required to do so by law enforcement agencies or prosecuting authorities.
9.2. We may transfer your personal data to companies that will help us carry out our business activities, as well as for help with direct marketing. In the case of such partners, we require that your data be processed only in accordance with our instructions and in compliance with the personal data protection laws.
9.3. We may disclose the following types of data about you to the following third parties:
9.4. third party service providers (e.g. couriers, technical service providers in the performance of establishing contracts with these service providers, including the delivery of services for newsletters or other marketing activities);
9.5. third party service providers whose services we normally use for data storage, telecommunications and website hosting purposes.
9.6. The ability of the abovementioned service providers to use your data will remain limited – they cannot use this data other than for the purposes of providing us with the stated services.

10. FOR HOW LONG DO WE STORE YOUR PERSONAL DATA?

10.1. We will store your personal data for no longer than is required for the processing purposes, or according to the legislation if it provides for a longer storage period.
10.2. We will store the data collected for the purposes specified in Clauses 5.1(a) and (b) for five (5) years after you purchased any goods or services via the Website.
10.3. We will store the data collected for the purposes specified in Clauses 5.1(c) for five (5) years after your last participation in our contest, quiz or game.
10.4. We will store the data collected for the purposes specified in Clause 5.1(d) for no longer than the term specified in the cookie table mentioned in Clause 8.6. of this Privacy Policy.
10.5. We will store the data collected for the purposes specified in Clause 5.1(e) (direct marketing) until you delete your account, or unsubscribe from the Website, in the manner specified in Clause 7.6.
10.6. We will strive not to store out-of-date and non-relevant personal data, so after updating it (e.g. adjusting or changing information in the account, etc.), only the relevant information is stored. However, historical information is stored if necessary, in accordance with the legal acts or for the performance of our activities.

11. HOW DO WE STORE YOUR PERSONAL DATA?

11.1. The data that we collect from you will be used in the EU, but may also be transferred or stored outside the EU. It can also be processed by our staff or the staff of our suppliers outside the EU. When transferring your data outside the EU, we will take all necessary steps to ensure that your data is processed securely and in compliance with this Privacy Policy.
11.2. Unfortunately, online information transfers are not completely secure. Although we will do our best to protect your personal data, we cannot guarantee data security when you transfer your data to the Website – therefore, you assume the risks associated with the data transfer to the Website. Once we receive your data, we will apply strict procedures and security measures to protect your data against unauthorised access.
11.3. If there are unlikely circumstances and we find out about a breach of your personal data security that may seriously jeopardise your rights or freedoms, we will immediately inform you as soon as it is discovered and will determine which information has been accessed.

12. EXTERNAL WEBSITES

The Website may contain links to external websites – the websites of our business partners or websites that promote our goods and (or) services. When following such links to any of these websites, please note that these websites and the services available through them have their own separate privacy policies and that we do not accept any liability or obligation for these policies, or for the collection of personal data on these websites or during the provision of services, e.g. contact or location data. It is important to review these policies before submitting your personal information to these websites or using any related services.

13. WHAT RIGHTS DO YOU HAVE?

13.1. In processing your personal data, we guarantee your rights under the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a personal data subject, you have the following rights:

a) to know (to be informed) about the processing of your personal data;
b) to become acquainted with your personal data that we are processing;
c) to request the correction or an addition to any incorrect, inaccurate or incomplete personal data;
d) to request the destruction of your personal data when it is no longer needed for the purposes for which it was collected;
e) to request the destruction of your personal data if it is being processed illegally, or when you withdraw your consent to the processing of the personal data, or do not give such consent when it is necessary;
f) to disagree with the processing of your personal data or to withdraw the consent that was previously given;
g) to request a suspension (except for the storage) of your personal data processing operations, in the event of disputes or the need to verify the legality of the processing activities or the accuracy of the data, as well as in cases where we no longer need your personal data but you do not want us to destroy it;
h) to request, if it is technically possible, the provision of your personal data in an easily readable format for your consent or for the purpose of performing a contract, or to request the transferring of your personal data to another data controller.

13.2. We will endeavour to guarantee the exercising of your rights as a personal data subject, and to create all the necessary conditions for the effective exercising of these rights, but we reserve the right not to comply with your requirements when it is necessary to ensure:

a) the fulfilment of the legal obligations imposed on us;
b) the security or defence of the state;
c) public order, as well as the prevention, investigation, detection or prosecution of criminal offences;
d) the important economic or financial interests of the state;
e) the prevention, investigation and detection of breaches of professional ethics;
f) the protection of your rights and freedoms, or those of other persons.

13.3. You can provide us with the requirements related to the implementation of your rights in person, by post or by electronic means. Upon the receipt of your request, we may ask you to provide proof of identity, as well as any additional information related to the request which is necessary for us.
13.4. Upon the receipt of your request, we will respond to you within 30 calendar days from the receipt of your request and from the date of the submission of all documents necessary for the submission of the response.
13.5. If we consider it necessary, we will stop the processing your data, except for its storage, until your request is resolved. If you have legally withdrawn your consent, we will terminate the processing activities involving your personal data immediately, but not later than within 30 calendar days, except in the cases specified in Clause 12.2 of this Privacy Policy, and in the cases provided for by law, i.e. when we are obliged to continue to process your data due to the legislation in force, due to our legal obligations, due to court decisions or due to binding instructions from the authorities.
13.6. When refusing to comply with your request, we will clearly indicate the grounds for such a refusal.
13.7. If you disagree with our actions or our response to your request, you can complain to the competent public authority about our actions and decisions.

14. TO WHOM CAN YOU FILE A COMPLAINT?

14.1. To file a complaint regarding the processing of your data, please provide it in writing, with as much information as possible, by using the contact details provided at the end of this policy. We will cooperate with you and will work to resolve all issues as soon as possible.
14.2. If you think that your rights have been violated under the GDPR, you can file a complaint with our supervisor – the State Data Protection Inspectorate – although, prior to this, we will try to resolve all disputes together with you.

15. HOW WILL THIS PRIVACY POLICY BE CHANGED?

All changes to our Privacy Policy will be posted on the Website. You will be notified about these changes upon your request. New Privacy Policy terms may also be posted on the Website, and you may need to read and accept them in order to continue using the Website and (or) our services.

16. HOW CAN YOU CONTACT US?

Please send all documents related to this Privacy Policy to the following contacts:

  • by post – Algirdo str. 40C, Vilnius, LT-03218 Lithuania;
  • by e-mail – info@baltic-flax.com