Privacy and Cookie Policy

PRIVACY POLICY OF THE WEBSITE OF UAB "ŠIAULIŲ VANDENYS"

CHAPTER I
GENERAL PROVISIONS

1. The Privacy Policy of the website of UAB "Šiaulių vandenys" (hereinafter - the Policy) sets out the methods of collecting and processing information used on the website of UAB "Šiaulių vandenys" (hereinafter - the Company), ensuring compliance with the legal requirements of the Republic of Lithuania and the European Union.
2. The processing of personal data of the Company's website visitors is carried out in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter - the Regulation) and other legal acts governing the protection of personal data.
3. This Policy applies when a visitor visits the www.siauliuvandenys.lt website. This Policy does not apply when visitors browse websites of other companies reached through the www.siauliuvandenys.lt website.
4. The terms used in the Policy correspond to the terms used in the Regulation.
5. The data controller is the Company, company code 144133366, Vytauto g. 103, Šiauliai.

CHAPTER II
SCOPE AND PURPOSE OF PROCESSING PERSONAL DATA OF WEBSITE VISITORS

6. Personal data of visitors to the Company's website is processed for the following purposes:
6.1. the Company uses cookies on its website in order to ensure fast and convenient use of the Company's website and efficient access to the information on it, as well as to determine whether the website is useful and informative and how to improve it in the future;
6.2. the Company processes data on the Electronic Invoice (EDS) portal esaskaita.siauliuvandenys.lt;
6.3. the Company processes data entered by website visitors in the inquiry forms on the Company's websites;
6.4. the Company processes data entered by website visitors in service and customer service evaluation questionnaires;
6.5. the Company processes e-mail addresses of website visitors for the purpose of sending newsletters.
7. Cookies:
7.1. a cookie is a text element that the website stores on the visitor's computer or mobile device when the Company's website is visited. It allows the website to remember the visitor's actions and settings for a certain period of time, so that the visitor does not have to enter them again each time they visit the website;
7.2. data on the cookies used:

7.3. the legal basis for using cookies is the Company's legitimate interest in ensuring the technical functioning, accessibility and security of the website. Where cookies are used to remember the visitor's preferences and to collect statistics, the legal basis for using cookies is the consent of the website visitor. If the website visitor does not grant the website the right to use cookies, some functions of the website may not work partially or at all;
7.4. access to statistical data on visitors to the Company's website is available to the Company's employees responsible for analysing this data and improving the website;
7.5. the server hosting the Company's website may also record requests submitted by the website visitor to the server (the address of the website opened by the visitor, the device and browser used by the visitor, the visitor's IP address and connection time). This data is used for technical purposes only - to ensure that the website operates properly and securely, and to investigate possible security breaches;
7.6. more information about cookies, for example how to manage or delete them, can be found at: http://www.allaboutcookies.org;
7.7. more information on how to opt out of website tracking by Google Analytics cookies can be found at: http://tools.google.com/dlpage/gaoptout;
7.8. any information collected through cookies is stored until the cookies expire and is not used for purposes other than those specified in this Policy.
8. Electronic invoice portal:
8.1. on the Company's self-service website, customers' personal data is processed for the purposes of managing the services provided by the Company, calculating and administering payments for services and administering debts;
8.2. when registering on the self-service website, the IP address (recorded automatically) is processed, as well as the name, surname, e-mail address and telephone number of the website visitor (the Company's customer) (recorded when the website visitor (the Company's customer) voluntarily registers an account);
8.3. when using the self-service website, the authentication and contact data of website visitors (the Company's customers), data on the real estate object, and data related to the provision of the relevant services and payments are processed;
8.4. the self-service website processes the data only of those persons who wish and agree to use the self-service website (point (a) of Article 6(1) of the Regulation). The data of website visitors (the Company's customers) is processed because it is necessary for the performance of contracts concluded between the Company and the respective consumer (point (b) of Article 6(1) of the Regulation) and for compliance with the Company's legal obligations established by legal acts (point (c) of Article 6(1) of the Regulation);
8.5. more information on the processing of personal data of website visitors (the Company's customers) for the purpose of performing contracts with the Company is provided in the Personal Data Processing Policy of UAB "Šiaulių vandenys" published on the Company's website (hereinafter - the Personal Data Processing Policy).
9. Inquiry forms:
9.1. in the sections "Have questions? Write to us!" of the Company's website, website visitors may submit inquiries related to the Company's activities;
9.2. when submitting an inquiry, the website visitor, by a separate action, expresses consent that the name, e-mail address, telephone number and the data specified in the inquiry itself will be used to contact them regarding this inquiry and to prepare and provide a response to this inquiry to the website visitor. The website visitor may withdraw the consent at any time - in that case, the submitted data will be deleted and no longer processed, except where there are other grounds provided for in the Regulation.
10. Service and customer service evaluation questionnaires:
10.1. in the section https://siauliuvandenys.lt/vertinimas/ of the Company's website, website visitors may submit their comments on the Company's activities;
10.2. questionnaires are filled in voluntarily;
10.3. when questionnaires are filled in, the system records only the website visitor's answers. No data identifying the person filling in the questionnaire (e.g. the visitor's IP address, time of filling in, etc.) is collected, stored or otherwise processed.
11. Newsletters:
11.1. in the "Newsletter subscription" section of the Company's website, website visitors may provide their e-mail address to which they wish to receive newsletters sent by the Company;
11.2. by providing an e-mail address in this section, the website visitor, by a separate action, expresses consent to receive the Company's newsletters at this e-mail address;
11.3. the website visitor may withdraw the consent at any time by sending an opt-out message to the Company from their e-mail address - in that case, the submitted data will be deleted and no longer processed, except where there are other grounds provided for in the Regulation.

CHAPTER III
RIGHTS OF DATA SUBJECTS

12. Visitors to the Company's website have the right and the actual means to control their privacy (the visitor may manage and/or delete cookies processed on the basis of consent), and the Company ensures the possibility to exercise these rights.
13. The Company ensures the rights of data subjects in accordance with the Regulation and other legal acts.
14. The rights of the data subject are exercised in accordance with the Personal Data Processing Policy approved by the head of the Company.
15. The contact details of the Data Protection Officer are published on the Company's website.

CHAPTER IV
DATA SECURITY MEASURES

16. When processing the personal data specified in this Policy, the Company ensures technical and organisational measures that adequately protect personal data against accidental or unlawful destruction, alteration, disclosure and other unlawful actions.
17. The Company declares that, although appropriate measures are taken to protect the information of website visitors, no website, operation carried out over the Internet, computer system or wireless connection is completely secure.

CHAPTER V
FINAL PROVISIONS

18. Employees appointed by order of the head of the Company are responsible for the proper and lawful processing of personal data.
19. Employees who have been granted the right to process personal data of website visitors, or who become aware of it in the course of their duties, must comply with this Policy, the basic requirements for the processing of personal data and the confidentiality and security requirements established in the Regulation and in this Policy.
20. This Policy is reviewed and, if necessary, updated at least once every two calendar years.
21. Employees and other responsible persons are made aware of this Policy and its amendments through the electronic document management system "Kontora" or by other means that unequivocally prove the fact of notification. When a new employee is hired and granted the right to process personal data of visitors to the Company's website, they must be made aware of this Policy on the day of concluding the employment contract, but no later than on their first working day.