PRIVACY POLICY

Last updated: 2024-07-31

1. What will I find in this Policy?

This privacy policy (the "Policy") sets out how Delegatai, UAB (referred to as "we" or the "Company") collects, uses, and protects information about you, as well as outlining your rights. We comply with the EU General Data Protection Regulation ("GDPR") and other applicable data protection laws to safeguard your information. We may update this Policy, and we encourage you to visit our website at www.zalgirisshop.lt periodically to review the most current version of the Policy.

2. Who is responsible for protecting my information?

We are: UAB „Delegatai“
Registration number: 303192733
Address: Raudondvario av. 101B, LT-47184 Kaunas
Email: info@zalgirisshop.lt

3. Why and how do you collect my information?

3.1 To process your orders in our online shop and deliver the purchased goods to you

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you buy our products Name, surname, delivery address, country/region, city, county, postcode, street, house number, payment details, email address, phone number, purchase history, residential address Contract (Art. 6(1)(b) of GDPR) From you For the duration of the contract and for 10 years thereafter

3.2 To enable you to register at our website

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you create an account on our website Name, surname, username, address, delivery address, payment details, email address, phone number, purchase history Contract (Art. 6(1)(b) of GDPR) From you 3 years from the last login to your account

3.3 To enable you to use our website, secure it, and set default options

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you visit our website IP address, geographical location, browser type and version, operating system, device type, screen resolution and (if you agree to share it) your location data, as well as information about your use of our website (i.e. referral source, length of visit, page views and browsing paths, as well as information about the timing, frequency and pattern of your use of our services). Legitimate interest to administer our website and ensure its security (Art. 6(1)(f) of GDPR) From you 1 year after you visit our website

3.4 To provide customer support

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you contact us with an enquiry Email address, subject of the request, date of the request, content of the request, attachments to the request, name and/or surname in the request, reply to the request, information you have provided Consent (Art. 6(1)(a) of GDPR) From you Not more than 2 (two) years from the end of communication with you

3.5 To provide customer support

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you contact us with an enquiry Email address, subject of the request, date of the request, content of the request, attachments to the request, name and/or surname in the request, reply to the request, information you have provided Consent (Art. 6(1)(a) of GDPR) From you Not more than 2 (two) years from the end of communication with you

3.6 To send you relevant communications and newsletters

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you consented to receive communications and newsletters or when you have purchased our products Your name, surname, email address, content of the message Consent (Art. 6(1)(a) of GDPR) Customer relationship (Art. 81(2) of the Law on Electronic Communications of the Republic of Lithuania) From you 5 years from the date of purchase or consent, unless you unsubscribe from relevant notifications and newsletters earlier

3.7 To administer our social media profiles

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you consented to receive communications and newsletters or when you have purchased our products Your name, surname, email address, content of the message Consent (Art. 6(1)(a) of GDPR) Customer relationship (Art. 81(2) of the Law on Electronic Communications of the Republic of Lithuania) From you 5 years from the date of purchase or consent, unless you unsubscribe from relevant notifications and newsletters earlier

3.8 Nes administruojame mūsų socialinių medijų paskyras

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you make actions on our social media profiles (e.g. comment) Name in your profile, email address, gender, country, photo, message, time and date you received the message, content of the message, attachments to the message, reply to the message, time of reply to the message, information about our rating, comments on the post, sharing the post, information about the reaction to the post Consent (Art. 6(1)(a) of GDPR) From you 10 years from the time you make an action on our social media accounts

3.9 To carry out the selection of potential employees

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you apply for a job in our company, or when we assess you as a potential candidate Name, date of birth, address, telephone number, e-mail address, place of work, education, preferred job, date of receipt of CV, personal qualities, work experience, last place of work, length of previous employments, position held at the place of work, other work experience, language, proficiency in a foreign language, level of reading, writing, speaking, ability to work with computer programmes, other details and motivation, preferred salary, and/ or any other information you provide at the time of applying for the job Consent (Art. 6(1)(a) of GDPR)
Contract (steps we need to take at your request before entering into an employment contract)
(Art. 6(1)(b) of GDPR)
Legitimate interest in contacting you when you publicly disclose your information on professional social media platforms (Art. 6(1)(f) of GDPR)		 From you
Professional social media platforms (e.g. LinkedIn)		 3 years after the end of the relevant recruitment process
5 years after you give us your consent or after we collect information from social media platforms of a professional nature

3.10 To comply with statutory accounting requirements

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
When you purchase our products Name, surname, address, email address, telephone number, details of personal identification documents, details of goods purchased, signature, amount due, invoice for goods, bank account number, accounting documents Legal obligation (Art. 6(1)(c) of GDPR) From you 10 years after you make a transaction

3.11 Nes giname savo teises ir interesus teisiniuose procesuose

When is this relevant to me? What information do you collect about me? What is the legal basis for processing my information? From where do you collect my information? How long do you retain my information?
In the event that we become a party to legal or other legal proceedings in which you are involved All of the above information relating to other purposes, documents and attachments sent to you, documents and attachments provided by you, documents and attachments, procedural documents, judgments, decisions, rulings, information about offences and convictions Legitimate interest in defending the company's rights and interests in legal proceedings (Article 6(1)(f) GDPR) From you
Law enforcement, the judiciary and other public authorities, parties to the legal proceedings with which you are involved		 3 (three) years from the date of entry into force of the court or authority's decision, or full execution of a legally binding decision

4. What information should I provide to you and why?

Where we process your data based on legal obligations or for the performance of a contract (as described in paragraph 3 above), you must provide us with your personal data. If we use online forms to collect information, they may contain mandatory fields required by law, contractual requirements, or otherwise necessary for the provision of services. If you do not provide this data, we will not be able to provide you with the services or fulfill our other obligations to you.

5. Who do you share my information with?

Where necessary for the purposes described above and permitted by applicable law, we share your data with data recipients both within and outside the European Economic Area (EEA).

No. Data recipients or categories of data recipients Location of data recipient What is the legal basis for transferring my data outside the EEA?
Paysera LT, UAB Lietuva Netaikoma
UAB „Interneto vizija“ Lithuania N/A
UAB „Visetas“ Lithuania N/A
VšĮ „Žalgirio krepšinio centras“ Lithuania N/A
Typeform SL EU N/A
Google Inc. US Standard Contractual Clauses
ActiveCampaign, LLC. US Standard Contractual Clauses
Facebook, Inc. US Standard Contractual Clauses
Twitter Inc. US Standard Contractual Clauses
LinkedIn Inc. US Standard Contractual Clauses
Lawyers, notaries, bailiffs Lithuania / EU N/A
Law enforcement authorities and courts of the Republic of Lithuania and the European Union Lithuania / EU N/A
Other service providers (providers of technology tools and applications, providers of accounting services, providers of compliance and legal services, providers of insurance services, other categories of service providers) Various Where we transfer data outside the EEA, we rely on the European Commission's adequacy decision where these have been issued in respect of the countries to which the transfer is made or on Standard Contractual Clauses approved by the European Commission

6. Do you engage in automated-decision making, including profiling?

No, we do not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you.

7. What are my rights?

Subject to conditions, limitations, and exceptions established by statutory data protection provisions, you have the rights listed below:

My right Summary
Right of access The right to obtain confirmation from us as to whether Data relating to you is being processed and, if such Data is being processed, the right to have access to the Data and information about the processing.
Right to rectification The right to require us to rectify inaccurate Data relating to you.
Right to erasure (‘right to be forgotten’) - when Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- when you withdraw consent on which the processing of Data is based and there is no other legal ground for the processing;
- when you object to the processing of Data and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes;
- where the Data have been unlawfully processed;
- where the Data have to be erased for compliance with a legal obligation;
- where the Data have been collected in relation to the offer of information society services directly to a child and subject to a consent.
Right to restriction of processing - where the accuracy of the Data is contested by you;
- where the processing of Data is unlawful and you oppose the erasure of the Data and request the restriction of their use instead;
- where we no longer need the Data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
- where you have objected to the processing of the Data and until it has been verified whether our legitimate interests override yours.
Right to data portability where you seek to receive the Data you have provided in a structured, commonly used and machine-readable form or to transmit those Data to another controller, the processing is based on consent or on a contract and is carried out by automated means.
Right to object where the collection and use of the Data is based on a task carried out in the public interest or in the exercise of official authority vested or legitimate interest, including profiling, as explained in Section 3 of this Privacy Policy, or where you object to the collection of your Data for direct marketing purposes.
Right to withdraw consent where the processing of Data is based on consent, as explained in Section 3 of this Privacy Policy, and you seek to withdraw it at any time.
Right to lodge a complaint Right to lodge a complaint with a supervisory authority

8. Do you use cookies and similar tracking technologies?

Yes, our website uses cookies and other tracking technologies to make our website easier to use, and to improve the performance and security of the website. Details of cookies and other identifiers are set out in the table below.

Cookie category Cookie name Cookie purposes Cookie retention period
Statistical
_ga A unique ID is registered, which is used to generate statistical data about how the visitor uses the website. 2 years
_ga_# It is used to collect data on the number of times a visitor has visited the website, as well as the dates of the first and last visit. 2 years
Marketing
ads/ga-audiences Used by Google AdWords to attract repeat visitors, who may turn into customers, based on the visitor's online behaviour on different websites. Session

9. Kaip galiu valdyti slapukus?

You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies you may be unable to access certain areas or features of our website. You can control the use of functionality cookies, targeting cookies or advertising cookies by adjusting your browser settings. To find out how to manage cookies in your browser, please visit one of the links below:

10. How can I exercise my rights and contact your DPOs?

If you have any questions regarding the protection of your personal data or wish to exercise your rights, please contact our Data Protection Officers at dap@zalgiris.lt.