Privacy policy.

Why privacy policy is needed?

UAB Agrofirm Sėklos, j. a. k 121979631, registered office address Molėtų street 13-1, Didžioji Riešė, Vilnius district, (further - the Company or We), we care about your privacy and protection of personal data, therefore we process the data in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and the Council (further - the Regulation), the Law on the Legal Protection of Personal Data and other legal acts regulating the protection of personal data. Therefore, in order to ensure fair and transparent information about the processing of your personal data, we publish this privacy policy (further - the Policy).

This Policy describes what personal data we collect and for what purposes we process it when you browse and/ or shop on the website b2b.seklos.lt and (or) b2b.tavosodyba.lt (further - the Website or E-Shop), order direct marketing messages or other ways using our services.  This Policy also provides important information about the protection of your personal data, your rights and how to exercise them. Therefore, make sure to take time to review this Policy, and if you have any questions, please do not hesitate to contact us at the contacts listed. Please note that we reserve the right to change this Policy in the future, and we encourage you to review this Policy periodically.

What is personal data and how is it processed?

Personal data is any information that relates directly or indirectly to you, when your identity is either known or can be directly or indirectly identified through relevant data (such as name, surname, personalized e-mail address (name.lastname@company.lt) or (n.surname@company.lt), telephone number, workplace, etc.).

Processing of personal data means any operation on personal data (including the collection, recording, storage, editing, modification, granting of access, requesting, transmission, archiving, etc.).

When processing your personal data, the company is guided by the following principles:

  •           Your personal data will only be processed in the case of necessary achievement of the relevant and clearly defined, legitimate purposes, taking into account the protection of your privacy;
  •           Your personal data is processed accurately, responsibly and lawfully and is processed only for purposes that correspond to the purposes stated before the collection of your personal data;
  •           Your personal data is processed in strict compliance with the clear and transparent requirements for the processing of personal data set out in the legislation;
  •           Your personal data will be processed only in the format where your identity can be established for no more than is necessary,as of the purposes for which the personal data are being processed;
  •           The processing of your personal data is subject to appropriate technical and organizational measures to ensure the security of your personal data, including protection against unauthorized processing and unintentional loss, destruction and damage.

How do we process your personal data?

The data processed on this web store is exclusively related to business customers (i.e. legal entities and / or natural person (only engaged in commercial economic activities under business licenses, individual activities, etc.)), therefore it does not include the processing of Consumer (natural person) data. In view of this, the information in the table below only relate to the business customers, i. y. includes only the personal data of business customers and / or their representatives / employees.

Purpose of processing:

Data processed:

Conditions for lawful processing

Expiration date

 

Account registration and administration

(formation and processing of sales contract)

For this purpose we process the data so that you can use the services provided.

 

Registration:

 

  •       Legal entity details:

o  Company name;

o  Company code;

o  VAT code;

o  Registration address;

o  Delivery address;

o  Post code;

o  Phone number;

o  Mobile phone number;

o  Web page or e-mail address;

o E-mail address to receive invoices;

o  Representative of the legal entity (name, surname).

  •       Business customer (individual) personal data:

o  Name, surname;

o  Personal ID;

o  Business certificate number (and/or)

o  Self-employment certificate number;

o  VAT code;

o  Registration address;

o  Delivery address;

o  Post code;

o  Phone number;

o E-mail address to receive invoices;

o  Web address or e-mail address.

Administration:

  •       Account details:

o  order history and information;

o  delivery address;

o  account actions, including technical data (e.g. IP address; connection information, activity;)

o  e-mail data (e.g. correspondence with the company);

o  other data generated during the formalization of the contract (e.g. signatures on documents, powers of attorney, etc.).

 

When the registration and / or order of goods is carried out on behalf of a legal person, then the provided personal data shall be processed in accordance with Article 6 of the Regulation. 1 d. f) p., specified in the condition of lawfulness of processing, i. y. to enter into and execute agreements with legal entities and to maintain commercial relations in order to pursue the legitimate interests of the Company.

When the registration and (or) order of goods is performed on behalf of a natural person (business customer), then the provided personal data shall be processed in accordance with Article 6 of the Regulation. 1 d. b) p., specified in the condition of lawfulness of processing, i. y. to enter into and execute a contract with a business client.

We note that, if necessary, we may process your personal data on other grounds of personal data processing (for example, by implementing the requirements of legal acts in the field of taxes, money laundering prevention, etc.).

 

We will keep your account and the data, including order history (contracts), for 10 years from the date of completing the order.

 We receive the above mentioned personal data directly from you and / or the company you represent when you register a business customer account and / or use your account. However, if you do not fill in the required registration fields, we will not be able to create your account and / or enter into purchase and sale agreements with you.

Direct marketing

To this point, we process your data so that you can subscribe and receive our newsletters.

Identification data:

  •       Company name;
  •       Email address.

Loyalty program data:

  •       Country

You express your agreement by subscribing to our newsletters. (Article 6 (1) (a) of the Regulation).

We will send direct marketing, according to your consent, for as long as this consent is valid, but for no longer than 5 years.

We will store the fact of consent (that is information you have consented) for at least 2 years from the date of cancellation.

We receive your personal data directly from you and / or the company you represent when you subscribe to our newsletters or otherwise consent to send you direct marketing.

In order to understand whether the information we send is relevant to you, we additionally collect statistical information about newsletters that were sent (whether you read the newsletter, when and how many times you read or opened it, forwarded it to others, what operating system and e-mail server (its location) you have used). By agreeing to receive direct marketing communications by email, you also agree to share with us the above statistical information regarding the relevance of the newsletter.

We will use your e-mail address only to send information about goods, discounts, offers, tenders, news, surveys and other news. We send a newsletter from one to six times a month. Our newsletter is sent from UAB “Agrofirma SĖKLOS” We may pass on your e-mail address to third parties specialized service providers only in order to send you a newsletter.

You may opt out of receiving direct marketing (newsletters) at any time by notifying us via e-mail address infoB2B@seklos.lt. You can also opt out of receiving direct marketing by following the links in the newsletter you receive. Note that revocation of consent does not affect the use of your personal data prior to revocation.

Who has an access to your personal data?

We may transfer your order data (including personal data) to third parties for processing (e.g. UAB DPD Lietuva, etc.) who provide web-shop delivery, provision or other services related to the proper execution of your order ordered in the store.

We may transfer your personal data for processing to third parties (data processors) who help us to administer the website and / or store the data contained therein, as well as to direct marketing service providers. Such individuals may include database software vendors, database administration service providers, cloud service providers, and so on.

The data of you or your employees (representatives) (including personal data), to the minimum extent necessary for the specific case, may also be transferred to the persons administering the joint debtors' files; financial institutions; Central Mortgage Institution; SE Center of Registers; State Tax Inspectorate; State Social Insurance Board Fund; insurance companies; debt collection companies; bailiffs; Company legal advisors; auditors and competent governmental and / or law enforcement authorities (such as courts, police or other supervisory authorities); However, your data will only be provided if required to do so by applicable law and only in accordance with the law, in order to ensure Our rights, the security of Our customers, employees and resources, and to make, provide and / or defend legal claims.

We note that your personal data is provided only to those third parties who contractually ensure appropriate conditions for the processing and protection of personal data. Your personal data is not transferred to third countries (i.e. outside the European Union or the European Economic Area) or to international organizations.

What rights do you have and how can you exercise them?

Data subjects whose personal data we process have the right to:

  •           request, access and obtain a copy of your personal data;
  •           request the correction or restriction of inaccurate or incomplete personal data;
  •           request the removal or restriction of redundant or unlawfully processed personal data;
  •           not consent to the processing of his personal data;
  •           to request the transfer of your personal data submitted in a systematic, computer-readable format (right to data portability);
  •           the right to withdraw his consent at any time when the processing is based on the consent of the data subject (pursuant to Article 6 (1) (a)). Withdrawal of the data subject's consent shall not affect the lawfulness of the processing of the data prior to the withdrawal of the consent;
  •           to file a complaint to the State Data Protection Inspectorate (ada@ada.lt).

The Company does not apply to decisions based solely on automated data processing, including profiling, which could have legal consequences or have a significant impact on you in a similar way. However, depending on your choices and / or participation in loyalty programs (e.g. Passionate Gardeners Club) you may be assigned to an appropriate category according to which we will be able to provide you with the most relevant information (e.g. offers, newsletters, discounts, etc.).

The Data Subject may exercise its rights by submitting a written request to the Company in person (an employee of the Company), by post, through a representative or by electronic ways of communication - e-mail: infoB2B@seklos.lt, in writing - to: Molėtų st. 13-1, Didžioji Riešė, Vilnius district, LT-14262 Lithuania.

Upon request, the data subject must prove his / her identity in one of the following ways:

  •           by submitting a request to an employee of the Company, together with a valid identity document;
  •           by submitting a request by post or courier, together with a copy of a valid identity document certified in accordance with the procedure established by legal acts;
  •           by submitting the application electronically, confirming it by electronic means of communication that allow proper identification of the person (e.g. mobile signature, qualified electronic signature, etc.).

Upon receipt of your request for the exercise of data subjects' rights, we will provide you with an answer immediately, but no later than within 1 month from the date of the request. This period may be extended by one month, if necessary, depending on the complexity and number of applications. You will be additionally notified of such an extension within one month. The information you request will be provided free of charge. However, if we see that your requests are manifestly unfounded or disproportionate, in particular due to their repetitive content, We have the right to charge a reasonable fee for this (i.e. to claim administrative costs) or to refuse to act on such request from the data subject.

 

The answer will be provided in the manner chosen in your request. If you do not specify in the request the way you want to receive a reply, the reply will be sent to you in the same way as the request.

What are your duties and responsibilities?

The business customer is responsible for the accuracy, correctness and completeness of the personal data provided by him. Therefore, you must provide complete and correct information about yourself in the Order or Account Registration Form. If you provide inaccurate, false or misleading information, we have the right to cancel your registration or order or restrict your access to the  web-shop.  Also, in the event of a change in your personal data (which is necessary to achieve the above objectives), you are responsible to immediately notify the Company of the change in personal data.

By submitting your personal data, you accept the full responsibility for the lawfulness of the submission of your personal data and are liable for any losses that We and / or third parties may incur as a result of the unlawful processing of such personal data.

Also, you have a duty to inform your employees (representatives) of their personal data transferred to the Company, providing them with at least the information specified in this privacy policy. Therefore, when you submit the personal data of your employees and / or representatives to the Company, we will consider that these entities are properly informed about the processing of their personal data.

How do we take care of the security of your personal data?

When processing your personal data, We apply appropriate organizational and technical security measures to protect your personal data from accidental or unlawful disclosure, destruction, alteration or other unlawful acts. The above measures are chosen taking into account the risks to your rights and freedoms as a data subject.

In this case, We ensure strict access control to the processed personal data, therefore we grant access to them only to those employees who need your personal data to perform work functions and monitor the use of the provided access. Access to personal data is protected by using the appropriate level of passwords and signing confidentiality agreements with the people who access your personal data.

We note that all employees of the Company who have access to your personal data are informed about the requirements of personal data protection and must ensure the confidentiality of the processed personal data.

Whom to contact in case if you still have questions?

For all questions you can contact us via e-mail address: infoB2B@seklos.lt.