1.General provisions
1.1 The controller of your personal data is UAB “ Tuko Transportas ”, Company code: 304439706, contact details are published at www.tukogroup.eu
1.2. We care about the protection and privacy of your personal data, therefore, with this privacy policy (hereinafter referred to as the Policy), we inform you about the processing of personal data, the rights of the data subject, the measures for the implementation of personal data protection and other issues related to the processing of personal data.
1.3 The Company collects personal data that a person voluntarily provides by email, registered mail, fax, telephone, or using the Company’s website.
1.4 All personal data received by the Company are collected, stored and processed in accordance with the requirements set out in the Law on Personal Data Protection of the Republic of Lithuania, the European Union General Data Protection Regulation No. 2016/679 and other legal acts of the Republic of Lithuania regulating the protection of personal data.
1.5 The Company ensures that the level of protection of personal data processed by the Company meets the requirements of the legal acts of the Republic of Lithuania.
2. Concepts
2.1. Definitions used in the document:
2.1.1. Personal data – any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, in particular by reference to an identifier such as a name, an identification number, location data and an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2.1.2. Data subject – means a natural person from whom the Company receives and processes personal data;
2.1.3. Data recipient – the person to whom personal data are provided;
2.1.4. Provision of data – the disclosure of personal data by transmission or otherwise making them available (except for publication in the media);
2.1.5. Data processing – any operation performed on personal data: collection, accumulation, storage, recording, classification, grouping, combination, alteration (supplementation or correction), provision, publication, use, logical and/or arithmetic operations, retrieval, dissemination, destruction or any other operation or set of operations;
2.1.6. Automatic data processing – data processing operations carried out in whole or in part by automated means;
2.1.7. Data processor – a legal or natural person (who is not an employee of the data controller) authorised by the data controller to process personal data. The data processor and/or the procedure for its appointment may be established in laws or other legal acts;
2.1.8. Data controller – a legal or natural person who, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes of data processing are established by laws or other legal acts, the data controller and/or the procedure for its appointment may be established in those laws or other legal acts;
2.1.9. Consent – any freely given, specific and unambiguous indication of the data subject’s wishes, by a statement or by a clear action, by which he or she signifies agreement to the processing of personal data relating to him or her;
2.1.10. Direct marketing – an activity intended to offer goods or services to individuals by mail, telephone or other direct means and/or to ask for their opinion on the goods or services offered;
2.1.11. Third party – a legal or natural person, except for the data subject, data controller, data processor and persons who are directly authorized by the data controller or data processor to process data;
2.1.12. Other terms used in this Policy are understood as they are defined in the Law of the Republic of Lithuania on the Legal Protection of Personal Data and other legal acts regulating the processing of personal data.
3. What principles do we follow when processing personal data?
3.1. The Company, when processing personal data, is guided by the following principles:
3.1.1. The Company processes personal data only for legitimate purposes and to achieve the goals defined in the Policy;
3.1.2. Personal data is processed accurately, fairly and lawfully, in accordance with the requirements of legal acts;
3.1.3. The Company processes personal data in such a way that personal data is accurate and is constantly updated in the event of changes;
3.1.4. The Company processes personal data only to the extent necessary to achieve the goals of personal data processing;
3.1.5. personal data are stored in a form that allows the identification of data subjects for no longer than is necessary for the purposes for which these data were collected and processed.
3.1.6. The personal data of the data subject may be accessed only by the Company’s employees with appropriate competence and/or third parties engaged by the Company to provide the service, and only in cases where this is necessary to provide the service.
3.2. The Company respects the privacy of the Data Subject and undertakes to constantly comply with the principles of data protection of the Data Subject specified in this Policy.
4. For what purposes do we process personal data?
4.1. Personal data are processed and used taking into account the purposes for which the Data Subject provided them to the Company or for other purposes approved by the Data Subject.
4.2. Purposes of use of the Data Subject’s personal data:
4.2.1. Processing and administration of the purchase (order) of services performed by the Data Subject;
4.2.2. Identification of the Data Subject in the Company’s information systems;
4.2.3. Identification of the Data Subject when logging into his/her account on the Company’s website (when the Company provides such an opportunity);
4.2.4. for issuing and submitting coupons, confirmations, invoices and other financial documents for purchased (ordered) services;
4.2.5. for resolving problems related to the performance of the contract;
4.2.6. for contacting the Data Subject in the event of changes in the conditions of the goods or services purchased by the Data Subject;
4.2.7. for fulfilling other contractual obligations;
4.2.8. for the Company’s Direct Marketing purposes;
4.2.9. for security, health, administrative, crime prevention and legal purposes;
4.2.10. for business analysts, for general research that allows improving the quality of goods or services;
4.2.11. for communication with the Data Subject, in order to receive customer feedback on the purchased services;
4.2.12. for assessment of a person’s candidacy for a job position, communication with the relevant candidate, etc.;
4.2.13. For audit.
4.3. By voluntarily providing their personal data to the Company, the Data Subject confirms and voluntarily agrees that the Company will manage and process the Data Subject’s personal data in accordance with this Policy, applicable laws and other regulatory legal acts.
4.4. The Company undertakes not to disclose personal data information to third parties without the consent of the Data Subject, except for ensuring the proper performance of the contract, other services related to the proper performance of the services ordered by the Data Subject. The Company may also transfer the Data Subject’s personal data to third parties who act as Data Processors on behalf of the Company. Personal data may be provided only to those Data Processors with whom the Company has signed relevant Data Processing Agreements. It is assumed that the Data Subject is informed of this, agrees to this and the Company does not assume liability for damage arising from the use of the Data Subject’s data by third parties to the extent permitted by law. In all other cases, the Data Subject’s personal data may be disclosed to third parties only in accordance with the procedure provided for by the legal acts of the Republic of Lithuania.
5. What personal data do we process?
5.1. The personal data information collected by the Company may include: the Data Subject’s name, first name, last name, code, telephone number, e-mail address, the name of the company on whose behalf the activity is carried out, information about the goods and services purchased by the Data Subject (their quantities, purchase dates, prices of purchased services, purchase history), the Data Subject’s login name and the encoded form of the password on the Company’s website (if the Company provides such an opportunity). The Company’s website may collect certain information about the Data Subject’s visit, for example: the Internet Protocol (IP) address used by the Data Subject to access the Internet; the date and time of the Data Subject’s visit to the Company’s website; other websites visited by the Data Subject while on the Company’s website; the browser used; information about the Data Subject’s computer operating system; versions of mobile applications; language settings, and more.
If the Data Subject uses a mobile device, data may also be collected that allows determining the type of mobile device, device settings, as well as geographical (longitude and latitude) coordinates. This information is used to improve the Company’s website, analyze trends, improve products and services, and administer the Company’s website. The Data Subject voluntarily provides this data when using the services provided by the Company, becoming a registered user of the Company’s website, or visiting the Company’s website.
5.2. The personal data information collected by the Company may be any personal data information not specified above in this article, but voluntarily provided to the Company by the data subject or otherwise received and lawfully processed by the Company.
6. What are the rights of a personal data subject?
6.1. Data subject rights and means of their implementation:
6.1.1. to know about the collection of their personal data. The data subject has the right to access their personal data;
6.1.2. to access their personal data and how they are processed. The data subject has the right to contact the Company with a request to provide information about what and for what purpose their personal data is processed;
6.1.3. to demand correction, destruction of their personal data or suspension of the processing of their personal data;
6.1.4. to receive the Data they have provided in a structured, readable format, if this meets the criteria defined by law;
6.1.5. The Data Subject has the right to object to the Processing of Data where non-mandatory data is processed. Where the Data is processed for direct marketing purposes, the Data Subject may object to such Processing (right to object). The Company, upon receiving a request to terminate the processing of non-mandatory personal data, shall immediately terminate such processing, unless this is contrary to the requirements of legal acts, and shall inform the person thereof;
6.1.6. to withdraw at any time any consent that the Data Subject has given when registering or using the services provided by the Company. Such refusal shall not affect the lawfulness of the Data Processing carried out prior to the refusal and based on the consent given;
6.1.7. to refuse to provide personal data;
6.1.8. to file a complaint with the supervisory authority if the rights of the Data Subject are violated;
7. What are cookies and what are they used for?
7.1. The Company’s website uses data analysis management tools – cookies.
7.2. By using the Company’s website, the Data Subject agrees that the cookies referred to in these Terms of Use will be stored on the Data Subject’s computer (device).
7.3. Cookies are small amounts of data that a website places on the Data Subject’s computer. Websites do not have memory. When the Data Subject browses different websites, the Data Subject will not be recognized as the same user. Cookies allow the website to recognize the Data Subject’s browser. The main purpose of cookies is to remember the Data Subject’s preferences, for example, the preferred language of the website. Cookies also help to recognize the Data Subject when returning to the same website. They help to customize the website to personal needs.
Cookies cannot be used to execute programs or transmit viruses to a computer. Cookies are intended only for the Data Subject and can only be read by the web server of the domain that sent the cookie to the Data Subject. One of the most important purposes of cookies is to provide a convenient feature to save the Data Subject’s time.
For example, if the Data Subject uses a website for personal purposes or browses a website, cookies will help the website to remember specific information upon subsequent visits. This makes it easier to present relevant content, to navigate the website more easily, etc. Upon returning to the website, the Data Subject can find the information they previously provided, and can therefore more easily use the website’s already customized features.
7.4. Data processing using cookies does not allow the user to be directly or indirectly identified.
7.5. The following types of cookies may be used on the Company’s website:
7.6. Technical cookies: with their help, the Company strives to provide users of the Company’s website with an advanced and easy-to-use website that automatically adapts to their wishes and needs.
7.7. Functional cookies: they allow the Data Subject’s choices to be remembered and at the same time to use the website effectively.
7.8. Analytical cookies: they are used to understand how the Company’s visitors use the Company’s website, to discover the weak and strong parts of the website, and to optimize the work of the website.
7.9. Commercial cookies: the Company uses these cookies to place the Company’s advertisements on other websites.
7.10. Each time the Data Subject visits the Company’s website, the Data Subject can accept or refuse to use cookies, but in this case the Company cannot guarantee the quality of browsing the website. Most Internet browsers automatically accept cookies, but if the Data Subject wishes, the browser can easily be modified to not accept them.
Thus, the Data Subject has the ability to delete some or all cookies from their computer at any time, or to block them, using the Internet browser on their computer. If cookies are blocked, some parts of the Company’s website may not work or function properly for the Data Subject for technical reasons.
7.11. No personal customer data is collected using cookies.
7.12. No information is provided to third parties during the storage of necessary cookies.
8. Third-party websites
8.1 The Company is not responsible for ensuring the Client’s privacy on third-party websites, even in cases where the Client accesses third-party websites using links on this website. The Company recommends that you familiarize yourself with the privacy terms of each website not owned by the Company.
9. Ensuring information security
9.1 The Company aims to ensure the highest possible security of all information received from the Client and from public data files. In order to protect this information from unauthorized access, use, copying, accidental or unlawful destruction, alteration, or disclosure, as well as from any other unlawful processing, the Company uses appropriate legal, administrative, technical and physical security measures.
10. Final provisions
10.1 These Privacy Policy provisions are subject to the law of the Republic of Lithuania. All disputes arising from these Privacy Policy provisions will be resolved through negotiations, and if they fail, in the courts of the Republic of Lithuania.
In this Privacy Policy, the term “this website” refers to www.tukogroup.eu
