1. General provisions

1.1 These personal data processing rules (hereinafter referred to as the “Rules”) regulate the basic principles and procedures for the collection, processing and storage of personal data of the purchaser, visitor of the website www.proflexbaltic.com (hereinafter referred to as the “Website”), who has entered his/her correct personal data in the form on the Website (hereinafter referred to as the “Registered Visitor”).

1.2 These Rules have been drawn up in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts governing the collection, processing and storage of personal data.

1.3 According to these Terms and Conditions, the controller of personal data is UAB “CMR BOX”, company code 305518925, registered at Architektų g. 56-101, Vilnius, Lithuania LT-04111 (hereinafter referred to as the “Data Controller”). The Data Controller is responsible for the collection, processing and storage of personal data in accordance with the law.

2. Collection, processing, storage of personal data

2.1 The Data Controller confirms that the personal data is collected for the purposes of direct sales and marketing and processed in accordance with the principles of fairness, lawfulness and accuracy, as well as respect for the individual’s right to privacy.

2.2 The Data Controller shall collect and automatically use the personal data of the Registered Visitor provided by the Registered Visitor when registering on the Website only in accordance with the procedures set out in these Terms and Conditions and for the purposes of direct marketing set out in these Terms and Conditions.

2.3 The Customer must provide complete and correct personal data at the time of registration in the e-shop. By registering, the Registered Visitor consents to the processing of the data provided by him/her for the stated purposes of data collection and use. In the event of the Registered Visitor’s disagreement expressed in accordance with the procedure provided for in Clause 3.1 of these Terms and Conditions, the Data Controller shall not have the right to use this personal data (with the exception of the storage of personal data).

2.4 The Data Controller respects the right to privacy of each Registered Visitor. The Buyer’s personal data (name, surname, address, telephone number, email address and other information provided in the e-shop registration form) is collected and processed in order to:

2.4.1. to process the Buyer’s orders for goods;

2.4.2. issue financial documents;

2.4.3. resolve problems with the provision or delivery of goods;

2.4.4. for direct marketing purposes;

2.4.5. fulfil other contractual obligations.

2.5 The Data Controller may use data not directly related to the Registered Visitor’s person for statistical purposes, i.e. data on purchased goods. Such statistical data will be collected and processed in such a way as to prevent the disclosure of the identity of the Registered Visitor or other personally identifiable data.

2.6 All information about personal data processed is confidential. CMR BOX UAB reserves the right to pass on information to third parties:

2.6.1. for the purposes mentioned in point 2.4 of this document;

2.6.2. in accordance with the procedure established by the laws of the Republic of Lithuania.

2.7. The personal data of the registered visitor shall be stored for no longer than required by the stated purposes of data processing. After the expiry of the data retention period, the personal data of the Registered Visitor shall be destroyed in accordance with the procedure laid down by the applicable legal acts.

2.8 The personal data of the Registered Visitor shall be processed using secure organisational and technical measures to protect the personal data against accidental or unlawful destruction, alteration, disclosure, use or any other unlawful processing.

3. Registered visitor rights

3.1 By registering on the Website, the Registered Visitor confirms his/her consent to the processing and use of his/her personal data in accordance with the procedures set out in these Rules. A registered visitor who does not wish his/her personal data to be processed and used for the stated purposes shall have the right to object to the processing of his/her personal data by informing the Data Controller by e-mail: info@proflexbaltic.lt

3.2 Upon receipt of the notification referred to in Clause 3.1 of the Rules, the Data Controller shall terminate the processing of personal data free of charge and shall inform the Registered Visitor thereof in accordance with the procedure set out in Clauses 5.1. and 5.2. of the Rules.

3.3 The Registered Visitor has the right to change and/or update the information provided in the registration form.

3.4. The registered visitor has the right to have access to the actions carried out in relation to the processing of his/her personal data.

3.5. The registered visitor has the right to request the rectification, destruction or suspension of the processing of his/her personal data (except for the storage), if, after accessing his/her personal data, he/she finds that his/her personal data is incorrect, incomplete or inaccurate, by contacting the Data Controller in accordance with the procedure set out in Clause 5.1 of the present Rules.

4. Changes to the Rules

4.1 The Data Controller shall have the right to amend these Terms and Conditions, in part or in full, by notifying the Data Controller on the Website.

4.2 Amendments and modifications to the Rules shall come into force from the date of their publication on the Website.

4.3 If the Registered Visitor does not agree with the amendments and additions to the Terms and Conditions, he/she shall have the right to express his/her disagreement with the amended or added Terms and Conditions in accordance with the procedure set out in Clause 5.1 of the Terms and Conditions and for the purposes relating to the processing of his/her personal data. In the absence of the Registered Visitor’s disagreement, the Registered Visitor shall be deemed to have accepted the new version of the Terms and Conditions.

5. Final provisions

5.1 All notifications related to the processing of personal data shall be submitted to the Data Controller by e-mail (info@proflexbaltic.com) or by post (Architektų g. 56-101, Vilnius, Lithuania LT-04111 ). The costs of submitting notifications, if any, shall be borne by the notifier.

5.2 The Data Controller shall reply in the same form in which the notification from the Registered Visitor was received, no later than within 20 working days from the date of receipt of the person’s referral document.

6. Contact details of the Data Controller

6.1 If you have any questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, please call us at Tel. +370 624 39 700 or email us at info@proflexbaltic.com

6.2 Company details: UAB “CMR BOX”, company code: 305518925, company address: Architektų g. 56-101, Vilnius, Lithuania LT-04111.

The Seller receives the personal data referred to in Clause 15.2 of the Terms and Conditions of Sale and Purchase directly from the Buyer (after the Buyer has registered for a customer account on the website and initiated the contract of sale and purchase). The Seller does not process personal data obtained in other ways.

The Customer confirms that he/she has had the opportunity to acquaint himself/herself with the terms and conditions of the processing of personal data and that he/she has the following rights:

The Buyer, having provided the Seller with a document confirming his/her identity, or having confirmed his/her identity by means of electronic communications that allow proper identification of a person, shall have the right to access his/her data and to check how they are processed, i.e. to obtain information on the sources from which and what personal data have been collected, the purpose for which the data are processed and to whom they are provided, to request the rectification or destruction of his/her personal data, or to stop the processing of his/her personal data, where the data are processed in violation of the provisions of the Law of the Republic of Lithuania on the Legal Protection of Personal Data or of other legislation;

The Customer shall express his/her consent or opposition to the processing of his/her personal data in writing, indicating his/her name and surname;

other rights provided for in the Law on Legal Protection of Personal Data and other normative legal acts.

The Buyer shall have the right to request the rectification, destruction of personal data or suspension of the processing of personal data in writing or in person at the Seller’s place of business.

The Seller undertakes to ensure the security of the Buyer’s personal data, to implement appropriate technical and organisational measures to protect the personal data against unlawful destruction and/or accidental alteration, disclosure and against any other unlawful processing. All employees and representatives of the Seller undertake to protect the Buyer’s personal data.

To the extent and in accordance with the procedure set out in these Terms and Conditions of Sale and Purchase, the Seller may only provide personal data to the data subject, to parcel delivery companies, as well as to other recipients of the data, where the Seller is obliged to provide personal data pursuant to the laws, court decisions and other legal acts.