1. General Provisions
1.1 The controller of your personal data is UAB “Ausnė”, Company Code: 145466128. Contact details are published at www.auraplus.eu
1.2 We care about the protection and privacy of your personal data. Therefore, through this Privacy Policy (hereinafter referred to as the Policy), we inform you about the processing of personal data, the rights of data subjects, the measures implemented to ensure personal data protection, and other matters related to the processing of personal data.
1.3 The Company collects personal data voluntarily provided by individuals via email, registered mail, fax, telephone, or through the Company’s website.
1.4 All personal data received by the Company is collected, stored, and processed in accordance with the requirements set forth in the Law on Legal Protection of Personal Data of the Republic of Lithuania, the General Data Protection Regulation (EU) No. 2016/679, and other legal acts regulating personal data protection in the Republic of Lithuania.
1.5 The Company ensures that the level of protection of personal data processed by the Company complies with the requirements of Lithuanian legislation.
2. Definitions
2.1 The terms used in this document shall have the following meanings:
2.1.1 Personal data – any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name and surname, personal identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
2.1.2 Data subject – a natural person from whom the Company receives and processes personal data;
2.1.3 Data recipient – a person to whom personal data is disclosed;
2.1.4 Data provision – the disclosure of personal data by transferring or otherwise making it available (excluding publication in mass media);
2.1.5 Data processing – any operation or set of operations performed on personal data, including collection, recording, accumulation, storage, classification, grouping, combination, alteration (supplementation or correction), provision, publication, use, logical and/or arithmetic operations, search, dissemination, destruction, or any other action;
2.1.6 Automated data processing – processing operations carried out wholly or partly by automated means;
2.1.7 Data processor – a legal or natural person (who is not an employee of the data controller) authorized by the data controller to process personal data. The data processor and/or the procedure for its appointment may be established by laws or other legal acts;
2.1.8 Data controller – a legal or natural person who, alone or jointly with others, determines the purposes and means of personal data processing. Where the purposes of processing are determined by law or other legal acts, the data controller and/or the procedure for its appointment may be established in such laws or legal acts;
2.1.9 Consent – any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, by a statement or clear affirmative action, signifying agreement to the processing of personal data relating to them;
2.1.10 Direct marketing – activities intended to offer goods or services and/or inquire about opinions regarding offered goods or services by mail, telephone, or other direct means;
2.1.11 Third party – a legal or natural person other than the data subject, the data controller, the data processor, or persons authorized to process data under the direct authority of the controller or processor;
2.1.12 Other terms used in this Policy shall be understood as defined in the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts regulating personal data processing.
3. Principles of Personal Data Processing
3.1 When processing personal data, the Company adheres to the following principles:
3.1.1 Personal data is processed only for lawful purposes defined in this Policy;
3.1.2 Personal data is processed accurately, fairly, and lawfully, in compliance with legal requirements;
3.1.3 The Company processes personal data in a manner ensuring that it remains accurate and is continuously updated when changes occur;
3.1.4 The Company processes personal data only to the extent necessary to achieve the purposes of processing;
3.1.5 Personal data is stored in a form that permits identification of data subjects for no longer than necessary for the purposes for which the data was collected and processed;
3.1.6 Personal data may only be accessed by Company employees with appropriate competence and/or third parties engaged by the Company for service provision, and only where necessary to provide such services.
3.2 The Company respects the privacy of the data subject and undertakes to continuously comply with the data protection principles set out in this Policy.
4. Purposes of Personal Data Processing
4.1 Personal data is processed and used depending on the purposes for which the data subject provided it to the Company or other purposes confirmed by the data subject.
4.2 The purposes of using the data subject’s personal data include:
4.2.1 Processing and administering the purchase (order) of services;
4.2.2 Identifying the data subject in the Company’s information systems;
4.2.3 Identifying the data subject when logging into their account on the Company’s website (where such functionality is provided);
4.2.4 Issuing and providing vouchers, confirmations, invoices, and other financial documents for purchased (ordered) services;
4.2.5 Resolving issues related to contract performance;
4.2.6 Contacting the data subject in the event of changes to the conditions of purchased goods or services;
4.2.7 Fulfilment of other contractual obligations;
4.2.8 Direct marketing purposes of the Company;
4.2.9 Security, health, administrative, crime prevention, investigative, and legal purposes;
4.2.10 Business analytics and general research aimed at improving the quality of goods or services;
4.2.11 Contacting the data subject to obtain customer feedback regarding purchased services;
4.2.12 Assessing candidates for employment positions, contacting relevant candidates, etc.;
4.2.13 Audit purposes.
4.3 By voluntarily providing their personal data, the data subject confirms and freely agrees that the Company may manage and process their personal data in accordance with this Policy, applicable laws, and other legal acts.
4.4 The Company undertakes not to disclose personal data to third parties without the data subject’s consent, except where necessary to ensure proper performance of the contract or related services. The Company may also transfer personal data to third parties acting on behalf of the Company as data processors. Personal data may only be provided to those processors with whom the Company has concluded appropriate data processing agreements. The data subject is considered informed and consenting thereto, and the Company shall not be liable for damage arising from third-party use of the data subject’s data to the extent permitted by law. In all other cases, personal data may only be disclosed in accordance with Lithuanian legislation.
5. What Personal Data Do We Process?
5.1 The personal data collected by the Company may include: the data subject’s name, surname, personal or company identification code, telephone number, email address, the name of the company represented, information about purchased goods and services (quantities, purchase dates, prices, purchase history), login name and encrypted password on the Company’s website (if such functionality is provided).
The Company’s website may also collect certain information about the data subject’s visit, such as: IP address, date and time of the visit, other websites visited while browsing, browser type, operating system information, mobile application versions, language settings, and other technical data. If a mobile device is used, data enabling identification of the device type, settings, and geographical coordinates (longitude and latitude) may also be collected.
This information is used to improve the Company’s website, analyze trends, enhance products and services, and administer the website. The data subject provides this data voluntarily by using the Company’s services, registering as a user, or visiting the website.
5.2 The Company may also collect any other personal data voluntarily provided by the data subject or otherwise lawfully obtained and processed by the Company.
6. Rights of the Data Subject
6.1 The data subject has the following rights:
6.1.1 To be informed about the collection of their personal data and to access such data;
6.1.2 To request information about what personal data is processed and for what purposes;
6.1.3 To request correction, deletion, or suspension of processing of their personal data;
6.1.4 To receive the data provided in a structured, commonly used, and machine-readable format, where applicable under law;
6.1.5 To object to the processing of non-mandatory data, particularly for direct marketing purposes. Upon receiving such a request, the Company shall immediately cease such processing unless contrary to legal requirements, and shall inform the individual accordingly;
6.1.6 To withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal based on consent;
6.1.7 To refuse to provide personal data;
6.1.8 To lodge a complaint with a supervisory authority if their rights are violated.
7. Cookies and Their Use
7.1 The Company uses data analysis and management tools – cookies – on its website.
7.2 By using the Company’s website, the data subject agrees that cookies may be stored on their computer (device).
7.3 Cookies are small amounts of data placed on the data subject’s device by a website. Websites have no memory; therefore, cookies allow recognition of the data subject’s browser. Their main purpose is to remember user preferences, such as website language. Cookies also help recognize the user when returning to the same website and personalize the browsing experience.
Cookies cannot be used to run programs or transmit viruses. They are assigned only to the user and may only be read by the web server of the domain that issued the cookie.
Cookies save the data subject’s time by remembering settings and delivering relevant content more efficiently.
7.4 Processing data through cookies does not allow direct or indirect identification of the user.
7.5 The following types of cookies may be used:
7.6 Technical cookies – used to ensure smooth and advanced website functionality;
7.7 Functional cookies – allow remembering user choices and improving usability;
7.8 Analytical cookies – help understand how visitors use the website, identify website strengths and weaknesses, and optimize performance;
7.9 Commercial cookies – used for placing Company advertisements on other websites.
7.10 Each time the data subject visits the website, they may accept or refuse cookies. However, refusal may affect the quality of browsing. Most browsers automatically accept cookies, but settings may be modified to decline them.
The data subject may delete or block cookies at any time using browser settings. Blocking cookies may cause certain parts of the website to malfunction.
7.11 No personal customer data is stored through cookies.
7.12 No information is provided to third parties during the storage of essential cookies.
8. Third-Party Websites
8.1 The Company is not responsible for ensuring the privacy of customers on third-party websites, even if such websites are accessed via links provided on this website. The Company recommends reviewing the privacy terms of each external website.
9. Information Security
9.1 The Company aims to ensure the highest possible security of all information received from the customer or public databases. To protect this information from unauthorized access, use, copying, accidental or unlawful destruction, alteration, disclosure, or any other unlawful processing, the Company applies appropriate legal, administrative, technical, and physical security measures.
10. Final Provisions
10.1 The provisions of this Privacy Policy shall be governed by the laws of the Republic of Lithuania. Any disputes arising from these provisions shall be resolved through negotiations, and if unsuccessful, in the courts of the Republic of Lithuania. In this Policy, the term “this website” refers to www.auraplus.eu