Privacy policy - Baltas Tiltas

This Privacy Policy is for the website with the e-shop owned by UAB Amber Food (hereinafter - the Company, We). It regulates how the Company handles personal data of its customers and / or visitors (hereinafter - Users, You) and of other persons and how it ensures the security of Personal Data.

WHO ARE WE?

UAB Amber Food is a company providing catering services, which owns the website with the e-shop https://www.baltastiltas.lt (hereinafter - the Website) and acts as the controller of Users' personal data. The Company legal entity code is 301675046, domicile address - V. Krėvės Ave. 97, LT-50369 Kaunas, tel. +370 615 42162, el. email: administracija@amberfood.eu.

We care about your privacy and the security of your personal data, and we are fully committed to processing the data of our Users and other persons only in accordance with the established principles and requirements for the processing of personal data. This Privacy Policy applies in conjunction with the Terms of Sales and the Cookie Policy published on our Website. If you have any questions about personal data processing or would like to obtain more information on personal data processing, please contact us at administracija@amberfood.eu.

WHEN DO WE PROCESS YOUR PERSONAL DATA?

We only collect and process your personal data when it is necessary to achieve our legitimate purposes and when we have a legal basis to do so. The Company processes personal data:

When you have given your consent to the processing of your personal data for a specified purpose or purposes;
When it is necessary to perform the contract or transaction concluded with you or to take action at your request before concluding the contract or transaction;
When required to do so by law;
When the processing of personal data is necessary to achieve the legitimate interests of the Company.

WHAT PERSONAL DATA DO WE PROCESS?

When you purchase goods at our e-shop, we process:

Name
Telephone number
Payment details (bank, payment card or account number). Please note that the Company uses the payment services provided by UAB „OPAY Solutions“ to make payments and does not directly process your payment data: the User shall submit the payment data to the OPAY payment system, which shall process them in accordance with the personal data processing policy of this system and its General Terms and Conditions of the Payment Services Agreement. After you make a payment, we get informed about the transaction by the OPAY payment system or your bank.
Technical data (IP address)

Purpose of data processing – payment for goods that the User has purchased at our e-shop

Legal basis of data processing – conclusion and execution of the purchase and sale agreement / transaction between the User and the Company

Duration of data processing – data confirming the fact of the contract / transaction and information related to the conclusion of the contract / transaction and documents confirming financial transactions - 10 years after the conclusion of the contract / transaction; and other data - 5 years.

When you purchase goods or pay for services at our service locations and request an invoice, we process:

Name, surname
Telephone number
Email address
Street address
Payment details (bank, payment card or account number)

Purpose of data processing – sales of goods and / or services (invoicing)

Legal basis of data processing – execution of the purchase and sale agreement / transaction between the User and the Company

When you participate in our Loyalty Program and acquire a Sugamour discount card, we do not process any of your personal information. Only the information about the amount of the discount is stored on the card. The card is valid for 2 years.

Processing of personal data on the Website using cookies

When you visit the Website, we process your IP address, network and location data when you provide it. This data is collected with your consent, using cookies and other similar technologies. You can find more information about the cookies used on the Website in our Cookie Policy.

Processing of personal data of minors

As stated in the Terms of Sales of our e-shop, our services may be used only by persons who have reached the age of majority, i.e., persons over 18 years of age. If you are a minor between the ages of 14 and 18, you can use the services of the e-shop only with the consent of your parents or guardians, or if you have the right to dispose of your income independently in accordance with legal requirements. In any case, if you are a minor between the ages of 14 and 18, we will only process your personal data once you have confirmed that you have the consent of your parents or guardians (please note this on the Website).

TO WHOM WE MAY TRANSFER YOUR PERSONAL DATA?

For the processing of your personal data, we may use third parties - service providers (data processors) who help us to provide you with services: companies providing financial and accounting services, companies providing data center services or web hosting services, companies providing information technology infrastructure services, companies creating, providing, maintaining and developing software, as well as other service providers to whom your personal data is disclosed only to the extent necessary for the provision of their services.

The data processors used by us may only process your personal data in accordance with the clear instructions provided by us and may not use them for other purposes or transfer them to other persons. In each specific case, only the necessary personal data are provided to the processor, i.e., only such personal data that are necessary for the specific purpose of the processing or the provision of the service. To ensure the security of your personal data, we only use data processors who are committed to and can comply with appropriate data security requirements and confidentiality obligations.

WHERE DO WE PROCESS YOUR PERSONAL INFORMATION?

We only process your personal data in the European Union / European Economic Area (EU / EEA). We do not currently transfer your personal data to third countries. If there is a need to transfer your personal data to third countries, we will inform you before the transfer takes place and we will ensure the legality and security of the transfer (application of the necessary transfer mechanisms and security measures).

WHAT RIGHTS DO YOU HAVE?

As a data subject, you have all the rights set out in the General Data Protection Regulation, which you can exercise by visiting the Company or applying by e-mail: administracija@amberfood.eu:

know about the processing of your personal data: to receive information about whether we process your personal data and, if such personal data is processed, the right to access your personal data;
apply for a correction of your personal data if you find that your personal data we process is inaccurate; registered Users can correct their personal data themselves by logging in to their account on the Website;
apply with a request to suspend the processing of your personal data, except for storage, in case the access to your personal data reveals that the data is incorrect, incomplete or inaccurate or is processed unlawfully;
apply with a request for deletion of your personal data (the “right to be forgotten”), except when your data must be stored in accordance with the legal obligations applicable to the Company or to the establishment, enforcement and plea of legal requirements. If you wish to close your account on our Website, please contact us by email administracija@amberfood.eu and your account will be closed within 2 working days of receiving your request;
object to the processing of your personal data when such data is processed or is intended to be processed on the basis of a legitimate interest pursued by the Company;
where technically possible, obtain a copy of personal data relating to you which you have provided to the Company, which is processed by automated means and the processing of which is based on consent or a contract, in a normally used, computer-readable form and transfer to another data controller (right to data portability);
to revoke your consent to the processing of your personal data at any time by submitting a notice to the Company by either clicking on the e-mail link at the end of the letter (in the case of direct marketing) or by sending your request to the Company by e-mail administracija@amberfood.eu.

You can exercise your rights yourself or through agents. In order to exercise your rights, you must come to the Company's Administration Office (Ukmergės St. 128, LT-08100 Vilnius) in person and submit your application there, or you can submit your application by email administracija@amberfood.eu. When executing your request, we have the right and obligation to verify your identity, which will always be carried out in the simplest and most convenient way for you. By submitting your request, you can verify your identity in one of the following ways:

if the request is submitted upon arriving directly at the Company, you must present your identity document to our employee;
if the request is submitted by mail or through an authorized person, you must submit a notarized copy of your identity document along with the request;
if the reqyest is submitted by electronic means, it must be electronically signed or submitted by e-mail from the e-mail address you have been registered with on our Website.

In case of reasonable doubts regarding the identity of the natural person who submitted the request, the Company has the right to request additional information necessary to confirm your identity (for example, by asking a control question about what goods or services you have recently purchased, etc.).

The request must be clear, provide your name and surname, contain information what rights you wish to exercise and to what extent, and how you would like to receive a response. If you submit your request electronically, the above listed information must also be provided electronically, unless you request the response in a different format.

We will make every effort to process your requests and provide you with the information as soon as possible, but no later than in 30 calendar days from the date of receipt of your request. If due to certain circumstances, such as the complexity of the submitted request (e.g., if it is necessary to seek the assistance of data processors) or due to the excessive number of requests processed by the Company, the Company may not process the request in time, therefore the processing period may be extended by a maximum of two additional months after informing you in advance.

Requests are processed and the information and data are provided free of charge, but we reserve the right, in certain cases, to either waive your rights (where the request is unreasonable or disproportionate or repetitive), or impose fees set by the Head of the Company for provision of information and data to cover administrative costs related to the fulfillment of the request in accordance with the requirements of legal acts and (in cases of identified obvious abuse of the data subject's rights, and unreasonably repeated requests for information, data, copies, documents, etc.).

If you believe that the actions or failure to act by the Company violate your rights or legal requirements, you have the right to file a complaint with the supervisory authority - the State Data Protection Inspectorate.

VALIDITY OF PRIVACY POLICY

This Privacy Policy is approved and effective as of May 31, 2022. We reserve the right to review and update this Privacy Policy on a regular basis or as necessary. We will notify you of any updates on our Website.