Personal data processing rules

1. General provisions

1.1. These personal data processing rules (hereinafter referred to as the Rules) regulate the basic principles and procedure for collecting, processing and storing personal data of the buyer, visitor of the website www.seso.lt (hereinafter referred to as the Website), who has entered correct personal data in the form on the website (hereinafter referred to as the Registered Visitor).

1.2. These Rules have been prepared in accordance with the Law of the Republic of Lithuania on the Legal Protection of Personal Data and other legal acts regulating the collection, processing and storage of personal data.

1.3. Based on these Rules, the controller of personal data is Seso, UAB (hereinafter referred to as the Data Controller). The Data Controller is responsible for the collection, processing and storage of personal data in accordance with the procedure established by law.

2. Collection, processing, storage of personal data

2.1. The Data Controller confirms that personal data is collected for direct marketing and marketing purposes and processed in accordance with the principles of fairness, lawfulness and accuracy, as well as respect for the individual's right to privacy.

2.2. The Data Controller collects and automatically uses the personal data of the Registered Visitor, which he/she provides when registering on the Website, only in accordance with the procedure set out in these Rules and for the purposes of direct marketing.

2.3. During registration in the e-store, the Buyer must provide complete and correct personal data. By registering, the Registered Visitor agrees that the data provided by him/her will be processed for the specified purposes of data collection and use. In the event of the Registered Visitor's disagreement, expressed in accordance with the procedure provided for in paragraph 3.1. of these Rules, the Data Controller does not have the right to use the data of this person (except for the storage of personal data).

2.4. The Data Controller respects the right to privacy of each Registered Visitor. The Buyer's personal data (name, surname, address, telephone number, e-mail address and other information specified in the e-store registration form) are collected and processed in order to:

2.4.1. process the Buyer's orders for goods;

2.4.2. issue financial documents;

2.4.3. resolve problems related to the provision or delivery of goods;

2.4.4. for direct marketing purposes;

2.4.5. to fulfill other contractual obligations.

2.5. The Data Controller may use data not directly related to the Registered Visitor's person, i.e. data on purchased goods, for statistical purposes. Such statistical data will be collected and processed in a way that does not allow the disclosure of the Registered Visitor's personal identity or other personal data that could be used to identify the person.

2.6 All information about the processed personal data is confidential. Seso, UAB reserves the right to transfer information to third parties:

2.6.1. to implement the objectives mentioned in paragraph 2.4 of this document;

2.6.2. In accordance with the procedure established by the laws of the Republic of Lithuania.

2.7. The personal data of a registered visitor shall be stored for no longer than required by the established data processing purposes. Upon expiry of the data storage period, the personal data of a registered visitor shall be destroyed in accordance with the procedure established by applicable legal acts.

2.8. The personal data of a registered visitor are processed using secure organizational and technical measures that protect personal data from accidental or unlawful destruction, alteration, disclosure, use, as well as from any other unlawful processing.

3. Rights of a registered visitor

3.1. By registering on the Website, the Registered Visitor confirms his/her consent to the processing and use of his/her personal data in accordance with the procedure established in these Rules. A Registered Visitor who does not wish his/her personal data to be processed and used for the specified purposes has the right to express his/her disagreement with the processing of his/her personal data by informing the Data Controller about this by e-mail: clients@seso.lt

3.2. Upon receipt of the Rules

Upon receipt of the notification specified in clause 3.1., the Data Controller shall terminate the processing of personal data free of charge and inform the Registered Visitor thereof in accordance with the procedure set out in clauses 5.1. and 5.2. of the Rules.

3.3. A registered visitor has the right to change and/or update the information provided in the registration form.

3.4. A registered visitor has the right to familiarize himself with the actions taken related to the processing of his personal data.

3.5. A registered visitor has the right to request correction, destruction or suspension of the processing of his/her personal data (except for storage), if, upon reviewing his/her personal data, he/she determines that his/her data is incorrect, incomplete or inaccurate, by contacting the Data Controller in accordance with the procedure set out in paragraph 5.1. of these Rules.

4. Changing the rules

4.1. The Data Controller has the right to partially or completely amend these Rules by notifying the same on the Website.

4.2. Additions or amendments to the Rules shall enter into force from the date of their publication on the Website.

4.3. If the Registered Visitor does not agree with the amendments or supplements to the Rules, he has the right to express his disagreement with the procedure and purposes of the amended or supplemented Rules related to the processing of his personal data, expressing his disagreement in accordance with the procedure established in clause 5.1. of these Rules. If the Registered Visitor's disagreement is not received, it is considered that the Registered Visitor agrees with the new version of the Rules.

5. Final provisions

5.1. All notifications related to the processing of personal data are submitted to the Data Controller by e-mail (klientams@seso.lt ).

5.2. The Data Controller shall provide the response in the same form in which the notification was received from the Registered Visitor, no later than within 20 business days from the date of receipt of the person's application document.