UAB FIKA LT (company code 302711050, VAT code LT100006612411, registered address Rokakiemio g. 18, LT-46115 Kaunas, Lithuania; hereinafter the “Company”) values and protects your privacy. In this Privacy Policy (the “Policy”) we clearly set out the principles for collecting and using information that apply to the Company’s activities and to the website https://fika.lt/ (the “Website”), as well as other information about how the Company ensures the protection of personal data.

The terms “you” and “your” and “visitor” mean any person, company or organisation that uses our Website or provides personal data to us in any other way. “We” and “our” refer to UAB FIKA LT, a company established under the laws of the Republic of Lithuania, and its subsidiaries, branches and representative offices.

This Policy applies when you visit the Company’s Website, when you provide your data to the Company directly, when we receive data about you from public authorities or other sources, and when we perform contractual obligations to which you are a party. The Policy also informs you about other personal data processing operations carried out by the Company and the main principles that protect your privacy.

When processing personal data, we follow the General Data Protection Regulation (EU) 2016/679, the Law on Legal Protection of Personal Data of the Republic of Lithuania, other applicable legal acts and the instructions of supervisory authorities.

This Policy is an integral part of the Company’s terms of service. It does not apply to third-party websites and applications that you may reach through our Website, including those that may be related to our services. Before clicking any such links, please review the terms and privacy policies of those third parties.

Please read this Policy carefully and, if you have any questions, contact us at sales@fika.lt. If you do not agree with this Policy or any part of it, please do not use our Website.

1. Personal data we collect and process

The Company collects and processes the following categories of personal data:

• Login data you provide when creating an account on the Website: first name, last name, email address, phone number, username and password.
• Basic data, such as first name, last name, date of birth and address.
• Contact data: address, email address and phone number.
• Communication data, i.e. emails, conversations and messages you send us when you contact customer service by email or in any other way. We collect and store the content of the correspondence and any information you provide or disclose to us. To respond to your enquiry, we may use the information you have given us by email, in conversations, in your purchase history, etc.
• Payment information that you provide when ordering services and/or products and that allows your payment to be processed. We use third-party payment service providers and do not collect or store bank card data ourselves. This information is provided directly to the payment service providers, whose privacy policies describe how personal data are collected, stored and used.
• Data needed to provide services: order data, data in accounts and invoices, data related to payments made, information about the goods or services purchased by customers, etc.
• Other information: mobile device type, device settings, visitor location, survey responses and other data provided by the visitor.

2. Legal bases for collecting your personal data

The Company may collect your personal data only on the lawful bases set out in legal acts. These include the conclusion and performance of a contract, when you enter into a service or other agreement with the Company, when you contact the Company on related matters or when you visit the Company’s Website.

The Company’s legitimate interests may also be a basis for processing data, for example when the Company checks solvency or manages and/or recovers debts. Your consent is another basis on which the Company may process personal data. The Company may also process your personal data to comply with legal obligations (to meet regulatory requirements, respond to lawful requests from state and municipal institutions, etc.) or on other lawful bases set out in legal acts.

3. Data collected on the Company’s Website

When you visit our Website or contact us through other electronic communication channels, the Company may also collect your personal data automatically:

• Geolocation data. We collect information about the geographical location from which you connect to our Website.
• Information we collect from third parties. We may share and/or collect additional information about you from third parties in order to improve our services. For example, we use the web analytics service Google Analytics, provided by Google LLC, which uses cookies and other tracking technologies to collect data that help us improve our products and services. It allows us to monitor and analyse web traffic and user behaviour. Google Analytics uses the collected data to track and analyse visitor behaviour, prepares reports on website activity and shares them with other Google services. Google may use the collected data to personalise ads in its own advertising network. Personal data collected by Google: cookies and website usage data. For more information, visit Google’s Privacy Policy.
• Data collected by cookies. Cookies are small text files that your browser stores on your computer when you visit our Website. We use cookies to improve the performance of the Website and make it easier to use.
• Publicly available personal data. The Company may collect personal data from publicly available sources when this is necessary to provide services properly or to maintain the functionality of the Website.

We store the data collected about visitors to the Company’s Website responsibly and protect it against loss, unauthorised use and alteration. The premises in which the collected data are kept are physically protected so that persons not working for the Company cannot access or use the data. In addition, the database storing visitors’ data is protected against unauthorised access via computer networks.

4. Purposes of personal data processing

To ensure transparent and responsible processing of personal data, we inform you that the Company processes personal data for the following purposes:

• to fulfil orders placed by visitors
• to identify visitors
• to create an account
• to ensure the security of the Website
• to provide services and to conclude and perform contracts
• to administer the customer database
• to answer visitors’ questions, comments or enquiries
• to solve problems related to the implementation, provision and use of services
• to contact customers when the terms of purchased services change
• to send invoices and other information related to services and/or goods
• to improve the quality of services
• for other purposes related to internal administration, e.g. managing our employees’ data
• to provide customer service
• for audit purposes
• to find out visitors’ opinions about our services
• to ensure data security and prevent fraud
• to publish visitors’ reviews and recommendations
• to perform duties or exercise rights provided by law
• to prevent misuse of our products and/or services
• to send marketing information.

By providing your personal data to the Company, you confirm and voluntarily agree that the Company manages and processes your personal data in accordance with this Privacy Policy, applicable laws and other legal acts.

5. Direct marketing

The Company may use your personal data to send general direct marketing offers. These offers may be selected for you based on the data you have provided or that we have collected automatically, for example your location data.

If you do not want your personal data to be used for direct marketing, wish to stop receiving direct marketing offers or want to change your settings, you can do so at any time by changing the settings in your account, clicking the link in the email you received, emailing us at sales@fika.lt, or replying to the message you received with a request to stop sending direct marketing offers.

6. Processing of personal data and cooperation with third parties

The Company may provide personal data to data processors that perform certain work and provide services for the Company. The Company does not allow any of its suppliers or third parties to use your personal data in any other way and requires them to take measures to protect your personal data. Personal data may be transferred to the following categories of third parties:

• intermediaries that process data in order to conclude and administer contracts with customers and partners
• information technology companies and persons that process data to develop, improve and maintain information systems
• companies that send notifications to customers and provide security and other services
• companies and persons that keep accounting records
• companies that manage joint debtor files or administer debts
• partners and subsidiaries
• other persons with your consent, where such consent is obtained for a specific case
• security companies
• advertising agencies
• hosting companies.

The Company may also disclose your personal data to third parties:

• when required by law, court decisions, rulings and orders, or other lawful requests of law enforcement authorities
• in response to lawful requests from state institutions, and to ensure national security and law enforcement
• in connection with the sale, transfer, merger, bankruptcy, restructuring or other reorganisation of the business
• to defend our rights, legitimate interests or property, or those of third parties
• to protect other persons’ right to privacy.

7. Cookies

A cookie is a small text file that a website stores on your computer or mobile device when you visit it. Once stored on your device, a cookie ensures the functionality of our website and helps recognise you when you visit our website again. Most browsers accept cookies unless you refuse them or change your browser settings. More information about deleting cookies and other useful information about their use can be found at www.allaboutcookies.org.

8. Special categories of data

We do not collect special categories of data, such as political opinions, religious or philosophical beliefs, racial or ethnic origin, genetic data, biometric data, health data or data concerning sexual orientation. Please do not provide us with special categories of data, and contact us using the contact details below if you believe we may hold such information. We reserve the right to delete immediately any information that we believe may contain special categories of data.

9. Third-party links

This Website may contain links to third-party websites or applications, but we are not responsible for the data collected on those websites or for how it is used. Before clicking any links, please review the terms and privacy policies of those third-party websites and applications.

10. Personal data retention periods

Personal data collected by the Company are stored in printed documents and in the Company’s information systems. The Company keeps your personal data no longer than required by the purposes of processing or by legal acts, where they set a longer retention period. Personal data are usually kept for as long as reasonable claims may arise from the contractual relationship, or as long as necessary to exercise and protect the Company’s legitimate interests. Personal data that are no longer needed are destroyed.

If you wish to delete your account and stop the storage of your data, you can send the Company a request using the contact details below; please note that in this case the provision of services to you may be terminated. Even after receiving a request to delete your data, we may keep part of your data where this is necessary for tax, legal compliance and audit purposes.

The Company takes all possible measures to ensure that personal data are processed accurately, fairly and lawfully, only for the specified purposes, and in strict compliance with the clear and transparent data processing requirements set out in legal acts.

11. Your rights

As a visitor to our Website, you have the right to:

• ask the Company for information about the personal data it processes about you, where and how the data were collected and how the Company processes them. You can submit a request to access your personal data in person, by post or by electronic means
• ask the Company to correct your personal data and/or suspend the processing of such data, except storage, if, having accessed your data, you find that it is incorrect, incomplete or inaccurate
• ask the Company to delete your personal data if, having accessed your data, you find that it is processed unlawfully or unfairly, or if other grounds set out in legal acts exist
• object to the processing of your personal data where the data are processed or intended to be processed on the basis of a legitimate interest pursued by the Company or by a third party to whom the data are provided
• request not to be subject to solely automated data processing, including profiling
• receive the personal data concerning you that you have provided to the Company in a structured, commonly used and machine-readable format, and transmit those data to another controller, or ask the Company to transmit them directly to another controller where technically possible (right to data portability)
• refuse to provide personal data. In this case, the Company may refuse to provide services to you if providing those services requires your personal data.

To exercise your rights or submit a complaint, you can contact the person responsible for personal data protection at the Company by email at sales@fika.lt. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania, but we encourage you to contact the Company first, as we always aim to resolve all questions together with the visitor.

When submitting a request, you must confirm your identity as follows: (1) if the request is submitted in person at the Company, present an identity document or a copy certified in accordance with the laws of the Republic of Lithuania; (2) if the request is submitted by post or email, provide data that identify you in the Company’s records; (3) if the request is submitted through a representative, provide a certified copy of the representative’s identity document together with a document confirming the authority to represent (or a certified copy of the power of attorney).

Having received your written request, the Company will provide the requested data in writing (including by electronic means) or state the reasons for refusing the request no later than within 30 calendar days of receiving the request. Where necessary, this period may be extended by two further months, taking into account the complexity and number of requests. The Company will inform the person who submitted the request of any such extension, together with the reasons for the delay, within one month of receiving the request.

12. Updates to this Privacy Policy

This Policy may be changed to reflect changes in circumstances or legal requirements. When the Company updates the Policy, the new version will be published on the website https://fika.lt/. If there are significant changes to the Policy, we may contact you by email or inform you in another way.

13. Contact information

If you have any questions about the information in this Privacy Policy, please contact the Company in any way convenient for you:

UAB FIKA LT
Rokakiemio g. 18, LT-46115 Kaunas, Lithuania
Phone: +370 608 48647
Email: sales@fika.lt