PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA PROVIDED IN THE E-SHOP
CHAPTER I
ASSUMPTIONS
I.1. This Privacy Policy when processing personal data submitted in the e-shop (hereinafter referred to as the Privacy Policy) has been prepared in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania, EU General Data Protection Regulation 2016/679 and other legal acts regulating the protection, lawful processing and use of personal data.
I.2. The purpose of the Privacy Policy is to regulate the basic principles and procedures for the collection, processing and storage of personal data of data subjects who have submitted their data in this e-shop, as well as to establish data subjects’ rights, personal data protection enforcement measures and other issues related to personal data processing.
I.3. E-Shop – this e-shop operates on the Website fleetson.com, administered by the Seller
I.4. The provisions of this Privacy Policy shall be implemented by the following Seller: LLC Monitoringo centras
Legal entity code 303357829
Vilnius, Savanorių av. 174R
Phone 8 5 2167849
E-mail support@fleetson.com
Website www.fleetson.com
CHAPTER II
PRINCIPLES AND PURPOSES OF THE PROCESSING OF PERSONAL DATA
II.1. The processing of personal data shall comply with the following requirements for the processing of personal data:
II.1.1. personal data shall be collected for specified and legitimate purposes and later are not processed for purposes incompatible with the purposes determined before the personal data concerned are collected;
II.1.2. personal data shall be processed accurately, fairly and lawfully;
II.1.3. personal data shall be accurate and, where necessary, for purposes of personal data processing, kept up to date; inaccurate or incomplete data must be rectified, supplemented, erased or their further processing must be suspended;
II.1.4. personal data shall be not excessive in relation to the purposes for which they are collected and further processed;
II.1.5. personal data shall be kept in a form which permits identification of data subjects for no longer than it is necessary for the purposes for which the data were collected and processed and for not longer than the time limits for the storage of such data or files in which the said personal data are stored, the terms of storage shall be established by the legal acts of the Republic of Lithuania;
II.1.6. personal data must be processed in such a way as to ensure adequate security of personal data by appropriate technical or organizational measures.
II.2. The purposes of personal data processing are registration in this e-shop, formation, provision and execution of an order for goods / services offered by the Seller, as well as other lawful and pre-defined purposes prior to data collection.
CHAPTER III
RIGHTS OF DATA SUBJECTS AND MEASURES FOR THEIR ENFORCEMENT
III.1. Data subjects shall have the right to:
III.1.1. Be aware of his/her own personal data processing;
III.1.2. To get an access to own personal data upon submitting a request to the Seller directly, by post or e-mail (in order to properly identify the person making the request), as well as to get an access to the processing of your personal data; to receive copies of documents containing his/her personal data; The Seller shall have the right to request the data subject to provide an identity document if such request relates to the provision of such data that may materially affect the provision of the Seller’s services;
III.1.3. Require the rectification, destruction or suspension of the processing and / or storage of own personal data, unless this is contrary to the legislation of the Republic of Lithuania, when the relevant transaction with the said data subject has not expired or such transaction has not been fully executed, therefore such data cannot be destroyed or the processing suspended;
III.1.4. to submit a complaint to the State Data Protection Inspectorate.
III.2. When implementing the rights of data subjects provided for in Clause 3.1 of the Rules, the Seller shall create appropriate technical organizational possibilities for the exercise of such rights, except in cases provided by law to ensure state security or defence, public order, crime prevention, investigation, detection or prosecution, protection of the rights or freedoms of the data subject or of other persons.
III.3. When collecting personal data, the Seller shall provide the data subject whose personal data is collected with the following information (unless the data subject already has such information):
III.3.1. Seller’s name, registration code and registered office;
III.3.2. The purposes for which personal data are collected;
III.3.3. Other additional information (to whom and in what cases the data subject’s data may be provided, what personal data the data subject must provide and what are the consequences of not providing such information (in this case, such information may be included in the transaction with the data subject).
III.4. Upon receipt of the data subject’s application provided for in Clause 3.1.2 of the Rules, the Seller undertakes to provide a response by post or e-mail specified by the data subject within 30 calendar days of its receipt, indicating the requested data and other requested information. However, if the request submitted in the application contradicts the legal acts of the Republic of Lithuania, public order or may violate the privacy and / or personal data of other persons, the Seller shall have the right to refuse to provide the requested data and inform the data subject thereof.
CHAPTER IV
OBLIGATIONS OF THE SELLER IN PROCESSING PERSONAL DATA
IV.1. Only the Seller’s employees or authorized persons shall have the right to process personal data, who shall be informed in writing of the obligation to protect personal data and comply with other measures to ensure confidentiality.
IV.2. The Seller’s employees / authorized persons shall:
IV.2.1. Protect personal data from being disclosed to third parties, unrelated persons;
IV.2.2. Process personal data in lawful ways in accordance with the procedure established by the legal acts of the Republic of Lithuania and this Privacy Policy;
IV.2.3. Not disclose, transfer or create conditions for access to personal data by any means to any person who is not authorized by the Seller to process personal data, except for the exceptions provided for in the Privacy Policy and legal acts of the Republic of Lithuania;
IV.2.4. Immediately notify the Seller’s head manager or his / her appointed person of any suspicious situation that may compromise the security of personal data.
IV.3. The Seller’s employees / authorized persons from whose computers it is possible to access the areas of the local network where personal data is stored shall use passwords. Passwords shall be changed periodically, as well as in certain circumstances (change of employee / authorized person, threat of hacking, suspicion that the password has become known to third parties, etc.).
IV.4. The Seller’s employee responsible for computer maintenance shall ensure that personal data files are not accessible from other computers and that anti-virus programmes are updated periodically.
CHAPTER V
PERSONAL DATA COLLECTED FROM DATA SUBJECTS AND PECULIARITIES OF THEIR PROCESSING
V.1. The Seller collects the information that the data subject provides to it directly with an intention to purchasing goods / services (creating an order), creating an account (to see his/her orders, their status, purchase history, etc.), making a request if the data subject wishes to receive an individual offer or consultation:
V.1.1. Name, surname;
V.1.2. Residence / correspondence address;
V.1.3. Telephone number;
V.1.4. E-mail address;
V.1.5. Make, model, year of manufacture, colour, identification number or other identifying data of the vehicle (object) in which it is desired to install the Seller’s product and provide services;
V.1.6. Other data necessary for the provision of the services offered by the Seller, the provision of which is predefined (when concluding a transaction regarding the services offered by the Seller) and is carried out at the knowledge of the data subject (for example, vehicle location coordinates, status, etc.).
V.2. The Seller collects information about the data subject’s device, which is provided when the data subject browses the Seller’s website (e-shop), including Internet Protocol (IP) address and device type, screen resolution and (if the information is shared with the seller) data on the location of the data subject.
V.3. The Seller shall have the right to process the personal data specified in this section exclusively for the purposes and within the limits of concluding and / or executing a transaction (order) for the provision of products and / or services, including order and payment processing, delivery of goods, processing of data subjects’ requests and other expressly defined purposes known in advance to the data subjects.
V.4. The Seller shall have the right to process the personal data specified in this section for other purposes only with the prior consent of the data subject. Such consent may be revoked at any time by the data subject by contacting the Seller by e-mail support@fleetson.com or by phone 8 5 2167849.
V.5. The Seller shall also have the right to process the personal data referred to in this section without the consent of the data subject on the basis of a legitimate interest, i.e., when the processing of personal data is necessary to meet or protect legal requirements, public interests and other cases required by law.
V.6. The Seller shall not transfer the collected personal data specified in clauses 5.1-5.2 to third parties, unless the prior written consent of the data subject has been obtained or such provision of data to third parties is regulated by the mandatory legislation of the Republic of Lithuania.
V.7. The personal data specified in Clause 5.1 of the Privacy Policy may be transferred to the authorized persons used by the Seller for the purpose of processing the order payment through an external bank, delivering the goods to the data subject’s address or fulfilling warranty / non-warranty service obligations.
V.8. The data specified in Clause 5.1 of this Privacy Policy shall be processed during the period of validity of the respective transaction with the data subject and shall be deleted upon the expiration or termination of such transaction, unless the relevant data is required to be stored and archived by the legislation of the Republic of Lithuania.
V.9. Upon expiry / termination of the transaction with the data subject, the data specified in Clauses 5.1.1-5.1.4 of the Privacy Policy shall be stored until the moment of cancellation of the account created by the data subject.
V.10. The account created by the data subject may be cancelled at the initiative of the data subject or by the Seller if all transactions concluded with the data subject have been terminated and he/she has not used the services offered by the Seller for more than one calendar year.
V.11. The data specified in Clause 5.1 of this Privacy Policy shall also be processed for the purposes of the Seller’s accounting, for the purpose of proper execution and accounting of transactions with data subjects. Such data shall be stored in the Seller’s accounting software for the period necessary for the management of the accounting.
V.12. Transactions concluded with data subjects regarding the services offered by the Seller shall be stored in the e-shop for no longer than 10 (ten) years from the moment of expiry / termination of such transaction.
CHAPTER VI
COOKIE USE POLICY
VI.1. Cookies are a small text file (made up of letters and numbers) which the website saves on the computer or mobile device of the data subject who visited it.
VI.2. This website uses cookies for purely technical purposes, i.e., to ensure the smooth operation of the website, its structure and a proper representation of the content.
VI.3. The information provided in this section shall not be collected or passed on to third parties and shall be used only during a one-time visit to the Website.
VI.4. In accordance with the provisions of the EU General Data Protection Regulation 2016/679, such use of cookies does not require the prior consent of the data subject.
CHAPTER VII
FINAL PROVISIONS
VII.1. In the event of an amendment to this Privacy Policy, it shall be republished on the Website.
VII.2. If you have any questions regarding the implementation or interpretation of the provisions of this Privacy Policy, please contact us using the following contact details:
E-mail support@fleetson.com
Phone No +370 5 2167849