GENERAL PROVISIONS

1. This Privacy Policy (hereinafter referred to as the “Policy”) regulates the principles and procedures of personal data processing carried out by UAB BIOGAMI, operating at Kirtimų g. 59, Vilnius, e-mail sales@biogami.lt, company code 302712857 (hereinafter referred to as the “Data Controller”), as well as the terms and conditions of the operation of the website https://mamukobackup.metamark-dev.com/ (hereinafter referred to as the “Website”) operated by the Data Controller.

2. This Policy is intended for persons who visit the Company’s website (https://mamukobackup.metamark-dev.com/) and use the information and services provided on the website.

3. The Data Subject for the purposes of this Policy shall be any natural person whose personal data is processed by UAB BIOGAMI.

4. By using the services, by continuing to browse the website, the Visitor (the website user) confirms that he/she has read this Policy, understands its provisions, and agrees to comply with them.

5. The Data Controller shall ensure that by adopting and implementing this Policy, it aims to implement the following fundamental principles relating to the processing of personal data:

5.1. The processing of personal data in relation to the Data Subject shall be carried out in a lawful, fair, and transparent manner (the principle of lawfulness, fairness, and transparency);

5.2. Personal data are collected for clearly defined and legitimate purposes and are not further processed in a manner incompatible with those purposes;

5.3. The further processing of personal data for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes shall not be considered incompatible with the original purposes (‘purpose limitation’);

5.4. Personal data are adequate, relevant, and only those necessary for the purposes for which they are processed (‘minimisation’);

5.5. Efforts shall be made to ensure that personal data are accurate and, where necessary, updated within a reasonable period of time after the fact of change;

5.6. Every reasonable measure shall be taken to ensure that personal data which are not accurate in relation to the purposes for which they are processed are erased without undue delay or rectified within a reasonable period of time (‘accuracy’);

5.7. Personal data shall be kept in a form that permits identification of Data Subjects for no longer than is necessary for the purposes for which the personal data are processed;

5.8. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);

5.9. Taking into account the generic nature of the personal data processed by the Controller, personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’);

5.10. The controller shall be responsible for, and be able to demonstrate compliance with the above listed principles (‘accountability’).6. This Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), the Republic of Lithuania Law on Legal Protection of Personal Data as well as with the other legal acts of the European Union and the Republic of Lithuania. Terms used in the Policy shall be understood as they are defined in the GDPR and the Republic of Lithuania Law on Legal Protection of Personal Data.

7. We recommend that you take the time to read this Privacy Policy in detail.

8. If you do not agree to the processing of your personal data as set out in this Privacy Policy, you have the right not to provide the Company with your personal data. Also, if we process certain of your Personal Data on the basis of your consent to the processing of your personal data, you may withdraw such consent at any time, without prejudice to the lawfulness of the processing of the data on the basis of the consent prior to the withdrawal of consent.

This Privacy Policy explains how the Company collects and uses your personal data when you:

9.1. When you visit or use the Company’s Website and/or the Company’s social media accounts;

9.2. Seek to enter into or enter into a contract with the Company;

9.3. Purchase services provided by the Company;

9.4. Agree to receive direct marketing communications from the Company or subscribe to the Company’s newsletter;

9.5. Provide goods or services to the Company;

9.6. Contact the Company’s customer service department;

9.7. Otherwise communicate or cooperate with the Company as a customer, supplier, or other person who has a business or consumer relationship with the Company.

10. Contact details of the person responsible for the protection of personal data at the Company: e-mail info@biogami.lt

PURPOSES OF PROCESSING PERSONAL DATA AND CATEGORIES OF PERSONAL DATA COLLECTED

11. Depending on who you are (customer, supplier, website visitor, etc.) and how you interact with the Company (in person, online, over the phone, etc.), the Company may process different types of your Personal Data.

12. Below you will find the categories of Personal Data that we may collect:

 

Purpose of data processing Categories of data and personal data processed Duration of data processing Legal basis for data processing
Purchase of goods Personal identification data: name, surname

 

Contact details: email address, telephone number, delivery address*

 

Service details: date of purchase, description of goods, price*

 

Payment details: details required by the payment platform of your choice

The personal data shall be stored for the duration of the Agreement and 10 years from the date of termination of the Agreement (in accordance with the Index of Time Limits for Storage of General Documents, approved by Order No. V-100, dated 9 March, 2011, of the Chief Archivist of Lithuania. The processing is necessary for the conclusion and performance of the Agreement (Article 6(1)(b) GDPR)

 

Sending direct marketing messages and newsletters Personal identification and contact details: name, surname, email address Unless the consent is withdrawn earlier, the personal data is stored and processed for the duration of the consent. The Data Subject’s consent to direct marketing communications is valid for a period of 5 years from the date of consent 6(1)(a) GDPR (data subject’s consent to such data processing)
Administration of inquiries submitted via the website Personal identification data: name*;

 

Contact details: email address*.

 

Personal data is stored for 5 years (in accordance with the Index of Time Limits for Storage of General Documents, approved by Order No. V-100, dated 9 March, 2011, of the Chief Archivist of Lithuania). Data processing is necessary to administer the inquiries submitted and to contact the website visitor.

 

 

*provision of the data is necessary if you wish to purchase goods or submit an inquiry via the website..

SHARING YOUR PERSONAL DATA WITH THIRD PARTIES

18. The Company will not transfer your personal data to any third parties without your prior consent, with the exception of cases, specified below.

19. We can transfer your data for processing by third parties which helps us to execute our activities and administrate the provision of Services. These third parties may include companies that provide data centres, hosting, and related services, companies that provide advertising, and marketing services, companies that develop, provide, support, and develop software, companies that provide information technology infrastructure services, companies that provide communication services, companies that analyse and provide analysis of internet browsing or activity, companies that provide security services, and so on.

20. In each case, we only provide the Data Processor with as much data as is necessary to carry out a specific task or provide a specific service.

21. Our involved data processors may process your personal data only on our instructions. They must also ensure the security of your data in accordance with applicable legislation and written agreements concluded with us.

22. Data may also be disclosed to competent government or law enforcement authorities, such as the police or supervisory authorities, but only upon their request and only when required by applicable legislation or in the cases and according to the procedures provided by law, in order to enforce our rights, protect the safety of our customers, our employees and our resources, and to make, submit and defend legal claims.

HOW WE ENSURE THE SECURITY OF YOUR DATA

23. To protect your data, the Company takes appropriate measures to comply with data protection and data security laws and regulations, including the requirement for the Company’s service providers/processors to use appropriate measures to protect the confidentiality of your personal data.

24. In order to protect your personal data against data loss, alteration of data, or unauthorised access, the Company has put in place a number of technical and organisational measures taking into consideration the state-of-the-art technology, the cost of implementing the measures, and the nature of the personal data being processed.

YOUR DUTIES

25. We would like to remind you that it is your responsibility to ensure, to the best of your knowledge and belief, that the data you provide to us is accurate, complete, and up to date. In addition, if you provide us with the data of others, it is your responsibility to obtain and provide us with such information in compliance with legal requirements. For example, you must inform the other persons whose data you provide to the Company of the contents of this Privacy Policy and obtain their consent to the provision of their personal data.

YOUR RIGHTS

26. Data protection legislation provides you with a number of rights in relation to the processing of your personal data.

27. TYou have the right to access to your personal data processed by us:

27.1. You have the right to ask us to confirm whether we are processing your personal data and, in such cases, to request access to your personal data processed by us. To exercise the above right, please submit a written request to us by email info@biogami.lt

28. You have the right to have inaccurate personal data rectified.

28.1. If you believe that information about you is incorrect or incomplete, you have the right to have it rectified or completed. To exercise the above right, please submit a written request to us by email info@biogami.lt

29. You have the right to object to the processing of your personal data:

29.1. You have the right to object to the processing of personal data where the processing is carried out on the basis of our legitimate interests. However, despite your objection, we will continue to process your data if we have reasonable grounds for continuing to process it. To exercise the above right, please submit a written request to us by email info@biogami.lt

30. You have the right to have your personal data erased (right to be forgotten):

30.1. Under certain circumstances, you have the right to request that we erase your personal data. However, this does not apply if we are required by law to keep the data. To exercise the above right, please submit a written request to us by email info@biogami.lt

31. You have the right to restrict the processing of your personal data:

31.1. You have the right to restrict the processing of your personal data in certain circumstances. To exercise the above right, please submit a written request to us by email info@biogami.lt.

31.2.You have the right to lodge a complaint about the improper processing of your personal data with the State Inspectorate for the Protection of Personal Data, either directly or by email to ada@ada.lt.

INFORMATION ABOUT THE USE OF COOKIES

32. Data Controller uses cookies on the Website to distinguish one Website user from the other. Through the use of cookies, the Data Controller aims to provide a more pleasant experience for persons browsing the Website and to improve the Website itself. 33. Cookies are small text files that are stored on a person’s browser or device (personal computer, mobile phone or tablet). 34. The Company uses the following categories of cookies: 34.1. Strictly mandatory cookies: cookies that are necessary for the functioning of the system. For example, some cookies allow us to identify registered users and ensure that they can access the entire system. If a user rejects these cookies, they may not be able to see the full content of the system; 34.2. Performance cookies: cookies that allow us to analyse how users use the system and monitor the performance of the system. This allows the Company to choose the right offers and to quickly identify and fix any problems, thus ensuring a high quality browsing experience. For example, performance cookies allow us to track which pages are the most popular and to determine why some pages display error messages; 34.3. Functional cookies: cookies that allow us to store users’ preferences and tailor them to the website/mobile app so that the Company can provide enhanced functionality; 34.4. Targeting cookies: The Company may use cookies to display advertisements to users that promote products sold by the Company which are of interest to specific users. 34.5. Google Analytics, which allows collecting and analysing statistical data about the use of the website. You can find out more about Google Analytics and the information that these tools allow us to collect here: https://support.google.com/analytics/answer/6004245?hl=lt. If you do not want Google Analytics tools to collect information about your web browsing, you can use the Google Analytics opt-out browser plug-in. 35. The website https://mamukobackup.metamark-dev.com/ uses the following cookies:

Type Cookie name Purpose Domain
_secure_session_id Collects information about visitor behaviour on the website and is used to store statistical information
woocommerce_cart_hash woocommerce_items_in_cart wp_woocommerce_session_ woocommerce_recently_viewed store_notice[notice id] Cookies used to complete the purchase process on the website
Functional tk_ai woocommerce_dismissed_suggestions__[context] woocommerce_snooze_suggestions__[suggestion] Cookies used to support the visitor’s account login function on the website https://mamuko.lt
Analytical viewed_cookie_policy Determines whether the visitor has accepted the cookie consent box
_Ga _gid _gat_id Used to track home pages

36. The cookies used on the website do not allow the identity of the user of the web page to be established. The visit to the Website is registered anonymously, identifying the personal computer, mobile phone, or tablet, and the IP address, and such information collected is not disclosed to third parties, except as provided by law. 37. By visiting the Website and clicking on the “I Agree” button in the pop-up box, the user agrees to the storage of cookies on his/her computer, mobile phone, or tablet. 38. In order to withdraw the consent given, the visitor may delete or block cookies by selecting the appropriate settings in his/her browser that allow him/her to reject all or part of the cookies. Please note that using browser settings that block cookies (including essential cookies) may restrict access to all or part of the Website functionalities. 39. Personal data collected by cookies are processed in accordance with the provisions of the Republic of Lithuania Law on Legal Protection of Personal Data, the Republic of Lithuania Law on Electronic Communications, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as well as the provisions of any other legislation regulating the protection of personal data. 40. In compliance with the requirements of the applicable legislation, the Website has security measures in place to prevent the unauthorised disclosure and unlawful use of personal data.

FINAL PROVISIONS

41. Legal relations related to this Policy shall be governed by the law of the Republic of Lithuania.

42. The Data Controller shall not be liable for damages, including damages caused by interruptions in the use of the Website, for loss or corruption of data caused by the actions or omissions of the Data Subject himself/herself or by third parties acting with the knowledge of the person.

43. The Data Controller shall also not be liable for any disruption of access to and/or use of the Website and/or damage caused by such disruption, resulting from acts or omissions of third parties not related to the Data Controller or the person, including power failures, Internet access failures, etc.

44. The Data Controller has the right to amend the Policy in part or in full.

45. Amendments or changes to the Policy shall take effect from the date of their publication on the Website.

46. If, after the amendment or modification of the Policy, a person continues to use the Website and/or the services provided by the Data Controller, the person shall be deemed not to have objected to such amendments and/or modifications.

47. For all matters relating to data processing, you may contact us by email at info@biogami.lt.

48. This Privacy Policy shall apply as of 11 November 2022.