Privacy Policy

In this privacy policy (hereinafter - Privacy Policy) we provide you with information on how Rimgerda UAB, company code 302767519, registered office address Tvenkinių g. 8A-54, Šakių k., Kauno r., LT-47413, (hereinafter - Data Controller) manages your personal data in the autoangaras.lt online store.

You can contact the Data Controller at the following contacts:

Tel.: +37061256056

E-mail: rimgerda@gmail.com

Address: Tvenkinių g. 8A-54, Šakių k., Kauno r., LT-47413

What personal data do we process?

Purpose: Order delivery

Data: Name, surname, telephone number, e-mail address, address, parcel self-service terminal information.

To whom we may transfer: To delivery service providers.

Legal basis: Performance of contract.

Storage time: Until the expiry of the product warranty/return period.

Purpose: Refund of payment

Data: Name, surname, bank account number/payment card number/PayPal account details.

To whom we may pass on: Payment service providers.

Legal basis: Performance of a contract.

Retention period: Until the expiry of the product warranty/return period.

Purpose: Creation of a user account in the online shop.

Data: Name, surname, password, phone number, email address, address.

Legal basis: Performance of the contract.

Storage time: 2 years after the last login to your account or upon request to delete your profile.

Purpose: Direct marketing.

Data: Name, surname, email.

To whom we may transfer: Direct marketing tools.

Legal basis: Consent.

Duration of storage: 2 years after consent is obtained.

Purpose: Administration of social network accounts.

Data: Unique ID, IP address, device information.

To whom we may transfer: Social network managers.

Legal basis: Consent.

Duration of storage: For as long as you follow social networking accounts.

How do we process your personal data on social networks?

The information you provide to us via social media when you visit our accounts is controlled by us as joint controllers of personal data with the social network managers.

We currently have the following social media accounts:

• "Facebook - [●], whose privacy notice can be found at https://www.facebook.com/privacy/

• "Instagram - [●], whose privacy notice can be found at https://help.instagram.com/519522125107875

• "Linkedin - [●], whose privacy notice can be found at https://www.linkedin.com/legal/privacy-policy

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

Who can we transfer your personal data to?

We may transfer your information to our employees, agents, service providers as reasonably necessary for the purposes set out in this Privacy Policy.

We may also disclose information about you if we are required to do so by law or in order to protect our rights or interests, including in connection with the contemplated transfer of the business or part of the assets of the company or the reorganization of the company or in the course of these processes, disclosure of your personal data to a potential acquirer of the business or part of the business, other participants in the reorganization.

How is your personal data processed?

In processing your personal data, we comply with the General Data Protection Regulation ("GDPR"). GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements. The Data Controller, both when establishing the means of processing personal data and during the processing itself, implements appropriate data protection measures as provided for by law to protect the personal data processed against accidental or unlawful alteration, disclosure, loss, as well as against any other unlawful processing. The appropriate measures shall be determined taking into account the risks arising from the processing of personal data.

What are your rights?

If you would like more information about your rights or to exercise your rights, please contact us at the contact details provided in this Privacy Policy. Below are your rights in relation to the processing of your personal data by the Data Controller and when you can exercise these rights.

• You can contact us at any time to enquire whether we are processing any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, please submit a written request to us at the email address set out in this Privacy Policy. When making such a request, please observe the principles of fairness and reasonableness.

• If you have consented to the processing of your data, you may withdraw your consent at any time by contacting us at the email address provided in this Privacy Policy.

• You have the right to request the rectification of any inaccuracies in the data held. In this case, we may ask you to confirm the corrected information.

• You have the right to ask us to delete your personal data. This right is exercised in the cases provided for in Article 17 of the GDPR.

• You have the right to ask us not to process your personal data or to restrict processing.

• You have the right to object to our use of your personal data on the basis of Article 21 GDPR.

How can you exercise your rights?

To exercise your rights, please submit requests or complaints in writing to us at the contact details provided in this Privacy Policy.

We will respond to any requests, complaints or demands we receive in writing in accordance with the procedures and deadlines set out by law - no later than 30 days after receiving your request.

If, following receipt of a request or complaint, we are suspicious about the identity of the person making the request, we have the right to ask for the identity document of the person making the request.

Complaints

If you believe that your rights have been or may be violated, please contact us immediately using the contact details set out in this Privacy Policy. We ensure that once we have received your complaint, we will contact you within a reasonable period of time to inform you of the progress of the investigation and the outcome of the complaint. If you are not satisfied with the outcome of the investigation, you may lodge a complaint with the supervisory authority, the State Data Protection Inspectorate (www.vdai.lrv.lt/).

Responsibility

You are responsible for ensuring that the data you provide is accurate, correct and complete. If the data you have provided changes, you must inform us immediately by email. We will not be liable for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes to it.

Privacy Policy updated on 1 March 2022.